Merge pull request #104 from squat/update_actions

feat(CI): update actions and sign commits

Author: squat

.github/workflows/ci.yml

@@ -16,15 +16,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: DeterminateSystems/nix-installer-action@v20
+      - uses: DeterminateSystems/determinate-nix-action@v3.11.2
       - uses: DeterminateSystems/magic-nix-cache-action@v13
       - run: nix build
 
   lint:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: DeterminateSystems/nix-installer-action@v20
+      - uses: DeterminateSystems/determinate-nix-action@v3.11.2
       - uses: DeterminateSystems/magic-nix-cache-action@v13
       - run: nix flake check -L --show-trace
 
@@ -66,7 +66,7 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
           load: "true"
-      - uses: DeterminateSystems/nix-installer-action@v20
+      - uses: DeterminateSystems/determinate-nix-action@v3.11.2
       - uses: DeterminateSystems/magic-nix-cache-action@v13
       - run: nix develop . --command go test -v ./...
 

.github/workflows/update.yaml

@@ -15,10 +15,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: DeterminateSystems/determinate-nix-action@v3
-      - uses: DeterminateSystems/update-flake-lock@main
+      - uses: DeterminateSystems/determinate-nix-action@v3.11.2
+      - uses: DeterminateSystems/update-flake-lock@v27
         with:
-          pr-title: "Update Nix flake inputs" # Title of PR to be created
-          pr-labels: | # Labels to be set on the PR
+          pr-title: Update Nix flake inputs
+          pr-labels: |
             dependencies
             automated
+          sign-commits: true
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          token: ${{ secrets.GH_TOKEN_FOR_FLAKE_LOCK_UPDATES }}