diff --git a/.github/renovate.json b/.github/renovate.json
index af26612e2..1b7251feb 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -4,6 +4,7 @@
         "github>tweag/renovate-presets:mergify"
     ],
     "ignorePaths": [
+        "examples/primitive/**",
         "registry/**"
     ],
     "packageRules": [
diff --git a/.github/workflows/update-ghc.yaml b/.github/workflows/update-ghc.yaml
index 3fdbd558f..e6b04aa06 100644
--- a/.github/workflows/update-ghc.yaml
+++ b/.github/workflows/update-ghc.yaml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: master
-      - uses: cachix/install-nix-action@7be5dee1421f63d07e71ce6e0a9f8a4b07c2a487 # v31.6.1
+      - uses: cachix/install-nix-action@9280e7aca88deada44c930f1e2c78e21c3ae3edd # v31.7.0
         with:
           nix_path: nixpkgs=nixpkgs/default.nix
       - name: Fetch updates
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index b165a9f26..db7caae8d 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -71,7 +71,7 @@ jobs:
         with:
           path: ~/repo-cache
           key: repo-cache-${{ runner.os }}-nixpkgs-${{ env.cache-version }}
-      - uses: cachix/install-nix-action@7be5dee1421f63d07e71ce6e0a9f8a4b07c2a487 # v31.6.1
+      - uses: cachix/install-nix-action@9280e7aca88deada44c930f1e2c78e21c3ae3edd # v31.7.0
         with:
           nix_path: nixpkgs=./nixpkgs/default.nix
           extra_nix_config: |