update-nixpkgs #32
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: update-nixpkgs | |
| on: | |
| workflow_dispatch: {} | |
| schedule: | |
| - cron: "5 3 * * *" | |
| jobs: | |
| run-nixpkgs-update: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| path: 'release-tools' | |
| - uses: cachix/install-nix-action@v21 | |
| with: | |
| # Nix 2.24 breaks flake update | |
| install_url: https://releases.nixos.org/nix/nix-2.18.9/install | |
| - uses: actions/create-github-app-token@v1 | |
| id: app-token | |
| with: | |
| app-id: ${{ vars.NIXPKGS_UPDATE_APP_ID }} | |
| private-key: ${{ secrets.NIXPKGS_UPDATE_APP_PRIVATE_KEY }} | |
| owner: ${{ github.repository_owner }} | |
| - run: | | |
| echo "::add-mask::${{steps.app-token.outputs.token}}" | |
| - name: Get GitHub App User ID | |
| id: get-user-id | |
| run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT" | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| - run: | | |
| git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]' | |
| git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>' | |
| - uses: actions/checkout@v4 | |
| with: | |
| repository: flyingcircusio/fc-nixos-testing | |
| path: 'fc-nixos' | |
| token: ${{ steps.app-token.outputs.token }} | |
| # fetch all branches and tags | |
| fetch-depth: 0 | |
| - name: build release tooling | |
| run: | | |
| nix build ./release-tools# | |
| - run: | | |
| ./result/bin/update-nixpkgs update \ | |
| --fc-nixos-dir fc-nixos \ | |
| --nixpkgs-dir nixpkgs \ | |
| --nixpkgs-upstream-url https://github.com/NixOS/nixpkgs \ | |
| --nixpkgs-origin-url https://x-access-token:${{steps.app-token.outputs.token}}@github.com/flyingcircusio/nixpkgs-testing.git \ | |
| --platform-versions 24.05 ${{ github.event_name == 'workflow_dispatch' && '--force' || '' }} | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| MATRIX_HOOKSHOT_URL: ${{ secrets.MATRIX_HOOKSHOT_URL }} |