From 0ac30b4bc4b5ca5c78371517e81c42649fef1724 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 02:53:33 +0000 Subject: [PATCH 1/5] chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/validation-runtime.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validation-runtime.yml b/.github/workflows/validation-runtime.yml index 4034353533..9f85f6df6c 100644 --- a/.github/workflows/validation-runtime.yml +++ b/.github/workflows/validation-runtime.yml @@ -44,7 +44,7 @@ jobs: done - name: Retain evidence on success or failure if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: validation-runtime-${{ github.event.pull_request.head.sha || github.sha }} path: outputs/validation-runtime/ From 18488c10db114b59c40cd7ae4a2ebdf18bdfa60f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 02:53:49 +0000 Subject: [PATCH 2/5] chore(deps): bump astral-sh/setup-uv from 7.6.0 to 10.2.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 7.6.0 to 10.2.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/37802adc94f370d6bfd71619e3f0bf239e1f3b78...c18668ad3cf93ea998bef934396af7bb5c839dc7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/discovery-catalog.yml | 2 +- .github/workflows/test.yml | 8 ++++---- .github/workflows/validation-runtime.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/discovery-catalog.yml b/.github/workflows/discovery-catalog.yml index 83a5781bff..0857ba25f4 100644 --- a/.github/workflows/discovery-catalog.yml +++ b/.github/workflows/discovery-catalog.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 - run: uv sync --group dev - name: Check the profile and producer run: | diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6e314c70b8..448f7ae4b4 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -29,7 +29,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: version: ${{ env.UV_VERSION }} @@ -78,7 +78,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: version: ${{ env.UV_VERSION }} @@ -116,7 +116,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: version: ${{ env.UV_VERSION }} @@ -163,7 +163,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: version: ${{ env.UV_VERSION }} diff --git a/.github/workflows/validation-runtime.yml b/.github/workflows/validation-runtime.yml index 4034353533..88c44b913e 100644 --- a/.github/workflows/validation-runtime.yml +++ b/.github/workflows/validation-runtime.yml @@ -24,7 +24,7 @@ jobs: - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12.13" - - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: version: "0.9.3" enable-cache: true From e4f61212767a290a414902b979dac4ecd9d89503 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 02:53:54 +0000 Subject: [PATCH 3/5] chore(deps): bump huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml Bumps [huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml](https://github.com/huggingface/doc-builder) from 9f9bb430a712b5650d0e43e510656098ecdd75d4 to ef23fb82532fe347298732dc81dacad2f8eff961. - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Changelog](https://github.com/huggingface/doc-builder/blob/main/RELEASE.md) - [Commits](https://github.com/huggingface/doc-builder/compare/9f9bb430a712b5650d0e43e510656098ecdd75d4...ef23fb82532fe347298732dc81dacad2f8eff961) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml dependency-version: ef23fb82532fe347298732dc81dacad2f8eff961 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/upload_pr_documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/upload_pr_documentation.yml b/.github/workflows/upload_pr_documentation.yml index 125b1a212a..c4779f43c6 100644 --- a/.github/workflows/upload_pr_documentation.yml +++ b/.github/workflows/upload_pr_documentation.yml @@ -8,7 +8,7 @@ on: jobs: build: - uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@9f9bb430a712b5650d0e43e510656098ecdd75d4 # main + uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@ef23fb82532fe347298732dc81dacad2f8eff961 # main with: package_name: openenv secrets: From 4a9f3290b78bb5388a8872d9f10964813207e726 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 02:54:01 +0000 Subject: [PATCH 4/5] chore(deps): bump huggingface/doc-builder/.github/workflows/build_main_documentation.yml Bumps [huggingface/doc-builder/.github/workflows/build_main_documentation.yml](https://github.com/huggingface/doc-builder) from 9f9bb430a712b5650d0e43e510656098ecdd75d4 to ef23fb82532fe347298732dc81dacad2f8eff961. - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Changelog](https://github.com/huggingface/doc-builder/blob/main/RELEASE.md) - [Commits](https://github.com/huggingface/doc-builder/compare/9f9bb430a712b5650d0e43e510656098ecdd75d4...ef23fb82532fe347298732dc81dacad2f8eff961) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/build_main_documentation.yml dependency-version: ef23fb82532fe347298732dc81dacad2f8eff961 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/build_documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build_documentation.yml b/.github/workflows/build_documentation.yml index e2a2a8fad2..e615f43b63 100644 --- a/.github/workflows/build_documentation.yml +++ b/.github/workflows/build_documentation.yml @@ -9,7 +9,7 @@ on: jobs: build: - uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@9f9bb430a712b5650d0e43e510656098ecdd75d4 # main + uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@ef23fb82532fe347298732dc81dacad2f8eff961 # main with: commit_sha: ${{ github.sha }} package: openenv From 63834ebdc7d0ecf81dbe14f6393668243b508bd9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 02:54:03 +0000 Subject: [PATCH 5/5] chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml Bumps [huggingface/doc-builder/.github/workflows/build_pr_documentation.yml](https://github.com/huggingface/doc-builder) from 9f9bb430a712b5650d0e43e510656098ecdd75d4 to ef23fb82532fe347298732dc81dacad2f8eff961. - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Changelog](https://github.com/huggingface/doc-builder/blob/main/RELEASE.md) - [Commits](https://github.com/huggingface/doc-builder/compare/9f9bb430a712b5650d0e43e510656098ecdd75d4...ef23fb82532fe347298732dc81dacad2f8eff961) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml dependency-version: ef23fb82532fe347298732dc81dacad2f8eff961 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/build_pr_documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build_pr_documentation.yml b/.github/workflows/build_pr_documentation.yml index 75cdd2ace4..7dcd3b7d13 100644 --- a/.github/workflows/build_pr_documentation.yml +++ b/.github/workflows/build_pr_documentation.yml @@ -10,7 +10,7 @@ concurrency: jobs: build: if: github.event.pull_request.draft == false - uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@9f9bb430a712b5650d0e43e510656098ecdd75d4 # main + uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@ef23fb82532fe347298732dc81dacad2f8eff961 # main with: commit_sha: ${{ github.event.pull_request.head.sha }} pr_number: ${{ github.event.number }}