chore(deps): bump huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 931031bf2b54aabb134ceb54980a6a2860a00f11

[dependabot]

Bumps huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 931031bf2b54aabb134ceb54980a6a2860a00f11.

Commits

• 931031b Add python_version input to doc build workflows (#808)
• 9a49534 fix(kit): escape curly braces in markdown link & image URLs (#812)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Low Risk
Single-line reusable workflow pin for docs CI only; no application or auth logic changes.

Overview
Updates the reusable Hugging Face doc-builder workflow reference in build_documentation.yml from commit 7ccf6c0 to 931031b.

This pulls in upstream doc-builder changes (notably optional python_version input on doc build workflows and a kit fix for curly braces in markdown URLs). No local workflow inputs or secrets change—still only commit_sha, package, and version_tag_suffix are passed.

^{Reviewed by Cursor Bugbot for commit 6c65598. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Automated first-party (HF-owned) github-actions dependabot bump of the huggingface/doc-builder main-docs reusable-workflow pin in .github/workflows/build_documentation.yml: build_main_documentation.yml@7ccf6c02 → @931031bf (# main). Direct successor to #1038. Zero Python touched.

Automated Checks

• Lint: PASS (for this PR's scope) — the diff changes 0 .py files. .claude/hooks/lint.sh exits non-zero only on ~25 pre-existing envs/** formatting candidates (none in this diff), matching the documented baseline in AGENTS.md.
• Debug code: CLEAN (for this PR's scope) — check-debug.sh scans src/ only and reports pre-existing console.print (Rich CLI output) + TODOs under src/openenv/cli/**; none are in the changed workflow file.

Open RFCs Context

Open RFCs on main: 000 / 001 / 002 / 003 / 005 (In Review), 004 (no explicit status header), 010 (Draft). None govern CI, GitHub Actions, or the docs-build pipeline, so none are implicated. Full-SHA pinning + keeping the pin fresh is consistent with the reproducibility/security posture in PRINCIPLES.md.

Tier 1: Fixes Required

None. Verified:

• New SHA legitimate & current — 7ccf6c02...931031bf is a clean fast-forward (ahead 2, behind 0); 931031bf...main is identical, so 931031bf is doc-builder's current main HEAD and the # main comment stays accurate. Commits: "Add python_version input to doc build workflows (#808)" + "fix(kit): escape curly braces in markdown link & image URLs (#812)".
• Caller contract is backward-compatible — the only change to build_main_documentation.yml's on: workflow_call: interface is a new optional input python_version (string, "Defaults to the runner's system Python"). secrets (hf_token required, token optional) and every required input are unchanged. This repo's caller passes commit_sha + package: openenv + version_tag_suffix: "" + secret hf_token, so there is no new required input/secret ⇒ the reusable workflow still starts.
• Security — still pinned to a full 40-char commit SHA (not a tag/branch); hf_token remains a secrets.* reference (no credential exposure).
• Mergeability — git merge-tree origin/main <PR-head> is clean (exit 0, no conflicts); merge-base == current origin/main tip (5359534c) ⇒ clean 1-commit fast-forward (no #930-style stale-branch conflict).

Tier 2: Alignment Discussion

Principle Conflicts

None identified — no API / reward / client-server / MCP-WS / Pydantic surface is touched.

RFC Conflicts

None identified — no open RFC covers CI / GitHub Actions / the docs-build pipeline.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Non-blocking FYI (cc @burtenshaw, .github/dependabot.yml owner): expected sibling-pin skew while this PR is open — upload_pr_documentation.yml:11 and build_pr_documentation.yml:13 remain @7ccf6c02. The github-actions updater opens one PR per reusable-workflow path, so a sibling bump (or a codex aggregate) will reconverge all three. The #808 commit also adds the same optional python_version input to build_pr_documentation.yml, so that sibling bump will be backward-compatible too.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Supply-chain check passed. doc-builder main-docs reusable workflow 7ccf6c02 → 931031bf: clean fast-forward (ahead 2 / behind 0), and 931031bf == doc-builder main HEAD, so the # main comment stays accurate. Still a full 40-char SHA pin.

The only on: workflow_call: interface change is a new optional python_version input — this caller (commit_sha / package / version_tag_suffix + secret hf_token) passes no new required input/secret, so it's backward-compatible and won't break the build.

[dependabot]

Superseded by #1085.