chore(template): accept new copier update

.copier-answers.yml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier; NEVER EDIT MANUALLY
-_commit: v0.7.0-109-g667a118
+_commit: v0.7.0-130-gde18aa4
 _src_path: https://github.com/usnistgov/cookiecutter-nist-python.git
 command_line_interface: typer
 conda_channel: conda-forge

.github/workflows/cd.yml

@@ -84,8 +84,8 @@ jobs:
   smoke-test:
     name: Smoke test package
     if:
-      ${{ (github.event_name == 'release' && github.event.action == 'published')
-      || (github.event_name == 'workflow_dispatch' && inputs.deploy) }}
+      (github.event_name == 'release' && github.event.action == 'published') ||
+      (github.event_name == 'workflow_dispatch' && inputs.deploy)
     needs:
       - dist
     runs-on: ubuntu-latest
@@ -112,8 +112,8 @@ jobs:
   publish-testpypi:
     name: Publish package to testpypi
     if:
-      ${{ (github.event_name == 'release' && github.event.action == 'published')
-      || (github.event_name == 'workflow_dispatch' && inputs.deploy) }}
+      (github.event_name == 'release' && github.event.action == 'published') ||
+      (github.event_name == 'workflow_dispatch' && inputs.deploy)
     needs:
       - dist
       - smoke-test
@@ -136,8 +136,8 @@ jobs:
   publish-pypi:
     name: Publish package to pypi
     if:
-      ${{ (github.event_name == 'release' && github.event.action == 'published')
-      || (github.event_name == 'workflow_dispatch' && inputs.deploy) }}
+      (github.event_name == 'release' && github.event.action == 'published') ||
+      (github.event_name == 'workflow_dispatch' && inputs.deploy)
     needs:
       - dist
       - smoke-test

.github/workflows/ci.yml

@@ -13,19 +13,31 @@ env:
   FORCE_COLOR: "3"
   UVX_CONSTRAINT: requirements/lock/uvx-tools.txt
   UVX_COMMAND: uvx -crequirements/lock/uvx-tools.txt
+  EXTRA_PYTHON_VERSIONS: "pypy-3.11"
 
 permissions: {}
 
 jobs:
+  pre_job:
+    # continue-on-error: true # Uncomment once integration is finished
+    runs-on: ubuntu-latest
+    outputs:
+      should_skip: ${{ steps.skip_check.outputs.should_skip }}
+    steps:
+      - id: skip_check
+        uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
+        with:
+          paths_ignore: '[".cruft.json", ".copier.yml"]'
+
   build-package:
     name: Build & verify package
+    needs: pre_job
+    if: needs.pre_job.outputs.should_skip != 'true'
     runs-on: ubuntu-latest
-
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-
       - uses: hynek/build-and-inspect-python-package@efb823f52190ad02594531168b7a2d5790e66516 # v2.14.0
         id: baipp
 
@@ -40,26 +52,48 @@ jobs:
           import json
           from pathlib import Path
 
-          python_versions = json.loads(os.getenv("python_classifiers"))
           default_python_version = Path(".python-version").read_text().strip()
+          python_versions = json.loads(os.getenv("python_classifiers"))
+          extra_python_versions = [_.strip() for _ in os.getenv("EXTRA_PYTHON_VERSIONS", "").split(",") if _]
+
+          min_python_version = python_versions[0]
+          max_python_version = python_versions[-1]
+          minmax_python_versions = [min_python_version, max_python_version, *extra_python_versions]
+          minmax_default_python_versions = list({*minmax_python_versions, default_python_version})
+          all_python_versions = list({*python_versions, *extra_python_versions})
+
+          print("{default_python_version=:s}")
+          print("{min_python_version=:s}")
+          print("{max_python_version=:s}")
+          print("{minmax_python_versions=}")
+          print("{minmax_default_python_versions=}")
+          print("{all_python_version=}")
 
-          # min max and default pythons
-          matrix_test_python = list({ python_versions[0], python_versions[-1], default_python_version, f"pypy-3.11" })
 
           with open(os.getenv("GITHUB_OUTPUT"), "a") as f:
             f.write(f"{default_python_version=:s}\n")
-            f.write(f"matrix_test_python={json.dumps(matrix_test_python)}\n")
+            f.write(f"{min_python_version=:s}\n")
+            f.write(f"{max_python_version=:s}\n")
+            f.write(f"minmax_python_versions={json.dumps(minmax_python_versions)}\n")
+            f.write(f"minmax_default_python_versions={json.dumps(minmax_default_python_versions)}\n")
+            f.write(f"all_python_versions={json.dumps(all_python_versions)}\n")
 
     outputs:
-      supported-python-versions:
-        ${{ steps.baipp.outputs.supported_python_classifiers_json_array }}
       default-python-version:
         ${{ steps.versions.outputs.default_python_version }}
-      matrix-test-python: ${{ steps.versions.outputs.matrix_test_python }}
+      min-python-version: ${{ steps.versions.outputs.min_python_version }}
+      max-python-version: ${{ steps.versions.outputs.max_python_version }}
+      minmax-python-versions:
+        ${{ steps.versions.outputs.minmax_python_versions }}
+      minmax-default-python-versions:
+        ${{ steps.versions.outputs.minmax_default_python_versions }}
+      all-python-version: ${{ steps.versions.outputs.all_python_versions }}
 
   lint:
     # only run checks not covered by pre-commit.ci
     name: Lint package
+    needs: pre_job
+    if: needs.pre_job.outputs.should_skip != 'true'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -92,8 +126,27 @@ jobs:
           prek run --show-diff-on-failure --color=always --all-files
           --hook-stage=manual -v
 
+  pinact:
+    name: Pin actions
+    needs: pre_job
+    if: needs.pre_job.outputs.should_skip != 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Pin actions
+        uses: suzuki-shunsuke/pinact-action@1081f5ad49ac904b7d977784f338145150a32112 # v1.4.0
+        with:
+          skip_push: "true"
+
   typecheck:
     name: Typecheck package
+    needs: pre_job
+    if: needs.pre_job.outputs.should_skip != 'true'
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
@@ -121,15 +174,20 @@ jobs:
 
   test:
     name: Test package across pythons
-    needs: build-package
+    needs:
+      - pre_job
+      - build-package
+    if: needs.pre_job.outputs.should_skip != 'true'
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
         os:
           - ubuntu-latest
         python-version:
-          ${{ fromJson(needs.build-package.outputs.matrix-test-python) }}
+          ${{
+          fromJson(needs.build-package.outputs.minmax-default-python-versions)
+          }}
         include:
           - os: windows-latest
             python-version:
@@ -155,7 +213,7 @@ jobs:
         shell: bash
 
       - name: Upload coverage data
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: coverage-data-${{ matrix.os }}-${{ matrix.python-version }}
           path: .nox/test-*/tmp/.coverage*
@@ -164,7 +222,10 @@ jobs:
 
   coverage:
     name: Combine coverage
-    needs: test
+    needs:
+      - pre_job
+      - test
+    if: needs.pre_job.outputs.should_skip != 'true'
     runs-on: ubuntu-latest
 
     steps:
@@ -194,47 +255,36 @@ jobs:
           $UVX_COMMAND nox -s coverage -- ++coverage report ++coverage-options --fail-under=100
         shell: bash
       - name: Upload HTML report if check failed.
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: html-report
           path: htmlcov
         if: ${{ failure() }}
 
   docs:
+    needs: pre_job
+    if: needs.pre_job.outputs.should_skip != 'true'
     permissions:
       contents: write
     uses: ./.github/workflows/docs.yml
     with:
       deploy: false
 
-  pinact:
-    name: Pin actions
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          persist-credentials: false
-
-      - name: Pin actions
-        uses: suzuki-shunsuke/pinact-action@1081f5ad49ac904b7d977784f338145150a32112 # v1.4.0
-        with:
-          skip_push: "true"
-
   # Ensure everything required is passing for branch protection.
   required-checks-pass:
     if: always()
     needs:
+      - pre_job
       - lint
+      - pinact
       - typecheck
       - test
       - coverage
-      - pinact
       - docs
     runs-on: ubuntu-latest
     steps:
       - name: Decide whether the needed jobs succeeded or failed
         uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
         with:
+          allowed-skips: "lint,pinact,typecheck,test,coverage,docs"
           jobs: ${{ toJSON(needs) }}

.github/workflows/copier-update.yml

@@ -15,6 +15,8 @@ jobs:
   update:
     name: Update template
     runs-on: ubuntu-latest
+    environment:
+      name: pull-request
     strategy:
       fail-fast: true
       matrix:

.pre-commit-config.yaml

@@ -69,13 +69,13 @@ repos:
       - id: taplo-lint
         args: ["--no-schema"]
   - repo: https://github.com/tox-dev/pyproject-fmt
-    rev: v2.16.2
+    rev: v2.18.1
     hooks:
       - id: pyproject-fmt
         files: ^pyproject\.toml$
   # ** validate (schema-store)
   - repo: https://github.com/henryiii/validate-pyproject-schema-store
-    rev: 2026.03.02
+    rev: 2026.03.10
     hooks:
       - id: validate-pyproject
         name: validate-pyproject-schema-store
@@ -109,7 +109,7 @@ repos:
 
   # * Linting
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.4
+    rev: v0.15.5
     hooks:
       - id: ruff-check
         alias: ruff
@@ -129,12 +129,10 @@ repos:
           - "--command"
           - "ruff format"
         additional_dependencies:
-          - ruff==0.15.4
+          - ruff==0.15.5
 
   # * Spelling
   # ** typos
-  # Revert to crate-ci/typos if https://github.com/crate-ci/typos/issues/390 is fixed.
-  # - repo: https://github.com/crate-ci/typos
   - repo: https://github.com/adhtruong/mirrors-typos
     rev: v1.44.0
     hooks:
@@ -153,7 +151,7 @@ repos:
           - "--custom-command=prek run pyproject2conda-project --all-files"
   # ** uv
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.10.7
+    rev: 0.10.9
     hooks:
       - id: uv-lock
         alias: requirements
@@ -213,7 +211,7 @@ repos:
         priority: 0
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
     # Zizmor version.
-    rev: v1.22.0
+    rev: v1.23.1
     hooks:
       # Run the linter.
       - id: zizmor

pyproject.toml

@@ -103,7 +103,6 @@ test-extras = [
 typecheck-runner = [ "typecheck-runner>=0.1.0; python_version>'3.9'" ]
 
 # * uv -------------------------------------------------------------------------
-
 [tool.uv]
 required-version = ">=0.7.15"
 default-groups = [ "dev" ]
@@ -125,7 +124,6 @@ mypy.requires-python = ">=3.14"
 nox.requires-python = ">=3.14"
 
 # * Checks ---------------------------------------------------------------------
-
 [tool.repo-review]
 ignore = [
     "NOX103", # I prefer using "nox.options.sessions"
@@ -156,11 +154,18 @@ expand_tables = [
 indent = 4
 keep_full_version = true
 
+[tool.typos.default]
+# nbqa generated
+extend-ignore-re = [ "# %%NBQA-.*" ]
+
 [tool.typos.default.extend-identifiers]
 CPY = "CPY"
 
-# * Testing --------------------------------------------------------------------
+[tool.typos.type.jupyter]
+# only check file name for notebooks.  Use nbaq for contents.
+check-file = false
 
+# * Testing --------------------------------------------------------------------
 [tool.pytest.ini_options]
 addopts = [
     "--cov-config=pyproject.toml",
@@ -185,10 +190,15 @@ strict_xfail = "true"
 
 [tool.coverage]
 run.branch = true
+run.source = [
+    "pyproject2conda",
+]
 paths.source = [
     "src/",
     # needed for testing source if not editable install
     ".nox/**/site-packages/",
+    "*/.nox/**/site-packages",
+    "*/src",
 ]
 report.exclude_also = [
     "@overload",
@@ -205,7 +215,6 @@ report.omit = [
 report.show_missing = true
 
 # * typecheck ---------------------------------------------------------------------
-
 [tool.mypy]
 exclude = [
     ".eggs",
@@ -300,7 +309,6 @@ inputs = [
 ]
 
 # * Dependency creation --------------------------------------------------------
-
 [tool.pyproject2conda]
 user-config = "config/userconfig.toml"
 template-python = "requirements/py{py}-{env}"
@@ -359,7 +367,6 @@ skip-package = true
 style = "requirements"
 
 # * Other tools ----------------------------------------------------------------
-
 [tool.scriv]
 format = "md"
 md_header_level = "2"