Repository navigation

fix(ci): scope GITHUB_TOKEN permissions per job (#15046) - #15048

Open

hf-security-analysis[bot] wants to merge 38 commits into

mainfrom

security/workflow-hardening/pr-15046-permissions

Open

fix(ci): scope GITHUB_TOKEN permissions per job (#15046)#15048
hf-security-analysis[bot] wants to merge 38 commits into
mainfrom
security/workflow-hardening/pr-15046-permissions

Commits on Sep 18, 2026
- Bump the actions group with 17 updates (#12)
  dependabot[bot]
  authored
  6b089c2
Commits on Sep 23, 2026
- Scope GITHUB_TOKEN permissions per job (#16)
  hf-security-analysis[bot]
  authored
  5fffb56
- Pin GitHub Actions to commit SHAs (#17)
  hf-security-analysis[bot]
  authored
  ab98af5
Commits on Oct 6, 2026
- Bump doc-builder workflow pin (#22)
  
  paulinebm
  and
  claude
  authored
  0f8a86a
Commits on Oct 9, 2026
Commits on Oct 12, 2026
- Add the step-distilled FLUX.3 image model (flow map)
  
  yiyixuxu
  and
  claude
  committed
  be15632
- Add the step-distilled examples script
  
  yiyixuxu
  and
  claude
  committed
  ef53f7b
Commits on Oct 13, 2026
- feat: add a single file support in Flux3 image. (#32)
  sayakpaul
  authored
  9f6e4c4
- Merge branch 'flux3-image' into flux3-image-distilled
  
  yiyixuxu
  and
  claude
  committed
  6b1ac51
- Merge pull request #29 from huggingface/flux3-image-distilled
  yiyixuxu
  authored
  c224b3e
- Warn about the denoiser input fields that are not passed to the transformer
  
  yiyixuxu
  and
  claude
  committed
  6a17c32
- Document reproducible generation with user-provided latents
  
  yiyixuxu
  and
  claude
  committed
  a88c209
- Run the QK norm and RoPE in fp32 with a single cast back, matching the BFL implementation
  
  yiyixuxu
  and
  claude
  committed
  26a32da
- parity script: run against the Hub repos and print the imported diffusers source
  
  yiyixuxu
  and
  claude
  committed
  6348cc0
- Wrap a forward docstring line for the doc-builder style check
  
  yiyixuxu
  and
  claude
  committed
  9d6eccf
Commits on Oct 14, 2026
Commits on Oct 15, 2026