Merge branch 'main' into autojit

Author: crusaderky

.github/workflows/cd.yml

@@ -34,13 +34,13 @@ jobs:
     if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
-      - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: Packages
           path: dist
 
       - name: Generate artifact attestation for sdist and wheel
-        uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
+        uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
         with:
           subject-path: "dist/*"
 

.github/workflows/ci.yml

@@ -27,13 +27,13 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
-          python-version: "3.13.2"
+          python-version: "3.13.3"
       - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
         with:
           extra_args: --hook-stage manual --all-files
-      - uses: prefix-dev/setup-pixi@dbaed5efa0bd33d6bd6d162bec8a06d8fc43c807 # v0.8.5
+      - uses: prefix-dev/setup-pixi@19eac09b398e3d0c747adc7921926a6d802df4da # v0.8.8
         with:
           pixi-version: v0.42.1
           cache: true
@@ -59,7 +59,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: prefix-dev/setup-pixi@dbaed5efa0bd33d6bd6d162bec8a06d8fc43c807 # v0.8.5
+      - uses: prefix-dev/setup-pixi@19eac09b398e3d0c747adc7921926a6d802df4da # v0.8.8
         with:
           pixi-version: v0.42.1
           cache: true
@@ -69,6 +69,6 @@ jobs:
         run: pixi run -e ${{ matrix.environment }} tests-ci
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/docs-build.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: prefix-dev/setup-pixi@dbaed5efa0bd33d6bd6d162bec8a06d8fc43c807 # v0.8.5
+      - uses: prefix-dev/setup-pixi@19eac09b398e3d0c747adc7921926a6d802df4da # v0.8.8
         with:
           pixi-version: v0.42.1
           cache: true

pixi.lock

@@ -58,14 +58,14 @@ typing-extensions = ">=4.13.2"
 pre-commit = ">=4.2.0"
 pylint = ">=3.3.6"
 basedmypy = ">=2.10.0"
-basedpyright = ">=1.28.5"
+basedpyright = ">=1.29.1"
 numpydoc = ">=1.8.0,<2"
 # import dependencies for mypy:
 array-api-strict = ">=2.3.1"
 numpy = ">=2.1.3"
 pytest = ">=8.3.5"
 hypothesis = ">=6.131.8"
-dask-core = ">=2025.3.0"     # No distributed, tornado, etc.
+dask-core = ">=2025.4.1"     # No distributed, tornado, etc.
 # NOTE: don't add jax, pytorch, sparse, cupy here
 # as they slow down mypy and are not portable across target OSs
 
@@ -105,7 +105,7 @@ myst-parser = ">=4.0.1"
 sphinx-copybutton = ">=0.5.2"
 sphinx-autodoc-typehints = ">=1.25.3"
 # Needed to import parsed modules with autodoc
-dask-core = ">=2025.3.0"
+dask-core = ">=2025.4.1"
 pytest = ">=8.3.5"
 typing-extensions = ">=4.13.2"
 numpy = ">=2.1.3"
@@ -135,7 +135,7 @@ numpy = "=1.22.0"
 # Note: JAX and PyTorch will install CPU variants.
 [tool.pixi.feature.backends.dependencies]
 pytorch = ">=2.6.0"
-dask = ">=2025.3.0"
+dask = ">=2025.4.1"
 numba = ">=0.61.2"    # sparse dependency
 llvmlite = ">=0.44.0" # sparse dependency
 

pyproject.toml

@@ -21,8 +21,8 @@
       "enabled": false
     },
     {
-      "description": "Do not bump Python deps in the manifest.",
-      "matchManagers": ["pixi"],
+      "description": "Do not bump Python deps in the manifest or requires-python.",
+      "matchManagers": ["pixi", "pep621"],
       "matchPackageNames": ["python"],
       "enabled": false
     },

renovate.json

@@ -16,7 +16,7 @@
 )
 from ._lib._lazy import lazy_apply
 
-__version__ = "0.7.2.dev0"
+__version__ = "0.8.0.dev0"
 
 # pylint: disable=duplicate-code
 __all__ = [