Update flake.lock #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Update flake.lock | |
on: | |
schedule: | |
# run every saturday | |
- cron: '0 0 * * 6' | |
workflow_dispatch: | |
jobs: | |
update: | |
name: Run update | |
runs-on: ubuntu-latest | |
permissions: | |
contents: write | |
pull-requests: write | |
env: | |
PR_BRANCH: 'update-lockfiles' | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
- name: Install Nix | |
uses: DeterminateSystems/nix-installer-action@v10 | |
- name: Set Git user info | |
run: | | |
git config user.name 'github-actions[bot]' | |
git config user.email 'github-actions[bot]@users.noreply.github.com' | |
- name: Create new branch | |
id: branch | |
run: | | |
git switch -c "$PR_BRANCH" | |
- name: Update flake inputs | |
run: | | |
pushd nix/dev | |
nix flake update \ | |
--commit-lock-file \ | |
--commit-lockfile-summary "nix: update dev flake.lock" | |
popd | |
nix flake update \ | |
--commit-lock-file \ | |
--commit-lockfile-summary "nix: update flake.lock" | |
- name: Make PR if needed | |
env: | |
GH_TOKEN: ${{ github.token }} | |
run: | | |
if ! git diff --color=always --exit-code origin/main; then | |
git fetch origin "$PR_BRANCH" || true | |
git push --force-with-lease -u origin "$PR_BRANCH" | |
open_prs="$(gh pr list --base main --head "$PR_BRANCH" | wc -l)" | |
if [ "$open_prs" -eq 0 ]; then | |
gh pr create \ | |
--base main \ | |
--head "$PR_BRANCH" \ | |
--title "chore: update lockfiles" \ | |
--fill | |
fi | |
fi | |
- name: Enable auto-merge | |
shell: bash | |
run: gh pr merge --auto --squash | |
env: | |
GH_TOKEN: ${{ secrets.MERGE_TOKEN }} |