update-flake-lock.yml

name: 'Update flake.lock'

on:
  workflow_dispatch:
  schedule:
    - cron: '0 0 * * 1,4' # twice a week

defaults:
  run:
    shell: 'bash'

env:
  PR-REVIEWER: 'o-az'
  ACTIONS_RUNNER_DEBUG: 1

jobs:
  update-lockfile:
    runs-on: ['ubuntu-latest']
    if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'
    steps:
      - name: 'Checkout repository'
        uses: actions/checkout@v4

      - name: 'Install Nix'
        uses: DeterminateSystems/nix-installer-action@main

      - name: 'Enable magic Nix cache'
        uses: DeterminateSystems/magic-nix-cache-action@main

      - name: 'Update flake.lock'
        uses: DeterminateSystems/update-flake-lock@main
        with:
          pr-assignees: ${{ env.PR-REVIEWER }}
          pr-reviewers: ${{ env.PR-REVIEWER }}
          git-committer-name: ${{ secrets.AUTHOR_NAME }}
          git-author-email: ${{ secrets.AUTHOR_EMAIL }}
          git-author-name: ${{ secrets.AUTHOR_NAME }}
          git-committer-email: ${{ secrets.AUTHOR_EMAIL }}
          gpg-private-key: ${{ secrets.SIGNING_KEY }}