update-flake-lock.yml

name: update-flake-lock

on:
  workflow_dispatch:
  schedule:
    - cron: '37 0 * * *'

permissions:
  actions: write
  contents: write
  pull-requests: write

jobs:
  lockfile:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

      - name: Install nix
        uses: DeterminateSystems/nix-installer-action@b92f66560d6f97d6576405a7bae901ab57e72b6a # v15
        with:
          extra-conf: |
            extra-platforms = aarch64-linux i686-linux

      - name: Use cache
        uses: DeterminateSystems/magic-nix-cache-action@87b14cf437d03d37989d87f0fa5ce4f5dc1a330b # v8

      - name: Update flake.lock
        id: update
        uses: DeterminateSystems/update-flake-lock@a2bbe0274e3a0c4194390a1e445f734c597ebc37 # v24

      - name: Enable automerge
        if: ${{ steps.update.outputs.pull-request-number != '' }}
        run: gh pr merge --squash --auto ${{ steps.update.outputs.pull-request-number }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}