pixi/0.29.0-r0: cve remediation

[octo-sts]

pixi/0.29.0-r0: fix GHSA-vr26-jcq5-fjj8/GHSA-2326-pfpj-vx3h/

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/pixi.advisories.yaml

[octo-sts]

Open AI suggestions to solve the build error:

The error message is: "fatal: detected dubious ownership in repository at '/github/home'
To add an exception for this directory, call:

git config --global --add safe.directory /github/home
ERRO request failed error=\"Get \\\"./packages/apk-configuration\\\": unsupported protocol scheme \\\"\\\"\"
WARN error: failed to select a version for the requirement `lexical-core = \"^0.8\"\`
WARN candidate versions found which didn't match: 1.0.0
WARN location searched: crates.io index
WARN required by package `simd-json v0.13.10`
WARN     ... which satisfies dependency `simd-json = \"^0.13.10\"` (locked to 0.13.10) of package `rattler_conda_types v0.27.4`
WARN     ... which satisfies dependency `rattler_conda_types = \"^0.27.4\"` (locked to 0.27.4) of package `pixi v0.29.0 (/home/build)`' with error: 'exit status 101'"

1. Run `git config --global --add safe.directory /github/home`.
2. Ensure the URL in the GET request includes a valid protocol (e.g., http:// or https://).
3. Update `Cargo.toml` to use `lexical-core = "1.0.0"` or find a compatible version for `simd-json`.

[octo-sts]

Open AI suggestions to solve the build error:

The error message is: "Error: failed to parse the pom file: failed to run cargo update 'Updating git repository `https://github.com/astral-sh/uv`
WARN     Updating git repository `https://github.com/astral-sh/reqwest-middleware`
WARN     Updating crates.io index
WARN     Updating git repository `https://github.com/astral-sh/pubgrub`
WARN     Updating git repository `https://github.com/charliermarsh/rs-async-zip`
WARN     Updating git repository `https://github.com/charliermarsh/tl.git`
WARN error: failed to select a version for the requirement `lexical-core = "^0.8"`
WARN candidate versions found which didn't match: 1.0.0
WARN location searched: crates.io index
WARN required by package `simd-json v0.13.10`
WARN     ... which satisfies dependency `simd-json = "^0.13.10"` (locked to 0.13.10) of package `rattler_conda_types v0.27.4`
WARN     ... which satisfies dependency `rattler_conda_types = "^0.27.4"` (locked to 0.27.4) of package `pixi v0.29.0 (/home/build)`' with error: 'exit status 101'"

1. Update `Cargo.toml` to use `lexical-core = "1.0.0"` if compatible.
2. If not, find a compatible version of `simd-json` that works with `lexical-core = "1.0.0"`.
3. Run `cargo update` again.
4. If issues persist, consider pinning `simd-json` to a specific version that supports `lexical-core = "^0.8"`.

[powersj]

+1, confirmed 1.0.0 has fix by looking at GHSA-2326-pfpj-vx3h