Merge pull request #686 from mamba-org/multi-bot-2025-12-20

multiple dependabot updates 2025-12-20
cooldown to 7 days
CUDA v13 images to CUDA v13.1.0

Author: wholtz

.github/dependabot.yaml

@@ -5,4 +5,4 @@ updates:
     schedule:
       interval: "daily"
     cooldown:
-      default-days: 4
+      default-days: 7

.github/workflows/push_latest.yml

@@ -19,7 +19,7 @@ env:
   LATEST_UBUNTU_BASE_IMAGE: 'ubuntu:25.10'
   LATEST_AMAZON_BASE_IMAGE: 'public.ecr.aws/amazonlinux/amazonlinux:2023'
   LATEST_ALPINE_BASE_IMAGE: 'frolvlad/alpine-glibc:alpine-3.22'
-  LATEST_CUDA_BASE_IMAGE: 'nvidia/cuda:13.0.2-base-ubuntu24.04'
+  LATEST_CUDA_BASE_IMAGE: 'nvidia/cuda:13.1.0-base-ubuntu24.04'
 
 jobs:
   build_docker_image_and_push:
@@ -40,8 +40,8 @@ jobs:
          - frolvlad/alpine-glibc:alpine-3.22
          - frolvlad/alpine-glibc:alpine-3.21
          - public.ecr.aws/amazonlinux/amazonlinux:2023
-         - nvidia/cuda:13.0.2-base-ubuntu24.04
-         - nvidia/cuda:13.0.2-base-ubuntu22.04
+         - nvidia/cuda:13.1.0-base-ubuntu24.04
+         - nvidia/cuda:13.1.0-base-ubuntu22.04
          - nvidia/cuda:12.9.1-base-ubuntu24.04
          - nvidia/cuda:12.9.1-base-ubuntu22.04
          - nvidia/cuda:12.8.1-base-ubuntu24.04
@@ -64,7 +64,7 @@ jobs:
     - name: Setup nox
       uses: wntrblm/nox@0eee2e45758dbd06d48ebb23476439f0f00e5cbd
     - name: Checkout source
-      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       with:
         persist-credentials: false
         submodules: recursive
@@ -125,7 +125,7 @@ jobs:
                           && echo true || echo false)" >> $GITHUB_OUTPUT
     - name: Get stage1 docker metadata
       id: get_stage1_metadata
-      uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893
+      uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051
       with:
         images: |
           ghcr.io/mamba-org/micromamba-cache/stage1
@@ -134,7 +134,7 @@ jobs:
             type=raw,value=${{ steps.set_image_variables.outputs.tag }}
     - name: Get docker metadata
       id: get_metadata
-      uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893
+      uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051
       with:
         images: |
           mambaorg/micromamba
@@ -251,7 +251,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - name: Checkout source
-      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       with:
         persist-credentials: false
     - name: Get artifacts
@@ -307,7 +307,7 @@ jobs:
       contents: write
     steps:
     - name: Checkout source
-      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       with:
         persist-credentials: false
     - name: Get micromamba version number

.github/workflows/test.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           submodules: recursive
           persist-credentials: false
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Install curl and xz-utils
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox
@@ -61,7 +61,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox
@@ -85,7 +85,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox
@@ -97,7 +97,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
       - name: Setup nox

.github/workflows/update_version.yml

@@ -18,11 +18,11 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - name: Checkout source
-      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       with:
         persist-credentials: false
     - name: Set up Python
-      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c
+      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548
       with:
         python-version: "3.10"
     - name: Check available versions
@@ -41,7 +41,7 @@ jobs:
       run: ./update.sh "${LATEST_VERSION}"
     - name: commit updated files
       if: steps.check_version.outputs.do_pr == 'True'
-      uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e
+      uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725
       with:
         branch: "update-${{ steps.check_version.outputs.latest_version }}"
         commit-message: "Update to micromamba version ${{ steps.check_version.outputs.latest_version }}"

.github/workflows/zizmor.yml

@@ -18,11 +18,11 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           persist-credentials: false
 
-      - uses: hynek/setup-cached-uv@e7b339a5371c27140bd2fdb0eee0bdf1c5b09f00
+      - uses: hynek/setup-cached-uv@2a4a9b893253e16cf11e6def5f774336af2f80bc
 
       - name: Run zizmor 🌈
         run: uvx zizmor --format sarif . > results.sarif

CHANGELOG.md

@@ -3,6 +3,10 @@
 This change log covers changes to the docker image and does not include
 [changes to the micromamba program](https://github.com/mamba-org/mamba/blob/main/CHANGELOG.md).
 
+## 20 December 2025
+
+- Update CUDA v13.0.2 images to v13.1.0
+
 ## 7 December 2025
 
 - Removed end of life base image `alpine:3.19`