update-lockfile.yaml

name: "Update Flake Lockfile"

on:
  workflow_dispatch:
  schedule:
    - cron: "0 8 * * 1,3,5"

jobs:
  lockfile:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@v12
        with:
          extra-conf: |
            fallback = true
            connect-timeout = 30
            experimental-features = nix-command flakes

      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@v23
        with:
          pr-title: "flake: update lockfile"
          pr-labels: |
            dependencies
            automated
          git-author-name: soopyc [bot]
          git-author-email: ci_signing+github@ningenkai.soopy.moe
          git-committer-name: soopyc [bot]
          git-committer-email: ci_signing+github@ningenkai.soopy.moe

          sign-commits: true
          gpg-fingerprint: ${{ vars.GPG_FINGERPRINT }}
          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
          gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}