name: Update flake.lock

on:
  workflow_dispatch:
  schedule:
  - cron: '1 1 * * 0'

jobs:
  lockfile:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@v13
      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@v23
        with:
          pr-title: "Update `flake.lock`"
          pr-labels: |
            dependencies
            automated
          token: ${{ secrets.GH_TOKEN_FLAKE_LOCK_UPDATE }}