From ac66b9d3c6e24051ac2176dfa7150b4106a7b469 Mon Sep 17 00:00:00 2001 From: Kiara Grouwstra Date: Sun, 1 Jun 2025 16:00:10 +0200 Subject: [PATCH] automate dependency updates using update-npins (#343) use [update-npins](https://github.com/getchoo/update-npins) to automate dependency updates. alternative renovatebot seemed to mostly support flakes so far, while it mostly seemed better at showing what packages got updated to which version. i figured that seemed not worth fixing for now, so settled for update-npins. not sure how to test before merge, but i added the deploy token (with write rights) and exposed it as the referenced secret. closes #65. Reviewed-on: https://git.fediversity.eu/Fediversity/Fediversity/pulls/343 Co-authored-by: Kiara Grouwstra Co-committed-by: Kiara Grouwstra --- .forgejo/workflows/update.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .forgejo/workflows/update.yaml diff --git a/.forgejo/workflows/update.yaml b/.forgejo/workflows/update.yaml new file mode 100644 index 00000000..d76c9622 --- /dev/null +++ b/.forgejo/workflows/update.yaml @@ -0,0 +1,21 @@ +name: update-dependencies + +on: + workflow_dispatch: # allows manual triggering + schedule: + - cron: '0 0 1 * *' # monthly + +jobs: + lockfile: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v4 + - name: Install Nix + uses: cachix/install-nix-action@v31 + - name: Install npins + run: nix profile install 'nixpkgs#npins' + - name: Update npins sources + uses: getchoo/update-npins@v0 + with: + token: "${{ secrets.DEPLOY_KEY }}"