diff --git a/.github/workflows/test-app.yaml b/.github/workflows/test-app.yaml
index 7d28717..11e5ef6 100644
--- a/.github/workflows/test-app.yaml
+++ b/.github/workflows/test-app.yaml
@@ -14,19 +14,20 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
       - name: Test app template
         run: |
-          nix develop --accept-flake-config --command bash -c "sh run_test_app.sh"
+          nix develop --no-update-lock-file --accept-flake-config --command bash -c "sh run_test_app.sh"
 
diff --git a/.github/workflows/test-zome.yaml b/.github/workflows/test-zome.yaml
index 1d4bdf3..ae3e4fb 100644
--- a/.github/workflows/test-zome.yaml
+++ b/.github/workflows/test-zome.yaml
@@ -14,19 +14,20 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
       - name: Test zome template
         run: |
-          nix develop --accept-flake-config --command bash -c "sh run_test_zome.sh"
+          nix develop --no-update-lock-file --accept-flake-config --command bash -c "sh run_test_zome.sh"
 
diff --git a/templates/app/web-app/.github/workflows/test.yaml.hbs b/templates/app/web-app/.github/workflows/test.yaml.hbs
index e7bccb3..18a1527 100644
--- a/templates/app/web-app/.github/workflows/test.yaml.hbs
+++ b/templates/app/web-app/.github/workflows/test.yaml.hbs
@@ -14,18 +14,19 @@ jobs:
       - uses: actions/checkout@v2
 
       - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
       - name: Install and test
         run: |
-          nix develop --accept-flake-config --command bash -c "pnpm i && pnpm t && pnpm package"
+          nix develop --no-update-lock-file --accept-flake-config --command bash -c "pnpm i && pnpm t && pnpm package"
diff --git a/templates/zome/web-app/.github/workflows/build-and-cache-zomes.yaml.hbs b/templates/zome/web-app/.github/workflows/build-and-cache-zomes.yaml.hbs
index c4c4a35..fd72651 100644
--- a/templates/zome/web-app/.github/workflows/build-and-cache-zomes.yaml.hbs
+++ b/templates/zome/web-app/.github/workflows/build-and-cache-zomes.yaml.hbs
@@ -15,16 +15,16 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
@@ -37,12 +37,12 @@ jobs:
           CACHIX_AUTH_TOKEN: "$\{{ secrets.CACHIX_TOKEN_HOLOCHAIN_OPEN_DEV }}"
         run: |
           cachix watch-exec holochain-open-dev -- nix build --no-update-lock-file --accept-flake-config -L .#{{snake_case app_name}}_integrity
-          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity | nix run nixpkgs#jq -- -r '.[].path')
-          cachix pin holochain-open-dev {{snake_case app_name}}_integrity_debug $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity | nix run nixpkgs#jq -- -r '.[].path')
+          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity | nix run nixpkgs#jq -- -r 'keys[0]')
+          cachix pin holochain-open-dev {{snake_case app_name}}_integrity_debug $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity | nix run nixpkgs#jq -- -r 'keys[0]')
 
           cachix watch-exec holochain-open-dev -- nix build --no-update-lock-file --accept-flake-config -L .#{{snake_case app_name}}
-          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}} | nix run nixpkgs#jq -- -r '.[].path')
-          cachix pin holochain-open-dev {{snake_case app_name}}_debug $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}} | nix run nixpkgs#jq -- -r '.[].path')
+          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}} | nix run nixpkgs#jq -- -r 'keys[0]')
+          cachix pin holochain-open-dev {{snake_case app_name}}_debug $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}} | nix run nixpkgs#jq -- -r 'keys[0]')
 
       - name: Build release zomes
         if: matrix.os == 'ubuntu-latest'
@@ -50,9 +50,9 @@ jobs:
           CACHIX_AUTH_TOKEN: "$\{{ secrets.CACHIX_TOKEN_HOLOCHAIN_OPEN_DEV }}"
         run: |
           cachix watch-exec holochain-open-dev -- nix build --no-update-lock-file --accept-flake-config -L .#{{snake_case app_name}}_integrity.meta.release
-          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity.meta.release | nix run nixpkgs#jq -- -r '.[].path')
-          cachix pin holochain-open-dev {{snake_case app_name}}_integrity $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity.meta.release | nix run nixpkgs#jq -- -r '.[].path')
+          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity.meta.release | nix run nixpkgs#jq -- -r 'keys[0]')
+          cachix pin holochain-open-dev {{snake_case app_name}}_integrity $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}_integrity.meta.release | nix run nixpkgs#jq -- -r 'keys[0]')
 
           cachix watch-exec holochain-open-dev -- nix build --no-update-lock-file --accept-flake-config -L .#{{snake_case app_name}}.meta.release
-          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}.meta.release | nix run nixpkgs#jq -- -r '.[].path')
-          cachix pin holochain-open-dev {{snake_case app_name}} $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}.meta.release | nix run nixpkgs#jq -- -r '.[].path')
+          cachix push holochain-open-dev $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}.meta.release | nix run nixpkgs#jq -- -r 'keys[0]')
+          cachix pin holochain-open-dev {{snake_case app_name}} $(nix path-info --json --accept-flake-config --no-warn-dirty .#{{snake_case app_name}}.meta.release | nix run nixpkgs#jq -- -r 'keys[0]')
diff --git a/templates/zome/web-app/.github/workflows/publish-docs.yml.hbs b/templates/zome/web-app/.github/workflows/publish-docs.yml.hbs
index 2df4f8c..2ba3122 100644
--- a/templates/zome/web-app/.github/workflows/publish-docs.yml.hbs
+++ b/templates/zome/web-app/.github/workflows/publish-docs.yml.hbs
@@ -12,22 +12,22 @@ jobs:
       - name: Checkout 🛎️
         uses: actions/checkout@v3
 
-      - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
       - name: Install and Build 🔧 
         run: |
-          nix develop --accept-flake-config --command bash -c "pnpm i && pnpm -F docs build"
+          nix develop --no-update-lock-file --accept-flake-config --command bash -c "pnpm i && pnpm -F docs build"
 
       - name: Deploy 🚀
         uses: JamesIves/github-pages-deploy-action@v4.3.3
diff --git a/templates/zome/web-app/.github/workflows/test.yaml.hbs b/templates/zome/web-app/.github/workflows/test.yaml.hbs
index 337842b..200eefd 100644
--- a/templates/zome/web-app/.github/workflows/test.yaml.hbs
+++ b/templates/zome/web-app/.github/workflows/test.yaml.hbs
@@ -13,19 +13,19 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev
 
       - name: Install and test
         run: |
-          nix develop --accept-flake-config --command bash -c "pnpm i && pnpm t && pnpm -F @holochain-open-dev/{{kebab_case app_name}} build"
+          nix develop --no-update-lock-file --accept-flake-config --command bash -c "pnpm i && pnpm t && pnpm -F @holochain-open-dev/{{kebab_case app_name}} build"
diff --git a/templates/zome/web-app/.github/workflows/update-flake-inputs.yaml.hbs b/templates/zome/web-app/.github/workflows/update-flake-inputs.yaml.hbs
index d5e1380..1d18ca9 100644
--- a/templates/zome/web-app/.github/workflows/update-flake-inputs.yaml.hbs
+++ b/templates/zome/web-app/.github/workflows/update-flake-inputs.yaml.hbs
@@ -13,16 +13,16 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - name: Install nix
-        uses: cachix/install-nix-action@v25
+        uses: cachix/install-nix-action@v27
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_path: nixpkgs=channel:nixos-24.05
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-ci
 
-      - uses: cachix/cachix-action@v14
+      - uses: cachix/cachix-action@v15
         with:
           name: holochain-open-dev