use managed dependencies

tek · May 31, 2024 · f5bc33b · f5bc33b
1 parent 1c7c920
commit f5bc33b
Show file tree

Hide file tree

Showing 9 changed files with 182 additions and 331 deletions.
diff --git a/.github/workflows/bump.yaml b/.github/workflows/bump.yaml
@@ -0,0 +1,29 @@
+name: bump
+on:
+  workflow_dispatch:
+  schedule:
+  - cron: '45 6 * * 6'
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+jobs:
+  bump-pr:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@main
+      with:
+        extra-conf: |
+          access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+    - uses: cachix/cachix-action@v14
+      with:
+        name: tek
+        signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+    - id: bounds
+      run: nix run .#bump -- --output=ga-pr --build-timeout=3600
+    - name: pr
+      if: steps.bounds.outputs.commit-message
+      uses: peter-evans/create-pull-request@v5
+      with: ${{ steps.bounds.outputs }}
diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
@@ -0,0 +1,22 @@
+name: Flake checks
+on: [push, pull_request]
+permissions:
+  contents: read
+  id-token: write
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          extra-conf: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+            extra-substituters = https://tek.cachix.org
+            extra-trusted-public-keys = tek.cachix.org-1:+sdc73WFq8aEKnrVv5j/kuhmnW2hQJuqdPJF5SnaCBk=
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - uses: cachix/cachix-action@v14
+        with:
+          name: tek
+          signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+      - run: nix flake check
diff --git a/.github/workflows/lower-init.yaml b/.github/workflows/lower-init.yaml
@@ -0,0 +1,26 @@
+name: lower-init
+on: workflow_dispatch
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+jobs:
+  lower-pr:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@main
+      with:
+        extra-conf: |
+          access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+    - uses: cachix/cachix-action@v14
+      with:
+        name: tek
+        signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+    - id: bounds
+      run: nix run .#lower.init -- --output=ga-pr --build-timeout=3600
+    - name: pr
+      if: steps.bounds.outputs.commit-message
+      uses: peter-evans/create-pull-request@v5
+      with: ${{ steps.bounds.outputs }}
diff --git a/.github/workflows/lower-optimize.yaml b/.github/workflows/lower-optimize.yaml
@@ -0,0 +1,26 @@
+name: lower-optimize
+on: workflow_dispatch
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+jobs:
+  lower-pr:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@main
+      with:
+        extra-conf: |
+          access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+    - uses: cachix/cachix-action@v14
+      with:
+        name: tek
+        signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+    - id: bounds
+      run: nix run .#lower.optimize -- --output=ga-pr --build-timeout=3600
+    - name: pr
+      if: steps.bounds.outputs.commit-message
+      uses: peter-evans/create-pull-request@v5
+      with: ${{ steps.bounds.outputs }}
diff --git a/.github/workflows/lower.yaml b/.github/workflows/lower.yaml
@@ -0,0 +1,26 @@
+name: lower
+on: [workflow_dispatch, pull_request, push]
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+jobs:
+  lower-pr:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@main
+      with:
+        extra-conf: |
+          access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+    - uses: cachix/cachix-action@v14
+      with:
+        name: tek
+        signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+    - id: bounds
+      run: nix run .#lower -- --output=ga-pr --build-timeout=3600
+    - name: pr
+      if: steps.bounds.outputs.commit-message
+      uses: peter-evans/create-pull-request@v5
+      with: ${{ steps.bounds.outputs }}
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -5,34 +5,40 @@
 
   outputs = {hix, ...}: hix.lib.pro {
     ghcVersions = ["ghc92" "ghc94" "ghc96" "ghc98"];
+    compat.versions = ["ghc94" "ghc96"];
     hackage.versionFile = "ops/version.nix";
     gen-overrides.enable = true;
-
-    envs.dev.overrides = {hackage, jailbreak, ...}: {
-      hedgehog = hackage "1.4" "1qxxhs720im0wpa5lsca0l8qsfmhbyphd1aq01nv96v29lgv795b";
-      tasty-hedgehog = hackage "1.4.0.2" "04kg2qdnsqzzmj3xggy2jcgidlp21lsjkz4sfnbq7b1yhrv2vbbc";
+    managed = {
+      enable = true;
+      lower.enable = true;
+      latest.compiler = "ghc98";
     };
 
-    envs.ghc98.overrides = {super, hackage, jailbreak, notest, ...}: {
-      criterion = jailbreak;
-      hedgehog = jailbreak;
-      tasty-hedgehog = jailbreak;
-      aeson = hackage "2.2.1.0" "1y6pc2nj4y41zmk9dsa11r2l8pdn1mr60fbmbjg25pbnzz3b38j2";
-      semigroupoids = jailbreak;
-      unliftio-core = jailbreak;
-      unliftio = jailbreak;
-      lifted-base = notest;
-      bifunctors = jailbreak (hackage "5.6.1" "12k2v7334brn4v7yg3vjd6yv6sh4pzffc3d89qgc2llw7ncv4krw");
-      incipit-base = hackage "0.6.0.0" "1hck35yfy0dcgimgnd90w02zvv7x7k456bljrbx2mwxalnhav9gf";
-      th-abstraction = hackage "0.6.0.0" "1w07ysxrbjm1rhlg9nhlq5y72s5wr4vqmcy99chvyb56wka0grbq";
-      tagged = hackage "0.8.8" "1m2bcf0sr1z28gnl2k8xibcsv80kd35816c9c7ji045jbxg27xd9";
-      # type-errors = jailbreak;
-      hspec = super.hspec_2_11_6;
-      hspec-core = super.hspec_2_11_6;
-      hspec-meta = super.hspec_2_11_6;
-      hspec-discover = super.hspec_2_11_6;
-      doctest = hackage "0.22.2" "193vrmxcnn9fxn7bc6y7jg8qwr13z9a26qqn0c294mn67il18cqn";
-    };
+    # envs.dev.overrides = {hackage, jailbreak, ...}: {
+    #   hedgehog = hackage "1.4" "1qxxhs720im0wpa5lsca0l8qsfmhbyphd1aq01nv96v29lgv795b";
+    #   tasty-hedgehog = hackage "1.4.0.2" "04kg2qdnsqzzmj3xggy2jcgidlp21lsjkz4sfnbq7b1yhrv2vbbc";
+    # };
+
+    # envs.ghc98.overrides = {super, hackage, jailbreak, notest, ...}: {
+    #   criterion = jailbreak;
+    #   hedgehog = jailbreak;
+    #   tasty-hedgehog = jailbreak;
+    #   aeson = hackage "2.2.1.0" "1y6pc2nj4y41zmk9dsa11r2l8pdn1mr60fbmbjg25pbnzz3b38j2";
+    #   semigroupoids = jailbreak;
+    #   unliftio-core = jailbreak;
+    #   unliftio = jailbreak;
+    #   lifted-base = notest;
+    #   bifunctors = jailbreak (hackage "5.6.1" "12k2v7334brn4v7yg3vjd6yv6sh4pzffc3d89qgc2llw7ncv4krw");
+    #   incipit-base = hackage "0.6.0.0" "1hck35yfy0dcgimgnd90w02zvv7x7k456bljrbx2mwxalnhav9gf";
+    #   th-abstraction = hackage "0.6.0.0" "1w07ysxrbjm1rhlg9nhlq5y72s5wr4vqmcy99chvyb56wka0grbq";
+    #   tagged = hackage "0.8.8" "1m2bcf0sr1z28gnl2k8xibcsv80kd35816c9c7ji045jbxg27xd9";
+    #   # type-errors = jailbreak;
+    #   hspec = super.hspec_2_11_6;
+    #   hspec-core = super.hspec_2_11_6;
+    #   hspec-meta = super.hspec_2_11_6;
+    #   hspec-discover = super.hspec_2_11_6;
+    #   doctest = hackage "0.22.2" "193vrmxcnn9fxn7bc6y7jg8qwr13z9a26qqn0c294mn67il18cqn";
+    # };
 
     packages.exon = {
       src = ./packages/exon;