v4.0.1

What's Changed

The headline of this release is that conda-lock now registers as a conda plugin, restoring conda lock as a native conda subcommand after conda 26.3 deprecated the old subcommand interface. It also tracks conda's bump to installer 1.x and hardens a release-time CI workflow.

Compatibility

• Register as a conda plugin. conda 26.3 deprecated the legacy interface for custom subcommands in favor of plugin hooks. This PR adds the proper hooks so conda lock keeps working on modern conda. By @beckermr in #905
• Update dependencies to track conda's bump to installer 1.x, by @beckermr in #911

Security & supply chain

• Remove unused issue_comment trigger from update.yml (reduces attack surface; maintainers can still trigger the workflow via workflow_dispatch), by @jaimergp in #910
• Resolve Dependabot alert for geopandas in a test fixture, by @maresb in #889

Maintenance

• Group GitHub Actions updates in Renovate, by @maresb in #890
• Update GitHub Actions, by @maresb in #893
• Group Renovate non-major updates and throttle PR bursts, by @maresb in #918
• [pre-commit.ci] pre-commit autoupdate, by @pre-commit-ci[bot] in #856

New Contributors

• @beckermr made their first contribution in #905

Full Changelog: v4.0.0...v4.0.1