name: update-flake-lock
on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00

jobs:
  update-flake-lock:
    runs-on: ubuntu-latest
    steps:
      - name: "Checking out repository..."
        uses: actions/checkout@v4

      - name: "Installing and configuring the nix package manager..."
        uses: DeterminateSystems/nix-installer-action@main
        with:
          extra-conf: |
            accept-flake-config = true

      - name: "Updating flake.lock..."
        uses: DeterminateSystems/update-flake-lock@main
        with:
          pr-title: "Automated action - Update flake.lock"
          pr-labels: |
            dependencies
            automated

          # NOTE You can use a PAT to identify as a user, for CI purposes
          # token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}