deps: Update gha

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest-build-provenance	action	minor	v2.3.0 -> v2.4.0
hynek/build-and-inspect-python-package	action	minor	v2.12.0 -> v2.13.0
prefix-dev/setup-pixi	action	patch	v0.8.8 -> v0.8.10	v0.8.11

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v2.4.0

Compare Source

What's Changed

• Bump undici from 5.28.5 to 5.29.0 by @​dependabot in https://github.com/actions/attest-build-provenance/pull/633
• Bump actions/attest from 2.3.0 to 2.4.0 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/654
  • Includes support for the new well-known summary file which will accumulate paths to all attestations generated in a given workflow run

Full Changelog: actions/attest-build-provenance@v2.3.0...v2.4.0

hynek/build-and-inspect-python-package (hynek/build-and-inspect-python-package)

v2.13.0

Compare Source

Added

• New output: package_name is the name of the built package as stored in metadata.
  #​162

• The package name is now part of the action summary which is helpful when you build more than one package from a repository.
  #​169

Changed

• All GitHub actions are now pinned to exact hashes for better reproducibility and mild security improvements.

  Since chosen prefix SHA-1 hash collision attacks exist, this is but security theater against serious attackers.

prefix-dev/setup-pixi (prefix-dev/setup-pixi)

v0.8.10

Compare Source

What's Changed

🐛 Bug fixes

• fix: Forcefully remove empty parents directory on post-cleanup by @​delsner in https://github.com/prefix-dev/setup-pixi/pull/205

Full Changelog: prefix-dev/setup-pixi@v0.8.9...v0.8.10

v0.8.9

Compare Source

What's Changed

🐛 Bug fixes

• fix: Ignore errors in post-cleanup if files do not exist by @​delsner in https://github.com/prefix-dev/setup-pixi/pull/204

⬆️ Dependency updates

• Bump the gh-actions group with 2 updates by @​dependabot in https://github.com/prefix-dev/setup-pixi/pull/199
• Bump the nodejs group across 1 directory with 8 updates by @​dependabot in https://github.com/prefix-dev/setup-pixi/pull/203

🤷🏻 Other changes

• docs: Add security policy by @​pavelzw in https://github.com/prefix-dev/setup-pixi/pull/202

New Contributors

• @​delsner made their first contribution in https://github.com/prefix-dev/setup-pixi/pull/204

Full Changelog: prefix-dev/setup-pixi@v0.8.8...v0.8.9

---

Configuration

📅 Schedule: Branch creation - On day 15 of the month ( * * 15 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.