add maint workflows

Author: tek

.github/workflows/maint.yaml

@@ -0,0 +1,50 @@
+name: Maintain release bounds
+
+on: workflow_dispatch
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  maint-run:
+    name: Update release bounds
+    runs-on: ubuntu-latest
+    outputs:
+      results: ${{ steps.maint.outputs.maint }}
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.workflow_token }}
+    - uses: DeterminateSystems/nix-installer-action@v16
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+    - uses: cachix/cachix-action@v15
+      with:
+        name: tek
+    - id: maint
+      name: Run maint
+      run: |
+        export LANG=en_US.UTF-8
+        nix run .#maint -- --pr --fetch --output=json --target=github
+
+  maint-pr:
+    name: Create PR for release bounds updates
+    runs-on: ubuntu-latest
+    needs: maint-run
+    strategy:
+      matrix:
+        package: ${{ fromJSON(needs.maint-run.outputs.results).changes }}
+    steps:
+    - uses: actions/checkout@v4
+    - id: pr
+      name: Create PR
+      run: |
+        gh pr create \
+          --base "${{ matrix.package.baseBranch }}" \
+          --body "${{ matrix.package.message }}" \
+          --title "revision for ${{ matrix.package.package }}" \
+          --head "${{ matrix.package.branch }}"
+      env:
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/revision.yaml

@@ -0,0 +1,28 @@
+name: Publish revision for updated bounds
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [closed]
+    branches: ['release/**']
+
+jobs:
+  revision:
+    name: Publish revision
+    if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@v16
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+    - uses: cachix/cachix-action@v15
+      with:
+        name: tek
+        signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+    - id: revision
+      name: Publish revision
+      run: >
+        nix run .#revision -- --fetch
+          --hackage="hackage.haskell.org:password:${{ secrets.hackage_password }}"
+          --branch "${{ github.base_ref }}" --trace

flake.lock

@@ -12,6 +12,7 @@
       src = ./packages/exon;
 
       cabal = {
+        language = "GHC2021";
         license = "BSD-2-Clause-Patent";
         license-file = "LICENSE";
         author = "Torsten Schmits";
@@ -65,6 +66,11 @@
       latest.compiler = "ghc912";
     };
 
+    hackage.repos."hackage.haskell.org" = {
+      user = "tek";
+      password = "";
+    };
+
     envs.dev.overrides = {bench, ...}: {
       exon = bench;
     };
@@ -92,5 +98,9 @@
       th-abstraction = hackage "0.7.1.0" "09wr7x9bpzyrys8id1mavk9wvqhh2smxdkfwi82kpcycm7a1z7sx";
     };
 
+    ui.experimental.managed-maint = true;
+
+    internal.hixCli.dev = true;
+
   });
 }

flake.nix

@@ -61,8 +61,10 @@ library
       LiberalTypeSynonyms
       MonadComprehensions
       MultiWayIf
+      NoFieldSelectors
       OverloadedLabels
       OverloadedLists
+      OverloadedRecordDot
       OverloadedStrings
       PackageImports
       PartialTypeSignatures
@@ -78,8 +80,6 @@ library
       UndecidableInstances
       UnicodeSyntax
       ViewPatterns
-      OverloadedRecordDot
-      NoFieldSelectors
   ghc-options: -Wall -Widentities -Wincomplete-uni-patterns -Wmissing-deriving-strategies -Wredundant-constraints -Wunused-type-patterns -Wunused-packages
   build-depends:
       base >=4.16.4.0 && <4.22
@@ -123,8 +123,10 @@ test-suite exon-test
       LiberalTypeSynonyms
       MonadComprehensions
       MultiWayIf
+      NoFieldSelectors
       OverloadedLabels
       OverloadedLists
+      OverloadedRecordDot
       OverloadedStrings
       PackageImports
       PartialTypeSignatures
@@ -140,8 +142,6 @@ test-suite exon-test
       UndecidableInstances
       UnicodeSyntax
       ViewPatterns
-      OverloadedRecordDot
-      NoFieldSelectors
   ghc-options: -threaded -rtsopts -with-rtsopts=-N -Wall -Widentities -Wincomplete-uni-patterns -Wmissing-deriving-strategies -Wredundant-constraints -Wunused-type-patterns -Wunused-packages
   build-depends:
       base >=4.16.4.0 && <4.22
@@ -179,8 +179,10 @@ benchmark exon-bench
       LiberalTypeSynonyms
       MonadComprehensions
       MultiWayIf
+      NoFieldSelectors
       OverloadedLabels
       OverloadedLists
+      OverloadedRecordDot
       OverloadedStrings
       PackageImports
       PartialTypeSignatures
@@ -196,8 +198,6 @@ benchmark exon-bench
       UndecidableInstances
       UnicodeSyntax
       ViewPatterns
-      OverloadedRecordDot
-      NoFieldSelectors
   ghc-options: -Wall -Widentities -Wincomplete-uni-patterns -Wmissing-deriving-strategies -Wredundant-constraints -Wunused-type-patterns -Wunused-packages
   build-depends:
       base >=4.16.4.0 && <4.22