Merge branch 'main' into gh20048

Author: mdhaber

.circleci/config.yml

@@ -116,7 +116,7 @@ jobs:
           no_output_timeout: 25m
           command: |
             export PYTHONPATH=$PWD/build-install/lib/python3.11/site-packages
-            python dev.py --no-build doc 2>&1 | tee sphinx_log.txt
+            python dev.py --no-build doc -j2 2>&1 | tee sphinx_log.txt
 
       - run:
           name: Check sphinx log for warnings (which are treated as errors)

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,16 +1,16 @@
 <!-- 
 Thanks for contributing a pull request! Please ensure that
 your PR satisfies the checklist before submitting:
-http://scipy.github.io/devdocs/dev/contributor/development_workflow.html#checklist-before-submitting-a-pr
+https://scipy.github.io/devdocs/dev/contributor/development_workflow.html#checklist-before-submitting-a-pr
 
 Also, please name and describe your PR as you would write a
 commit message:
-http://scipy.github.io/devdocs/dev/contributor/development_workflow.html#writing-the-commit-message.
+https://scipy.github.io/devdocs/dev/contributor/development_workflow.html#writing-the-commit-message.
 However, please only include an issue number in the description, not the title,
 and please ensure that any code names containing underscores are enclosed in backticks.
 
 Depending on your changes, you can skip CI operations and save time and energy: 
-http://scipy.github.io/devdocs/dev/contributor/continuous_integration.html#skipping
+https://scipy.github.io/devdocs/dev/contributor/continuous_integration.html#skipping
 
 Note that we are a team of volunteers; we appreciate your
 patience during the review process.

.github/workflows/array_api.yml

@@ -19,12 +19,15 @@ env:
     -t scipy.cluster
     -t scipy.constants
     -t scipy.fft
+    -t scipy.special.tests.test_logsumexp
     -t scipy.special.tests.test_support_alternative_backends
     -t scipy._lib.tests.test_array_api
     -t scipy._lib.tests.test__util
     -t scipy.differentiate.tests.test_differentiate
     -t scipy.integrate.tests.test_tanhsinh
+    -t scipy.integrate.tests.test_cubature
     -t scipy.optimize.tests.test_chandrupatla
+    -t scipy.optimize.tests.test_optimize
     -t scipy.stats
     -t scipy.ndimage
 
@@ -53,12 +56,12 @@ jobs:
           - maintenance-branch: true
 
     steps:
-    - uses: actions/[email protected].1
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         submodules: recursive
 
     - name: Setup Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
       with:
         python-version: ${{ matrix.python-version }}
         cache: 'pip'  # not using a path to also cache pytorch
@@ -70,11 +73,11 @@ jobs:
 
     - name: Install Python packages
       run: |
-        python -m pip install numpy cython pytest pytest-xdist pytest-timeout pybind11 mpmath gmpy2 pythran ninja meson click rich-click doit pydevtool pooch hypothesis array-api-strict
+        python -m pip install numpy cython pytest pytest-xdist pytest-timeout pybind11 mpmath gmpy2 pythran ninja meson click rich-click doit pydevtool pooch hypothesis array-api-strict==2.1.0
 
     - name: Install PyTorch CPU
       run: |
-        python -m pip install "torch==2.3" --index-url https://download.pytorch.org/whl/cpu
+        python -m pip install torch --index-url https://download.pytorch.org/whl/cpu
 
     - name: Install JAX
       run: |
@@ -90,7 +93,7 @@ jobs:
         echo "timestamp=${NOW}" >> $GITHUB_OUTPUT
 
     - name: Setup compiler cache
-      uses:  actions/cache@v4
+      uses:  actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
       id:    cache-ccache
       with:
         path: ${{ steps.prep-ccache.outputs.dir }}

.github/workflows/circle_artifacts.yml

@@ -10,7 +10,7 @@ jobs:
     name: Run CircleCI artifacts redirector
     steps:
       - name: GitHub Action step
-        uses: larsoner/circleci-artifacts-redirector-action@master
+        uses: scientific-python/circleci-artifacts-redirector-action@4e13a10d89177f4bfc8007a7064bdbeda848d8d1 # v1.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           api-token: ${{ secrets.CIRCLE_TOKEN }}

.github/workflows/commit_message.yml

@@ -18,7 +18,7 @@ jobs:
       message: ${{ steps.skip_check.outputs.message }}
     steps:
       - name: Checkout scipy
-        uses: actions/[email protected].1
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         # Gets the correct commit message for pull request
         with:
           ref: ${{ github.event.pull_request.head.sha }}

.github/workflows/free_threaded_wheels.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     # label based on issue title
-    - uses: github/[email protected]
+    - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4
       if: github.repository == 'scipy/scipy'
       with:
         configuration-path: .github/labeler.yml

.github/workflows/issue-labeler.yml

@@ -27,13 +27,13 @@ jobs:
         python-version: ['3.11']
 
     steps:
-    - uses: actions/[email protected].1
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
-        fetch-depth: 0
+        fetch-depth: 0  # previous commits used in tools/lint.py
         submodules: recursive
 
     - name: Setup Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
       with:
         python-version: ${{ matrix.python-version }}