ops(flake-review): only run when needed and allow manual trigger

.github/workflows/flake-review-build.yml

@@ -0,0 +1,37 @@
+name: Flake Review Build
+
+on:
+ pull_request:
+  branches: [master, dev]
+  paths:
+   - ".github/workflows/flake-review-build.yml"
+   - ".github/workflows/flake-review-comment.yml"
+   - "flake.lock"
+   - "flake.nix"
+   - "nix/**"
+   - "**/package.json"
+   - "pnpm-lock.yaml"
+   - "pnpm-workspace.yaml"
+ workflow_dispatch:
+  inputs:
+   pr-url:
+    description: "PR URL to review"
+    type: string
+    required: true
+
+concurrency:
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || inputs.pr-url || github.ref }}
+ cancel-in-progress: true
+
+permissions:
+ contents: read
+
+jobs:
+ build:
+  # https://github.com/ojsef39/flake-review/blob/main/.github/workflows/flake-review-build-reusable.yml
+  uses: ojsef39/flake-review/.github/workflows/flake-review-build-reusable.yml@0.3.0
+  with:
+   flake-review-ref: "0.3.0"
+   packages: "default"
+   matrix: '[{"runner":"macos-latest","systems":"aarch64-darwin","name":"darwin"},{"runner":"ubuntu-latest","systems":"x86_64-linux","name":"linux"}]'
+   pr-url: ${{ inputs.pr-url || github.event.pull_request.html_url }}

.github/workflows/flake-review-comment.yml

@@ -0,0 +1,21 @@
+name: Flake Review Comment
+
+# Triggered when "Flake Review Build" finishes. Runs from master with a writable
+# token so it can post comments even on fork PRs.
+
+on:
+ workflow_run:
+  workflows: ["Flake Review Build"]
+  types: [completed]
+
+permissions:
+ contents: read
+ pull-requests: write
+ actions: read
+
+jobs:
+ comment:
+  # https://github.com/ojsef39/flake-review/blob/main/.github/workflows/flake-review-comment-reusable.yml
+  uses: ojsef39/flake-review/.github/workflows/flake-review-comment-reusable.yml@0.3.0
+  with:
+   flake-review-ref: "0.3.0"

renovate.json

@@ -4,10 +4,11 @@
     {
       "customType": "regex",
       "managerFilePatterns": [
-        "/^\\.github/workflows/flake-review\\.yml$/"
+        "/^\\.github/workflows/flake-review-.*\\.yml$/"
       ],
       "matchStrings": [
-        "flake-review-ref: \"(?<currentValue>[^\"]+)\""
+        "flake-review-ref: \"(?<currentValue>[^\"]+)\"",
+        "ojsef39/flake-review/[^@\\s]+@(?<currentValue>[^\\s]+)"
       ],
       "depNameTemplate": "ojsef39/flake-review",
       "datasourceTemplate": "github-tags"