Merge branch 'main' into python3.13

Author: mathbunnyru

.github/actions/create-dev-env/action.yml

@@ -7,7 +7,7 @@ runs:
     - name: Set Up Python 🐍
       uses: actions/setup-python@v5
       with:
-        python-version: "3.12"
+        python-version: 3.12
 
     - name: Install Dev Dependencies 📦
       run: |

.github/dependabot.yml

@@ -1,7 +1,7 @@
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
-# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference
 
 version: 2
 updates:

.github/workflows/contributed-recipes.yml

@@ -29,6 +29,7 @@ on:
 jobs:
   generate-matrix:
     runs-on: ubuntu-24.04
+    timeout-minutes: 1
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
@@ -43,6 +44,7 @@ jobs:
 
   test-recipes:
     runs-on: ${{ matrix.runs-on }}
+    timeout-minutes: 5
     needs: generate-matrix
     if: github.repository_owner == 'jupyter' || github.repository_owner == 'mathbunnyru'
 

.github/workflows/docker-build-test-upload.yml

@@ -33,10 +33,15 @@ on:
         description: GitHub Actions Runner image
         required: true
         type: string
+      timeout-minutes:
+        description: Timeout in minutes
+        required: true
+        type: number
 
 jobs:
   build-test-upload:
     runs-on: ${{ inputs.runs-on }}
+    timeout-minutes: ${{ inputs.timeout-minutes }}
 
     steps:
       - name: Checkout Repo ⚡️
@@ -58,16 +63,27 @@ jobs:
         shell: bash
 
       - name: Build image 🛠
-        run: docker build --rm --force-rm --tag ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ inputs.image }} images/${{ inputs.image }}/${{ inputs.variant != 'default' && inputs.variant || '.' }}/ --build-arg REGISTRY=${{ env.REGISTRY }} --build-arg OWNER=${{ env.OWNER }}
+        run: >
+          docker build
+          --rm --force-rm
+          --tag ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ inputs.image }}
+          images/${{ inputs.image }}/${{ inputs.variant != 'default' && inputs.variant || '.' }}/
+          --build-arg REGISTRY=${{ env.REGISTRY }}
+          --build-arg OWNER=${{ env.OWNER }}
         env:
           DOCKER_BUILDKIT: 1
           # Full logs for CI build
           BUILDKIT_PROGRESS: plain
         shell: bash
 
       - name: Write tags file 🏷
-        run: |
-          python3 -m tagging.write_tags_file --short-image-name ${{ inputs.image }} --tags-dir /tmp/jupyter/tags/ --registry ${{ env.REGISTRY }} --owner ${{ env.OWNER }} --variant ${{ inputs.variant }}
+        run: >
+          python3 -m tagging.write_tags_file
+          --registry ${{ env.REGISTRY }}
+          --owner ${{ env.OWNER }}
+          --short-image-name ${{ inputs.image }}
+          --variant ${{ inputs.variant }}
+          --tags-dir /tmp/jupyter/tags/
         shell: bash
       - name: Upload tags file 💾
         uses: actions/upload-artifact@v4
@@ -77,7 +93,14 @@ jobs:
           retention-days: 3
 
       - name: Write manifest and build history file 🏷
-        run: python3 -m tagging.write_manifest --short-image-name ${{ inputs.image }} --hist-lines-dir /tmp/jupyter/hist_lines/ --manifests-dir /tmp/jupyter/manifests/ --registry ${{ env.REGISTRY }} --owner ${{ env.OWNER }} --variant ${{ inputs.variant }}
+        run: >
+          python3 -m tagging.write_manifest
+          --registry ${{ env.REGISTRY }}
+          --owner ${{ env.OWNER }}
+          --short-image-name ${{ inputs.image }}
+          --variant ${{ inputs.variant }}
+          --hist-lines-dir /tmp/jupyter/hist_lines/
+          --manifests-dir /tmp/jupyter/manifests/
         shell: bash
       - name: Upload manifest file 💾
         uses: actions/upload-artifact@v4
@@ -105,5 +128,9 @@ jobs:
           retention-days: 3
 
       - name: Run tests ✅
-        run: python3 -m tests.run_tests --short-image-name ${{ inputs.image }} --registry ${{ env.REGISTRY }} --owner ${{ env.OWNER }}
+        run: >
+          python3 -m tests.run_tests
+          --registry ${{ env.REGISTRY }}
+          --owner ${{ env.OWNER }}
+          --short-image-name ${{ inputs.image }}
         shell: bash

.github/workflows/docker-merge-tags.yml

@@ -15,6 +15,10 @@ on:
         description: Image name
         required: true
         type: string
+      timeout-minutes:
+        description: Timeout in minutes
+        type: number
+        default: 25
     secrets:
       REGISTRY_USERNAME:
         required: true
@@ -24,6 +28,7 @@ on:
 jobs:
   merge-tags:
     runs-on: ubuntu-24.04
+    timeout-minutes: ${{ inputs.timeout-minutes }}
 
     steps:
       - name: Checkout Repo ⚡️
@@ -62,5 +67,9 @@ jobs:
 
       - name: Merge tags for the images 🔀
         if: env.PUSH_TO_REGISTRY == 'true'
-        run: python3 -m tagging.merge_tags --short-image-name ${{ inputs.image }} --tags-dir /tmp/jupyter/tags/ --variant ${{ inputs.variant }}
+        run: >
+          python3 -m tagging.merge_tags
+          --short-image-name ${{ inputs.image }}
+          --variant ${{ inputs.variant }}
+          --tags-dir /tmp/jupyter/tags/
         shell: bash

.github/workflows/docker-tag-push.yml

@@ -20,6 +20,10 @@ on:
         description: Variant tag prefix
         required: true
         type: string
+      timeout-minutes:
+        description: Timeout in minutes
+        default: 25
+        type: number
     secrets:
       REGISTRY_USERNAME:
         required: true
@@ -29,6 +33,7 @@ on:
 jobs:
   tag-push:
     runs-on: ubuntu-24.04
+    timeout-minutes: ${{ inputs.timeout-minutes }}
 
     steps:
       - name: Checkout Repo ⚡️
@@ -56,7 +61,14 @@ jobs:
           name: ${{ inputs.image }}-${{ inputs.platform }}-${{ inputs.variant }}-tags
           path: /tmp/jupyter/tags/
       - name: Apply tags to the loaded image 🏷
-        run: python3 -m tagging.apply_tags --short-image-name ${{ inputs.image }} --tags-dir /tmp/jupyter/tags/ --platform ${{ inputs.platform }} --registry ${{ env.REGISTRY }} --owner ${{ env.OWNER }} --variant ${{ inputs.variant }}
+        run: >
+          python3 -m tagging.apply_tags
+          --registry ${{ env.REGISTRY }}
+          --owner ${{ env.OWNER }}
+          --short-image-name ${{ inputs.image }}
+          --variant ${{ inputs.variant }}
+          --platform ${{ inputs.platform }}
+          --tags-dir /tmp/jupyter/tags/
       # This step is needed to prevent pushing non-multi-arch "latest" tag
       - name: Remove the "latest" tag from the image 🗑️
         run: docker image rmi ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ inputs.image }}:latest

.github/workflows/docker-wiki-update.yml

@@ -3,14 +3,15 @@ name: Download build manifests from GitHub artifacts and push them to GitHub wik
 # This way we make sure we don't access wiki pages from several jobs simultaneously
 
 env:
-  PUSH_TO_REGISTRY: ${{ (github.repository_owner == 'jupyter' || github.repository_owner == 'mathbunnyru') && (github.ref == 'refs/heads/main' || github.event_name == 'schedule') }}
+  PUSH_TO_REGISTRY: ${{ github.ref == 'refs/heads/main' || github.event_name == 'schedule' }}
 
 on:
   workflow_call:
 
 jobs:
   wiki-update:
     runs-on: ubuntu-24.04
+    timeout-minutes: 1
 
     steps:
       - name: Checkout Repo ⚡️
@@ -39,7 +40,12 @@ jobs:
           path: wiki/
 
       - name: Update wiki 🏷
-        run: python3 -m tagging.update_wiki --wiki-dir wiki/ --hist-lines-dir /tmp/jupyter/hist_lines/ --manifests-dir /tmp/jupyter/manifests/
+        run: >
+          python3 -m tagging.update_wiki
+          --wiki-dir wiki/
+          --hist-lines-dir /tmp/jupyter/hist_lines/
+          --manifests-dir /tmp/jupyter/manifests/
+          --repository ${{ github.repository }}
         shell: bash
 
       - name: Push Wiki to GitHub 📤