update.yml

name: "Automated update"
on:
  schedule:
    - cron: '0 */6 * * *'
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  update:
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@main
      with:
        ref: main
        token: '${{ secrets.PAT_FOR_AUTOMATED_UPDATE }}'
    - name: Install nix
      uses: cachix/install-nix-action@master
      with:
        github_access_token: '${{ secrets.GITHUB_TOKEN }}'
    - name: Setup cachix
      uses: cachix/cachix-action@master
      with:
        name: linyinfeng
        signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
    - name: Git config
      run: |
        git config --global user.email "nano@linyinfeng.com"
        git config --global user.name "Nano"
    - name: Nix flake update
      run: |
        nix flake update --commit-lock-file
    - name: Cargo update
      run: |
        nix develop --command cargo update
        if [ -z $(git status --porcelain) ]; then
          echo "clean, skip..."
        else
          git add --all
          git commit --message "Cargo update"
        fi
    - name: Nix flake check
      run: |
        nix flake check
    - name: Git push
      run: |
        git push