name: update-dependencies

on:
  workflow_dispatch: # allows manual triggering
  # FIXME: re-enable when manual run works
  # schedule:
  #   - cron: '0 0 1 * *' # monthly

jobs:
  lockfile:
    runs-on: nix
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Update pins
        run: nix-shell --run "npins update"
      - name: Create PR
        uses: peter-evans/create-pull-request@v7
        with:
          token: "${{ secrets.DEPLOY_KEY }}"
          branch: npins-update
          commit-message: "npins: update sources"
          title: "npins: update sources"