Bump the dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dependencies group with 4 updates in the / directory: scitools/workflows/.github/workflows/refresh-lockfiles.yml, scitools/workflows/.github/workflows/ci-manifest.yml, scitools/workflows/.github/workflows/ci-template-check.yml and conda-incubator/setup-miniconda.

Updates scitools/workflows/.github/workflows/refresh-lockfiles.yml from 2026.04.0 to 2026.05.0

Commits

• 08acacb Automated release for version "2026.05.0"
• 4f407b2 chore: update pre-commit hooks (#189)
• cc5b9d9 Automated release for version "2026.04.2"
• 61013a1 Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#188)
• 37e95ea Automated release for version "2026.04.1"
• 5d2e9ad Bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#187)
• See full diff in compare view

Updates scitools/workflows/.github/workflows/ci-manifest.yml from 2026.04.0 to 2026.05.0

Commits

• 08acacb Automated release for version "2026.05.0"
• 4f407b2 chore: update pre-commit hooks (#189)
• cc5b9d9 Automated release for version "2026.04.2"
• 61013a1 Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#188)
• 37e95ea Automated release for version "2026.04.1"
• 5d2e9ad Bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#187)
• See full diff in compare view

Updates scitools/workflows/.github/workflows/ci-template-check.yml from 2026.04.0 to 2026.05.0

Commits

• 08acacb Automated release for version "2026.05.0"
• 4f407b2 chore: update pre-commit hooks (#189)
• cc5b9d9 Automated release for version "2026.04.2"
• 61013a1 Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#188)
• 37e95ea Automated release for version "2026.04.1"
• 5d2e9ad Bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#187)
• See full diff in compare view

Updates conda-incubator/setup-miniconda from 3 to 4

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 4.0.0

Breaking Changes

• #459: Upgrade action runtime to Node.js 24.x (requires runners with Node 24 support; this is the reason for the v4 major bump)
• #450: Switch action build to ESM (for @actions/exec v3)

Features and Enhancements

• #469: Add conda-init input to optionally skip conda init and document activation for restricted environments
• #482: Add channels parsing utility and URL validation
• #481: Enable stricter TypeScript checks and typing
• #480: Add more tests, increase coverage, add Codecov integration and coverage badge
• #479: Add TypeDoc-based API docs, generation and checks; configure GitHub Pages and Netlify previews

Fixes

• #465: Fix double channel configuration being applied
• #467: Speed up Windows post-run cleanup by moving the extracted packages directory instead of removing files one by one
• #470: Fix name-version-build syntax expansion and add tests
• #475: Split shell init and activation of the test environment to remove spurious warning
• #498: Skip Netlify preview for Dependabot PRs

Performance

• #486: Remove HTML index scraping for Miniconda version validation
• #487: Parallelize Windows takeown calls with Promise.all
• #488: Replace isDefaultEnvironment subprocess with local YAML reads
• #489: Replace conda config subprocesses with direct .condarc YAML writes

Tasks and Maintenance

• #444: Bump conda-incubator/setup-miniconda from 3.2.0 to 3.3.0
• #445: Bump actions/checkout from 6.0.1 to 6.0.2
• #449: Bump @​actions/exec from 2.0.0 to 3.0.0
• #456, #484, #491: Bump actions/upload-artifact
• #460: Bump actions/download-artifact from 7.0.0 to 8.0.1
• #464: Update dependencies for actions and packages
• #466: Bump @​actions/tool-cache from 2.0.2 to 4.0.0
• #473: Bump flatted from 3.2.9 to 3.4.2
• #476: Bump picomatch
• #477: Bump conda-incubator/installer from 0.1.0 to 0.1.1
• #485: Bump vite from 8.0.0 to 8.0.8
• #492: Bump actions/upload-pages-artifact from 3 to 5

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v4.0.1 (2026-04-24)

Fixes

• Fix MultipleKeysError on conda 25.11+ when a user-supplied condarc-file already declares auto_activate: now only one of auto_activate / auto_activate_base is written to .condarc, preferring whichever key the user's existing condarc uses.
• Add auto_activate to the boolean coercion set so its value is serialized as a YAML boolean when it is the chosen canonical key.
• Add local_repodata_ttl to KNOWN_CONDARC_KEYS to silence a spurious "Unrecognized condarc key" warning for a valid conda key.

Commits

• 8ee1f36 Fix MultipleKeysError when user condarc declares auto_activate (#500)
• bce0bd8 Prepare v4 release (#499)
• 78fb0ff ci(docs): skip Netlify preview for Dependabot PRs (#498)
• d32e72e Bump @​actions/core from 3.0.0 to 3.0.1 (#496)
• 3e251ae Bump actions/upload-artifact from 4 to 7 (#491)
• 7ff02ae Bump actions/upload-pages-artifact from 3 to 5 (#492)
• 65b62b8 Bump actions/deploy-pages from 4 to 5 (#494)
• 1eb4d38 Bump marocchino/sticky-pull-request-comment from 2 to 3 (#493)
• bfb6f7e Bump codecov/codecov-action from 5 to 6 (#495)
• 77236ef Merge pull request #489 from conda-incubator/perf/direct-condarc-write
• Additional commits viewable in compare view

[scitools-ci]

Templating

Version numbers are not typically covered by templating. It is expected that this PR is 100% about advancing version numbers, which would not require any templating follow-up. Please double-check for any other changes that might be suitable for templating.