ci: add Nix Flake Update GitHub workflow to keep flake inputs updated

[trueNAHO]

This change requires GitHub workflows to have read and write permissions 1 2.

This PR is stacked on top of the pending patchset #519 ("treewide: add developer shell and pre-commit hooks and simplify GitHub workflows") and should only be merged after it. Although ready for review, this PR will remain in Draft status until patchset "treewide: add developer shell and pre-commit hooks and simplify GitHub workflows" is merged.

NAHO (1):
  ci: add Nix Flake Update GitHub workflow to keep flake inputs updated

 .github/workflows/nix_flake_update.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/workflows/nix_flake_update.yml

[trueNAHO]

From 29d97f487312d3b56c4dd3da40cb43af858a02d4 Mon Sep 17 00:00:00 2001
From: NAHO <[email protected]>
Date: Thu, 22 Aug 2024 23:07:22 +0200
Subject: [PATCH] ci: add Nix Flake Update GitHub workflow to keep flake
 inputs updated

This change requires GitHub workflows to have read and write permissions
[1] [2].

[1]: https://github.com/DeterminateSystems/update-flake-lock/issues/75
[2]: https://github.com/DeterminateSystems/update-flake-lock/issues/88

Link: https://github.com/danth/stylix/pull/520
---
 .github/workflows/nix_flake_update.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/workflows/nix_flake_update.yml

diff --git a/.github/workflows/nix_flake_update.yml b/.github/workflows/nix_flake_update.yml
new file mode 100644
index 00000000..74c285d0
--- /dev/null
+++ b/.github/workflows/nix_flake_update.yml
@@ -0,0 +1,26 @@
+---
+name: Nix Flake Update
+
+on:  # yamllint disable-line rule:truthy
+  workflow_dispatch:
+
+  schedule:
+    - cron: "0 0 1 * *"
+
+jobs:
+  nix-flake-update:
+    runs-on: ubuntu-22.04
+
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@v13
+      - uses: DeterminateSystems/magic-nix-cache-action@v6
+
+      - uses: DeterminateSystems/update-flake-lock@v23
+        with:
+          pr-labels: dependencies
+          pr-title: "stylix: update all flake inputs"

Bump dependencies:

• magic-nix-cache-action: v6 -> v8
• nix-installer-action: v13 -> v14
• update-flake-lock: v23 -> v24

[trueNAHO]

Changelog

v1: 706c8ef

• Bump magic-nix-cache-action GitHub Action: v6 -> v8
• Bump nix-installer-action GitHub Action: v13 -> v14
• Bump update-flake-lock GitHub Action: v23 -> v24
• Rebase on top of commit ef81ad9 ("gnome: move gnome-shell overlay out of gnome scope (gnome: moved gnome-shell overlay outside its gnome packages umbrella #541)") because GitHub does not understand stacked PRs...

v0: 29d97f4

[trueNAHO]

Changelog

v2: 4be09d0

• Bump nix-installer-action GitHub Action: v14 -> v16

v1: 706c8ef

• Bump magic-nix-cache-action GitHub Action: v6 -> v8
• Bump nix-installer-action GitHub Action: v13 -> v14
• Bump update-flake-lock GitHub Action: v23 -> v24
• Rebase on top of commit ef81ad9 ("gnome: move gnome-shell overlay out of gnome scope (gnome: moved gnome-shell overlay outside its gnome packages umbrella #541)") because GitHub does not understand stacked PRs...

v0: 29d97f4

[trueNAHO]

This PR is stacked on top of the pending patchset #519 ("treewide: add developer shell and pre-commit hooks and simplify GitHub workflows") and should only be merged after it. Although ready for review, this PR will remain in Draft status until patchset "treewide: add developer shell and pre-commit hooks and simplify GitHub workflows" is merged.

Considering that #519 is taking longer than expected to get merged, we might want to already merge this PR. Consequently, I moved this PR out of draft mode.

[danth]

We should use the GitHub App from #664 to allow GitHub Actions to run on the created pull request.