more ci

Author: ejfine

.copier-answers.yml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: v0.0.60-2-ga533c73
+_commit: v0.0.60-3-g7d8440d
 _src_path: gh:LabAutomationAndScreening/copier-base-template.git
 description: Copier template for creating Python libraries and executables
 python_ci_versions:

.github/workflows/ci.yaml

@@ -9,19 +9,23 @@ on:
 env:
   PYTHONUNBUFFERED: True
   PRE_COMMIT_HOME: ${{ github.workspace }}/.precommit_cache
+  UV_PYTHON_PREFERENCE: only-system
 
 permissions:
-    id-token: write
     contents: write # needed for mutex, and updating dependabot branches
     statuses: write # needed for updating status on Dependabot PRs
 
 jobs:
   get-values:
     uses: ./.github/workflows/get-values.yaml
+    permissions:
+      contents: write # needed for updating dependabot branches
 
   pre-commit:
     needs: [ get-values ]
     uses: ./.github/workflows/pre-commit.yaml
+    permissions:
+      contents: write # needed for mutex, and updating dependabot branches
     with:
       python-version: 3.12.7
 
@@ -125,6 +129,8 @@ jobs:
   required-check:
     runs-on: ubuntu-24.04
     needs: [ lint-matrix, get-values ]
+    permissions:
+      statuses: write # needed for updating status on Dependabot PRs
     if: always()
     steps:
       - name: fail if prior job failure