From 5c3236c091b6739bd962ba117bff1d29610c5d3f Mon Sep 17 00:00:00 2001
From: Matt Sturgeon <matt@sturgeon.me.uk>
Date: Wed, 2 Jul 2025 11:00:11 +0100
Subject: [PATCH] ci/pr-merged: use locked nixpkgs

---
 .github/workflows/pr-merged.yml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-merged.yml b/.github/workflows/pr-merged.yml
index 82bae9aa..0091e736 100644
--- a/.github/workflows/pr-merged.yml
+++ b/.github/workflows/pr-merged.yml
@@ -73,13 +73,24 @@ jobs:
         id: checkout
         uses: actions/checkout@v4
         with:
-          sparse-checkout: flake/dev/diff-plugins.py
+          sparse-checkout: |
+            flake/dev/diff-plugins.py
+            flake.lock
           sparse-checkout-cone-mode: false
 
+      - name: Get nixpkgs
+        id: nixpkgs
+        run: |
+          jq --raw-output --exit-status '
+            .nodes[.nodes[.root].inputs.nixpkgs].locked
+            | "https://github.com/\(.owner)/\(.repo)/archive/\(.rev).tar.gz"
+            | "url=\(.)"
+          ' flake.lock >> "$GITHUB_OUTPUT"
+
       - name: Install Nix
         uses: cachix/install-nix-action@v31
         with:
-          nix_path: nixpkgs=channel:nixpkgs-unstable
+          nix_path: nixpkgs=${{ steps.nixpkgs.outputs.url }}
           extra_nix_config: |
             accept-flake-config = true