name: "Building Nixpkgs lib-tests"

on:
  pull_request:
    paths:
      - .github/workflows/lib-tests.yml
  pull_request_target:
    paths:
      - 'lib/**'
      - 'maintainers/**'

permissions: {}

jobs:
  nixpkgs-lib-tests:
    name: nixpkgs-lib-tests
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          sparse-checkout: .github/actions
      - name: Check if the PR can be merged and checkout the merge commit
        uses: ./.github/actions/get-merge-commit
        with:
          merged-as-untrusted: true

      - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31
        with:
          extra_nix_config: sandbox = true

      - name: Building Nixpkgs lib-tests
        run: |
          nix-build untrusted/ci -A lib-tests