Skip to content

Bump the dependencies group across 1 directory with 3 updates - #105

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dependencies-b20b5537ce
Closed

Bump the dependencies group across 1 directory with 3 updates#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dependencies-b20b5537ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 3 updates in the / directory: actions/checkout, conda-incubator/setup-miniconda and prefix-dev/setup-pixi.

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates conda-incubator/setup-miniconda from 3 to 4

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 4.0.0

Breaking Changes

  • #459: Upgrade action runtime to Node.js 24.x (requires runners with Node 24 support; this is the reason for the v4 major bump)
  • #450: Switch action build to ESM (for @actions/exec v3)

Features and Enhancements

  • #469: Add conda-init input to optionally skip conda init and document activation for restricted environments
  • #482: Add channels parsing utility and URL validation
  • #481: Enable stricter TypeScript checks and typing
  • #480: Add more tests, increase coverage, add Codecov integration and coverage badge
  • #479: Add TypeDoc-based API docs, generation and checks; configure GitHub Pages and Netlify previews

Fixes

  • #465: Fix double channel configuration being applied
  • #467: Speed up Windows post-run cleanup by moving the extracted packages directory instead of removing files one by one
  • #470: Fix name-version-build syntax expansion and add tests
  • #475: Split shell init and activation of the test environment to remove spurious warning
  • #498: Skip Netlify preview for Dependabot PRs

Performance

  • #486: Remove HTML index scraping for Miniconda version validation
  • #487: Parallelize Windows takeown calls with Promise.all
  • #488: Replace isDefaultEnvironment subprocess with local YAML reads
  • #489: Replace conda config subprocesses with direct .condarc YAML writes

Tasks and Maintenance

  • #444: Bump conda-incubator/setup-miniconda from 3.2.0 to 3.3.0
  • #445: Bump actions/checkout from 6.0.1 to 6.0.2
  • #449: Bump @​actions/exec from 2.0.0 to 3.0.0
  • #456, #484, #491: Bump actions/upload-artifact
  • #460: Bump actions/download-artifact from 7.0.0 to 8.0.1
  • #464: Update dependencies for actions and packages
  • #466: Bump @​actions/tool-cache from 2.0.2 to 4.0.0
  • #473: Bump flatted from 3.2.9 to 3.4.2
  • #476: Bump picomatch
  • #477: Bump conda-incubator/installer from 0.1.0 to 0.1.1
  • #485: Bump vite from 8.0.0 to 8.0.8
  • #492: Bump actions/upload-pages-artifact from 3 to 5

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v4.0.1 (2026-04-24)

Fixes

  • Fix MultipleKeysError on conda 25.11+ when a user-supplied condarc-file already declares auto_activate: now only one of auto_activate / auto_activate_base is written to .condarc, preferring whichever key the user's existing condarc uses.
  • Add auto_activate to the boolean coercion set so its value is serialized as a YAML boolean when it is the chosen canonical key.
  • Add local_repodata_ttl to KNOWN_CONDARC_KEYS to silence a spurious "Unrecognized condarc key" warning for a valid conda key.
Commits
  • 8ee1f36 Fix MultipleKeysError when user condarc declares auto_activate (#500)
  • bce0bd8 Prepare v4 release (#499)
  • 78fb0ff ci(docs): skip Netlify preview for Dependabot PRs (#498)
  • d32e72e Bump @​actions/core from 3.0.0 to 3.0.1 (#496)
  • 3e251ae Bump actions/upload-artifact from 4 to 7 (#491)
  • 7ff02ae Bump actions/upload-pages-artifact from 3 to 5 (#492)
  • 65b62b8 Bump actions/deploy-pages from 4 to 5 (#494)
  • 1eb4d38 Bump marocchino/sticky-pull-request-comment from 2 to 3 (#493)
  • bfb6f7e Bump codecov/codecov-action from 5 to 6 (#495)
  • 77236ef Merge pull request #489 from conda-incubator/perf/direct-condarc-write
  • Additional commits viewable in compare view

Updates prefix-dev/setup-pixi from 0.8.3 to 0.10.0

Release notes

Sourced from prefix-dev/setup-pixi's releases.

v0.10.0

What's Changed

💥 Breaking changes

⬆️ Dependency updates

New Contributors

Full Changelog: prefix-dev/setup-pixi@v0.9.6...v0.10.0

v0.9.6

What's Changed

✨ New features

⬆️ Dependency updates

🤷🏻 Other changes

New Contributors

Full Changelog: prefix-dev/setup-pixi@v0.9.5...v0.9.6

v0.9.5

What's Changed

📝 Documentation

⬆️ Dependency updates

🤷🏻 Other changes

New Contributors

... (truncated)

Commits
  • a09b624 feat: change post-cleanup default to false (#272)
  • 947fc1f chore(deps): bump the nodejs group with 6 updates (#269)
  • 36c1c8c chore(deps): bump the gh-actions group with 2 updates (#268)
  • 5185adf feat: Add persist-credentials option (#266)
  • 92596c3 chore(deps): bump the nodejs group with 6 updates (#264)
  • 68a459a chore(deps): bump the gh-actions group with 5 updates (#263)
  • 8ce6348 add octo-sts (#262)
  • b92f010 Reference latest Pixi version in README (#260)
  • 46d4c99 chore(deps): bump the gh-actions group with 4 updates (#261)
  • 1b2de7f chore(deps): bump dependencies (#259)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 22, 2026
@ChrisBarker-NOAA

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot changed the title Bump the dependencies group with 3 updates Bump the dependencies group across 1 directory with 3 updates May 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dependencies-b20b5537ce branch from 86d9e43 to 700a886 Compare May 22, 2026 21:39
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dependencies-b20b5537ce branch from 700a886 to 6f10ab4 Compare July 1, 2026 07:16
Bumps the dependencies group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) and [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `conda-incubator/setup-miniconda` from 3 to 4
- [Release notes](https://github.com/conda-incubator/setup-miniconda/releases)
- [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md)
- [Commits](conda-incubator/setup-miniconda@v3...v4)

Updates `prefix-dev/setup-pixi` from 0.8.3 to 0.10.0
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](prefix-dev/setup-pixi@v0.8.3...v0.10.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: conda-incubator/setup-miniconda
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: prefix-dev/setup-pixi
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dependencies-b20b5537ce branch from 6f10ab4 to d3958c7 Compare August 1, 2026 07:15
@ChrisBarker-NOAA

Copy link
Copy Markdown
Contributor

out of date ...

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/dependencies-b20b5537ce branch August 3, 2026 23:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant