ci: cleanup update-flake.yaml

1 files changed, 37 insertions, 0 deletions

diff --git a/.github/workflows/update-flake.yaml b/.github/workflows/update-flake.yaml
new file mode 100644
index 0000000..06b3a4d
--- /dev/null
+++ b/.github/workflows/update-flake.yaml
@@ -0,0 +1,37 @@
+name: Update flake.lock
+
+on:
+  schedule:
+    # run every saturday
+    - cron: "0 0 * * 6"
+  workflow_dispatch:
+
+jobs:
+  update:
+    name: Run update
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v12
+
+      - name: Update flake.lock & make PR
+        uses: DeterminateSystems/update-flake-lock@v22
+        id: update
+        with:
+          commit-msg: "nix: update flake.lock"
+          pr-title: "nix: update flake.lock"
+          token: ${{ secrets.MERGE_TOKEN }}
+
+      - name: Enable auto-merge
+        if: env.PR_ID != ''
+        run: gh pr merge --auto --squash "$PR_ID"
+        env:
+          GH_TOKEN: ${{ github.token}}
+          PR_ID: ${{ steps.update.outputs.pull-request-number }}