aaddrick--claude-desktop-debian/.github/workflows/update-flake-lock.yml

name: Update Flake Lock
on:
  schedule:
    - cron: "0 2 * * 1"  # Monday 2 AM UTC
  workflow_dispatch:

permissions:
  contents: write

concurrency:
  group: main-branch-auto-update
  cancel-in-progress: false

jobs:
  update-flake-lock:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          token: ${{ secrets.GH_PAT }}

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@c5a866b6ab867e88becbed4467b93592bce69f8a # v21

      - name: Update flake.lock
        run: nix flake update --flake .

      - name: Check for changes
        id: check
        run: |
          if git diff --quiet flake.lock; then
            echo "changed=false" >> $GITHUB_OUTPUT
            echo "flake.lock is already up to date"
          else
            echo "changed=true" >> $GITHUB_OUTPUT
            echo "flake.lock has changes:"
            nix flake metadata --json | jq -r '.locks.nodes | to_entries[] | select(.key != "root") | "\(.key): \(.value.locked.rev[0:8])"'
          fi

      - name: Commit and push
        if: steps.check.outputs.changed == 'true'
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add flake.lock
          git commit -m "chore: update flake.lock"
          git push