update-flake-lock.yml

name: ⤴️ Update flake.lock
on:
  workflow_dispatch: # Allows manual triggering
  schedule:
    - cron: '0 3 * * 1' # Runs every Monday at 3:00 UTC

jobs:
  create-pr:
    name: Create Pull Request
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@main
      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@main
        with:
          # https://github.com/DeterminateSystems/update-flake-lock?tab=readme-ov-file#with-a-personal-authentication-token
          # Token needed so it can trigger the check workflow
          # Also see https://github.com/orgs/community/discussions/65321
          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
          commit-msg: "flake: update"   # Commit message to be used
          pr-title: "Update flake.lock" # Title of PR to be created
          pr-labels: |                  # Labels to be set on the PR
            dependencies
            automated
          # git-author-name: 'Patrizio Bekerle'
          # git-author-email: 'patrizio@bekerle.com'
          # git-committer-name: 'Patrizio Bekerle'
          # git-committer-email: 'patrizio@bekerle.com'