From 1d2bd54b2f2e28c5137160ab7e1b0a434adae7f9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 00:25:05 +0000 Subject: [PATCH] Bump the all-dependencies group with 6 updates Bumps the all-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.11.0` | `0.11.2` | | [neutrons/gh-actions/pkg-install](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/pkg-verify](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/grype](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/publish](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | | [neutrons/gh-actions/pkg-remove](https://github.com/neutrons/gh-actions) | `2.0` | `2.1` | Updates `prefix-dev/setup-pixi` from 0.11.0 to 0.11.2 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](https://github.com/prefix-dev/setup-pixi/compare/9dabb60412d3d2d967a8d682f7ce01317af40514...ad1da6449d9e506fd127fd67ab2d054a769f6a94) Updates `neutrons/gh-actions/pkg-install` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/pkg-verify` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/grype` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/publish` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) Updates `neutrons/gh-actions/pkg-remove` from 2.0 to 2.1 - [Release notes](https://github.com/neutrons/gh-actions/releases) - [Commits](https://github.com/neutrons/gh-actions/compare/eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af...46e28a74c8872901c571e0493d26871afe2662fb) --- updated-dependencies: - dependency-name: prefix-dev/setup-pixi dependency-version: 0.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-install dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-verify dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/grype dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/publish dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: neutrons/gh-actions/pkg-remove dependency-version: '2.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/test_and_deploy.yaml | 18 +++++++++--------- .github/workflows/update-lockfiles.yml | 2 +- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/test_and_deploy.yaml b/.github/workflows/test_and_deploy.yaml index af76b7d..c2d0e06 100644 --- a/.github/workflows/test_and_deploy.yaml +++ b/.github/workflows/test_and_deploy.yaml @@ -28,7 +28,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -66,7 +66,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -91,13 +91,13 @@ jobs: # installed (and micromamba on PATH); pkg-install sets both up. - name: Install built conda package id: install - uses: neutrons/gh-actions/pkg-install@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-install@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: package-name: ${{ env.PKG_NAME }} local-channel: ./local-channel - name: Verify conda package - uses: neutrons/gh-actions/pkg-verify@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-verify@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: package-name: ${{ env.PKG_NAME }} module-name: ${{ env.MODULE_NAME }} @@ -106,7 +106,7 @@ jobs: # Audit the dependencies of the conda package we just installed. SARIF # results are uploaded to GitHub code scanning by the grype action. - name: Scan installed environment with Grype - uses: neutrons/gh-actions/grype@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/grype@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: path: ${{ steps.install.outputs.conda-install-dir }} @@ -129,7 +129,7 @@ jobs: fetch-tags: true - name: Setup Pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. @@ -146,7 +146,7 @@ jobs: name: artifact-conda-package - name: Upload package to anaconda - uses: neutrons/gh-actions/publish@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/publish@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: anaconda-token: ${{ secrets.ANACONDA_TOKEN }} organization: neutrons @@ -154,7 +154,7 @@ jobs: - name: Remove old packages if: github.ref == 'refs/heads/next' - uses: neutrons/gh-actions/pkg-remove@eb7a7c6fcfd0cda1a7b238329afc0afd09a4f4af # v2 + uses: neutrons/gh-actions/pkg-remove@46e28a74c8872901c571e0493d26871afe2662fb # v2 with: anaconda-token: ${{ secrets.ANACONDA_TOKEN }} organization: neutrons @@ -177,7 +177,7 @@ jobs: fetch-tags: true - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: manifest-path: pyproject.toml # Workaround: Dynamic versioning (versioningit) causes lock file version mismatch. diff --git a/.github/workflows/update-lockfiles.yml b/.github/workflows/update-lockfiles.yml index 1d5e99d..4c0c362 100644 --- a/.github/workflows/update-lockfiles.yml +++ b/.github/workflows/update-lockfiles.yml @@ -18,7 +18,7 @@ jobs: # checks out refspec that triggered or the default branch - name: Setup pixi - uses: prefix-dev/setup-pixi@9dabb60412d3d2d967a8d682f7ce01317af40514 # v0.11.0 + uses: prefix-dev/setup-pixi@ad1da6449d9e506fd127fd67ab2d054a769f6a94 # v0.11.2 with: run-install: false