From 63498970aa68db136ac73150edcb1e547ed4a3e2 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Thu, 14 Dec 2023 04:38:36 -0500
Subject: ci: garnix -> gha + attic

---
 .github/workflows/update-lock.yaml | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

(limited to '.github/workflows/update-lock.yaml')

diff --git a/.github/workflows/update-lock.yaml b/.github/workflows/update-lock.yaml
index e735b81..98af4ef 100644
--- a/.github/workflows/update-lock.yaml
+++ b/.github/workflows/update-lock.yaml
@@ -10,27 +10,23 @@ jobs:
   update:
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: write
-      pull-requests: write
-
     steps:
       - uses: actions/checkout@v4
 
-      - name: install nix
-        uses: nixbuild/nix-quick-install-action@v26
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v9
 
-      - name: update lockfile
+      - name: Update lockfile & make PR
         uses: DeterminateSystems/update-flake-lock@v20
         id: update
         with:
           commit-msg: "flake: update inputs"
           pr-title: "flake: update inputs"
-          token: ${{ github.token }}
+          token: ${{ secrets.MERGE_TOKEN }}
 
-      - name: enable auto-merge
+      - name: Enable auto-merge
         shell: bash
         run: gh pr merge --auto --rebase "$PR_ID"
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.MERGE_TOKEN }}
           PR_ID: ${{ steps.update.outputs.pull-request-number }}
-- 
cgit v1.2.3