From 1e62149c75c1db29d3c3e70231c7a3b36964cd48 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Jun 2026 11:50:52 +0000 Subject: [PATCH 1/3] chore(deps): bump huggingface-hub in /jobs/async-upload Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 1.16.4 to 1.17.0. - [Release notes](https://github.com/huggingface/huggingface_hub/releases) - [Commits](https://github.com/huggingface/huggingface_hub/compare/v1.16.4...v1.17.0) Signed-off-by: Jon Burdo --- updated-dependencies: - dependency-name: huggingface-hub dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- jobs/async-upload/poetry.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/jobs/async-upload/poetry.lock b/jobs/async-upload/poetry.lock index 64bf20e44c..9e780f3210 100644 --- a/jobs/async-upload/poetry.lock +++ b/jobs/async-upload/poetry.lock @@ -1148,14 +1148,14 @@ zstd = ["zstandard (>=0.18.0)"] [[package]] name = "huggingface-hub" -version = "1.16.4" +version = "1.17.0" description = "Client library to download and publish models, datasets and other repos on the huggingface.co hub" optional = false python-versions = ">=3.10.0" groups = ["main"] files = [ - {file = "huggingface_hub-1.16.4-py3-none-any.whl", hash = "sha256:994ec184c3330952d7b5f131ea0b1a6ba1047bd05461f5dec191f8fc1099fbd7"}, - {file = "huggingface_hub-1.16.4.tar.gz", hash = "sha256:023bacd155f837d3fa56379ac8e23dababe6d6d87b04f8dacc258a44a38abe01"}, + {file = "huggingface_hub-1.17.0-py3-none-any.whl", hash = "sha256:3b8156d23118e87f6a587648bfbc04f04a12a757ccb4ed298b35c4ae638bf24c"}, + {file = "huggingface_hub-1.17.0.tar.gz", hash = "sha256:fad842b6763ef70ebc3919665b1b9273645203185400a7d6c5eddc2323cc3435"}, ] [package.dependencies] From 2f7e449622461b8839f84a069174b3c8a9655476 Mon Sep 17 00:00:00 2001 From: Jon Burdo Date: Fri, 5 Jun 2026 11:37:56 -0400 Subject: [PATCH 2/3] chore(deps): bump huggingface-hub in /jobs/async-upload Bump huggingface-hub further to 1.18.0 Signed-off-by: Jon Burdo --- jobs/async-upload/poetry.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/jobs/async-upload/poetry.lock b/jobs/async-upload/poetry.lock index 9e780f3210..9cd9c3568a 100644 --- a/jobs/async-upload/poetry.lock +++ b/jobs/async-upload/poetry.lock @@ -1148,14 +1148,14 @@ zstd = ["zstandard (>=0.18.0)"] [[package]] name = "huggingface-hub" -version = "1.17.0" +version = "1.18.0" description = "Client library to download and publish models, datasets and other repos on the huggingface.co hub" optional = false python-versions = ">=3.10.0" groups = ["main"] files = [ - {file = "huggingface_hub-1.17.0-py3-none-any.whl", hash = "sha256:3b8156d23118e87f6a587648bfbc04f04a12a757ccb4ed298b35c4ae638bf24c"}, - {file = "huggingface_hub-1.17.0.tar.gz", hash = "sha256:fad842b6763ef70ebc3919665b1b9273645203185400a7d6c5eddc2323cc3435"}, + {file = "huggingface_hub-1.18.0-py3-none-any.whl", hash = "sha256:729be4a976fb706dcc02d176bcda8a3f32bdf21a294e8f4b3dda6fbcbc9c1ab1"}, + {file = "huggingface_hub-1.18.0.tar.gz", hash = "sha256:f0c5ecd1ef8c6a60f86f61ee278f2c1570ba9e279c9f54de9094210723b3613b"}, ] [package.dependencies] From aed2f3ade69f08dc4b003aad504c318d39df2299 Mon Sep 17 00:00:00 2001 From: Jon Burdo Date: Fri, 5 Jun 2026 11:39:04 -0400 Subject: [PATCH 3/3] chore(async-upload): regenerate requirements.txt Regenerated via 'make install' (poetry export) to keep the lockfile in sync with the dependency bump. Signed-off-by: Jon Burdo --- jobs/async-upload/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jobs/async-upload/requirements.txt b/jobs/async-upload/requirements.txt index b5dc75cdeb..900326bf05 100644 --- a/jobs/async-upload/requirements.txt +++ b/jobs/async-upload/requirements.txt @@ -27,7 +27,7 @@ h11==0.16.0 ; python_version >= "3.11" and python_version < "4.0" hf-xet==1.5.0 ; python_version >= "3.11" and python_version < "4.0" and (platform_machine == "x86_64" or platform_machine == "amd64" or platform_machine == "AMD64" or platform_machine == "arm64" or platform_machine == "aarch64") httpcore==1.0.9 ; python_version >= "3.11" and python_version < "4.0" httpx==0.28.1 ; python_version >= "3.11" and python_version < "4.0" -huggingface-hub==1.16.4 ; python_version >= "3.11" and python_version < "4.0" +huggingface-hub==1.18.0 ; python_version >= "3.11" and python_version < "4.0" id==1.6.1 ; python_version >= "3.11" and python_version < "4.0" idna==3.16 ; python_version >= "3.11" and python_version < "4.0" in-toto-attestation==0.9.3 ; python_version >= "3.11" and python_version < "4.0"