name: update-dependencies

on:
  workflow_dispatch: # allows manual triggering
  # FIXME: re-enable when manual run works
  # schedule:
  #   - cron: '0 0 1 * *' # monthly

jobs:
  lockfile:
    runs-on: native
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Update pins
        run: nix-shell --run "npins update"
      - name: Create PR
        uses: quentinlegot/gitea-create-pull-request@d1fd3e1f0c98ee7a009c035f9b7ad3f3bdc0f281
        with:
          remote-instance-api-version: v1
          token: "${{ secrets.DEPLOY_KEY }}"
          branch: npins-update
          commit-message: "npins: update sources"
          title: "npins: update sources"