ci: disable update-flake in PRs (#14554)

.github/workflows/ci.yaml

@@ -117,38 +117,40 @@ jobs:
         run: |
           echo "${{ toJSON(steps.filter )}}"
 
-  update-flake:
-    needs: changes
-    if: needs.changes.outputs.gomod == 'true'
-    runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-          # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
-          token: ${{ secrets.CDRCI_GITHUB_TOKEN }}
+  # Disabled due to instability. See: https://github.com/coder/coder/issues/14553
+  # Re-enable once the flake hash calculation is stable.
+  # update-flake:
+  #   needs: changes
+  #   if: needs.changes.outputs.gomod == 'true'
+  #   runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
+  #   steps:
+  #     - name: Checkout
+  #       uses: actions/checkout@v4
+  #       with:
+  #         fetch-depth: 1
+  #         # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
+  #         token: ${{ secrets.CDRCI_GITHUB_TOKEN }}
 
-      - name: Setup Go
-        uses: ./.github/actions/setup-go
+  #     - name: Setup Go
+  #       uses: ./.github/actions/setup-go
 
-      - name: Update Nix Flake SRI Hash
-        run: ./scripts/update-flake.sh
+  #     - name: Update Nix Flake SRI Hash
+  #       run: ./scripts/update-flake.sh
 
-      # auto update flake for dependabot
-      - uses: stefanzweifel/git-auto-commit-action@v5
-        if: github.actor == 'dependabot[bot]'
-        with:
-          # Allows dependabot to still rebase!
-          commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
-          commit_user_name: "dependabot[bot]"
-          commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
-          commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"
+  #     # auto update flake for dependabot
+  #     - uses: stefanzweifel/git-auto-commit-action@v5
+  #       if: github.actor == 'dependabot[bot]'
+  #       with:
+  #         # Allows dependabot to still rebase!
+  #         commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
+  #         commit_user_name: "dependabot[bot]"
+  #         commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
+  #         commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"
 
-      # require everyone else to update it themselves
-      - name: Ensure No Changes
-        if: github.actor != 'dependabot[bot]'
-        run: git diff --exit-code
+  #     # require everyone else to update it themselves
+  #     - name: Ensure No Changes
+  #       if: github.actor != 'dependabot[bot]'
+  #       run: git diff --exit-code
 
   lint:
     needs: changes