diff --git a/.forgejo/workflows/npins-update.yaml b/.forgejo/workflows/npins-update.yaml
index 3ff96f6..a1e2c65 100644
--- a/.forgejo/workflows/npins-update.yaml
+++ b/.forgejo/workflows/npins-update.yaml
@@ -24,17 +24,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update agenix'
         GIT_UPDATE_BRANCH: npins-updates/agenix
       name: Open a PR if updates are present
-      run: "npins update agenix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update agenix\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   arkheon:
     runs-on: nix
     steps:
@@ -53,17 +54,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update arkheon'
         GIT_UPDATE_BRANCH: npins-updates/arkheon
       name: Open a PR if updates are present
-      run: "npins update arkheon\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update arkheon\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   cas-eleves:
     runs-on: nix
     steps:
@@ -82,17 +84,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update cas-eleves'
         GIT_UPDATE_BRANCH: npins-updates/cas-eleves
       name: Open a PR if updates are present
-      run: "npins update cas-eleves\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update cas-eleves\"\n\nif [ ! -z \"
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   cgroup-exporter:
     runs-on: nix
     steps:
@@ -111,17 +114,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update cgroup-exporter'
         GIT_UPDATE_BRANCH: npins-updates/cgroup-exporter
       name: Open a PR if updates are present
-      run: "npins update cgroup-exporter\n\nif [ ! -z \"$(git diff --name-only)\"
-        ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\
-        \n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update cgroup-exporter\"\n\nif [ ! -z
+        \"$(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   colmena:
     runs-on: nix
     steps:
@@ -140,17 +144,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update colmena'
         GIT_UPDATE_BRANCH: npins-updates/colmena
       name: Open a PR if updates are present
-      run: "npins update colmena\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update colmena\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   dgsi:
     runs-on: nix
     steps:
@@ -169,17 +174,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update dgsi'
         GIT_UPDATE_BRANCH: npins-updates/dgsi
       name: Open a PR if updates are present
-      run: "npins update dgsi\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n \
-        \ echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n \
-        \ if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update dgsi\"\n\nif [ ! -z \"$(git diff
+        --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\
+        \n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   disko:
     runs-on: nix
     steps:
@@ -198,17 +204,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update disko'
         GIT_UPDATE_BRANCH: npins-updates/disko
       name: Open a PR if updates are present
-      run: "npins update disko\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update disko\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   dns_nix:
     runs-on: nix
     steps:
@@ -227,17 +234,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update dns.nix'
         GIT_UPDATE_BRANCH: npins-updates/dns.nix
       name: Open a PR if updates are present
-      run: "npins update dns.nix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update dns.nix\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   git-hooks:
     runs-on: nix
     steps:
@@ -256,17 +264,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update git-hooks'
         GIT_UPDATE_BRANCH: npins-updates/git-hooks
       name: Open a PR if updates are present
-      run: "npins update git-hooks\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update git-hooks\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   kadenios:
     runs-on: nix
     steps:
@@ -285,17 +294,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update kadenios'
         GIT_UPDATE_BRANCH: npins-updates/kadenios
       name: Open a PR if updates are present
-      run: "npins update kadenios\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update kadenios\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   kahulm:
     runs-on: nix
     steps:
@@ -314,17 +324,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update kahulm'
         GIT_UPDATE_BRANCH: npins-updates/kahulm
       name: Open a PR if updates are present
-      run: "npins update kahulm\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update kahulm\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   kat-pkgs:
     runs-on: nix
     steps:
@@ -343,17 +354,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update kat-pkgs'
         GIT_UPDATE_BRANCH: npins-updates/kat-pkgs
       name: Open a PR if updates are present
-      run: "npins update kat-pkgs\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update kat-pkgs\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   liminix:
     runs-on: nix
     steps:
@@ -372,17 +384,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update liminix'
         GIT_UPDATE_BRANCH: npins-updates/liminix
       name: Open a PR if updates are present
-      run: "npins update liminix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update liminix\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   linkal:
     runs-on: nix
     steps:
@@ -401,17 +414,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update linkal'
         GIT_UPDATE_BRANCH: npins-updates/linkal
       name: Open a PR if updates are present
-      run: "npins update linkal\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update linkal\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   lix:
     runs-on: nix
     steps:
@@ -430,17 +444,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update lix'
         GIT_UPDATE_BRANCH: npins-updates/lix
       name: Open a PR if updates are present
-      run: "npins update lix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n  echo
-        \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n  if [ -n
-        \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n    git push
-        --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\n    git push
-        -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the server with the
-        cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update lix\"\n\nif [ ! -z \"$(git diff
+        --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\
+        \n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   lix-module:
     runs-on: nix
     steps:
@@ -459,17 +474,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update lix-module'
         GIT_UPDATE_BRANCH: npins-updates/lix-module
       name: Open a PR if updates are present
-      run: "npins update lix-module\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update lix-module\"\n\nif [ ! -z \"
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   lon:
     runs-on: nix
     steps:
@@ -488,17 +504,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update lon'
         GIT_UPDATE_BRANCH: npins-updates/lon
       name: Open a PR if updates are present
-      run: "npins update lon\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n  echo
-        \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n  if [ -n
-        \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n    git push
-        --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\n    git push
-        -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the server with the
-        cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update lon\"\n\nif [ ! -z \"$(git diff
+        --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\
+        \n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   metis:
     runs-on: nix
     steps:
@@ -517,17 +534,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update metis'
         GIT_UPDATE_BRANCH: npins-updates/metis
       name: Open a PR if updates are present
-      run: "npins update metis\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update metis\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   microvm_nix:
     runs-on: nix
     steps:
@@ -546,17 +564,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update microvm.nix'
         GIT_UPDATE_BRANCH: npins-updates/microvm.nix
       name: Open a PR if updates are present
-      run: "npins update microvm.nix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update microvm.nix\"\n\nif [ ! -z \"\
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nix-actions:
     runs-on: nix
     steps:
@@ -575,17 +594,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nix-actions'
         GIT_UPDATE_BRANCH: npins-updates/nix-actions
       name: Open a PR if updates are present
-      run: "npins update nix-actions\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nix-actions\"\n\nif [ ! -z \"\
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nix-modules:
     runs-on: nix
     steps:
@@ -604,17 +624,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nix-modules'
         GIT_UPDATE_BRANCH: npins-updates/nix-modules
       name: Open a PR if updates are present
-      run: "npins update nix-modules\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nix-modules\"\n\nif [ ! -z \"\
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nix-pkgs:
     runs-on: nix
     steps:
@@ -633,17 +654,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nix-pkgs'
         GIT_UPDATE_BRANCH: npins-updates/nix-pkgs
       name: Open a PR if updates are present
-      run: "npins update nix-pkgs\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nix-pkgs\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nix-reuse:
     runs-on: nix
     steps:
@@ -662,17 +684,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nix-reuse'
         GIT_UPDATE_BRANCH: npins-updates/nix-reuse
       name: Open a PR if updates are present
-      run: "npins update nix-reuse\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nix-reuse\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nixos-24_05:
     runs-on: nix
     steps:
@@ -691,17 +714,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nixos-24.05'
         GIT_UPDATE_BRANCH: npins-updates/nixos-24.05
       name: Open a PR if updates are present
-      run: "npins update nixos-24.05\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nixos-24.05\"\n\nif [ ! -z \"\
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nixos-24_11:
     runs-on: nix
     steps:
@@ -720,17 +744,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nixos-24.11'
         GIT_UPDATE_BRANCH: npins-updates/nixos-24.11
       name: Open a PR if updates are present
-      run: "npins update nixos-24.11\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nixos-24.11\"\n\nif [ ! -z \"\
+        $(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nixos-generators:
     runs-on: nix
     steps:
@@ -749,17 +774,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nixos-generators'
         GIT_UPDATE_BRANCH: npins-updates/nixos-generators
       name: Open a PR if updates are present
-      run: "npins update nixos-generators\n\nif [ ! -z \"$(git diff --name-only)\"\
-        \ ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\n  git add
-        npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nixos-generators\"\n\nif [ !
+        -z \"$(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   nixos-unstable:
     runs-on: nix
     steps:
@@ -778,17 +804,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update nixos-unstable'
         GIT_UPDATE_BRANCH: npins-updates/nixos-unstable
       name: Open a PR if updates are present
-      run: "npins update nixos-unstable\n\nif [ ! -z \"$(git diff --name-only)\" ];
-        then\n  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\
-        \n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update nixos-unstable\"\n\nif [ ! -z
+        \"$(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   signal-irc-bridge:
     runs-on: nix
     steps:
@@ -807,17 +834,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update signal-irc-bridge'
         GIT_UPDATE_BRANCH: npins-updates/signal-irc-bridge
       name: Open a PR if updates are present
-      run: "npins update signal-irc-bridge\n\nif [ ! -z \"$(git diff --name-only)\"\
-        \ ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\n  git add
-        npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update signal-irc-bridge\"\n\nif [ !
+        -z \"$(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing
+        updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n\
+        \    git commit --amend --no-edit\n    git push --force\n  else\n    git commit
+        --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   stateless-uptime-kuma:
     runs-on: nix
     steps:
@@ -836,17 +864,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update stateless-uptime-kuma'
         GIT_UPDATE_BRANCH: npins-updates/stateless-uptime-kuma
       name: Open a PR if updates are present
-      run: "npins update stateless-uptime-kuma\n\nif [ ! -z \"$(git diff --name-only)\"\
-        \ ]; then\n  echo \"[+] Changes detected, pushing updates.\"\n\n  git add
-        npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update stateless-uptime-kuma\"\n\nif
+        [ ! -z \"$(git diff --name-only)\" ]; then\n  echo \"[+] Changes detected,
+        pushing updates.\"\n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ];
+        then\n    git commit --amend --no-edit\n    git push --force\n  else\n   \
+        \ git commit --message \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\
+        \n  fi\n\n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
   wp4nix:
     runs-on: nix
     steps:
@@ -865,17 +894,18 @@ jobs:
         COMMIT_MESSAGE: 'chore(npins): Update wp4nix'
         GIT_UPDATE_BRANCH: npins-updates/wp4nix
       name: Open a PR if updates are present
-      run: "npins update wp4nix\n\nif [ ! -z \"$(git diff --name-only)\" ]; then\n\
-        \  echo \"[+] Changes detected, pushing updates.\"\n\n  git add npins\n\n\
-        \  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit --amend --no-edit\n\
-        \    git push --force\n  else\n    git commit --message \"$COMMIT_MESSAGE\"\
-        \n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\n  # Connect to the
-        server with the cli\n  tea login add -n dgnum-chores -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN
-        }}\" -u https://git.dgnum.eu\n\n  # Create a pull request if needed\n  # i.e.
-        no PR with the same title exists\n  if [ -z $(tea pr ls -f='head' -o simple
-        | grep \"$GIT_UPDATE_BRANCH\") ]; then\n    tea pr create --description \"\
-        Automatic npins update\" --title \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\
-        \n  fi\nelif [ -n \"$EXISTING_BRANCH\" ]; then\n  git push --force\nfi\n"
+      run: "nix-shell shell.nix --run \"npins update wp4nix\"\n\nif [ ! -z \"$(git
+        diff --name-only)\" ]; then\n  echo \"[+] Changes detected, pushing updates.\"\
+        \n\n  git add npins\n\n  if [ -n \"$EXISTING_BRANCH\" ]; then\n    git commit
+        --amend --no-edit\n    git push --force\n  else\n    git commit --message
+        \"$COMMIT_MESSAGE\"\n    git push -u origin \"$GIT_UPDATE_BRANCH\"\n  fi\n\
+        \n  # Connect to the server with the cli\n  tea login add -n dgnum-chores
+        -t \"${{ secrets.TEA_DGNUM_CHORES_TOKEN }}\" -u https://git.dgnum.eu\n\n \
+        \ # Create a pull request if needed\n  # i.e. no PR with the same title exists\n\
+        \  if [ -z $(tea pr ls -f='head' -o simple | grep \"$GIT_UPDATE_BRANCH\")
+        ]; then\n    tea pr create --description \"Automatic npins update\" --title
+        \"$COMMIT_MESSAGE\" --head \"$GIT_UPDATE_BRANCH\"\n  fi\nelif [ -n \"$EXISTING_BRANCH\"\
+        \ ]; then\n  git push --force\nfi\n"
 name: Update dependencies
 on:
   schedule:
diff --git a/workflows/npins-update.nix b/workflows/npins-update.nix
index 4d04732..6e577b7 100644
--- a/workflows/npins-update.nix
+++ b/workflows/npins-update.nix
@@ -61,7 +61,7 @@ in
           name = "Open a PR if updates are present";
           run = # bash
             ''
-              npins update ${name}
+              nix-shell shell.nix --run "npins update ${name}"
 
               if [ ! -z "$(git diff --name-only)" ]; then
                 echo "[+] Changes detected, pushing updates."