update.yml

name: Update flake inputs

on:
  schedule:
    - cron: "10 5 * * *"
  workflow_dispatch:

jobs:
  update:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@v31
      - name: Setup git identity
        run: |
          git config --global user.email "github-actions[bot]@users.noreply.github.com"
          git config --global user.name "github-actions[bot]"
      - name: Update
        run: nix flake update --commit-lock-file
      - name: Get update details
        id: update-details
        run: |
          body=$(git log -1 --pretty=%B)
          echo "body<<EOF" >> "$GITHUB_OUTPUT"
          echo "$body" >> "$GITHUB_OUTPUT"
          echo "EOF" >> "$GITHUB_OUTPUT"

      - uses: peter-evans/create-pull-request@v7
        id: create-pr
        with:
          branch: gh/update-flake
          title: "chore: update flake inputs"
          body: ${{ steps.update-details.outputs.body }}
          # Use a PAT so that Workflows run on the created PR
          token: ${{ secrets.CREATE_PR_TOKEN }}
      - if: ${{ steps.create-pr.outputs.pull-request-number }}
        name: Enable auto-merge after requirements met
        run: gh pr merge --squash --auto "${{ steps.create-pr.outputs.pull-request-number }}"
        env:
          GH_TOKEN: ${{ secrets.CREATE_PR_TOKEN }}