From 06697a89f49106f82fed27cbdb43c22e6fbe76be Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Aug 2026 20:56:20 +0000 Subject: [PATCH] build(deps): bump the github-actions-minor-and-patch group across 1 directory with 2 updates Bumps the github-actions-minor-and-patch group with 2 updates in the / directory: [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `prefix-dev/setup-pixi` from 0.10.0 to 0.10.1 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](https://github.com/prefix-dev/setup-pixi/compare/v0.10.0...v0.10.1) Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/0f67c3f4856b2e3261c31976d6725780e5e4c373...4d101475d8b20a2381f78447822ac1eab6504dd8) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-minor-and-patch - dependency-name: prefix-dev/setup-pixi dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-and-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/codeql.yml | 2 +- .github/workflows/coverage.yml | 2 +- .github/workflows/release.yml | 6 +++--- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6b9dc0b..7f9e0d3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -42,7 +42,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Verify controlled core snapshot @@ -85,7 +85,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Configure @@ -113,7 +113,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Configure @@ -145,7 +145,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Verify pinned CMake version @@ -169,7 +169,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Configure @@ -205,7 +205,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Configure diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 33c2546..881fb88 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -46,7 +46,7 @@ jobs: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} packs: ${{ matrix.suppression-pack }} - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 if: matrix.language == 'c-cpp' with: cache: true diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 56341cb..5a549b4 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -20,7 +20,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@v0.10.0 + - uses: prefix-dev/setup-pixi@v0.10.1 with: cache: true - name: Generate Python and native coverage diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5c75d9b..a9f700d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -34,7 +34,7 @@ jobs: grep -Fq \ 'Good "git" signature for netft-release with ' \ <<<"${signature_output}" - - uses: prefix-dev/setup-pixi@a09b6247153796b190642a2b53fac4241043cf6f # v0.10.0 + - uses: prefix-dev/setup-pixi@f00437f565399d418b0acc85936d12c1fb668347 # v0.10.1 with: cache: false - name: Validate release metadata @@ -183,7 +183,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: prefix-dev/setup-pixi@a09b6247153796b190642a2b53fac4241043cf6f # v0.10.0 + - uses: prefix-dev/setup-pixi@f00437f565399d418b0acc85936d12c1fb668347 # v0.10.1 with: cache: false - name: Build and validate sdist @@ -275,7 +275,7 @@ jobs: with: name: release-bundle path: release - - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1 + - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 with: subject-path: release/dist/*