gh

.github/workflows/renovate.yml

@@ -0,0 +1,29 @@
+name: Renovate
+on:
+  schedule:
+    # Every day at 03:00 JST (18:00 UTC on the previous day).
+    - cron: "0 18 * * *"
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: renovate
+  cancel-in-progress: false
+jobs:
+  renovate:
+    name: Update Nix flake inputs
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Checkout repository
+        uses: actions/[email protected]
+      # Use a PAT or GitHub App token so Renovate PRs trigger the other workflows.
+      - name: Run Renovate
+        uses: renovatebot/[email protected]
+        with:
+          renovate-version: 43.262.1
+          token: ${{ secrets.RENOVATE_TOKEN }}
+        env:
+          LOG_LEVEL: info
+          RENOVATE_PLATFORM: github
+          RENOVATE_REPOSITORIES: ${{ github.repository }}

.gitignore

@@ -13,6 +13,7 @@
 
 !/flake.nix
 !/flake.lock
+!/renovate.json
 
 !shells/
 !hosts/

modules/applications/git/system.nix

@@ -15,6 +15,7 @@ in
   config = lib.mkIf cfg.enable {
     environment.systemPackages = with pkgs; [
       git # Distributed version control system
+      gh # GitHub CLI
     ];
   };
 }

renovate.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "enabledManagers": ["nix"],
+  "nix": {
+    "enabled": true
+  },
+  "prCreation": "immediate",
+  "semanticCommits": "enabled",
+  "semanticCommitType": "chore",
+  "semanticCommitScope": "deps",
+  "packageRules": [
+    {
+      "description": "Group Nix flake input updates",
+      "matchManagers": ["nix"],
+      "groupName": "Nix flake inputs",
+      "groupSlug": "nix-flake-inputs"
+    }
+  ]
+}