chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from bcff59fca682130d2e7271ca8589911b7ac0b8bf to 7e6bd45ee271b96e75484eeafea1b3e6139cd0c7 - #928
Conversation
…documentation.yml Bumps [huggingface/doc-builder/.github/workflows/build_pr_documentation.yml](https://github.com/huggingface/doc-builder) from bcff59fca682130d2e7271ca8589911b7ac0b8bf to 7e6bd45ee271b96e75484eeafea1b3e6139cd0c7. - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](huggingface/doc-builder@bcff59f...7e6bd45) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml dependency-version: 7e6bd45ee271b96e75484eeafea1b3e6139cd0c7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
github_actions
burtenshaw
added
enhancement
Cursor
|
The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Alignment Review Report
Scope: bumps the pinned SHA of the shared huggingface/doc-builder reusable workflow build_pr_documentation.yml from bcff59f -> 7e6bd45 (single line; # main comment preserved). This is the github-actions dependabot updater, which is in-scope (no exclude-paths).
Automated Checks
- Lint: PASS (N/A for this diff).
bash .claude/hooks/lint.shexits 1, but only on ~20 pre-existingenvs/**files (agent_world_model_env, chat_env, coding_tools_env, jupyter_env, opencode_env, repl_env, terminus_env, textarena_env) that this PR does not touch. The Python-only hook doesn't lint.github/workflows/*.yml, so this change introduces no lint issues. - Debug code: CLEAN.
bash .claude/hooks/check-debug.shreports only pre-existingprint/TODOmatches undersrc/; the changed file is YAML outside the hook's scan and adds no debug code.
Open RFCs Context
Open RFCs — 000/001/002/003/005 (In Review), 004 (rubrics), 010 (Draft) — cover the env spec, abstractions, MCP, rubrics/rewards, and harnesses. None touch CI, GitHub Actions, or the docs-build pipeline, so none is relevant to this change.
Tier 1: Fixes Required
None.
Tier 2: Alignment Discussion
Principle Conflicts
None identified. Pinning reusable workflows to a full commit SHA is the recommended supply-chain hardening and is consistent with PRINCIPLES.md "Container isolation for reproducibility and security"; letting dependabot keep the pin fresh preserves that.
RFC Conflicts
None identified.
Verification performed
- New SHA is legitimate + current.
7e6bd45exists inhuggingface/doc-builder(dated 2026-07-06), andcompare bcff59f...7e6bd45is a clean fast-forward (9 ahead, 0 behind, statusahead), so the# maincomment stays accurate. Its tip commit is doc-builder #803 "Add tomli to openenv real doc-build deps" — an OpenEnv-specific docs-build fix, i.e. a positive reason to take this bump. - Caller contract intact. The reusable workflow's
workflow_callinputs still declarecommit_sha,pr_number,package(required) andversion_tag_suffix(optional) — exactly what this workflow passes. The bump only removes an unused optional input (custom_container) and adds a new optional one (fail_on_warning, defaultfalse); no new required input, so theuses:call won't fail to start. - Artifact contract intact. build@new uploads artifact
doc-build-artifact; the companionupload_pr_documentation.yml(still onbcff59f) downloadsdoc-build-artifact— names match (bothactions/*-artifact@v4), so the temporary build/upload SHA split is benign.
Summary
- 0 mechanical issues to fix
- 0 alignment points for human review
- 0 RFC conflicts to discuss
Non-blocking note: upload_pr_documentation.yml:11 and build_documentation.yml:12 still pin the old bcff59f. That's expected — dependabot opens a separate PR per uses: path — but it's worth landing the companion bumps so all three doc-builder pins track the same # main SHA. FYI @burtenshaw.
Sent by Cursor Automation: Pre-review
| build: | ||
| if: github.event.pull_request.draft == false | ||
| uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@bcff59fca682130d2e7271ca8589911b7ac0b8bf # main | ||
| uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@7e6bd45ee271b96e75484eeafea1b3e6139cd0c7 # main |
There was a problem hiding this comment.
Verified safe. 7e6bd45 is a clean fast-forward of bcff59f on doc-builder main (9 ahead / 0 behind), so # main stays accurate. The reusable workflow's workflow_call inputs still accept this caller's commit_sha / pr_number / package / version_tag_suffix — the bump only drops the unused optional custom_container and adds an optional fail_on_warning (default false), so there's no new required input and the call won't break. Tip commit is doc-builder #803 "Add tomli to openenv real doc-build deps", an OpenEnv-specific docs-build fix.
|
Superseded by aggregate Dependabot PR #930. Closing this single Dependabot PR so maintainers have one non-env dependency rollup to review. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from bcff59fca682130d2e7271ca8589911b7ac0b8bf to 7e6bd45ee271b96e75484eeafea1b3e6139cd0c7.
Commits
7e6bd45Add tomli to openenv real doc-build deps (#803)e60a538Add --mock_deps: build docs without installing heavy dependencies (#801)a601280feat: page-level HTML build cache backed by HF storage buckets (#800)41c17d1refactor: modernize build and preview commands (#798)2f7376eSimplify docstring pipeline: python emits the <Docstring> component directly ...7241b19refactor(kit): migrate components to Svelte 5 runes syntax (#795)707e116fix(kit): keep shorthand doc URLs in the address bar on client-side nav (#794)e2e7253fix(kit): repair <table><tr> nesting for Svelte 5 compatibility (#793)c669beaUpgrade kit/ to Svelte 5, SvelteKit 2, Vite 7, Tailwind 4, ESLint 10 (#792)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Low Risk
Single SHA pin in CI with no application or secrets changes; main risk is upstream doc-build behavior changes on PR previews.
Overview
Updates the Build PR Documentation reusable workflow reference from
bcff59fto7e6bd45onhuggingface/doc-builder. PR doc builds foropenenvwill run against the newer shared workflow (including upstream fixes such as adding tomli to openenv doc-build deps).No changes to workflow inputs (
commit_sha,pr_number,package,version_tag_suffix) or job conditions.Reviewed by Cursor Bugbot for commit b44ba03. Bugbot is set up for automated code reviews on this repo. Configure here.