isabelroses.com
my over complex system configurations
dotfiles.isabelroses.com/
nixos
nix
flake
dotfiles
linux
1name: Bump Flake Inputs
2
3on:
4 workflow_dispatch:
5 schedule:
6 - cron: "3 0 * * *" # run daily at 00:03 UTC
7
8permissions: {}
9
10jobs:
11 update-lockfile:
12 runs-on: ubuntu-latest
13
14 permissions:
15 pull-requests: write
16 contents: write
17
18 steps:
19 - name: Checkout
20 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
21 with:
22 persist-credentials: false
23
24 - name: Install Lix
25 uses: samueldr/lix-gha-installer-action@7b7f14d320d6aacfb65bd1ef761566b3b69e474c # v2026-02-22
26 with:
27 extra_nix_config: |
28 substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
29 trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
30
31 - name: Update Lockfile
32 id: pr
33 uses: DeterminateSystems/update-flake-lock@c5930b397a673a70ca70be06020e943aeac310a1 # v27
34 with:
35 token: ${{ secrets.GH_TOKEN_UPDATES }}
36 commit-msg: "flake.lock: update all inputs"
37 pr-title: "flake.lock: update all inputs"
38 branch: update-flake-inputs
39 pr-body: |
40 ```
41 {{ env.GIT_COMMIT_MESSAGE }}
42 ```
43
44 - name: Merge Pull Request
45 run: gh pr merge --rebase --auto --delete-branch "$PR"
46 env:
47 GH_TOKEN: ${{ github.token }}
48 PR: ${{ steps.pr.outputs.pull-request-url }}