From b4d9bfb9f17c7bffb3c59ef018c4e60811662d44 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 00:23:31 +0000 Subject: [PATCH] Bump the all-dependencies group across 1 directory with 8 updates Bumps the all-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | | [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.11.0` | `0.11.2` | | [neutrons/gh-actions/pkg-install](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/pkg-verify](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/grype](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/publish](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/pkg-remove](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.2` | `1.14.3` | Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0) Updates `prefix-dev/setup-pixi` from 0.11.0 to 0.11.2 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](https://github.com/prefix-dev/setup-pixi/compare/9dabb60412d3d2d967a8d682f7ce01317af40514...ad1da6449d9e506fd127fd67ab2d054a769f6a94) Updates `neutrons/gh-actions/pkg-install` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/pkg-verify` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/grype` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/publish` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/pkg-remove` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `pypa/gh-action-pypi-publish` from 1.14.2 to 1.14.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33...7245906fb61fa33a13554f9d5fb856fe61758086) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: prefix-dev/setup-pixi dependency-version: 0.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-install dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-verify dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/grype dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/publish dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-remove dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/copilot-setup-steps.yml | 2 +- .github/workflows/test_and_deploy.yaml | 20 ++++++++++---------- .github/workflows/update-lockfiles.yml | 2 +- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index b01d533..b582b31 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -33,6 +33,6 @@ jobs: # this will install pre-commit into a python environment steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 - run: python -m pip install pre-commit shell: bash diff --git a/.github/workflows/test_and_deploy.yaml b/.github/workflows/test_and_deploy.yaml index af76b7d..f897c5d 100644 --- a/.github/workflows/test_and_deploy.yaml +++ b/.github/workflows/test_and_deploy.yaml @@ -28,7 +28,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -66,7 +66,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -91,13 +91,13 @@ jobs: # installed (and micromamba on PATH); pkg-install sets both up. - name: Install built conda package id: install - uses: neutrons/gh-actions/pkg-install@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-install@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: package-name: ${{ env.PKG_NAME }} local-channel: ./local-channel - name: Verify conda package - uses: neutrons/gh-actions/pkg-verify@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-verify@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: package-name: ${{ env.PKG_NAME }} module-name: ${{ env.MODULE_NAME }} @@ -106,7 +106,7 @@ jobs: # Audit the dependencies of the conda package we just installed. SARIF # results are uploaded to GitHub code scanning by the grype action. - name: Scan installed environment with Grype - uses: neutrons/gh-actions/grype@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/grype@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: path: ${{ steps.install.outputs.conda-install-dir }} @@ -129,7 +129,7 @@ jobs: fetch-tags: true - name: Setup Pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -146,7 +146,7 @@ jobs: name: artifact-conda-package - name: Upload package to anaconda - uses: neutrons/gh-actions/publish@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/publish@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: anaconda-token: ${{ secrets.ANACONDA_TOKEN }} organization: neutrons @@ -154,7 +154,7 @@ jobs: - name: Remove old packages if: github.ref == 'refs/heads/next' - uses: neutrons/gh-actions/pkg-remove@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-remove@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: anaconda-token: ${{ secrets.ANACONDA_TOKEN }} organization: neutrons @@ -177,7 +177,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -199,4 +199,4 @@ jobs: # publish your distributions here (need to setup on PyPI first) - name: Publish package distributions to PyPI if: startsWith(github.ref, 'refs/tags/v') - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 diff --git a/.github/workflows/update-lockfiles.yml b/.github/workflows/update-lockfiles.yml index 1d5e99d..4c0c362 100644 --- a/.github/workflows/update-lockfiles.yml +++ b/.github/workflows/update-lockfiles.yml @@ -18,7 +18,7 @@ jobs: # checks out refspec that triggered or the default branch - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: run-install: false