name: flake-update

on:
  schedule:
    - cron: "17 4 * * *"
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  update:
    runs-on: nix
    steps:
      - uses: actions/checkout@v4

      - run: nix flake update

      - name: open/update PR
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          API: ${{ github.api_url }}
          REPO: ${{ github.repository }}
        run: |
          printf 'Automated `nix flake update`.\n' > "$RUNNER_TEMP/body.md"
          nix run .#ci -- open-pr \
            flake-update "$GITHUB_REF_NAME" "flake.lock: update inputs" "$RUNNER_TEMP/body.md" automated