From bb4dcc35200f84d9b4819104041b9a66981f0ac8 Mon Sep 17 00:00:00 2001
From: Tania Allard <taniar.allard@gmail.com>
Date: Thu, 14 Nov 2024 14:46:27 +0000
Subject: [PATCH] MAINT - Do not use `nodefaults` moving forward (#978)

---
 .github/workflows/generate_api_docs.yaml                   | 1 +
 .github/workflows/release.yaml                             | 3 +++
 .github/workflows/test_conda_store_server_integration.yaml | 1 +
 .github/workflows/test_conda_store_server_unit.yaml        | 1 +
 conda-store-server/environment-dev.yaml                    | 1 -
 5 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/generate_api_docs.yaml b/.github/workflows/generate_api_docs.yaml
index bdd37d44e..f41dc3c26 100644
--- a/.github/workflows/generate_api_docs.yaml
+++ b/.github/workflows/generate_api_docs.yaml
@@ -22,6 +22,7 @@ jobs:
         uses: conda-incubator/setup-miniconda@v3
         with:
           environment-file: conda-store-server/environment-dev.yaml
+          conda-remove-defaults: "true"
 
       - name: "Install conda-store-server 📦"
         run: python -m pip install conda-store-server/.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d5cc5db47..711d69aaf 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -16,6 +16,8 @@ env:
 
 permissions:
   contents: read # This is required for actions/checkout
+  attestations: write
+  id-token: write # Needed for attestations
 
 jobs:
   # Always build & verify package.
@@ -44,6 +46,7 @@ jobs:
         with:
           path: ${{ matrix.directory }}
           upload-name-suffix: "-${{ matrix.directory }}"
+          attest-build-provenance-github: "true"
 
       - run: echo Packages can be found at ${{ steps.baipp.outputs.dist }} and in artifact ${{ steps.baipp.outputs.artifact-name }}
 
diff --git a/.github/workflows/test_conda_store_server_integration.yaml b/.github/workflows/test_conda_store_server_integration.yaml
index 2b852457c..80c39ab4c 100644
--- a/.github/workflows/test_conda_store_server_integration.yaml
+++ b/.github/workflows/test_conda_store_server_integration.yaml
@@ -47,6 +47,7 @@ jobs:
             auto-activate-base: false
             activate-environment: conda-store-server-dev
             python-version: ${{ matrix.python-version }}
+            conda-remove-defaults: "true"
 
       - name: "Install dependencies 📦"
         run: |
diff --git a/.github/workflows/test_conda_store_server_unit.yaml b/.github/workflows/test_conda_store_server_unit.yaml
index 82abe80e2..38000e041 100644
--- a/.github/workflows/test_conda_store_server_unit.yaml
+++ b/.github/workflows/test_conda_store_server_unit.yaml
@@ -73,6 +73,7 @@ jobs:
             auto-activate-base: false
             activate-environment: conda-store-server-dev
             python-version: ${{ env.PYTHON_VERSION_DEFAULT }}
+            conda-remove-defaults: "true"
 
       # This fixes a "DLL not found" issue importing ctypes from the hatch env
       - name: "Reinstall Python on Windows runner"
diff --git a/conda-store-server/environment-dev.yaml b/conda-store-server/environment-dev.yaml
index b1b5e1353..974f0465a 100644
--- a/conda-store-server/environment-dev.yaml
+++ b/conda-store-server/environment-dev.yaml
@@ -11,7 +11,6 @@
 name: conda-store-server-dev
 channels:
   - conda-forge
-  - nodefaults
 dependencies:
   # must be kept in sync with the min supported version in pyproject.toml
   - python >=3.10