gh-contribs: init at 0.9.0 #964763

	name: Backport
	on:
	pull_request_target:
	types: [closed, labeled]

	# WARNING:
	# When extending this action, be aware that $GITHUB_TOKEN allows write access to
	# the GitHub repository. This means that it should not evaluate user input in a
	# way that allows code injection.

	permissions:
	contents: read

	jobs:
	backport:
	permissions:
	contents: write # for korthout/backport-action to create branch
	pull-requests: write # for korthout/backport-action to create PR to backport
	name: Backport Pull Request
	if: github.repository_owner == 'NixOS' && github.event.pull_request.merged == true && (github.event_name != 'labeled' \|\| startsWith('backport', github.event.label.name))
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	ref: ${{ github.event.pull_request.head.sha }}
	- name: Create backport PRs
	uses: korthout/backport-action@bd410d37cdcae80be6d969823ff5a225fe5c833f # v3.0.2
	with:
	# Config README: https://github.com/korthout/backport-action#backport-action
	copy_labels_pattern: 'severity:\ssecurity'
	pull_description: \|-
	Bot-based backport to `${target_branch}`, triggered by a label in #${pull_number}.

	* [ ] Before merging, ensure that this backport is [acceptable for the release](https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md#changes-acceptable-for-releases).
	* Even as a non-commiter, if you find that it is not acceptable, leave a comment.

Provide feedback