update-flake-lock.yml

name: Update Nix Flake lockfile

on:
  # Enable option to manually run the action:
  workflow_dispatch:

  # Run every Sunday:
  schedule:
    - cron: 0 0 * * 0

jobs:
  main:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@v13
        with:
          extra-conf:
            accept-flake-config = true

      - name: Run `nix flake update`
        id: update-lockfile
        run: ./scripts/commit_flake_update.bash

      - uses: tibdex/github-app-token@v2.1.0
        id: generate-token
        with:
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.APP_PRIVATE_KEY }}

      - name: Create Pull Request
        if: ${{ hashFiles('commit_msg_body.txt') != '' }}
        uses: peter-evans/create-pull-request@v6
        with:
          token: ${{ steps.generate-token.outputs.token }}
          title: 'Update Nix Flake lockfile'
          body-path: commit_msg_body.txt
          branch: 'create-pull-request/update-flake-lockfile'
          delete-branch: true
          branch-suffix: timestamp
          add-paths: flake.lock