dependabot[bot] opened a new pull request, #3368: URL: https://github.com/apache/iceberg-python/pull/3368
Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 1.13.0 to 1.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/huggingface/huggingface_hub/releases";>huggingface-hub's releases</a>.</em></p> <blockquote> <h2>[v1.14.0] Handle Spaces secrets & variables from CLI and other improvements</h2> <h2>🖥️ Manage Space secrets and variables from the CLI</h2> <p>You can now manage Space secrets and environment variables directly from the command line with two new <code>hf spaces</code> subgroups: <code>secrets</code> and <code>variables</code>. Use <code>hf spaces secrets</code> to add, list, and delete write-only secrets, and <code>hf spaces variables</code> to add, list, and delete readable environment variables. Both <code>add</code> commands support multiple <code>-s</code>/<code>-e</code> flags and <code>--secrets-file</code>/<code>-env-file</code> for loading from dotenv files. On the Python side, <code>HfApi.get_space_secrets()</code> returns secret metadata (key, description, updated timestamp) without ever revealing values.</p> <pre lang="bash"><code># List secrets (values are write-only — only keys and timestamps are shown) $ hf spaces secrets ls username/my-space <h1>Add secrets</h1> <p>$ hf spaces secrets add username/my-space -s OPENAI_API_KEY=sk-... $ hf spaces secrets add username/my-space --secrets-file .env.secrets</p> <h1>Delete a secret (confirmation prompt, use --yes to skip)</h1> <p>$ hf spaces secrets delete username/my-space OPENAI_API_KEY --yes</p> <h1>List, add, and delete variables (values are readable)</h1> <p>$ hf spaces variables ls username/my-space $ hf spaces variables add username/my-space -e MODEL_ID=gpt2 -e MAX_TOKENS=512 $ hf spaces variables delete username/my-space MAX_TOKENS --yes </code></pre></p> <ul> <li>[CLI] Add hf spaces secrets and variables subgroups by <a href="https://github.com/davanstrien";><code>@​davanstrien</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4170";>#4170</a></li> <li>[CLI] Add get_space_secrets + hf spaces secrets ls by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4182";>#4182</a></li> </ul> <p>📚 <strong>Documentation:</strong> <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/cli";>CLI guide</a> · <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/manage-spaces";>Manage your Space</a></p> <h2>🪣 Rsync-style trailing slash for bucket folder copies</h2> <p><code>hf buckets cp</code> now supports rsync-style trailing slash semantics when copying folders. A trailing <code>/</code> on the source path copies only the folder's contents to the destination, while omitting it nests the folder itself — matching the behavior you'd expect from <code>rsync</code>. This makes it possible to flatten directory structures during copies, which was not possible before. Additionally, <code>copy_files</code> now raises an explicit <code>EntryNotFoundError</code> when the source path resolves to no files, instead of silently succeeding with zero operations.</p> <pre lang="bash"><code># Without trailing slash: "logs" dir is nested => dst/logs/... $ hf buckets cp hf://buckets/username/src-bucket/logs hf://buckets/username/dst/ <h1>With trailing slash: only contents of "logs" are copied => dst/...</h1> <p>$ hf buckets cp hf://buckets/username/src-bucket/logs/ hf://buckets/username/dst/ </code></pre></p> <ul> <li>[Buckets] Support rsync-style trailing slash in copy_files by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4187";>#4187</a></li> <li>[CLI] Raise error when copy_files source doesn't exist by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4186";>#4186</a></li> </ul> <p>📚 <strong>Documentation:</strong> <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/buckets";>Buckets guide</a> · <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/cli";>CLI guide</a></p> <h2>💔 Breaking Change</h2> <ul> <li>[CLI] Rename <code>hf skills upgrade</code> -> <code>hf skills update</code> by <a href="https://github.com/hanouticelina";><code>@​hanouticelina</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4176";>#4176</a> — <code>hf skills upgrade</code> no longer exists; use <code>hf skills update</code> instead.</li> <li>[CLI] Add <code>out.status()</code> by <a href="https://github.com/hanouticelina";><code>@​hanouticelina</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4171";>#4171</a> — status updates (spinners/progress) on <code>hf extensions install</code> and <code>hf spaces dev-mode</code> are now suppressed when using <code>--format json</code>, <code>--quiet</code>, or <code>--format agent</code>.</li> </ul> <h2>🖥️ CLI</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/huggingface/huggingface_hub/commit/2ea0c839b8d5ea09a73292e755bf529700a734b9";><code>2ea0c83</code></a> Release: v1.14.0</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/f7cffc7b64d9af10b49c728ff42e1caae145a8c0";><code>f7cffc7</code></a> Release: v1.14.0.rc0</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/ac0156ba47cb5f1a0cbf164ca2c62564f5c36ec5";><code>ac0156b</code></a> style</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/32476d9ecfe167161c96bd0131256137a926d466";><code>32476d9</code></a> Update typer dependency version in setup.py (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4193";>#4193</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/fadab7afbf5b8c43a7c8322fafb77b489847ca85";><code>fadab7a</code></a> [CLI] Raise error when copy_files source doesn't exist (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4186";>#4186</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/7c0abebca416eec2b15ddc34c5e3ac892b7a727f";><code>7c0abeb</code></a> [CLI] Add get_space_secrets + hf spaces secrets ls (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4182";>#4182</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/51adb8fd349e3b2db056c9c6f0337964a0ef6bbd";><code>51adb8f</code></a> [Buckets] Support rsync-style trailing slash in copy_files to copy folder con...</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/22eaf892ff4102670fd4af1369e919cf30b347b5";><code>22eaf89</code></a> [internal] Untrack useless files (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4191";>#4191</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/2774771e1f2a2ef3fc827d02386d6b1ba971223f";><code>2774771</code></a> Update unit test warnings check to ignore unrelated deprecation warnings (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4188";>#4188</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/3d199070555cc5a73703a131383d5bccd49ea4a0";><code>3d19907</code></a> [CLI] Support hf -v to print version (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4185";>#4185</a>)</li> <li>Additional commits viewable in <a href="https://github.com/huggingface/huggingface_hub/compare/v1.13.0...v1.14.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
