update.yml

on:
  push:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * *"

jobs:
  update:
    runs-on: ubuntu-latest

    permissions:
      contents: write

    steps:
      - uses: actions/checkout@v3
      - uses: DeterminateSystems/nix-installer-action@main

      - run: nix build nixpkgs#cacert
      - run: cp result/etc/ssl/certs/ca-bundle.crt cacert.pem
      - run: rm -rf result

      - uses: stefanzweifel/git-auto-commit-action@v5
        id: commit
        with:
          commit_message: "Automated update"
          commit_author: "Scheduler <github-actions[bot]@users.noreply.github.com>"

      - name: Set Calver Version
        id: "calver"
        uses: Nelyx/action-calver@v1.0.0
        with:
          default_branch: "refs/heads/main"
          format: "YYYY.M.D"
          version_prefix: "v0."

      - uses: rickstaa/action-create-tag@v1
        if: ${{ steps.commit.outputs.changes_detected }}
        with:
          tag: "${{ env.PACKAGE_VERSION }}"