flake-update.yaml

name: Update dependencies

on:
  schedule:
    - cron: '0 14 * * 1,3,5'
  workflow_dispatch:

jobs:
  niv_update:
    name: Update dependencies
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
        with:
          ssh-key: ${{ secrets.FLAKE_UPDATE_SSH_KEY }}
      - uses: cachix/install-nix-action@ba0dd844c9180cbf77aa72a116d6fbc515d0e87b # v27
        with:
          extra_nix_config:
            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
      - name: Flake update
        run: |
          git config user.name github-actions
          git config user.email github-actions@github.com
          nix flake update --commit-lock-file
      - uses: peter-evans/create-pull-request@6d6857d36972b65feb161a90e484f2984215f83e # v6.0.5
        name: Create PR
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          branch: flake-update
          title: Automated flake update