Release/7.0.0

.git-blame-ignore-revs

@@ -2,4 +2,5 @@
 92e1fc00c00d75428569ff06cf69b7f319e67005
 # pre-commit run -a (Guilhem Saurel, 2022-10-05)
 bda24fb63ec39da845b65a91663d6a8ccc958489
-6a46e0296306811b9d7ccecb91bddb503cdcfe21 pre-commit run -a
+# pre-commit run -a
+6a46e0296306811b9d7ccecb91bddb503cdcfe21

.github/dependabot.yml

@@ -3,4 +3,4 @@ updates:
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
-      interval: "weekly"
+      interval: "monthly"

.github/workflows/nix.yml

@@ -17,15 +17,16 @@ jobs:
     runs-on: "${{ matrix.os }}-latest"
     strategy:
       matrix:
-        os: [ubuntu, macos]
+        os: [ubuntu]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: cachix/install-nix-action@v31
       - uses: cachix/cachix-action@v16
         with:
           name: gepetto
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
       - run: nix flake check -L
+      - run: nix build -L
   check:
     if: always()
     name: check-macos-linux-nix

.github/workflows/update-flake-lock.yml

@@ -6,14 +6,28 @@ on:
     - cron: '0 19 19 * *'
 
 jobs:
-  lockfile:
-    runs-on: ubuntu-latest
+  update-flake-inputs:
+    runs-on: ubuntu-slim
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
+      - name: Generate GitHub App Token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.GEPETTO_NIX_APP_ID }}
+          private-key: ${{ secrets.GEPETTO_NIX_APP_PRIVATE_KEY }}
       - name: Checkout repository
-        uses: actions/checkout@v4
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
-      - name: Update flake.lock
-        uses: DeterminateSystems/update-flake-lock@main
+        uses: actions/checkout@v6
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+      - name: Setup Nix
+        uses: cachix/install-nix-action@v31
+      - name: Update flake inputs
+        uses: mic92/update-flake-inputs@v1
         with:
-          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+          github-token: ${{ steps.app-token.outputs.token }}
+          pr-labels: 'no-changelog'
+          git-author-name: 'hrp2-14'
+          git-author-email: '40568249+hrp2-14@users.noreply.github.com'

.mergify.yml

@@ -5,6 +5,7 @@ pull_request_rules:
       - check-success = "pre-commit.ci - pr"
       - or:
           - author = dependabot[bot]
+          - author = gepetto-flake-updater[bot]
           - author = github-actions[bot]
           - author = hrp2-14
           - author = pre-commit-ci[bot]

.pre-commit-config.yaml

@@ -1,8 +1,8 @@
 ci:
-  autoupdate_branch: devel
+  autoupdate_schedule: quarterly
 repos:
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.14.1
+  rev: v0.15.5
   hooks:
   - id: ruff
     args:
@@ -19,7 +19,7 @@ repos:
   - id: toml-sort-fix
     exclude: poetry.lock
 - repo: https://github.com/pre-commit/mirrors-clang-format
-  rev: v21.1.2
+  rev: v22.1.0
   hooks:
   - id: clang-format
     args: