Merge branch 'main' into all-contributors/add-lucascolley

Author: lucascolley

.all-contributorsrc

@@ -40,7 +40,8 @@
       "profile": "https://github.com/mdhaber",
       "contributions": [
         "code",
-        "ideas"
+        "ideas",
+        "test"
       ]
     },
     {
@@ -50,7 +51,8 @@
       "profile": "https://github.com/j-bowhay",
       "contributions": [
         "code",
-        "review"
+        "review",
+        "tool"
       ]
     },
     {
@@ -103,7 +105,10 @@
         "tool",
         "test",
         "example",
-        "bug"
+        "bug",
+        "ideas",
+        "review",
+        "maintenance"
       ]
     },
     {
@@ -227,6 +232,78 @@
         "code",
         "test"
       ]
+    },
+    {
+      "login": "lithomas1",
+      "name": "Thomas Li",
+      "avatar_url": "https://avatars.githubusercontent.com/u/47963215?v=4",
+      "profile": "https://github.com/lithomas1",
+      "contributions": [
+        "bug",
+        "tool"
+      ]
+    },
+    {
+      "login": "pearu",
+      "name": "Pearu Peterson",
+      "avatar_url": "https://avatars.githubusercontent.com/u/402156?v=4",
+      "profile": "https://github.com/pearu",
+      "contributions": [
+        "review"
+      ]
+    },
+    {
+      "login": "paddyroddy",
+      "name": "Patrick J. Roddy",
+      "avatar_url": "https://avatars.githubusercontent.com/u/15052188?v=4",
+      "profile": "https://paddyroddy.github.io/",
+      "contributions": [
+        "code",
+        "doc",
+        "example",
+        "test"
+      ]
+    },
+    {
+      "login": "amacati",
+      "name": "Martin Schuck",
+      "avatar_url": "https://avatars.githubusercontent.com/u/57562633?v=4",
+      "profile": "https://amacati.github.io/",
+      "contributions": [
+        "ideas"
+      ]
+    },
+    {
+      "login": "Enderdead",
+      "name": "Gauthier-Clerc François",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22777836?v=4",
+      "profile": "https://github.com/Enderdead",
+      "contributions": [
+        "code",
+        "test"
+      ]
+    },
+    {
+      "login": "adriagarp",
+      "name": "Adrián García Pitarch",
+      "avatar_url": "https://avatars.githubusercontent.com/u/96059447?v=4",
+      "profile": "https://github.com/adriagarp",
+      "contributions": [
+        "code",
+        "test"
+      ]
+    },
+    {
+      "login": "cakedev0",
+      "name": "Arthur Lacote",
+      "avatar_url": "https://avatars.githubusercontent.com/u/25986961?v=4",
+      "profile": "https://github.com/cakedev0",
+      "contributions": [
+        "code",
+        "doc",
+        "ideas",
+        "test"
+      ]
     }
   ]
 }

.dprint.jsonc

@@ -0,0 +1,25 @@
+{
+  "json": {
+    "lineWidth": 100,
+    "array.preferSingleLine": true,
+  },
+  "markdown": {
+    "lineWidth": 200,
+    "emphasisKind": "asterisks",
+  },
+  "toml": {
+    "lineWidth": 100,
+  },
+  "yaml": {
+    "printWidth": 100,
+    "formatComments": true,
+    "braceSpacing": false,
+  },
+  "excludes": ["**/*-lock.json", "**/*.lock", "**/node_modules/", "dist/"],
+  "plugins": [
+    "https://plugins.dprint.dev/g-plane/pretty_yaml-v0.5.1.wasm",
+    "https://plugins.dprint.dev/json-0.20.0.wasm",
+    "https://plugins.dprint.dev/markdown-0.19.0.wasm",
+    "https://plugins.dprint.dev/toml-0.7.0.wasm",
+  ],
+}

.github/dependabot.yml

@@ -0,0 +1,5 @@
+<!--
+Thanks for contributing a pull request!
+
+Please check out the contributor guidance at https://data-apis.org/array-api-extra/contributing.html.
+-->

.github/pull_request_template.md

@@ -1,5 +1,8 @@
 name: CD
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   pull_request:
@@ -14,11 +17,11 @@ jobs:
   dist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@c52c3a4710070b50470d903818a7b25115dcd076 # v2.13.0
 
   publish:
     needs: [dist]
@@ -31,14 +34,14 @@ jobs:
     if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: Packages
           path: dist
 
       - name: Generate artifact attestation for sdist and wheel
-        uses: actions/attest-build-provenance@v2.2.0
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         with:
           subject-path: "dist/*"
 
-      - uses: pypa/gh-action-pypi-publish@release/v1
+      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

.github/workflows/cd.yml

@@ -1,5 +1,8 @@
 name: CI
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   pull_request:
@@ -17,55 +20,60 @@ env:
   FORCE_COLOR: 3
 
 jobs:
-  pre-commit-and-lint:
-    name: Format
+  lint:
+    name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v5
-        with:
-          python-version: "3.x"
-      - uses: pre-commit/action@v3.0.1
-        with:
-          extra_args: --hook-stage manual --all-files
-      - uses: prefix-dev/setup-pixi@v0.8.3
+
+      - uses: prefix-dev/setup-pixi@fef5c9568ca6c4ff7707bf840ab0692ba3f08293 # v0.9.0
         with:
-          pixi-version: v0.40.3
+          pixi-version: v0.50.2
           cache: true
           environments: lint
-      - name: Run Pylint, Mypy & Pyright
-        run: |
-          pixi run -e lint pylint
-          pixi run -e lint mypy
-          pixi run -e lint pyright
+
+      - name: Lint (if this step fails, please 'pixi run lint' locally and push the changes)
+        run: pixi run -e lint lint
 
   checks:
-    name: Check ${{ matrix.environment }}
+    name: Test ${{ matrix.environment }}
     runs-on: ${{ matrix.runs-on }}
-    needs: [pre-commit-and-lint]
     strategy:
       fail-fast: false
       matrix:
-        environment: [tests-py310, tests-py313, tests-backends]
+        environment:
+          - tests-py310
+          - tests-py313
+          - tests-numpy1
+          - tests-backends
+          - tests-backends-py310
+          - tests-nogil
         runs-on: [ubuntu-latest]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
 
-      - uses: prefix-dev/setup-pixi@v0.8.3
+      - uses: prefix-dev/setup-pixi@fef5c9568ca6c4ff7707bf840ab0692ba3f08293 # v0.9.0
         with:
-          pixi-version: v0.40.3
+          pixi-version: v0.50.2
           cache: true
           environments: ${{ matrix.environment }}
 
       - name: Test package
+        # Save some time; also at the moment of writing coverage crashes on python 3.13t
+        if: ${{ matrix.environment != 'tests-nogil' }}
         run: pixi run -e ${{ matrix.environment }} tests-ci
 
+      - name: Test free-threading
+        if: ${{ matrix.environment == 'tests-nogil' }}
+        run: pixi run -e tests-nogil tests --parallel-threads=4
+
       - name: Upload coverage report
-        uses: codecov/codecov-action@v5.3.1
+        if: ${{ matrix.environment != 'tests-nogil' }}
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/ci.yml

@@ -1,21 +1,27 @@
 name: Docs Build
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 jobs:
   docs-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: prefix-dev/setup-pixi@v0.8.3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - uses: prefix-dev/setup-pixi@fef5c9568ca6c4ff7707bf840ab0692ba3f08293 # v0.9.0
         with:
-          pixi-version: v0.40.3
+          pixi-version: v0.50.2
           cache: true
           environments: docs
+
       - name: Build Docs
         run: pixi run -e docs docs
+
       - name: Upload Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: docs-build
           path: docs/build/

.github/workflows/dependabot-auto-merge.yml

@@ -1,5 +1,8 @@
 name: Docs Deploy
 
+permissions:
+  contents: write # needed for the deploy step
+
 on:
   workflow_run:
     workflows: ["Docs Build"]
@@ -14,9 +17,10 @@ jobs:
     environment:
       name: docs-deploy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
       - name: Download Artifact
-        uses: dawidd6/action-download-artifact@v8
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
         with:
           workflow: docs-build.yml
           name: docs-build
@@ -26,7 +30,7 @@ jobs:
       # See
       # https://github.com/JamesIves/github-pages-deploy-action/tree/dev#using-an-ssh-deploy-key-
       - name: Deploy
-        uses: JamesIves/github-pages-deploy-action@v4
+        uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3
         with:
           folder: docs/build/
           ssh-key: ${{ secrets.DEPLOY_KEY }}