diff --git a/clients/python/poetry.lock b/clients/python/poetry.lock
index eec6e9d92a..5d4970e1b3 100644
--- a/clients/python/poetry.lock
+++ b/clients/python/poetry.lock
@@ -1333,15 +1333,15 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "huggingface-hub"
-version = "1.9.1"
+version = "1.12.0"
 description = "Client library to download and publish models, datasets and other repos on the huggingface.co hub"
 optional = true
 python-versions = ">=3.10.0"
 groups = ["main"]
 markers = "extra == \"hf\""
 files = [
-    {file = "huggingface_hub-1.9.1-py3-none-any.whl", hash = "sha256:8dae771b969b318203727a6c6c5209d25e661f6f0dd010fc09cc4a12cf81c657"},
-    {file = "huggingface_hub-1.9.1.tar.gz", hash = "sha256:442af372207cc24dcb089caf507fcd7dbc1217c11d6059a06f6b90afe64e8bd2"},
+    {file = "huggingface_hub-1.12.0-py3-none-any.whl", hash = "sha256:d74939969585ee35748bd66de09baf84099d461bda7287cd9043bfb99b0e424d"},
+    {file = "huggingface_hub-1.12.0.tar.gz", hash = "sha256:7c3fe85e24b652334e5d456d7a812cd9a071e75630fac4365d9165ab5e4a34b6"},
 ]
 
 [package.dependencies]
@@ -4334,4 +4334,4 @@ signing = ["platformdirs", "rh-model-signing"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">= 3.10, < 4.0"
-content-hash = "976131ecf1668231d10061172ccfa9476feaf99bba7cb87b8ed7717aff7a8c78"
+content-hash = "d421796c7163acf57e9a1472e810609f5568c931d7c0cc0280da9619191f115b"
diff --git a/clients/python/pyproject.toml b/clients/python/pyproject.toml
index 83e6f6bb7f..d7e5f89d49 100644
--- a/clients/python/pyproject.toml
+++ b/clients/python/pyproject.toml
@@ -24,7 +24,7 @@ aiohttp-retry = "^2.8.3"
 # allows for reentrant event loops (used for sync client) - Python 3.14 compatible
 nest-asyncio2 = "^1.7.1"
 
-huggingface-hub = { version = ">=0.20.1,<1.10.0", optional = true }
+huggingface-hub = { version = ">=0.20.1,<1.13.0", optional = true }
 olot = { version = "^0.1.17", optional = true }
 boto3 = { version = "^1.37.34", optional = true }
 rh-model-signing = { version = "0.1.0", optional = true }