Merge branch 'main' into fix/id-generator-missing-cluster-hint

Author: sarahyurick

.claude/skills/getting-started/SKILL.md

@@ -1,4 +1,5 @@
 ---
+name: getting-started
 description: Set up NeMo Curator for data curation (text, image, video, audio)
 ---
 

.github/autobot/review-config.yml

@@ -0,0 +1,5 @@
+auto-review:
+  enabled: true
+  mode: comment
+  on: status_change
+  when: ready_for_review

.github/workflows/config/.secrets.baseline

@@ -47,5 +47,5 @@ jobs:
         working-directory: ./fern
         run: |
           set -euo pipefail
-          printf '%s\n' '{"organization":"nvidia","version":"5.123.0"}' > fern.config.json
-          npm exec --yes --ignore-scripts --package=fern-api@5.123.0 -- fern check
+          printf '%s\n' '{"organization":"nvidia","version":"5.149.0"}' > fern.config.json
+          npm exec --yes --ignore-scripts --package=fern-api@5.149.0 -- fern check

.github/workflows/fern-docs-ci.yml

@@ -138,7 +138,7 @@ jobs:
           (cd pr-source && find fern -regextype posix-extended -type f \
             -regex "$CONTENT" ! -path '*/.*' ! -path '*/components/*' \
             -exec cp --parents -- '{}' "$RUNNER_TEMP/fern-preview/" \;)
-          printf '%s\n' '{"organization":"nvidia","version":"5.123.0"}' \
+          printf '%s\n' '{"organization":"nvidia","version":"5.149.0"}' \
             > "$RUNNER_TEMP/fern-preview/fern/fern.config.json"
 
       - name: Setup Node.js
@@ -148,7 +148,7 @@ jobs:
 
       - name: Install fixed Fern CLI
         working-directory: ${{ runner.temp }}
-        run: npm install --prefix "$RUNNER_TEMP/fern-cli" --ignore-scripts --no-audit --no-fund fern-api@5.123.0
+        run: npm install --prefix "$RUNNER_TEMP/fern-cli" --ignore-scripts --no-audit --no-fund fern-api@5.149.0
 
       - name: Generate library reference with trusted configuration
         env:

.github/workflows/fern-docs-preview.yml

@@ -45,8 +45,8 @@ jobs:
       - name: Install fixed Fern CLI
         run: |
           set -euo pipefail
-          npm install --prefix "$RUNNER_TEMP/fern-cli" --ignore-scripts --no-audit --no-fund fern-api@5.123.0
-          printf '%s\n' '{"organization":"nvidia","version":"5.123.0"}' > fern/fern.config.json
+          npm install --prefix "$RUNNER_TEMP/fern-cli" --ignore-scripts --no-audit --no-fund fern-api@5.149.0
+          printf '%s\n' '{"organization":"nvidia","version":"5.149.0"}' > fern/fern.config.json
 
       - name: Generate library reference MDX (autodocs)
         env:

.github/workflows/publish-fern-docs.yml

@@ -19,15 +19,21 @@ on:
         description: Dry-run of code-freeze
         required: false
         default: true
+permissions:
+  contents: read
+
 jobs:
   code-freeze:
-    uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@d37760ed20154a1d6f0d6aa0cb84a67f76ed6d38 # v0.86.0
+    uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@61445a177938967f70c94094b98402e979452151 # github app authentication
     with:
+      app-id: ${{ vars.BOT_ID }}
+      environment-name: public
       library-name: NeMo Curator
       python-package: nemo_curator
       release-type: ${{ inputs.release-type }}
       freeze-commit: ${{ inputs.freeze-commit }}
       dry-run: ${{ inputs.dry-run }}
     secrets:
+      BOT_KEY: ${{ secrets.BOT_KEY }}
       SLACK_WEBHOOK: ${{ secrets.SLACK_RELEASE_ENDPOINT }}
       SLACK_WEBHOOK_ADMIN: ${{ secrets.SLACK_WEBHOOK_ADMIN }}

.github/workflows/release-freeze.yml

@@ -222,9 +222,9 @@ all options. The retired `/claude review` and `/claude strict-review` commands
 only reply with migration instructions; they do not run or automatically
 request a review.
 
-The repository policy lives in `skills/pr-review/SKILL.md`. The review service
-must load this rubric from protected `main`, not the pull-request branch.
-Before deploying this migration, publish the rubric, register its repository
-profile, and verify a Ready plugin snapshot containing it. Until those
-prerequisites are verified, do not rely on the redirect as evidence that the
-repository-specific review policy is active.
+Curator's review profile in CI-Events selects its local copy of the
+[Ponytail review skill](https://github.com/NVIDIA-NeMo/CI-Events-Workflows/blob/main/skills/ponytail-review/SKILL.md).
+The review service loads an immutable plugin snapshot published from CI-Events'
+protected `main` branch. CI-Events owns profile registration and publication;
+the formal review service owns review output and submission. Before activating
+the profile, verify a Ready `ponytail-skills` snapshot containing `ponytail-review`.