update.yaml 771 B

123456789101112131415161718192021222324252627
  1. name: "Flake.lock: update Nix dependencies"
  2. on:
  3. workflow_dispatch: # allows manual triggering
  4. schedule:
  5. - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
  6. jobs:
  7. nix-flake-update:
  8. permissions:
  9. contents: write
  10. id-token: write
  11. issues: write
  12. pull-requests: write
  13. runs-on: ubuntu-latest
  14. steps:
  15. - uses: actions/checkout@v6
  16. - uses: DeterminateSystems/determinate-nix-action@v3.15.1
  17. - uses: DeterminateSystems/update-flake-lock@v28
  18. with:
  19. pr-title: Update Nix flake inputs
  20. pr-labels: |
  21. dependencies
  22. automated
  23. sign-commits: true
  24. gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
  25. token: ${{ secrets.GH_TOKEN_FOR_FLAKE_LOCK_UPDATES }}