update-flake-lock.yml

name: "Update flakes"
on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * 1,4"

jobs:
  createPullRequest:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - name: Install Nix
        uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: |
            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}
      - name: Update flakes
        run: nix flake update
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          title: "flake: update inputs"
          token: ${{ steps.app-token.outputs.token }}
          labels: |
            auto-merge