update-flake-lock.yaml

name: Update Flake Lock

on:
  schedule:
    - cron: '0 0 * * 5'

jobs:
  check-build:
    uses: ./.github/workflows/build-template.yaml
    with:
      derivation: 'nixosConfigurations.vinnix.config.system.build.toplevel'

  update-flake:
    runs-on: ubuntu-latest
    needs: check-build
    if: ${{ needs.check-build.outputs.build-success == 'true' }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@main

      - name: Setup Cache
        uses: DeterminateSystems/magic-nix-cache-action@main

      - name: Check flake
        run: nix flake check

      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@main
        with:
          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
          pr-title: "Update flake.lock"
          pr-labels: |
            dependencies
            automated