chore(deps): bump huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 6dd1bdab58a8564730f633d70e76bb1ef57ec627

[dependabot]

Bumps huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c to 6dd1bdab58a8564730f633d70e76bb1ef57ec627.

Commits

• 6dd1bda Preserve Markdown callout blockquote lines in docbuilder style docstring fo...
• 931031b Add python_version input to doc build workflows (#808)
• 9a49534 fix(kit): escape curly braces in markdown link & image URLs (#812)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Low Risk
CI-only dependency pin with no application runtime or auth/data changes; risk is limited to documentation build/publish behavior.

Overview
Pins the documentation build job to a newer huggingface/doc-builder reusable workflow commit (7ccf6c0 → 6dd1bda) in .github/workflows/build_documentation.yml.

Behavior for openenv docs on pushes to main, doc-builder*, and v*-release is unchanged at the workflow level; the bump pulls in upstream doc-builder fixes (e.g. callout preservation in docstrings, optional python_version input, markdown URL escaping).

^{Reviewed by Cursor Bugbot for commit e548171. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Scope: this PR changes exactly one file — .github/workflows/build_documentation.yml (0 Python files). It bumps the pinned SHA of the reusable workflow huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 7ccf6c02 → 6dd1bdab (both annotated # main).

Automated Checks

• Lint: FAIL — pre-existing, not attributable to this PR. .claude/hooks/lint.sh runs ruff format over src/ tests/ envs/ and flags 25 envs/*.py files needing formatting. None of them are in this PR's diff (which is YAML-only), so they are pre-existing drift on main, not introduced here.
• Debug code: FOUND — pre-existing, not attributable to this PR. .claude/hooks/check-debug.sh scans src/ and reports print/console.print/TODO hits; all are in unrelated modules and pre-date this change. This YAML-only diff introduces none.

Supply-chain verification (GitHub API vs huggingface/doc-builder)

• New SHA 6dd1bdab exists — commit "Preserve Markdown callout blockquote lines in docbuilder style docstring formatting (#756)", dated 2026-08-17.
• Relationship to old pin: 3 commits ahead, 0 behind → clean forward-only bump, no history rewrite/divergence.
• Identical to the current tip of main on doc-builder → the # main annotation is accurate.
• Pinned to a full 40-char commit SHA (Actions supply-chain best practice).

Open RFCs Context

• In Review: 000 (project phases), 001 (abstractions), 002 (env-spec), 003 (MCP support), 005 (agentic harnesses). Draft: 010 (echo token world model).
• All concern core architecture (abstractions, env spec, MCP/WebSocket boundaries, rewards/rubrics, harnesses, world modeling). None cover CI or the documentation-build workflow, so there is nothing for this change to conflict with.

Tier 1: Fixes Required

• None for this PR. The lint/debug findings above are pre-existing in envs//src/ and out of scope for a Dependabot Actions bump — fixing them here would add unrelated churn to a Dependabot branch.

Tier 2: Alignment Discussion

Principle Conflicts

• None identified. This is a CI documentation-build pin; it does not touch the client/server boundary, the Gymnasium reset/step/state API, the MCP/WebSocket dual-API boundary, or reward computation.

RFC Conflicts

• None identified. No open RFC covers CI or doc-builder.

Notes (non-blocking)

• Sibling workflow .github/workflows/build_pr_documentation.yml still pins 7ccf6c02 — but that references a different reusable workflow (build_pr_documentation.yml), which Dependabot tracks as a separate dependency. Expect a separate bump PR for it; until then the two doc workflows will reference different doc-builder commits. Expected behavior, nothing to change here.

Summary

• 0 mechanical issues attributable to this PR
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Verdict: clean, low-risk Dependabot supply-chain bump; the new SHA was verified to be a real, forward-only commit that matches the current main of huggingface/doc-builder.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Verified against upstream huggingface/doc-builder (GitHub API): 6dd1bdab is a real commit (#756, 2026-08-17), sits 3 commits ahead / 0 behind the previous pin 7ccf6c02, and is identical to the current tip of main — so the # main annotation is accurate and this is a clean forward-only bump to a full 40-char SHA. No action needed.

[cursor]

Alignment Review Report — doc-builder pin bump (build_main)

Scope: one line in .github/workflows/build_documentation.yml — the build_main_documentation.yml reusable-workflow pin 7ccf6c02 → 6dd1bdab (both # main). 0 Python files touched.

Automated Checks

• Lint: N/A for this PR's scope. .claude/hooks/lint.sh only lints Python (src/ tests/ envs/) and exit-1's on ~25 pre-existing envs/*.py formatting drifts unrelated to this YAML-only diff (none are in the PR). ruff check src/ tests/ is clean.
• Debug code: CLEAN for this PR. check-debug.sh scans src/ only; all hits are pre-existing print/console.print/TODO in unrelated modules. This diff introduces none.

doc-builder bump verification (GitHub API vs huggingface/doc-builder)

1. SHA legit + current: 7ccf6c02...6dd1bdab is a clean fast-forward (3 ahead / 0 behind); 6dd1bdab...main is identical → it is the current main HEAD of doc-builder, so the # main annotation stays accurate. Full 40-char SHA pin retained (supply-chain best practice). The 3 commits: #756 (docstring callout formatting), #808 ("Add python_version input to doc build workflows"), #812 (mdsvex kit escape).

2. Caller contract (the check that could break a reusable-workflow bump): SAFE. The reusable workflow's own definition did change here (not byte-identical) via doc-builder #808. The diff to build_main_documentation.yml:

   • Adds one optional input python_version (type: string, no required:, no default:).
   • Changes the venv step uv venv → uv venv ${{ inputs.python_version && format('--python {0}', inputs.python_version) || '' }} — byte-identical behavior when the input is unset.
   • secrets: block unchanged (hf_token: required: true).

   OpenEnv's call site (build_documentation.yml:12-18) passes commit_sha / package: openenv / version_tag_suffix: '' + secret hf_token. All required inputs/secrets are still satisfied, no new required input was added, and OpenEnv doesn't pass python_version → it keeps the runner's system Python (identical behavior). No break.

3. Mergeability: CLEAN. PR base (5359534) equals the current origin/main tip (#1028 merge); git merge-tree origin/main <head> is conflict-free (clean 1-commit fast-forward). No stale-branch 3-way conflict on the uses: line.

4. Artifact contract: N/A — this is the push-to-main docs build, not the PR-build → upload_pr_documentation doc-build-artifact handoff.

Open RFCs Context

• In Review: 000, 001, 002, 003, 005; Draft: 010. All concern core architecture (abstractions, env-spec, MCP/WebSocket boundaries, rewards/rubrics, harnesses, world modeling). None cover CI or the docs-build pipeline → nothing to conflict with.

Tier 1: Fixes Required

• None. The lint/debug findings are pre-existing in envs//src/ and out of scope for a Dependabot Actions bump.

Tier 2: Alignment Discussion

Principle Conflicts

• None identified. No client/server, Gym reset/step/state, MCP/WebSocket, or reward surface is touched. Full-SHA pinning + Dependabot freshness reinforces the reproducibility/security principle. hf_token stays a secrets.* reference (no credential exposure).

RFC Conflicts

• None identified. No open RFC covers CI / GitHub Actions / the doc-builder pipeline.

Notes (non-blocking, cc @burtenshaw)

• Sibling pin skew (expected): upload_pr_documentation.yml:11 and build_pr_documentation.yml:13 still pin 7ccf6c02. Dependabot tracks each reusable-workflow path as a separate dependency, so those bump in their own PRs. doc-builder #808 also added the same optional python_version input to build_pr_documentation.yml, so that pin's eventual bump will be equally backward-compatible.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Verdict: clean, low-risk, backward-compatible doc-builder main-HEAD bump — new SHA verified, the reusable-workflow interface change confirmed backward-compatible, and the branch merges cleanly into current main.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Verified against upstream huggingface/doc-builder: 6dd1bdab is the current main HEAD (3 commits ahead of 7ccf6c02, 0 behind), full-SHA pinned.

Caller-contract checked: doc-builder #808 changed this reusable workflow by adding an optional python_version input (no new required input; secrets:/hf_token unchanged) plus a backward-compatible uv venv line, so the with:/secrets: at lines 13-18 remain valid and this call won't break. Branch also merges cleanly into current main. No action needed.