Skip to content

Auto-update flake.nix vendorHash on Renovate PRs - #405

Merged
jupblb merged 3 commits into
mainfrom
michal/renovate-nix
May 12, 2026
Merged

jupblb merged 3 commits into
mainfrom
michal/renovate-nix

Conversation

@jupblb

@jupblb jupblb commented May 11, 2026

Copy link
Copy Markdown
Member

jupblb added 2 commits May 11, 2026 20:28
Add a workflow that runs nix-update on Renovate PRs touching go.mod or
go.sum, commits the recomputed vendorHash, and re-dispatches nix-checks
via workflow_dispatch (an exception to GitHub Actions anti-recursion).
Renovate also touches bindings/go/scip, reprolang, and bindings/typescript,
each of which has its own vendorHash/npmDepsHash in checks.nix. Watch the
relevant paths and loop nix-update over the full attribute path for every
affected derivation (sequentially, to avoid concurrent file writes).
@jupblb
jupblb requested a review from trly May 11, 2026 18:35
Push corrective commits using a GitHub App token instead of
GITHUB_TOKEN + workflow_dispatch. The non-GITHUB_TOKEN identity makes
the push fire pull_request synchronize naturally, producing a
check_suite the PR UI displays. Also widen scope from Renovate-only
branches to any same-repo PR, and drop the workflow_dispatch trigger
from nix-checks.yaml that the previous strategy required.

Add a concurrency block to nix-checks.yaml so superseded runs are
cancelled when the auto-fix push triggers a fresh run.
@jupblb
jupblb merged commit c621712 into main May 12, 2026
12 checks passed
@jupblb
jupblb deleted the michal/renovate-nix branch May 12, 2026 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants