ci: merge and cleanup workflows (#282)

* ci: only format nix files in upstream repo

* ci: merge release & publish workflows

* ci: merge flake.lock & port update workflows

* ci: conditionally run website workflow

.github/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
   format:
     name: Format Nix files
 
-    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+    if: github.repository_owner == 'Catppuccin' && github.event_name == 'push' || github.event_name == 'workflow_dispatch'
 
     runs-on: ubuntu-latest
 

.github/workflows/release.yml

@@ -7,14 +7,53 @@ on:
 jobs:
   release-please:
     name: Make release
+
     runs-on: ubuntu-latest
 
     permissions:
       contents: write
       pull-requests: write
 
+    outputs:
+      release_created: ${{ steps.release-please-run.outputs.release_created }}
+      tag_name: ${{ steps.release-please-run.outputs.tag_name }}
+
     steps:
       - uses: googleapis/release-please-action@v4
+        id: release-please-run
         with:
           release-type: simple
           package-name: catppuccin/nix
+
+  publish:
+    name: Publish to Flake registries
+    if: ${{ needs.release-please.outputs.release_created }}
+    needs: release-please
+
+    runs-on: ubuntu-latest
+
+    env:
+      TAG_NAME: ${{ needs.release-please.outputs.tag_name }}
+
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ env.TAG_NAME }}
+
+      - name: Install Nix
+        uses: cachix/install-nix-action@V27
+
+      - name: Publish on Flakestry
+        uses: flakestry/flakestry-publish@main
+        with:
+          version: ${{ env.TAG_NAME }}
+
+      - name: Push to FlakeHub
+        uses: DeterminateSystems/flakehub-push@v4
+        with:
+          tag: ${{ env.TAG_NAME }}
+          visibility: "public"

.github/workflows/update-locks.yml

@@ -0,0 +1,57 @@
+name: Update lockfiles
+
+on:
+  schedule:
+    # run every friday
+    - cron: "0 0 * * 5"
+  workflow_dispatch:
+
+jobs:
+  flake:
+    name: Update flake.lock
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: cachix/install-nix-action@V27
+
+      - uses: DeterminateSystems/update-flake-lock@v23
+        with:
+          path-to-flake-dir: "./dev"
+          commit-msg: "chore: update dev flake inputs"
+          pr-title: "chore: update dev flake inputs"
+          token: ${{ github.token }}
+
+  ports:
+    name: Update port sources
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: cachix/install-nix-action@V27
+
+      - name: Install npins
+        run: nix profile install 'nixpkgs#npins'
+
+      - uses: getchoo/[email protected]
+        with:
+          npins-directory: "./.sources"
+          commit-message: "chore(modules): update ports"
+          pr-title: "chore(modules): update ports"
+          token: ${{ github.token }}

.github/workflows/website.yml

@@ -3,7 +3,17 @@ name: Build & deploy website
 on:
   push:
     branches: [main]
+    paths:
+      - 'docs/**'
+      - 'CHANGELOG.md'
+      - '**.lock'
+      - '**.nix'
   pull_request:
+    paths:
+      - 'docs/**'
+      - 'CHANGELOG.md'
+      - '**.lock'
+      - '**.nix'
   workflow_dispatch:
 
 jobs: