Add possibility to install global environments (#221 )

Co-authored-by: Pavel Zwerschke <pavelzw@gmail.com>
chore(deps): bump the nodejs group with 7 updates (#223 )
2026-10-08 15:04:08 +03:00 · 2025-09-22 11:51:37 +02:00 · 2025-09-01 11:47:19 +00:00 · 2025-09-01 13:41:15 +02:00 · 2025-08-13 14:23:50 +02:00 · 2025-08-11 23:29:05 +02:00
11 changed files with 28441 additions and 23994 deletions
@@ -15,7 +15,7 @@ jobs:
  build:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.4.0
@@ -41,13 +41,13 @@ jobs:
    name: Reference latest version in README
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Assert latest setup-pixi version is mentioned in README
        run: |
          set -euo pipefail
          latest_version="$(jq -r '.version' package.json)"
-          count_expected=19
+          count_expected=21
          count_actual="$(grep -c "setup-pixi@v$latest_version" README.md || true)"
          if [ "$count_actual" -ne "$count_expected" ]; then
            echo "::error file=README.md::Expected $count_expected mentions of \`setup-pixi@v$latest_version\` in README.md, but found $count_actual."
@@ -62,7 +62,7 @@ jobs:
      contents: write
      pull-requests: write
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Assert latest pixi version is mentioned in README
        run: |
@@ -90,7 +90,7 @@ jobs:
  check-dist:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.4.0
@@ -12,7 +12,7 @@ jobs:
  release:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: Quantco/ui-actions/version-metadata@cd71d2a0e30b25569f6d723e57acca83347e58fc # v1.0.18
        id: version-metadata
        with:
@@ -22,7 +22,7 @@ jobs:
    runs-on: ${{ matrix.os }}
    name: default ${{ matrix.cache == true && 'with' || 'without' }} cache (${{ matrix.os }})
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -47,13 +47,62 @@ jobs:
          pixi run python --version | grep -q 3.11
          pixi run test | grep -q "Hello world"

-  no-run-install:
+  global-environments:
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Move pixi.toml
+        run: mv test/default/* .
+      - uses: ./
+        with:
+          global-environments: |
+            cowpy
+      - run: |
+          cowpy hello world
+      - run: |
+          set -o pipefail
+          pixi info
+          test -f ${{ matrix.os == 'windows-latest' && './.pixi/envs/default/python.exe' || './.pixi/envs/default/bin/python' }}
+          ${{ matrix.os == 'windows-latest' && './.pixi/envs/default/python.exe' || './.pixi/envs/default/bin/python' }} --version | grep -q 3.11
+        shell: bash
+      - run: |
+          pixi run python --version | grep -q 3.11
+          pixi run test | grep -q "Hello world"
+
+  global-environments-with-project-install:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: ./
+        with:
+          run-install: false
+          global-environments: |
+            cowpy
+            keyring --with keyrings.google-artifactregistry-auth
+      - run: |
+          set -o pipefail
+          cowpy hello world
+          keyring --list-backends | grep "keyrings.gauth.GooglePythonAuth"
+        shell: bash
+        if: matrix.os != 'windows-latest'
+      - run: |
+          cowpy hello world
+          keyring --list-backends | findstr "keyrings.gauth.GooglePythonAuth"
+        if: matrix.os == 'windows-latest'
+
+  no-run-install:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -70,7 +119,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          run-install: false
@@ -85,7 +134,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest, macos-13]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - uses: ./
@@ -103,7 +152,7 @@ jobs:
        locked: [true, false]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - uses: ./
@@ -122,7 +171,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest, macos-13]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          run-install: false
@@ -135,7 +184,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest, macos-13]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          run-install: false
@@ -154,7 +203,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -169,7 +218,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -181,7 +230,7 @@ jobs:
  custom-pixi-url:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - uses: ./
@@ -193,7 +242,7 @@ jobs:
  pixi-url-headers-bearer:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - name: Setup caddy
@@ -234,7 +283,7 @@ jobs:
  pixi-url-custom-template-no-version:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          pixi-url: |
@@ -249,7 +298,7 @@ jobs:
  pixi-url-custom-template-version:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          pixi-url: |
@@ -265,7 +314,7 @@ jobs:
  pixi-url-custom-template-version-latest:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          pixi-url: |
@@ -284,7 +333,7 @@ jobs:
        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest, windows-11-arm]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          cache: false
@@ -296,7 +345,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -310,7 +359,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -331,7 +380,7 @@ jobs:
        ignore-reason: [none, version, version-latest, url, bin-path]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - name: Create pixi directory and add to PATH
@@ -450,7 +499,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -471,7 +520,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -494,7 +543,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -516,7 +565,7 @@ jobs:
    runs-on: ${{ matrix.os }}
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/auth/* .
      - uses: ./
@@ -535,7 +584,7 @@ jobs:
    runs-on: ${{ matrix.os }}
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/auth-s3/* .
      - uses: ./
@@ -555,7 +604,7 @@ jobs:
        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -582,7 +631,7 @@ jobs:
        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          run-install: false
@@ -604,7 +653,7 @@ jobs:
      matrix:
        post-cleanup: ['true', 'false']
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: lisanna-dettwyler/action-post-run@d053b9b43d788b87a409f6cdb3b6fc87c6c8a4fe # v3.1.0
@@ -629,7 +678,7 @@ jobs:
      matrix:
        post-cleanup: ['true', 'false']
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: lisanna-dettwyler/action-post-run@d053b9b43d788b87a409f6cdb3b6fc87c6c8a4fe # v3.1.0
@@ -651,7 +700,7 @@ jobs:
      matrix:
        post-cleanup: ['true', 'false']
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: lisanna-dettwyler/action-post-run@d053b9b43d788b87a409f6cdb3b6fc87c6c8a4fe # v3.1.0
@@ -672,7 +721,7 @@ jobs:
      matrix:
        post-cleanup: ['true', 'false']
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: lisanna-dettwyler/action-post-run@d053b9b43d788b87a409f6cdb3b6fc87c6c8a4fe # v3.1.0
@@ -693,7 +742,7 @@ jobs:
        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/no-lockfile/* .
      - uses: ./
@@ -725,7 +774,7 @@ jobs:
        cache: ['true', 'false']
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/multiple-environments/* .
      - uses: ./
@@ -761,7 +810,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest, macos-13]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -777,7 +826,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest, macos-13]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -802,7 +851,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest, macos-13]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -826,7 +875,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest, macos-13]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -843,7 +892,7 @@ jobs:
        os: [windows-latest, ubuntu-latest, macos-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/pyproject-manifest/* .
      - uses: ./
@@ -861,7 +910,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./
        with:
          cache: true
@@ -873,7 +922,7 @@ jobs:
        os: [ubuntu-latest, macos-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -889,7 +938,7 @@ jobs:
      run:
        shell: bash
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -905,7 +954,7 @@ jobs:
      run:
        shell: pwsh
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -921,7 +970,7 @@ jobs:
      run:
        shell: cmd
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -939,7 +988,7 @@ jobs:
  environment-activation-false:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -950,7 +999,7 @@ jobs:
  environment-activation-explicit-env:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/multiple-environments/* .
      - uses: ./
@@ -963,7 +1012,7 @@ jobs:
  environment-activation-multiple-env:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/multiple-environments/* .
      - uses: ./
@@ -980,7 +1029,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/multiple-environments/* .
      - uses: ./
@@ -998,7 +1047,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/default/* .
      - uses: ./
@@ -1016,7 +1065,7 @@ jobs:
  env-variable-input-custom-pixi-url:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - uses: ./
@@ -1029,7 +1078,7 @@ jobs:
  env-variable-input-precendence:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi.toml
        run: mv test/old-pixi-lockfiles/* .
      - uses: ./
@@ -1047,7 +1096,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/no-lockfile/* .
      - uses: ./
@@ -1069,7 +1118,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -1090,7 +1139,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/default/* .
      - uses: ./
@@ -1113,7 +1162,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/no-lockfile/* .
      - uses: ./
@@ -1134,7 +1183,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/no-lockfile/* .
      - uses: ./
@@ -1155,7 +1204,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/lockfile-not-up-to-date/* .
      - uses: ./
@@ -1176,7 +1225,7 @@ jobs:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Move pixi files
        run: mv test/no-lockfile/* .
      - uses: ./
@@ -23,7 +23,7 @@ GitHub Action to set up the [pixi](https://github.com/prefix-dev/pixi) package m
 ## Usage

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    pixi-version: v0.49.0

@@ -35,7 +35,7 @@ GitHub Action to set up the [pixi](https://github.com/prefix-dev/pixi) package m

 > [!WARNING]
 > Since pixi is not yet stable, the API of this action may change between minor versions.
-> Please pin the versions of this action to a specific version (i.e., `prefix-dev/setup-pixi@v0.8.14`) to avoid breaking changes.
+> Please pin the versions of this action to a specific version (i.e., `prefix-dev/setup-pixi@v0.9.1`) to avoid breaking changes.
 > You can automatically update the version of this action by using [Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot).
 >
 > Put the following in your `.github/dependabot.yml` file to enable Dependabot for your GitHub Actions:
@@ -74,7 +74,7 @@ In order to not exceed the [10 GB cache size limit](https://docs.github.com/en/a
 This can be done by setting the `cache-write` argument.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    cache: true
    cache-write: ${{ github.event_name == 'push' && github.ref_name == 'main' }}
@@ -119,7 +119,7 @@ test:
      environment: [py311, py312]
  steps:
    - uses: actions/checkout@v4
-    - uses: prefix-dev/setup-pixi@v0.8.14
+    - uses: prefix-dev/setup-pixi@v0.9.1
      with:
        environments: ${{ matrix.environment }}
 ```
@@ -129,7 +129,7 @@ test:
 The following example will install both the `py311` and the `py312` environment on the runner.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    # separated by spaces
    environments: >-
@@ -143,14 +143,34 @@ The following example will install both the `py311` and the `py312` environment
 > [!WARNING]
 > If you don't specify any environment, the `default` environment will be installed and cached, even if you use other environments.

+### Global Environments
+
+You can specify `pixi global install` commands by setting the `global-environments` input argument.
+This will create one environment per line, and install them.
+This is useful in particular to install executables that are needed for `pixi install` to work properly.
+For instance, the `keyring`, or `gcloud` executables. The following example shows how to install both in separate global environments.
+Note that global environments are not cached.
+
+```yml
+- uses: prefix-dev/setup-pixi@v0.9.1
+  with:
+    global-environments: |
+      google-cloud-sdk
+      keyring --with keyrings.google-artifactregistry-auth
+- run: |
+    gcloud --version
+    keyring --list-backends
+```
+
 ### Authentication

-There are currently three ways to authenticate with pixi:
+There are currently five ways to authenticate with pixi:

 - using a token
 - using a username and password
 - using a conda-token
 - using an S3 key pair
+- using keyring for PyPI registries

 For more information, see the [pixi documentation](https://prefix.dev/docs/pixi/authentication).

@@ -165,7 +185,7 @@ Specify the token using the `auth-token` input argument.
 This form of authentication (bearer token in the request headers) is mainly used at [prefix.dev](https://prefix.dev).

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    auth-host: prefix.dev
    auth-token: ${{ secrets.PREFIX_DEV_TOKEN }}
@@ -177,7 +197,7 @@ Specify the username and password using the `auth-username` and `auth-password`
 This form of authentication (HTTP Basic Auth) is used in some enterprise environments with [artifactory](https://jfrog.com/artifactory) for example.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    auth-host: custom-artifactory.com
    auth-username: ${{ secrets.PIXI_USERNAME }}
@@ -190,7 +210,7 @@ Specify the conda-token using the `auth-conda-token` input argument.
 This form of authentication (token is encoded in URL: `https://my-quetz-instance.com/t/<token>/get/custom-channel`) is used at [anaconda.org](https://anaconda.org) or with [quetz instances](https://github.com/mamba-org/quetz).

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    auth-host: anaconda.org # or my-quetz-instance.com
    auth-conda-token: ${{ secrets.CONDA_TOKEN }}
@@ -202,7 +222,7 @@ Specify the S3 key pair using the `auth-access-key-id` and `auth-secret-access-k
 You can also specify the session token using the `auth-session-token` input argument.

 ```yaml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    auth-host: s3://my-s3-bucket
    auth-s3-access-key-id: ${{ secrets.ACCESS_KEY_ID }}
@@ -213,6 +233,18 @@ You can also specify the session token using the `auth-session-token` input argu

 See the [pixi documentation](https://pixi.sh/latest/advanced/s3) for more information about S3 authentication.

+#### PyPI keyring provider
+
+You can specify whether to use keyring to look up credentials for PyPI.
+
+```yml
+- uses: prefix-dev/setup-pixi@v0.9.1
+  with:
+    pypi-keyring-provider: subprocess # one of 'subprocess', 'disabled'
+```
+
+You can use the [`global-environments`](#global-environments) input to install `keyring` and its backends.
+
 ### Custom shell wrapper

 `setup-pixi` allows you to run command inside of the pixi environment by specifying a custom shell wrapper with `shell: pixi run bash -e {0}`.
@@ -274,7 +306,7 @@ To this end, `setup-pixi` adds all environment variables set when executing `pix
 As a result, all installed binaries can be accessed without having to call `pixi run`.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    activate-environment: true
 ```
@@ -282,7 +314,7 @@ As a result, all installed binaries can be accessed without having to call `pixi
 If you are installing multiple environments, you will need to specify the name of the environment that you want to be activated.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    environments: >-
      py311
@@ -299,7 +331,7 @@ You can specify whether `setup-pixi` should run `pixi install --frozen` or `pixi
 See the [official documentation](https://prefix.dev/docs/pixi/cli#install) for more information about the `--frozen` and `--locked` flags.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    locked: true
    # or
@@ -318,7 +350,7 @@ The first one is the debug logging of the action itself.
 This can be enabled by running the action with the `RUNNER_DEBUG` environment variable set to `true`.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  env:
    RUNNER_DEBUG: true
 ```
@@ -336,7 +368,7 @@ The second type is the debug logging of the pixi executable.
 This can be specified by setting the `log-level` input.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    # one of `q`, `default`, `v`, `vv`, or `vvv`.
    log-level: vvv
@@ -362,7 +394,7 @@ If nothing is specified, `post-cleanup` will default to `true`.
 On self-hosted runners, you also might want to alter the default pixi install location to a temporary location. You can use `pixi-bin-path: ${{ runner.temp }}/bin/pixi` to do this.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    post-cleanup: true
    # ${{ runner.temp }}\Scripts\pixi.exe on Windows
@@ -378,7 +410,7 @@ You can also use a preinstalled local version of pixi on the runner by not setti
 This can be overwritten by setting the `manifest-path` input argument.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    manifest-path: pyproject.toml
 ```
@@ -388,7 +420,7 @@ This can be overwritten by setting the `manifest-path` input argument.
 If you only want to install pixi and not install the current project, you can use the `run-install` option.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    run-install: false
 ```
@@ -399,7 +431,7 @@ You can also download pixi from a custom URL by setting the `pixi-url` input arg
 Optionally, you can combine this with the `pixi-url-headers` input argument to supply additional headers for the download request, such as a bearer token.

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    pixi-url: https://pixi-mirror.example.com/releases/download/v0.48.0/pixi-x86_64-unknown-linux-musl
    pixi-url-headers: '{"Authorization": "Bearer ${{ secrets.PIXI_MIRROR_BEARER_TOKEN }}"}'
@@ -415,7 +447,7 @@ It will be rendered with the following variables:
 By default, `pixi-url` is equivalent to the following template:

 ```yml
- uses: prefix-dev/setup-pixi@v0.8.14
+- uses: prefix-dev/setup-pixi@v0.9.1
  with:
    pixi-url: |
      {{#if latest~}}
@@ -23,6 +23,9 @@ inputs:
  environments:
    description: |
      A space-separated list of environments to install. If not specified, only the default environment is installed.
+  global-environments:
+    description: |
+      A newline-separated list of packages to install globally with `pixi global install`.
  activate-environment:
    description: |
      If the installed environment should be "activated" for the current job, modifying `$GITHUB_ENV` and
@@ -63,12 +66,16 @@ inputs:
    description: Secret access key to use for S3 authentication.
  auth-s3-session-token:
    description: Session token to use for S3 authentication.
+  pypi-keyring-provider:
+    description: |
+      Specifies whether to use keyring to look up credentials for PyPI.
+      options: disabled, subprocess
  post-cleanup:
    description: |
      If the action should clean up after itself. Defaults to `true`.
      If `true`, the pixi environment, the pixi binary and the rattler files in ~/.rattler and ~/.cache/rattler are removed.

 runs:
-  using: node20
+  using: node24
  main: dist/index.js
  post: dist/post.js
@@ -1,6 +1,6 @@
 {
  "name": "setup-pixi",
-  "version": "0.8.14",
+  "version": "0.9.1",
  "private": true,
  "description": "Action to set up the pixi package manager.",
  "scripts": {
@@ -22,25 +22,25 @@
  "author": "Pavel Zwerschke <pavelzw@gmail.com>",
  "license": "BSD-3-Clause",
  "dependencies": {
-    "@actions/cache": "^4.0.3",
+    "@actions/cache": "^4.0.5",
    "@actions/core": "^1.11.1",
    "@actions/exec": "^1.1.1",
    "@actions/io": "^1.1.3",
    "@actions/tool-cache": "^2.0.2",
    "handlebars": "^4.7.8",
-    "smol-toml": "^1.4.0",
+    "smol-toml": "^1.4.2",
    "untildify": "^5.0.0",
    "which": "^5.0.0",
-    "zod": "^3.25.67"
+    "zod": "^4.1.5"
  },
  "devDependencies": {
-    "@eslint/js": "^9.30.0",
-    "@types/node": "^24.0.8",
+    "@eslint/js": "^9.34.0",
+    "@types/node": "^24.3.0",
    "@types/which": "^3.0.4",
-    "eslint": "^9.30.0",
+    "eslint": "^9.34.0",
    "prettier": "^3.6.2",
    "tsup": "^8.4.0",
-    "typescript": "^5.8.2",
-    "typescript-eslint": "^8.35.1"
+    "typescript": "^5.9.2",
+    "typescript-eslint": "^8.41.0"
  }
 }
@@ -10,48 +10,44 @@ import { execute, pixiCmd, renderPixiUrl } from './util'
 import { saveCache, tryRestoreCache } from './cache'
 import { activateEnvironment } from './activate'

-const downloadPixi = (source: PixiSource) => {
+const downloadPixi = async (source: PixiSource) => {
  const url = renderPixiUrl(source.urlTemplate, source.version)
-  return core.group('Downloading Pixi', () => {
+  await core.group('Downloading Pixi', async () => {
    core.debug('Installing pixi')
    core.debug(`Downloading pixi from ${url}`)
    core.debug(`Using headers: ${JSON.stringify(source.headers)}`)
-    return fs
-      .mkdir(path.dirname(options.pixiBinPath), { recursive: true })
-      .then(() => downloadTool(url, options.pixiBinPath, undefined, source.headers))
-      .then((_downloadPath) => fs.chmod(options.pixiBinPath, 0o755))
-      .then(() => {
-        core.info(`Pixi installed to ${options.pixiBinPath}`)
-      })
+    await fs.mkdir(path.dirname(options.pixiBinPath), { recursive: true })
+    await downloadTool(url, options.pixiBinPath, undefined, source.headers)
+    await fs.chmod(options.pixiBinPath, 0o755)
+    core.info(`Pixi installed to ${options.pixiBinPath}`)
  })
 }

-const pixiLogin = () => {
+const pixiLogin = async () => {
  const auth = options.auth
  if (!auth) {
    core.debug('Skipping pixi login.')
-    return Promise.resolve(0)
+    return
  }
  core.debug(`auth keys: ${Object.keys(auth).toString()}`)
-  return core.group('Logging in to private channel', () => {
+  await core.group('Logging in to private channel', async () => {
    // tokens get censored in the logs as long as they are a github secret
    if ('token' in auth) {
      core.debug(`Logging in to ${auth.host} with token`)
-      return execute(pixiCmd(`auth login --token ${auth.token} ${auth.host}`, false))
-    }
-    if ('username' in auth) {
+      await execute(pixiCmd(`auth login --token ${auth.token} ${auth.host}`, false))
+    } else if ('username' in auth) {
      core.debug(`Logging in to ${auth.host} with username and password`)
-      return execute(pixiCmd(`auth login --username ${auth.username} --password ${auth.password} ${auth.host}`, false))
-    }
-    if ('s3AccessKeyId' in auth) {
+      await execute(pixiCmd(`auth login --username ${auth.username} --password ${auth.password} ${auth.host}`, false))
+    } else if ('s3AccessKeyId' in auth) {
      core.debug(`Logging in to ${auth.host} with s3 credentials`)
      const command = auth.s3SessionToken
        ? `auth login --s3-access-key-id ${auth.s3AccessKeyId} --s3-secret-access-key ${auth.s3SecretAccessKey} --s3-session-token ${auth.s3SessionToken} ${auth.host}`
        : `auth login --s3-access-key-id ${auth.s3AccessKeyId} --s3-secret-access-key ${auth.s3SecretAccessKey} ${auth.host}`
-      return execute(pixiCmd(command, false))
+      await execute(pixiCmd(command, false))
+    } else if ('condaToken' in auth) {
+      core.debug(`Logging in to ${auth.host} with conda token`)
+      await execute(pixiCmd(`auth login --conda-token ${auth.condaToken} ${auth.host}`, false))
    }
-    core.debug(`Logging in to ${auth.host} with conda token`)
-    return execute(pixiCmd(`auth login --conda-token ${auth.condaToken} ${auth.host}`, false))
  })
 }

@@ -59,33 +55,53 @@ const addPixiToPath = () => {
  core.addPath(path.dirname(options.pixiBinPath))
 }

+const pixiGlobalInstall = async () => {
+  const { globalEnvironments } = options
+  if (!globalEnvironments) {
+    core.debug('Skipping pixi global install.')
+    return
+  }
+  core.debug('Installing global environments')
+  for (const env of globalEnvironments) {
+    const command = `global install ${env}`
+    await core.group(`pixi ${command}`, () => execute(pixiCmd(command, false)))
+  }
+}
+
 const pixiInstall = async () => {
  if (!options.runInstall) {
    core.debug('Skipping pixi install.')
-    return Promise.resolve()
+    return
  }
-  return tryRestoreCache()
-    .then(async (_cacheKey) => {
-      if (options.environments) {
-        for (const environment of options.environments) {
-          core.debug(`Installing environment ${environment}`)
-          const command = `install -e ${environment}${options.frozen ? ' --frozen' : ''}${
-            options.locked ? ' --locked' : ''
-          }`
-          await core.group(`pixi ${command}`, () => execute(pixiCmd(command)))
-        }
-      } else {
-        const command = `install${options.frozen ? ' --frozen' : ''}${options.locked ? ' --locked' : ''}`
-        return core.group(`pixi ${command}`, () => execute(pixiCmd(command)))
-      }
-    })
-    .then(saveCache)
+
+  await tryRestoreCache()
+
+  const environments = options.environments ?? [undefined]
+  for (const environment of environments) {
+    core.debug(`Installing environment ${environment ?? 'default'}`)
+    let command = `install`
+    if (environment) {
+      command += ` -e ${environment}`
+    }
+    if (options.frozen) {
+      command += ' --frozen'
+    }
+    if (options.locked) {
+      command += ' --locked'
+    }
+    if (options.pypiKeyringProvider) {
+      command += ` --pypi-keyring-provider ${options.pypiKeyringProvider}`
+    }
+    await core.group(`pixi ${command}`, () => execute(pixiCmd(command)))
+  }
+
+  await saveCache()
 }

 const generateList = async () => {
  if (!options.runInstall) {
    core.debug('Skipping pixi list.')
-    return Promise.resolve()
+    return
  }
  if (
    'version' in options.pixiSource &&
@@ -95,7 +111,7 @@ const generateList = async () => {
    core.warning(
      'pixi list is not supported for pixi versions < `v0.13.0`. Please set `pixi-version` to `v0.13.0` or later.'
    )
-    return Promise.resolve()
+    return
  }
  let command = 'list'
  if (
@@ -111,17 +127,21 @@ const generateList = async () => {
  if (options.environments) {
    for (const environment of options.environments) {
      core.debug(`Listing environment ${environment}`)
-      await core.group(`pixi ${command} -e ${environment}`, () => execute(pixiCmd(`${command} -e ${environment}`)))
+      const cmd = `${command} -e ${environment}`
+      await core.group(`pixi ${cmd}`, () => execute(pixiCmd(cmd)))
    }
-    return Promise.resolve()
  } else {
-    return core.group(`pixi ${command}`, () => execute(pixiCmd(command)))
+    await core.group(`pixi ${command}`, () => execute(pixiCmd(command)))
  }
 }

-const generateInfo = () => core.group('pixi info', () => execute(pixiCmd('info')))
+const generateInfo = async () => {
+  await core.group('pixi info', () => execute(pixiCmd('info')))
+}

-const activateEnv = (environment: string) => core.group('Activate environment', () => activateEnvironment(environment))
+const activateEnv = async (environment: string) => {
+  await core.group('Activate environment', () => activateEnvironment(environment))
+}

 const run = async () => {
  core.debug(`process.env.HOME: ${process.env.HOME ?? '-'}`)
@@ -131,6 +151,7 @@ const run = async () => {
  }
  addPixiToPath()
  await pixiLogin()
+  await pixiGlobalInstall()
  await pixiInstall()
  await generateInfo()
  await generateList()
@@ -139,9 +160,12 @@ const run = async () => {
  }
 }

-run()
-  .then(() => exit(0)) // workaround for https://github.com/actions/toolkit/issues/1578
-  .catch((error: unknown) => {
+const main = async () => {
+  try {
+    await run()
+    // workaround for https://github.com/actions/toolkit/issues/1578
+    exit(0)
+  } catch (error: unknown) {
    if (core.isDebug()) {
      throw error
    }
@@ -151,6 +175,10 @@ run()
    } else if (typeof error === 'string') {
      core.setFailed(error)
      exit(1)
+    } else {
+      throw error
    }
-    throw error
-  })
+  }
+}
+
+void main()
@@ -32,7 +32,9 @@ type Inputs = Readonly<{
  authS3AccessKeyId?: string
  authS3SecretAccessKey?: string
  authS3SessionToken?: string
+  pypiKeyringProvider?: 'disabled' | 'subprocess'
  postCleanup?: boolean
+  globalEnvironments?: string[]
 }>

 export interface PixiSource {
@@ -79,8 +81,10 @@ export type Options = Readonly<{
  cache?: Cache
  pixiBinPath: string
  auth?: Auth
+  pypiKeyringProvider?: 'disabled' | 'subprocess'
  postCleanup: boolean
  activatedEnvironment?: string
+  globalEnvironments?: string[]
 }>
 const pixiPath = 'pixi.toml'
 const pyprojectPath = 'pyproject.toml'
@@ -88,6 +92,9 @@ const pyprojectPath = 'pyproject.toml'
 const logLevelSchema = z.enum(['q', 'default', 'v', 'vv', 'vvv'])
 export type LogLevel = z.infer<typeof logLevelSchema>

+const pypiKeyringProviderSchema = z.enum(['disabled', 'subprocess'])
+export type PypiKeyringProvider = z.infer<typeof pypiKeyringProviderSchema>
+
 export const PATHS = {
  pixiBin: path.join(os.homedir(), '.pixi', 'bin', `pixi${os.platform() === 'win32' ? '.exe' : ''}`)
 }
@@ -113,7 +120,7 @@ const inputOrEnvironmentVariable = (key: string): string | undefined => {
  return undefined
 }

-const parseOrUndefined = <T>(key: string, schema: z.ZodSchema<T>, errorMessage?: string): T | undefined => {
+const parseOrUndefined = <T>(key: string, schema: z.ZodType<T>, errorMessage?: string): T | undefined => {
  const input = inputOrEnvironmentVariable(key)
  if (input === undefined) {
    return undefined
@@ -128,7 +135,7 @@ const parseOrUndefined = <T>(key: string, schema: z.ZodSchema<T>, errorMessage?:
  return maybeResult.data
 }

-const parseOrUndefinedJSON = <T>(key: string, schema: z.ZodSchema<T>): T | undefined => {
+const parseOrUndefinedJSON = <T>(key: string, schema: z.ZodType<T>): T | undefined => {
  const input = inputOrEnvironmentVariable(key)
  if (input === undefined) {
    return undefined
@@ -136,7 +143,7 @@ const parseOrUndefinedJSON = <T>(key: string, schema: z.ZodSchema<T>): T | undef
  return schema.parse(JSON.parse(input))
 }

-const parseOrUndefinedList = <T>(key: string, schema: z.ZodSchema<T>): T[] | undefined => {
+const parseOrUndefinedList = <T>(key: string, schema: z.ZodType<T>): T[] | undefined => {
  const input = inputOrEnvironmentVariable(key)
  if (input === undefined) {
    return undefined
@@ -147,6 +154,17 @@ const parseOrUndefinedList = <T>(key: string, schema: z.ZodSchema<T>): T[] | und
    .filter((s) => s !== '')
 }

+const parseOrUndefinedMultilineList = <T>(key: string, schema: z.ZodType<T>): T[] | undefined => {
+  const input = inputOrEnvironmentVariable(key)
+  if (input === undefined) {
+    return undefined
+  }
+  return input
+    .split('\n')
+    .map((s) => schema.parse(s.trim()))
+    .filter((s) => s !== '')
+}
+
 const validateInputs = (inputs: Inputs): void => {
  if (inputs.pixiUrlHeaders && !inputs.pixiUrl) {
    throw new Error('You need to specify pixi-url when using pixi-url-headers')
@@ -323,8 +341,11 @@ const inferOptions = (inputs: Inputs): Options => {
                s3SessionToken: inputs.authS3SessionToken
              }) as Auth)
  const postCleanup = inputs.postCleanup ?? true
+  const pypiKeyringProvider = inputs.pypiKeyringProvider
  return {
+    globalEnvironments: inputs.globalEnvironments,
    pixiSource,
+    pypiKeyringProvider,
    downloadPixi,
    logLevel,
    manifestPath,
@@ -382,6 +403,8 @@ const getOptions = () => {
    authS3AccessKeyId: parseOrUndefined('auth-s3-access-key-id', z.string()),
    authS3SecretAccessKey: parseOrUndefined('auth-s3-secret-access-key', z.string()),
    authS3SessionToken: parseOrUndefined('auth-s3-session-token', z.string()),
+    pypiKeyringProvider: parseOrUndefined('pypi-keyring-provider', pypiKeyringProviderSchema),
+    globalEnvironments: parseOrUndefinedMultilineList('global-environments', z.string()),
    postCleanup: parseOrUndefinedJSON('post-cleanup', z.boolean())
  }
  core.debug(`Inputs: ${JSON.stringify(inputs)}`)
Author	SHA1	Message	Date
Olivier LacroixandPavel Zwerschke	194d461b21	Add possibility to install global environments (#221 ) Co-authored-by: Pavel Zwerschke <pavelzw@gmail.com>	2025-09-22 11:51:37 +02:00
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	40ab2611f4	chore(deps): bump the nodejs group with 7 updates (#223 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-09-01 11:47:19 +00:00
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	83ecca31f5	chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 in the gh-actions group (#222 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-09-01 13:41:15 +02:00
Olivier Lacroix	ba511d5090	Add pypi-keyring-provider option (#220 )	2025-08-13 14:23:50 +02:00
Pavel Zwerschke	fef5c9568c	chore: Bump to node 24 (#219 )	2025-08-11 23:29:05 +02:00
dependabot[bot]dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Pavel Zwerschke	62618497c3	chore(deps): bump the nodejs group with 7 updates (#218 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pavel Zwerschke <pavelzw@gmail.com>	2025-08-11 21:09:58 +00:00