Skip to content

chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c - #1039

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/huggingface/doc-builder/dot-github/workflows/build_pr_documentation.yml-7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c
Closed

chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c#1039
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/huggingface/doc-builder/dot-github/workflows/build_pr_documentation.yml-7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c.

Commits
  • 7ccf6c0 fix(ci): read _versions.yml from the serving bucket (#811)
  • 23dc84b Fix .md export losing method names, signatures and section labels (#810)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Low Risk
Single SHA pin change in CI with no application or runtime code touched.

Overview
Updates the reusable Build PR Documentation workflow pin in .github/workflows/build_pr_documentation.yml from 6108e850… to 7ccf6c02… on huggingface/doc-builder main.

Call-site inputs (commit_sha, pr_number, package: openenv, etc.) are unchanged; only the upstream workflow revision moves forward, picking up doc-builder CI fixes (e.g. reading _versions.yml from the serving bucket) and .md export improvements from the pinned range.

Reviewed by Cursor Bugbot for commit c868fce. Bugbot is set up for automated code reviews on this repo. Configure here.

…documentation.yml

Bumps [huggingface/doc-builder/.github/workflows/build_pr_documentation.yml](https://github.com/huggingface/doc-builder) from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c.
- [Release notes](https://github.com/huggingface/doc-builder/releases)
- [Commits](huggingface/doc-builder@6108e85...7ccf6c0)

---
updated-dependencies:
- dependency-name: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml
  dependency-version: 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies github_actions Pull requests that update GitHub Actions code labels Aug 4, 2026
@burtenshaw burtenshaw added enhancement New feature or request size: small Small pull request labels Aug 4, 2026 — with Cursor
@bot-ci-comment

bot-ci-comment Bot commented Aug 4, 2026

Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alignment Review Report

Scope: Dependabot bump of the pinned commit SHA for the reusable huggingface/doc-builder PR-docs workflow (6108e857ccf6c0). Single-line change in .github/workflows/build_pr_documentation.yml; no Python/framework code is touched.

Automated Checks

  • Lint: PASS (for this PR).claude/hooks/lint.sh reports pre-existing formatting debt in ~25 envs/ files (and embedded README code fences under ruff 0.16.1), but none are in this PR's diff. The only changed file is a GitHub Actions YAML, which is not covered by usort/ruff. This change introduces zero lint issues.
  • Debug code: CLEAN (for this PR).claude/hooks/check-debug.sh flags only pre-existing console.print/print(...)/TODO occurrences in src/, none introduced here.

Supply-chain verification (dependency bump)

  • New ref 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c is a legitimate commit in huggingface/doc-builder (author XciD, 2026-07-31, _"fix(ci): read versions.yml from the serving bucket (#811)").
  • Compare old→new: ahead_by 2, behind_by 0 — a clean fast-forward descendant, no history rewrite or divergence.
  • The two upstream commits only modify build_main_documentation.yml, src/doc_builder/utils.py, and tests/test_utils.py. The reusable workflow this repo consumes (build_pr_documentation.yml) is unchanged between the two SHAs, so this repo's PR-docs build behavior is effectively unaffected.
  • Both refs remain pinned to a full 40-char commit SHA (good supply-chain hygiene — no move to a mutable tag/branch).

Open RFCs Context

In Review: 000 (project phases), 001 (abstractions), 002 (env-spec), 003 (MCP support), 005 (agentic harnesses). Draft: 010 (ECHO env-token world model). All concern framework design; none relate to CI or doc-builder, so none are relevant to this change.

Tier 1: Fixes Required

  • None. (Repo-wide lint/debug findings are outside this PR's diff and pre-date it.)

Tier 2: Alignment Discussion

Principle Conflicts

None identified — CI-infrastructure-only change. It does not touch the Gymnasium-style API (reset/step/state), client–server separation, rewards-in-environment, the MCP/WebSocket dual-API boundary, generics, or Pydantic wire types.

RFC Conflicts

None identified.

Summary

  • 0 mechanical issues to fix
  • 0 alignment points for human review
  • 0 RFC conflicts to discuss

Low-risk, well-formed dependency bump. No blocking issues found.

Open in Web View Automation 

Sent by Cursor Automation: Pre-review

build:
if: github.event.pull_request.draft == false
uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@6108e850ae1cf2f71bb0815a600bcd50c39abfa7 # main
uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c # main

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Supply-chain check on this pin: 7ccf6c0 is a legitimate huggingface/doc-builder commit (author XciD, 2026-07-31) and a direct descendant of the previous pin 6108e85 (ahead 2 / behind 0 — no history rewrite). The reusable build_pr_documentation.yml workflow consumed here is unchanged between the two SHAs; the upstream delta only touches build_main_documentation.yml and src/doc_builder/utils.py. Still pinned to a full 40-char SHA. Looks safe to merge.

@burtenshaw

Copy link
Copy Markdown
Collaborator

Closing in favor of aggregate non-env Dependabot PR #1069.

@burtenshaw burtenshaw closed this Aug 6, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/huggingface/doc-builder/dot-github/workflows/build_pr_documentation.yml-7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c branch August 6, 2026 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies enhancement New feature or request github_actions Pull requests that update GitHub Actions code size: small Small pull request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant