updater.yml

name: Flake Lock Updater ✨

on:
  schedule:
    - cron: "14 3 * * 1,3,5"
  workflow_dispatch:

jobs:
  lock-updater:
    name: Flake Lock Updater
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v6
      - uses: DeterminateSystems/determinate-nix-action@v3
        with:
          extra-conf: |
            eval-cores = 0
      - uses: DeterminateSystems/flakehub-cache-action@v3
      - uses: DeterminateSystems/update-flake-lock@v28
        id: update
        with:
          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
          pr-title: "chore: update flake.lock"
          # Labels to be set on the PR
          pr-labels: |
            dependencies
            automated
      - name: Enable auto-merge 🤖
        if: steps.update.outputs.pull-request-number != ''
        run: gh pr merge --auto --squash ${{ steps.update.outputs.pull-request-number }}
        env:
          GH_TOKEN: ${{ secrets.GH_TOKEN_FOR_UPDATES }}