From 5e9c4cefa87607e9601503f3003ddb725902b840 Mon Sep 17 00:00:00 2001
From: Ren Lin <renl@kaitotlex.systems>
Date: Tue, 27 May 2025 09:04:30 -0700
Subject: [PATCH 1/3] Create lock.yml

---
 .github/workflows/lock.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/lock.yml

diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
new file mode 100644
index 0000000..f57e1cd
--- /dev/null
+++ b/.github/workflows/lock.yml
@@ -0,0 +1,24 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    # Runs weekly at 00:00 UTC on Sunday
+    - cron: "0 0 * * 0"
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@main
+        with:
+          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+          pr-title: "deps(flake.lock): update"
+          pr-labels: |
+            dependencies,auto-merge
+          pr-assignees: youwen5

From 94fa5c18a4c5d11b679eca288bfe334f8c7843ea Mon Sep 17 00:00:00 2001
From: Ren Lin <renl@kaitotlex.systems>
Date: Tue, 27 May 2025 09:05:49 -0700
Subject: [PATCH 2/3] Create build-nix.yml

---
 .github/workflows/build-nix.yml | 42 +++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 .github/workflows/build-nix.yml

diff --git a/.github/workflows/build-nix.yml b/.github/workflows/build-nix.yml
new file mode 100644
index 0000000..e60310d
--- /dev/null
+++ b/.github/workflows/build-nix.yml
@@ -0,0 +1,42 @@
+name: Build system configurations
+
+on:
+  pull_request:
+
+jobs:
+  build-x86_64-demeter:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Free Disk Space (Ubuntu)
+        uses: Jayllyz/free-disk-space@perf/use-rmz
+      - uses: actions/checkout@v4
+      - name: Check Nix flake Nixpkgs inputs
+        uses: DeterminateSystems/flake-checker-action@main
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Build demeter
+        run: |
+          # nix flake check --all-systems
+          nix build .#nixosConfigurations.demeter.config.system.build.toplevel
+  build-aarch64-callisto:
+    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Free Disk Space (Ubuntu)
+        uses: Jayllyz/free-disk-space@perf/use-rmz
+      - uses: actions/checkout@v4
+      - name: Check Nix flake Nixpkgs inputs
+        uses: DeterminateSystems/flake-checker-action@main
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Build callisto
+        run: |
+          # nix flake check --all-systems
+          nix build .#nixosConfigurations.callisto.config.system.build.toplevel

From e892f7c2cb9122d8e04c519afaf81c3f16295ef4 Mon Sep 17 00:00:00 2001
From: Ren Lin <renl@kaitotlex.systems>
Date: Tue, 27 May 2025 09:06:22 -0700
Subject: [PATCH 3/3] Create merge.yml

---
 .github/workflows/merge.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 .github/workflows/merge.yml

diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
new file mode 100644
index 0000000..70793b9
--- /dev/null
+++ b/.github/workflows/merge.yml
@@ -0,0 +1,16 @@
+name: auto-merge-labeled
+on:
+  pull_request:
+jobs:
+  auto-merge-labeled:
+    runs-on: ubuntu-latest
+    steps:
+      - id: auto-merge-labeled
+        name: Auto merge labeled
+        uses: isolomak/auto-merge-labeled@v1.0.1
+        with:
+          label: 'lock'
+          commit-title: 'build(lock): update'
+          merge_method: 'squash'
+        env:
+          GITHUB_TOKEN: ${{ secrets.TOKEN }}