Skip to content

chore(deps): update module github.com/aws/aws-sdk-go-v2/feature/rds/a… #279

chore(deps): update module github.com/aws/aws-sdk-go-v2/feature/rds/a…

chore(deps): update module github.com/aws/aws-sdk-go-v2/feature/rds/a… #279

name: Update gomod2nix
on:
push:
branches:
- 'renovate/**' # Only run on Renovate branches
- 'dependabot/**'
paths:
- 'go.mod'
- 'go.sum'
permissions:
contents: write
jobs:
gomod2nix:
runs-on: ubuntu-latest
env:
HAS_APP: ${{ secrets.GOMOD2NIX_APP_ID != '' }}
steps:
- name: Generate a token
id: generate-token
# Pushing with GITHUB_TOKEN leaves the PR's CI runs stuck in an
# "approval required" state, so push as a GitHub App instead.
# Skipped on forks without the app; the GITHUB_TOKEN fallback still
# pushes, it just won't re-trigger CI.
if: env.HAS_APP == 'true'
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
client-id: ${{ secrets.GOMOD2NIX_APP_ID }}
private-key: ${{ secrets.GOMOD2NIX_APP_PRIVATE_KEY }}
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
# Use the default ref (the branch that was pushed)
token: ${{ steps.generate-token.outputs.token || secrets.GITHUB_TOKEN }}
- uses: nixbuild/nix-quick-install-action@9f63be77f412a248c9d9a65a4c82cf066cdf8f0c # v35
- name: Install gomod2nix
# Install from the repo's own flake, not upstream `github:nix-community/gomod2nix`.
# The dev/nix overlay builds gomod2nix against the Go version pinned in
# dev/nix/conf.nix (single source of truth, kept in sync with go.mod), so the
# `go mod download` it runs uses the right toolchain. Installing upstream would
# pull gomod2nix's own stale nixpkgs and an older Go, failing on `go 1.26.5`.
run: nix profile install ./dev/nix#gomod2nix
- name: Run gomod2nix
run: gomod2nix
- name: Commit and push changes
uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
with:
commit_message: "chore(nix): update gomod2nix.toml"
file_pattern: gomod2nix.toml