infrastructure/.github/workflows/update.yml

name: update-flake-inputs
on:
  schedule:
    - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00

jobs:
  update-lockfile:
    runs-on:
      - ubuntu-latest
      - nixos
      - x86_64
    container:
      volumes:
        - /mnt/cache/nix_store:/nix
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install sudo
        run: apt update && apt install -y sudo

      - name: Install Nix
        uses: cachix/install-nix-action@v23
        with:
          github_access_token: ${{ secrets.CUSTOM_GITHUB_TOKEN }}
          extra_nix_config: |
            access-tokens = gitnext.lewd.wtf=${{ secrets.AUTOUPDATE_TOKEN }}
      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@v20
        env:
          ACTION_RUNTIME_TOKEN: ''
          GITHUB_TOKEN: ''
        with:
          pr-title: "update flake inputs"
          pr-labels: |
            update
            automated