<details><summary>Claude's draft</summary>

Add a regression guard that proves the Miniforge installer provisions the
base environment using only the embedded payload, with no network access.

- `scripts/test_offline.sh` (executable, shellcheck-clean): runs the built
  installer into a dedicated prefix and verifies the base env
  (python/conda/mamba/pip) is complete. Handles both the Unix `.sh` batch
  installer and the Windows `.exe` silent installer. Must run with outbound
  network blocked; if the installer reaches for conda.anaconda.org it fails.
- `.github/workflows/ci.yml`: new independent `test-offline` job
  (`needs: build`) that downloads the built installer artifact (does not
  rebuild) and runs it offline:
    - Linux:   `docker run --network none` (loopback only -> hard isolation).
    - macOS:   blocks the package hosts in /etc/hosts (ephemeral runner).
    - Windows: blocks the package hosts in the hosts file + flushes DNS.

Linux/macOS installers unpack with the bundled micromamba, so this would have
caught #883 (micromamba 2.6.0 downloading the embedded
packages from conda.anaconda.org). Windows installers unpack with
conda-standalone, so the Windows leg guards the conda-standalone offline path
instead (e.g. conda#15306) and is unaffected by #883.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Resume this Claude session:
```
claude --resume 5def403e-e73c-45bd-ad0a-4dcfaf6d402d
```
</details>

Co-authored-by: jaimergp <jaimergp@users.noreply.github.com>

Co-authored-by: jaimergp <jaimergp@users.noreply.github.com>

Offline installer ci test

Bumps the github-actions group with 2 updates: [azure/artifact-signing-action](https://github.com/azure/artifact-signing-action) and [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages).


Updates `azure/artifact-signing-action` from 1.2.0 to 2.0.0
- [Release notes](https://github.com/azure/artifact-signing-action/releases)
- [Commits](Azure/artifact-signing-action@b443cf8...c7ab2a8)

Updates `peaceiris/actions-gh-pages` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-gh-pages@4f9cc66...84c30a8)

---
updated-dependencies:
- dependency-name: azure/artifact-signing-action
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peaceiris/actions-gh-pages
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

…thub-actions-1e996aebf0

Bump the github-actions group with 2 updates

Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

…thub-actions-640176b5ab

Bump actions/checkout from 6 to 7 in the github-actions group

Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v7...v7.0.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

…n 3.14

…thub-actions-7a5a078ad4

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group

<details><summary>Claude's draft</summary>

The installer table said "Latest installers with Python 3.13", which is no
longer true once this branch ships Python 3.14 in the base environment.

- Update the table heading to Python 3.14.
- Add a "Support for Python 3.13 in the base environment" subsection naming
  26.3.2-3 as the last release with Python 3.13, linking its release page,
  and pointing users who only need a 3.13 interpreter at `conda create`
  rather than an older installer.

Resume this Claude session:
```
cd /home/mark/git/feedstock
claude --resume 228cf321-cf6a-4f27-a928-57a68edd29c0
```
</details>

Bump to conda 26.5.3, conda-libmamba-solver 26.7.0, Python 3.14