Merge remote-tracking branch 'refs/remotes/origin/main'

.github/workflows/build-nix.yml

@@ -0,0 +1,42 @@
+name: Build system configurations
+
+on:
+  pull_request:
+
+jobs:
+  build-x86_64-demeter:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Free Disk Space (Ubuntu)
+        uses: Jayllyz/free-disk-space@perf/use-rmz
+      - uses: actions/checkout@v4
+      - name: Check Nix flake Nixpkgs inputs
+        uses: DeterminateSystems/flake-checker-action@main
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Build demeter
+        run: |
+          # nix flake check --all-systems
+          nix build .#nixosConfigurations.demeter.config.system.build.toplevel
+  build-aarch64-callisto:
+    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Free Disk Space (Ubuntu)
+        uses: Jayllyz/free-disk-space@perf/use-rmz
+      - uses: actions/checkout@v4
+      - name: Check Nix flake Nixpkgs inputs
+        uses: DeterminateSystems/flake-checker-action@main
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Build callisto
+        run: |
+          # nix flake check --all-systems
+          nix build .#nixosConfigurations.callisto.config.system.build.toplevel

.github/workflows/lock.yml

@@ -0,0 +1,24 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    # Runs weekly at 00:00 UTC on Sunday
+    - cron: "0 0 * * 0"
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@main
+        with:
+          token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+          pr-title: "deps(flake.lock): update"
+          pr-labels: |
+            dependencies,auto-merge
+          pr-assignees: youwen5

.github/workflows/merge.yml

@@ -0,0 +1,16 @@
+name: auto-merge-labeled
+on:
+  pull_request:
+jobs:
+  auto-merge-labeled:
+    runs-on: ubuntu-latest
+    steps:
+      - id: auto-merge-labeled
+        name: Auto merge labeled
+        uses: isolomak/auto-merge-labeled@v1.0.1
+        with:
+          label: 'lock'
+          commit-title: 'build(lock): update'
+          merge_method: 'squash'
+        env:
+          GITHUB_TOKEN: ${{ secrets.TOKEN }}