summaryrefslogtreecommitdiff
path: root/.github/workflows/update-flake.yaml
blob: 22e498f9cb8f68d19a198a1083cb9a2154bb11c2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
name: "Update flake.lock"

on:
  schedule:
    # Run on the 1st and 15th of every month
    - cron: "0 0 1,15 * *"
  workflow_dispatch:

jobs:
  update:
    name: "Run update & create PR"

    runs-on: "ubuntu-latest"

    steps:
      - name: "Generate GitHub App token"
        uses: "actions/create-github-app-token@v1"
        id: "app-token"
        with:
          app-id: ${{ vars.APP_ID }}
          private-key: ${{ secrets.PRIVATE_KEY }}

      - name: "Checkout repository"
        uses: "actions/checkout@v4"
        with:
          token: ${{ steps.app-token.outputs.token }}

      - name: "Install Nix"
        uses: "cachix/install-nix-action@v30"

      - name: "Run update"
        run: |
          nix flake update

      - name: "Create pull request"
        id: "pull-request"
        uses: "peter-evans/create-pull-request@v7"
        with:
          branch: "update-flake-lock"
          commit-message: "nix: update flake.lock"
          title: "nix: update flake.lock"
          token: ${{ steps.app-token.outputs.token }}
          sign-commits: true

      - name: "Enable auto-merge"
        if: ${{ env.PR_ID != '' }}
        env:
          GH_TOKEN: ${{ steps.app-token.outputs.token }}
          PR_ID: ${{ steps.pull-request.outputs.pull-request-number }}
        run: |
          gh pr merge --auto --squash "$PR_ID"