chore(deps): bump huggingface/doc-builder/.github/workflows/build_main_documentation.yml from b0f9a6e3b6aa912656cbda9f74896eb721d29421 to bcff59fca682130d2e7271ca8589911b7ac0b8bf#784
Conversation
…n_documentation.yml Bumps [huggingface/doc-builder/.github/workflows/build_main_documentation.yml](https://github.com/huggingface/doc-builder) from b0f9a6e3b6aa912656cbda9f74896eb721d29421 to bcff59fca682130d2e7271ca8589911b7ac0b8bf. - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](huggingface/doc-builder@b0f9a6e...bcff59f) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/build_main_documentation.yml dependency-version: bcff59fca682130d2e7271ca8589911b7ac0b8bf dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
github_actions
|
The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update. |
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review
Tier 1 — mechanical: PASS. Exactly one line changed: the SHA pin on uses: for huggingface/doc-builder/.github/workflows/build_main_documentation.yml (b0f9a6e… → bcff59f…) in .github/workflows/build_documentation.yml. The # main comment is preserved and the with block (commit_sha, package: openenv) is untouched. Well-formed YAML.
Tier 2 — alignment: No concerns. SHA-pinning third-party reusable workflows is the correct supply-chain-safe pattern; this bump maintains it.
Approved.
Automated review by Claude Code | Learn more
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Tier 1 (correctness): Clean one-line Dependabot bump — advances the huggingface/doc-builder reusable workflow build_main_documentation.yml pin from b0f9a6e to bcff59f in build_documentation.yml. Both are full 40-char SHAs, the # main comment is preserved, and YAML is valid.
Tier 2 (alignment): No concerns. CI/docs-only; no runtime invariants affected. Consistent with the SHA-pinning convention for the doc-builder reusable workflows.
Verdict: approve.
Automated review by Claude Code | Learn more
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review (automated)
Tier 1 (bugs/lint): None. Single-line SHA pin bump for the reusable workflow huggingface/doc-builder/.github/workflows/build_main_documentation.yml. Both SHAs are valid 40-char hashes; the # main comment stays accurate. Upstream change is a narrow doc-builder bugfix (prerender crash when a provider/task has no snippet).
Tier 2 (alignment): None. Touches only build_documentation.yml — no bearing on any OpenEnv principle or invariant.
Automated review by Claude Code | Learn more
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Tier 1 (correctness): Single-line bump of the pinned huggingface/doc-builder commit SHA in .github/workflows/build_documentation.yml (b0f9a6e… → bcff59f…). Both refs are valid full 40-char SHAs; only the pin changed (the with: block passing commit_sha/package: openenv is untouched). The # main comment stays accurate.
Tier 2 (alignment): CI-only; no source or invariant impact. Full-SHA pinning of the third-party reusable workflow is preserved — correct supply-chain hygiene. Upstream commit is a low-risk doc-rendering bugfix.
Verdict: approve.
Automated review by Claude Code | Learn more
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review
Automated checks (changed files): Lint PASS (YAML only) | Debug code CLEAN
Tier 1 — bugs / correctness
None. Single-line SHA advancement of the huggingface/doc-builder reusable workflow (build_main_documentation.yml): b0f9a6e3 → bcff59fc. # main comment preserved; inputs (commit_sha, package, secret) untouched.
Tier 2 — alignment
None. CI-only change; no environment code, agent API, reward logic, or invariant implicated.
Note: companion to #782 / #785 — all three target SHA bcff59fc and should land together.
Verdict: approve
Automated review by Claude Code | Learn more
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Routine Dependabot pinned-SHA bump for the HuggingFace doc-builder build_main_documentation.yml reusable workflow. Single-line change to the uses: ref (full 40-char SHA on main); with: parameters unchanged. Confined to CI documentation infrastructure, no source or invariant impact.
Verdict: approve
Automated review by Claude Code | Learn more
1 participant
Bumps huggingface/doc-builder/.github/workflows/build_main_documentation.yml from b0f9a6e3b6aa912656cbda9f74896eb721d29421 to bcff59fca682130d2e7271ca8589911b7ac0b8bf.
Commits
bcff59ffix(kit): don't crash prerender when a provider/task has no snippet (#791)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)