chore(deps): aggregate core dependabot updates

[burtenshaw]

Summary

• Aggregates non-env Dependabot updates from chore(deps): bump huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c #1037, chore(deps): bump huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c #1038, and chore(deps): bump huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c #1039.
• Updates pinned huggingface/doc-builder workflow refs in .github/workflows/.
• No src/ or package dependency files are changed.

Validation

• git diff --check origin/main...HEAD

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Scope: Dependabot CI maintenance bump. This PR bumps the pinned huggingface/doc-builder reusable-workflow SHA from 6108e850 → 7ccf6c02 across 3 GitHub Actions workflow files (3 insertions, 3 deletions). No Python, library/runtime, or environment code is touched.

Automated Checks

• Lint: PASS (for this diff). The repo lint pipeline (usort/ruff over src/, tests/, envs/) does not cover the changed files — all three are .github/workflows/*.yml. ruff check src/ tests/ passes cleanly. The only usort findings are the two files already documented as pre-existing baseline in AGENTS.md (tests/envs/test_grid_world.py, tests/envs/test_julia_env.py); ruff format diffs are an artifact of running an unpinned ruff version (the repo pins ruff>=0.14.0). None are attributable to this PR.
• Debug code: CLEAN (for this diff). check-debug.sh surfaced only pre-existing print/TODO occurrences under src/; none are in the three changed workflow files.

Open RFCs Context

Active RFCs — 000, 001, 002, 003, 005 (In Review), 004 (rubrics), and 010 (Draft) — all concern environment architecture (abstractions, env spec, MCP, rubrics/rewards, agentic harnesses, token world model). None touch CI/CD, GitHub Actions, or the documentation build pipeline, so there is no overlap with this change.

Supply-chain Verification

• New SHA 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c is a legitimate commit on huggingface/doc-builder@main (author XciD, 2026-07-31, _"fix(ci): read versions.yml from the serving bucket (#811)"; behind_by: 0 relative to main). The # main annotation is accurate.
• Previous SHA 6108e850 (2026-07-13) → new SHA (2026-07-31) is a normal forward bump.
• All three doc-builder references are updated consistently; no stale 6108e850 references remain anywhere in the repo.

Tier 1: Fixes Required

None.

Tier 2: Alignment Discussion

Principle Conflicts

None identified — the change is confined to CI documentation-build workflows and does not affect any API surface, reward computation, client/server boundary, or agent-isolation concern in PRINCIPLES.md / INVARIANTS.md.

RFC Conflicts

None identified — no open RFC covers CI or the doc-build pipeline.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Low-risk, mergeable Dependabot maintenance bump; the pinned SHA is verified against upstream doc-builder@main.

  

_{Sent by Cursor Automation: Pre-review}