update-flake-lock.yml

name: Update Nix Flake lockfile

on:
  # Enable option to manually run the action:
  workflow_dispatch:

  # Run every Sunday at 00:00:
  schedule:
    - cron: 0 0 * * 0

jobs:
  main:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3

      - uses: cachix/install-nix-action@v20
        with:
          nix_path: nixpkgs=channel:nixos-unstable
          github_access_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Run `nix flake update`
        id: update-lockfile
        run: ./scripts/commit_flake_update.bash

      - uses: tibdex/github-app-token@v1.8.0
        id: generate-token
        with:
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.APP_PRIVATE_KEY }}

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v5
        with:
          token: ${{ steps.generate-token.outputs.token }}
          title: 'Update Nix Flake lockfile'
          branch: 'create-pull-request/update-flake-lockfile'
          delete-branch: true
          branch-suffix: timestamp
          add-paths: flake.lock