Merge remote-tracking branch 'upstream/main' into finish-conda_interf…

…ace-deprecations

.github/ISSUE_TEMPLATE/epic.yml

@@ -25,23 +25,82 @@ body:
       options:
         - label: I added a descriptive title
           required: true
-        - label: I searched open reports and couldn't find a duplicate
+        - label: I searched open issues and couldn't find a duplicate
           required: true
+
   - type: textarea
-    id: summary
+    id: what
     attributes:
-      label: Summary
+      label: What?
       description: >-
-        Define the highlevel objectives to be accomplished in this epic. Include the
-        bigger picture of what is changing and/or the user story for why the
-        changes are desired/necessary.
+        What feature or problem will be addressed in this epic?
+      placeholder: Please describe here.
     validations:
       required: true
+
   - type: textarea
+    id: why
     attributes:
-      label: Linked Issues & PRs
-      description: List all issues related to this epic.
+      label: Why?
+      description: >-
+        Why is the reported issue(s) a problem, or why is the proposed feature needed?
+        (Research and spike issues can be linked here.)
       value: |
-        - [ ] #
+        - [ ] <supporting issue from user, research, or spike>
+      placeholder: Please describe here and/or link to relevant supporting issues.
+    validations:
+      required: true
+
+  - type: textarea
+    id: user_impact
+    attributes:
+      label: User impact
+      description: >-
+        In what specific way(s) will users benefit from this change? (e.g. use cases or performance improvements)
+      placeholder: Please describe here.
     validations:
       required: true
+
+  - type: textarea
+    id: goals
+    attributes:
+      label: Goals
+      description: >-
+        What goal(s) should this epic accomplish?
+      value: |
+        - [ ] <goal>
+    validations:
+      required: true
+
+  - type: textarea
+    id: tasks
+    attributes:
+      label: Tasks
+      description: >-
+        What needs to be done to implement this change?
+      value: |
+        - [ ] <task or PR>
+    validations:
+      required: false
+
+  - type: textarea
+    id: blocked_by
+    attributes:
+      label: 'This epic is blocked by:'
+      description: >-
+        Epics and issues that block this epic.
+      value: |
+        - [ ] <dependency epic or issue>
+    validations:
+      required: false
+
+  - type: textarea
+    id: blocks
+    attributes:
+      label: 'This epic blocks:'
+      description: >-
+        Epics and issues that are blocked by this epic.
+      value: |
+        - [ ] <dependency epic or issue>
+    validations:
+      required: false

.github/dependabot.yml

@@ -13,3 +13,7 @@ updates:
       # Allow only production updates for Sphinx
       - dependency-name: "sphinx"
         dependency-type: "production"
+  - package-ecosystem: github-actions
+    directory: /.github/workflows
+    schedule:
+      interval: "weekly"

.github/workflows/builds-review.yaml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Remove build label
-        uses: actions/github-script@v6
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           github-token: ${{ secrets.CANARY_ACTION_TOKEN }}
           script: |
@@ -46,14 +46,14 @@ jobs:
 
       # Clean checkout of specific git ref needed for package metadata version
       # which needs env vars GIT_DESCRIBE_TAG and GIT_BUILD_STR:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
         with:
           ref: ${{ github.ref }}
           clean: true
           fetch-depth: 0
 
       - name: Create and upload review build
-        uses: conda/actions/canary-release@v23.7.0
+        uses: conda/actions/canary-release@f46142e89fa703cc69f0421ca1d313ab2d5bfff6
         with:
           package-name: ${{ github.event.repository.name }}
           subdir: ${{ matrix.subdir }}

.github/workflows/cla.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check CLA
-        uses: conda/actions/check-cla@v24.2.0
+        uses: conda/actions/check-cla@f46142e89fa703cc69f0421ca1d313ab2d5bfff6
         with:
           # [required]
           # A token with ability to comment, label, and modify the commit status

.github/workflows/docs.yml

@@ -22,7 +22,7 @@ jobs:
     if: '!github.event.repository.fork'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
         with:
           fetch-depth: 0
       - name: Setup

.github/workflows/issues.yml

@@ -24,12 +24,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # remove [pending::feedback]
-      - uses: actions-ecosystem/action-remove-labels@v1.3.0
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
         with:
           labels: ${{ env.FEEDBACK_LBL }}
           github_token: ${{ secrets.PROJECT_TOKEN }}
       # add [pending::support], if still open
-      - uses: actions-ecosystem/action-add-labels@v1.1.3
+      - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf
         if: github.event.issue.state == 'open'
         with:
           labels: ${{ env.SUPPORT_LBL }}

.github/workflows/labels.yml

@@ -20,20 +20,20 @@ jobs:
       GLOBAL: https://raw.githubusercontent.com/conda/infra/main/.github/global.yml
       LOCAL: .github/labels.yml
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - id: has_local
-        uses: andstor/file-existence-action@v3.0.0
+        uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6
         with:
           files: ${{ env.LOCAL }}
       - name: Global Only
-        uses: EndBug/label-sync@v2.3.3
+        uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a
         if: steps.has_local.outputs.files_exists == 'false'
         with:
           config-file: ${{ env.GLOBAL }}
           delete-other-labels: true
           dry-run: ${{ github.event.inputs.dryrun }}
       - name: Global & Local
-        uses: EndBug/label-sync@v2.3.3
+        uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a
         if: steps.has_local.outputs.files_exists == 'true'
         with:
           config-file: |

.github/workflows/lock.yml

@@ -18,7 +18,7 @@ jobs:
     if: '!github.event.repository.fork'
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v5
+      - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
         with:
           # Number of days of inactivity before a closed issue is locked
           issue-inactive-days: 365

.github/workflows/project.yml

@@ -14,7 +14,7 @@ jobs:
     if: '!github.event.repository.fork'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.0
+      - uses: actions/add-to-project@9bfe908f2eaa7ba10340b31e314148fcfe6a2458
         with:
           # issues are added to the Planning project
           # PRs are added to the Review project

.github/workflows/stale.yml

@@ -34,12 +34,12 @@ jobs:
             days-before-issue-stale: 90
             days-before-issue-close: 21
     steps:
-      - uses: conda/actions/read-yaml@v24.2.0
+      - uses: conda/actions/read-yaml@f46142e89fa703cc69f0421ca1d313ab2d5bfff6
         id: read_yaml
         with:
           path: https://raw.githubusercontent.com/conda/infra/main/.github/messages.yml
 
-      - uses: actions/stale@v9
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e
         id: stale
         with:
           # Only issues with these labels are checked whether they are stale