make uv2nix and pyproject-build-systems updatable by CI

Author: juliankuners

README.md

@@ -7,3 +7,6 @@ To keep your project up to date with the most recent version of this template, w
 ```bash
 cruft create https://github.com/runtimeverification/python-project-template
 ```
+
+### uv2nix
+`uv2nix` and `pyproject-build-systems` should be periodically updated. The `update-version.yml` workflow handles updates of both dependencies, but it is required that the new project and both dependencies are added to `deps-cron.json` in the [devops repository](https://github.com/runtimeverification/devops).

cookiecutter.json

@@ -5,5 +5,8 @@
     "version": "0.1.0",
     "description": "",
     "author_name": "Runtime Verification, Inc.",
-    "author_email": "contact@runtimeverification.com"
+    "author_email": "contact@runtimeverification.com",
+    "_copy_without_render": [
+        ".github/workflows/*.yml"
+    ]
 }

{{cookiecutter.project_slug}}/.github/workflows/update-version.yml

@@ -0,0 +1,50 @@
+---
+name: 'Update Version'
+on:
+  push:
+    branches:
+      - '_update-deps-cron/uv2nix'
+      - '_update-deps-cron/pyproject-build-systems'
+  workflow_dispatch:
+# Stop in progress workflows on the same branch and same workflow to use latest committed code
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  update-versions:
+    name: 'Update Dependency Versions'
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Check out code'
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+          token: ${{ secrets.JENKINS_GITHUB_PAT }}
+          fetch-depth: 0
+      - name: 'Configure GitHub user'
+        run: |
+          git config user.name devops
+          git config user.email devops@runtimeverification.com
+      - name: 'Install Nix'
+        uses: cachix/install-nix-action@v31.2.0
+        with:
+          install_url: https://releases.nixos.org/nix/nix-2.24.12/install
+          extra_nix_config: |
+            substituters = http://cache.nixos.org https://cache.iog.io
+            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - uses: cachix/cachix-action@v16
+        with:
+          name: k-framework
+          authToken: ${{ secrets.CACHIX_PUBLIC_TOKEN }}
+      - name: 'Update Nix flake inputs'
+        run: |
+          UV2NIX_VERSION=$(cat deps/uv2nix)
+          PYPROJECT_BUILD_SYSTEMS_VERSION=$(cat deps/pyproject-build-systems)
+          sed -i 's!    uv2nix.url = "github:pyproject-nix/uv2nix/[a-z0-9\.]*"!    uv2nix.url = "github:pyproject-nix/uv2nix/'"${UV2NIX_VERSION}"'"!' flake.nix
+          sed -i 's!    pyproject-build-systems.url = "github:pyproject-nix/build-system-pkgs/[a-z0-9\.]*"!    pyproject-build-systems.url = "github:pyproject-nix/build-system-pkgs/'"${PYPROJECT_BUILD_SYSTEMS_VERSION}"'"!' flake.nix
+          nix flake update
+          git add flake.nix flake.lock && git commit -m 'flake.{nix,lock}: update Nix derivations' || true
+      - name: 'Push updates'
+        run: git push

{{cookiecutter.project_slug}}/deps/pyproject-build-systems

@@ -0,0 +1 @@
+7dba6dbc73120e15b558754c26024f6c93015dd7

{{cookiecutter.project_slug}}/deps/uv2nix

@@ -0,0 +1 @@
+680e2f8e637bc79b84268949d2f2b2f5e5f1d81c

{{cookiecutter.project_slug}}/flake.nix

@@ -3,27 +3,19 @@
   inputs = {
     nixpkgs.url = "nixpkgs/nixos-unstable";
     flake-utils.url = "github:numtide/flake-utils";
-    pyproject-nix = {
-      url = "github:pyproject-nix/pyproject.nix";
-      inputs.nixpkgs.follows = "uv2nix/nixpkgs";
-      # inputs.uv2nix.follows = "nixpkgs";
-    };
+    uv2nix.url = "github:pyproject-nix/uv2nix/680e2f8e637bc79b84268949d2f2b2f5e5f1d81c";
+    # stale nixpkgs is missing the alias `lib.match` -> `builtins.match`
+    # therefore point uv2nix to a patched nixpkgs, which introduces this alias
+    # this is a temporary solution until nixpkgs us up-to-date again
+    uv2nix.inputs.nixpkgs.url = "github:runtimeverification/nixpkgs/libmatch";
+    # inputs.nixpkgs.follows = "nixpkgs";
+    pyproject-build-systems.url = "github:pyproject-nix/build-system-pkgs/7dba6dbc73120e15b558754c26024f6c93015dd7";
     pyproject-build-systems = {
-      url = "github:pyproject-nix/build-system-pkgs";
-      inputs.pyproject-nix.follows = "pyproject-nix";
-      inputs.uv2nix.follows = "uv2nix";
       inputs.nixpkgs.follows = "uv2nix/nixpkgs";
-      # inputs.uv2nix.follows = "nixpkgs";
-    };
-    uv2nix = {
-      url = "github:pyproject-nix/uv2nix";
-      inputs.pyproject-nix.follows = "pyproject-nix";
-      # stale nixpkgs is missing the alias `lib.match` -> `builtins.match`
-      # therefore point uv2nix to a patched nixpkgs, which introduces this alias
-      # this is a temporary solution until nixpkgs us up-to-date again
-      inputs.nixpkgs.url = "github:runtimeverification/nixpkgs/libmatch";
-      # inputs.uv2nix.follows = "nixpkgs";
+      inputs.uv2nix.follows = "uv2nix";
+      inputs.pyproject-nix.follows = "uv2nix/pyproject-nix";
     };
+    pyproject-nix.follows = "uv2nix/pyproject-nix";
   };
   outputs = { self, nixpkgs, flake-utils, pyproject-nix, pyproject-build-systems, uv2nix }:
   let