Prioritize automation of the release process

[roberth]

Is your feature request related to a problem? Please describe.

We are not sufficiently capable of responding to unexpected events.

Describe the solution you'd like

Any team member can release or downgrade the nixos.org download redirect.

Describe alternatives you've considered

None. This must be done ASAP.

Additional context

Priorities

Add 👍 to issues you find important.

[abathur]

I don't mean this to deflate pressure around having team members in control of the nix versions distributed via the installer (and maybe upgrade-nix), but you may actually gain a little leverage here if/once we adopt an installer based on the detsys installer, since extracting the installer may better support separate release/bump triggers with distinct criteria.

(we are closeish to ready for an experimental version of this, but have been ~distracted by breakage associated with the macos 15 sequoia update.)

[nixos-discourse]

This issue has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/nar-unpacking-vulnerability-post-mortem/52301/1