fix(deps): update module github.com/knights-analytics/hugot to v0.7.7

[renovate-fullsend]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/knights-analytics/hugot	v0.7.6 → v0.7.7

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

knights-analytics/hugot (github.com/knights-analytics/hugot)

v0.7.7

Compare Source

[0.7.7] - 2026-08-04

Changed

• Upgraded to CUDA 13
• Upgraded to ORT v1.28.0
• Upgraded to ORT GenAI v0.15.0
• Upgraded to GoMLX v0.28.2
• Fixes go tokenizer FIRST/MAX/AVERAGE aggregation (thanks @​luanlorenzo)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[renovate-fullsend]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.0 -> 1.26.5
github.com/gomlx/compute	v0.0.0-20260716164435-04857206aff7 -> v0.1.2
github.com/gomlx/go-huggingface	v0.4.0 -> v0.4.1
github.com/gomlx/go-xla	v0.3.0 -> v0.4.1
github.com/gomlx/gomlx	v0.28.0 -> v0.28.2
github.com/gomlx/onnx-gomlx	v0.5.0 -> v0.5.2
github.com/knights-analytics/ortgenai	v0.3.1 -> v0.3.2
github.com/yalue/onnxruntime_go	v1.31.0 -> v1.32.0
golang.org/x/exp	v0.0.0-20260718201538-764159d718ef -> v0.0.0-20260727155853-b88d891fe743

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:23 PM UTC · Completed 3:29 PM UTC

Commit: 86ed28e · View workflow run →

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[fullsend-ai-review]

Looks good to me

---

Labels: Renovate dependency version bump — go.mod and go.sum only

[fullsend-ai-retro]

🤖 Finished Retro · ✅ Success · Started 3:53 AM UTC · Completed 4:01 AM UTC

Commit: 86ed28e · View workflow run →

[fullsend-ai-retro]

Retro: PR #6019 — Renovate dependency bump (hugot v0.7.6 → v0.7.7)

Workflow outcome: Clean end-to-end. No rework, no human intervention, no findings.

Timeline

Time (UTC)	Event
2026-08-09 15:22	Renovate opens PR — go.mod + go.sum only (30 additions, 28 deletions)
2026-08-09 15:22	Review agent dispatched (run 31320928987)
2026-08-09 15:29	Review agent approves — "Looks good to me", labels ready-for-merge + dependencies
2026-08-10 03:50	Renovate automerges the PR
2026-08-10 03:53	Retro agent dispatched post-merge

What went well

• Correct classification: The review agent identified the PR as a mechanical/trivial dependency bump and appropriately skipped 4 of 6 review dimensions (security, cross-repo-contracts, intent-coherence, docs-currency).
• Security awareness: The agent checked the PR body for injection patterns — appropriate even for bot PRs.
• Good cache utilization: 777K cache-read tokens vs 45K cache-create tokens shows efficient prompt caching.
• No false positives: Zero findings from either sub-agent, leading to a clean approval with no noise for maintainers.

Remaining cost opportunity (covered by existing issues)

The review agent classified this PR as trivial scope but still dispatched 2 sub-agents (correctness at Opus, style-conventions at Sonnet), both of which returned empty findings. Agent runtime was 4m19s at $1.19. With ~80+ Renovate PRs merged in this repo's recent history, this cost pattern is significant.

This PR provides fresh evidence for existing open issues — no new proposals are warranted:

• Review agent should short-circuit to lightweight mode after classifying a PR as a mechanical dependency bump agents#513: Review agent should short-circuit to lightweight mode after classifying a PR as a mechanical dependency bump. This PR is a textbook case — classification to trivial happened at 15:25:40, but sub-agents still ran for another 3 minutes.
• Add pre-review early exit for bot-authored dependency-update PRs agents#257: Pre-review early exit for bot-authored dependency-update PRs. A pre-review.sh gate could have avoided launching the sandbox entirely for this go.mod/go.sum-only Renovate PR.
• Review agent should downgrade sub-agent models based on scope classification, not just author identity agents#497: Model tier downgrade based on scope classification. The correctness sub-agent ran at Opus for a change with zero code — Sonnet or Haiku would suffice.
• Extend pre-retro early-exit to skip retro on trivially-handled mechanical PRs agents#649 and Collect OpenShell sandbox logs into the run output directory #276: Skip retro on trivially-handled mechanical PRs. This retro itself is analyzing a clean no-findings bot PR, producing no actionable proposals.
• Consolidate 22+ overlapping "skip retro/agent dispatch" issues into a single design issue #5817: Consolidation issue noting 22+ overlapping skip-dispatch issues across the repo. The pattern of filing per-PR evidence issues is itself a recognized problem.

Verdict

The workflow executed correctly — the review agent made sound decisions within its current design. The cost optimization opportunity (skipping sub-agents for trivial-classified dependency bumps) is well-identified across multiple existing issues. No new proposals filed.