.github/workflows/check.yml

@@ -2,6 +2,7 @@ name: Check Build
 
 on:
   workflow_dispatch: # allows manual triggering
+  pull_request:
 
 jobs:
   check:

.github/workflows/update.yml

@@ -6,8 +6,8 @@ on:
     - cron: '33 3 * * 0' # runs weekly on Sunday at 03:33
 
 permissions:
-  contents: write
+  contents: read
-  pull-requests: write
+  pull-request: write
 
 jobs:
   lockfile:
@@ -20,19 +20,13 @@ jobs:
         uses: DeterminateSystems/nix-installer-action@v4
       - name: Check Nixpkgs Inputs
         uses: DeterminateSystems/flake-checker-action@v5
-      - name: Add Nix Cache
-        uses: DeterminateSystems/magic-nix-cache-action@v2
       - name: Update flake.lock
-        uses: DeterminateSystems/update-flake-lock@v19
+        uses: DeterminateSystems/update-flake-lock@v3
         id: update
         with:
           pr-title: "Update flake.lock" # Title of PR to be created
           pr-labels: |                  # Labels to be set on the PR
             dependencies
             automated
-      - name: Check the Flake
-        run: nix flake check
       - name: Enable Pull Request Automerge
         run: gh pr merge --merge --auto ${{ steps.update.outputs.pull-request-number }}
-        env:
-          GH_TOKEN: ${{ github.token }}