11.stylix/.github/workflows/update-flake.yml
0xda157 8ca5c7fbab
ci: update-flake: continue on all-maintainers failure (#1986)
Link: https://github.com/nix-community/stylix/pull/1986

Reviewed-by: Matt Sturgeon <matt@sturgeon.me.uk>
Reviewed-by: NAHO <90870942+trueNAHO@users.noreply.github.com>
2025-11-21 16:17:55 +01:00

117 lines
3.6 KiB
YAML

---
name: Update flake inputs
on:
schedule:
- cron: "0 0 1 * *"
workflow_dispatch:
defaults:
run:
shell: bash
jobs:
flake-update:
runs-on: ubuntu-24.04
if: vars.APP_ID
strategy:
matrix:
branch: [master, release-25.05]
steps:
- id: generate-token
uses: actions/create-github-app-token@v2
with:
app-id: ${{ vars.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
permission-contents: write
permission-pull-requests: write
- uses: actions/checkout@v6
with:
ref: ${{ matrix.branch }}
token: ${{ steps.generate-token.outputs.token }}
- uses: cachix/install-nix-action@v31
- id: user-info
env:
GH_TOKEN: ${{ steps.generate-token.outputs.token }}
slug: ${{ steps.generate-token.outputs.app-slug }}
run: |
name="$slug[bot]"
id="$(gh api "/users/$name" --jq .id)"
printf \
'%s=%s\n' \
id "$id" \
name "$name" \
email "$id+$name@users.noreply.github.com" \
>>"$GITHUB_OUTPUT"
- name: setup git
env:
name: ${{ steps.user-info.outputs.name }}
email: ${{ steps.user-info.outputs.email }}
run: |
git config --global user.name "$name"
git config --global user.email "$email"
- name: update lock files
run: |
nix flake update \
--commit-lock-file \
--option commit-lock-file-summary "flake: update public inputs"
nix flake update \
--commit-lock-file \
--flake ./flake/dev \
--option commit-lock-file-summary "flake: update dev inputs"
# The nixpkgs maintainers may have changed, so keep all-maintainers
# in sync
if nix run .#all-maintainers; then
git add generated/all-maintainers.nix
if
! git commit --message "stylix: update all-maintainers list"
then
echo "::debug::generated/all-maintainers.nix has no changes"
fi
else
echo "::error::failed to update generated/all-maintainers.nix"
fi
- name: create pull request
env:
GH_TOKEN: ${{ steps.generate-token.outputs.token }}
base_branch: ${{ matrix.branch }}
body: "This is an automated update triggered by the [workflow run #${{ github.run_id }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})." # yamllint disable-line rule:line-length
label: "topic: dependencies"
pr_branch: update_flake_lock_action_${{ matrix.branch }}
title: "${{ startsWith(matrix.branch, 'release') && format('[{0}] ', matrix.branch) || '' }}flake: update public and dev inputs" # yamllint disable-line rule:line-length
run: |
git switch --create "$pr_branch"
git push origin "$pr_branch" --force --set-upstream
pr_count="$(
gh api \
--method GET \
"/repos/$GITHUB_REPOSITORY/pulls" \
--field per_page=1 \
--raw-field head="$GITHUB_REPOSITORY_OWNER:$pr_branch" \
--jq length
)"
if ((pr_count)); then
gh pr edit \
--body "$body" \
--label "$label" \
--title "$title"
else
gh pr create \
--base "$base_branch" \
--body "$body" \
--label "$label" \
--title "$title"
fi