name: update-dependencies

on:
  workflow_dispatch: # allows manual triggering
  schedule:
    - cron: '0 0 1 * *' # monthly

jobs:
  lockfile:
    runs-on: native
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install npins
        run: nix-shell --run "npins update"
      - name: Create PR
        uses: peter-evans/create-pull-request@v7
        with:
          token: "${{ secrets.DEPLOY_KEY }}"
          branch: npins-update
          commit-message: "npins: update sources"
          title: "npins: update sources"