chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 6dd1bdab58a8564730f633d70e76bb1ef57ec627

[dependabot]

Bumps huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 6dd1bdab58a8564730f633d70e76bb1ef57ec627.

Commits

• 6dd1bda Preserve Markdown callout blockquote lines in docbuilder style docstring fo...
• 931031b Add python_version input to doc build workflows (#808)
• 9a49534 fix(kit): escape curly braces in markdown link & image URLs (#812)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Low Risk
Single CI workflow SHA change with no application or runtime code touched; risk is limited to how PR docs are built.

Overview
Updates the reusable workflow reference in .github/workflows/build_pr_documentation.yml from commit 7ccf6c0 to 6dd1bdab on huggingface/doc-builder’s build_pr_documentation.yml.

PR doc builds for openenv still use the same inputs (commit_sha, pr_number, package, version_tag_suffix); only the upstream workflow version changes. That bump pulls in upstream fixes such as preserved Markdown callout blockquotes in docstring formatting, optional python_version on doc build workflows, and escaped curly braces in markdown link/image URLs.

^{Reviewed by Cursor Bugbot for commit 98e8aae. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Automated two-tier review of this dependabot bump of the HF-owned doc-builder reusable PR-docs workflow: build_pr_documentation.yml@7ccf6c02… → @6dd1bdab….

Automated Checks

• Lint: N/A (PASS for PR scope) — this PR changes only one uses: line in .github/workflows/build_pr_documentation.yml (0 Python files). .claude/hooks/lint.sh is Python-only; here it exits 1 solely because uv isn't installed on the review VM (Error: 'uv' is not installed or not in PATH), and its baseline also flags ~25 pre-existing envs/** files unrelated to this diff. Nothing in this PR is lintable.
• Debug code: CLEAN (for changed files) — .claude/hooks/check-debug.sh reports only pre-existing src/ hits (cli/commands/push.py, fork.py, import_env.py, core/containers/runtime/providers.py, plus serve/__main__/test_local_docker_provider TODOs). None are in this PR's diff; no debugger statements.

Open RFCs Context

RFCs on main: 000-project-phases, 001-abstractions, 002-env-spec, 003-mcp-support, 004-rubrics, 005-agentic-harnesses (In Review), 010-echo-env-token-world-model (Draft). None govern CI, GitHub Actions, dependency management, or the docs-build pipeline, so a doc-builder workflow SHA bump has no RFC surface.

Tier 1: Fixes Required

None. Verified this is a clean, interface-safe bump:

• Legit + current: 7ccf6c02…6dd1bdab = ahead 3 / behind 0 (clean fast-forward); 6dd1bdab…main = identical → 6dd1bdab is doc-builder main HEAD, so the trailing # main comment stays accurate. The 3 commits are doc-builder #812 (mdsvex kit escape), #808 ("Add python_version input to doc build workflows"), and #756 ("Preserve Markdown callout blockquote lines…", touches only style_doc.py + tests).
• Caller contract safe: the reusable workflow's own definition changed (via #808) but backward-compatibly — it only adds an optional python_version input (type: string, no required:, no default:) and rewrites uv venv → uv venv ${{ inputs.python_version && format('--python {0}', inputs.python_version) || '' }} (byte-identical when unset). Required workflow_call inputs are still exactly commit_sha / pr_number / package; OpenEnv's caller supplies all three (+ version_tag_suffix: "") and does not set python_version, so behavior is unchanged. This workflow consumes no secrets.
• Artifact contract intact: the final actions/upload-artifact@…v4.6.2 step still publishes name: doc-build-artifact (consumed by upload_pr_documentation.yml) — untouched by this delta.
• Security: still pinned to a full 40-char commit SHA (not a tag/branch).
• Mergeable: git merge-tree against current origin/main (5359534c, == PR base) is CLEAN (single tree, no conflict) — a clean 1-commit fast-forward.

Tier 2: Alignment Discussion

Principle Conflicts

None identified. No runtime API / reward-placement / client-server / MCP-WebSocket / container / credential invariant is touched. Full-SHA pinning + dependabot freshness aligns with the reproducibility/security principle.

RFC Conflicts

None identified.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Non-blocking notes (informational):

• Sibling pin skew (expected): dependabot tracks each reusable-workflow path separately, so after this PR build_pr_documentation.yml:13 is @6dd1bdab while build_documentation.yml:12 (build_main) and upload_pr_documentation.yml:11 remain @7ccf6c02. This reconverges as the sibling bumps (or a codex aggregate) land — nothing to fix here.
• Supersedes #1076: the earlier build_pr bump #1076 (to 931031bf, doc-builder #808 tip) is now CLOSED; this PR advances one commit further to 6dd1bdab (#756 tip).

LGTM — safe to merge.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Verified this SHA bump: 7ccf6c02…6dd1bdab is a clean fast-forward (ahead 3 / behind 0) and 6dd1bdab == doc-builder main HEAD, so the # main comment stays accurate.

The reusable workflow's workflow_call interface only gains an optional python_version input (doc-builder #808) — required inputs remain commit_sha/pr_number/package, all supplied by this caller, and python_version is left unset so the build venv keeps the runner's system Python (identical behavior). The doc-build-artifact upload step is unchanged, and the pin stays a full 40-char SHA. No new required input → won't break.

[dependabot]

Superseded by #1090.