diff --git a/.forgejo/workflows/publish.yaml b/.forgejo/workflows/publish.yaml
index 28e1eca..52d7d8f 100644
--- a/.forgejo/workflows/publish.yaml
+++ b/.forgejo/workflows/publish.yaml
@@ -6,7 +6,6 @@ on:
       - main
   schedule:
     - cron: "0 0 * * 1,3,5"
-  workflow_dispatch: {}
 
 jobs:
   build:
@@ -18,7 +17,7 @@ jobs:
     steps:
       - name: pre-requisites
         run: |
-          nix-env -iA nixpkgs.docker nixpkgs.nodejs_20 nixpkgs.gnused nixpkgs.coreutils && mkdir -p ~/.config/nix && echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf
+          nix-env -iA nixpkgs.docker nixpkgs.podman nixpkgs.nodejs_20 nixpkgs.gnused nixpkgs.coreutils && mkdir -p ~/.config/nix && echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf
       - name: checkout
         uses: actions/checkout@v4
         with:
@@ -26,7 +25,7 @@ jobs:
       - name: nix package names
         id: pkgs
         run: |
-          echo "pkgs-name=${{ matrix.container }}-${{ matrix.version }}" | tr -d . >>"${GITHUB_OUTPUT}""
+          echo "pkgs-name=${{ matrix.container }}-${{ matrix.version }}" | tr -d . >>"${GITHUB_OUTPUT}"
       - name: build
         uses: actions/nix/build@main
         with:
@@ -34,4 +33,4 @@ jobs:
           out-link: ${{ steps.pkgs.outputs.pkgs-name }}
       - name: load image into docker
         run: |
-          docker load < ${{ steps.pkg.outputs.pkg-name }}
+          podman load < ${{ steps.pkgs.outputs.pkgs-name }}
diff --git a/.forgejo/workflows/update.yaml b/.forgejo/workflows/update.yaml
new file mode 100644
index 0000000..16596aa
--- /dev/null
+++ b/.forgejo/workflows/update.yaml
@@ -0,0 +1,19 @@
+name: scheduled flake.lock update
+on:
+  schedule:
+    - cron: "0 0 * * 0,2,4"
+  workflow_dispatch: {}
+
+jobs:
+  flake-lock-update:
+    runs-on: nixos-latest
+    steps:
+      - run: nix-env -iA nixpkgs.nodejs_20 nixpkgs.gnused nixpkgs.coreutils
+      - run: mkdir -p ~/.config/nix && echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf
+      - uses: actions/checkout@v4
+        with:
+          ref: 'main'
+      - uses: actions/nix-flake-update-pr.git@main
+        with:
+          token: ${{ secrets.FORGEJO_PR_TOKEN }}
+          author-email: flake@flyinggecko.org