dependabot[bot] opened a new pull request, #2806: URL: https://github.com/apache/iceberg-rust/pull/2806
Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 1.21.0 to 1.22.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/huggingface/huggingface_hub/releases";>huggingface-hub's releases</a>.</em></p> <blockquote> <h2>[v1.22.0] Sandboxes, faster downloads, and a rebuilt CLI</h2> <h2>🖥️ Sandboxes: isolated cloud machines on top of Jobs</h2> <p>Sandboxes are isolated cloud machines you can spin up in seconds, run commands in with live-streamed output, and move files in and out of — all from Python or the CLI. They are built entirely on top of Jobs: under the hood a sandbox is just a Job running a tiny static server, so any Docker image with <code>/bin/sh</code> works and it inherits Jobs' billing, hardware flavors, and namespace permissions for free. Two flavors are available: <code>Sandbox.create</code> for a dedicated VM (GPU workloads, untrusted code, full isolation) and <code>SandboxPool</code> to pack many cheap CPU sandboxes into a few shared host VMs for fan-out workloads like RL rollouts. This release also adds background processes (<code>sbx.run(..., background=True)</code> / <code>hf sandbox spawn</code>) and a port proxy (<code>Sandbox.proxy_url_for</code>) so you can reach a server running inside a sandbox from the outside over HTTP or WebSocket.</p> <pre lang="python"><code>from huggingface_hub import Sandbox <p>with Sandbox.create(image="python:3.12") as sbx: # ready in ~6s sbx.files.write("/app/main.py", "print(40 + 2)") print(sbx.run("python /app/main.py").stdout) # 42 </code></pre></p> <pre lang="bash"><code># Create, run, copy files, and terminate from the terminal hf sandbox create hf sandbox exec <id> -- python -c "print('hi')" hf sandbox cp data.csv <id>:/data/data.csv hf sandbox kill <id> </code></pre> <ul> <li>[Sandbox] Add Sandbox API and <code>hf sandbox</code> CLI on top of Jobs by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4350";>#4350</a></li> <li>[Sandbox] Background processes + proxy to reach in-sandbox servers by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4444";>#4444</a></li> </ul> <p>📚 <strong>Documentation:</strong> <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/sandbox";>Sandboxes guide</a>, <a href="https://huggingface.co/docs/huggingface_hub/main/en/package_reference/sandbox";>Sandbox reference</a></p> <h2>⚡ Faster snapshot downloads with a tree cache</h2> <p><code>snapshot_download</code> now caches a repository's file listing on disk under a new <code>trees/</code> folder, so re-downloading a commit that's already cached costs a single network call — resolving the branch or tag to a commit hash — instead of one metadata request per file. The listing is immutable per commit and shared by both <code>snapshot_download</code> and <code>hf_hub_download</code>; for Xet-enabled files it also skips the per-file HEAD <code>/resolve</code> request entirely, rebuilding the metadata from the cached listing. As a deliberate side effect of the completeness check, when the Hub can't be reached and the local snapshot is missing requested files, <code>snapshot_download</code> now raises <code>IncompleteSnapshotError</code> instead of silently returning a partial folder.</p> <ul> <li>[Download] Cache repo tree listing on disk in snapshot_download by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4394";>#4394</a></li> </ul> <p>📚 <strong>Documentation:</strong> <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/manage-cache";>Manage your cache</a></p> <h2>🛠️ CLI rebuilt on Click (drops Typer)</h2> <p>The entire <code>hf</code> CLI now runs on a small in-house layer over Click 8.x instead of Typer, which had vendored Click in a way that broke the CLI's custom help rendering, error enrichment, and shell completion — and forced capping <code>typer<0.26</code>. The migration preserves existing behavior: <code>--help</code> output is byte-identical, the generated <code>cli.md</code> reference is unchanged apart from a header comment, and shell completion now uses Click's native completion. The public <code>typer_factory</code> helper is kept so downstream libraries like <code>transformers</code> that register their own commands keep working.</p> <ul> <li>[CLI] Add a minimal Click framework for the CLI by <a href="https://github.com/hanouticelina";><code>@​hanouticelina</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4462";>#4462</a></li> </ul> <h2>💔 Breaking Change</h2> <ul> <li>[Upload] Deprecate upload_large_folder (API + CLI) by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4414";>#4414</a> — <code>upload_large_folder</code> and <code>hf upload-large-folder</code> are now deprecated in favor of <code>upload_folder</code> / <code>hf upload</code>, which handle very large and resumable uploads out of the box.</li> <li>Make filter_repo_objects pattern matching case-sensitive on all platforms by <a href="https://github.com/Sreekant13";><code>@​Sreekant13</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4435";>#4435</a> — <code>allow_patterns</code>/<code>ignore_patterns</code> now match case-sensitively on every OS (aligned with case-sensitive Hub paths). On Windows this is a behavior change: patterns like <code>*.PDF</code> no longer match <code>file.pdf</code>.</li> <li>[Inference Providers] Remove dead inference providers by <a href="https://github.com/hanouticelina";><code>@​hanouticelina</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4447";>#4447</a> — removes six providers no longer routed by the Hub (<code>black-forest-labs</code>, <code>clarifai</code>, <code>hyperbolic</code>, <code>nebius</code>, <code>nvidia</code>, <code>sambanova</code>) — <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/inference";>docs</a></li> </ul> <h2>🖥️ CLI</h2> <ul> <li>[CLI] Add <code>hf discussions edit</code> by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4415";>#4415</a> — <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/cli";>docs</a></li> <li>[CLI] hf cache: surface & prune incomplete downloads by <a href="https://github.com/Wauplin";><code>@​Wauplin</code></a> in <a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4416";>#4416</a> — <code>hf cache ls</code> now flags leftover <code>.incomplete</code> files and <code>hf cache prune</code> removes them automatically — <a href="https://huggingface.co/docs/huggingface_hub/main/en/guides/manage-cache";>docs</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/huggingface/huggingface_hub/commit/5db966a5f52fcf9235508a46a855390f0b95d23a";><code>5db966a</code></a> Release: v1.22.0</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/1d6e7d0e6623f758d86bdbb244bd0aca2b286d7e";><code>1d6e7d0</code></a> Release: v1.22.0.rc0</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/8f03d83624c624084fd1e1ee4d021612408421d5";><code>8f03d83</code></a> Expose base_model filter param on get_dataset_leaderboard (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4474";>#4474</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/cc4e7cc67ae944d9e3d3e6dc3d44ef95be1f944f";><code>cc4e7cc</code></a> [Http] Support standard Retry-After header in http_backoff (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4460";>#4460</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/7b53d234c37aa0b6dbe28c6000c9cb9c38598f17";><code>7b53d23</code></a> [CLI] Add a minimal Click framework for the CLI (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4462";>#4462</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/4db84d02cd2ceca9a27d694df264de9ce8ecbfb0";><code>4db84d0</code></a> Docs: Jobs are no longer Pro-only — update availability note in jobs guide (#...</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/a13927790106a76f6099179a366f334c4533e84b";><code>a139277</code></a> Accept two-letter byte units (KB/MB/GB/TB/PB) in parse_size (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4468";>#4468</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/28aecd91906a78888252c3254b69821ef0518122";><code>28aecd9</code></a> Fix KeyError in get_dataset_leaderboard when entry has no source (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4473";>#4473</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/f70f00d3f1d7ef0672065e2b8b8df9ee8123d50b";><code>f70f00d</code></a> Remove Usage command lists from CLI module docstrings (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4472";>#4472</a>)</li> <li><a href="https://github.com/huggingface/huggingface_hub/commit/031d0020f59fabdf7a2feb09066e3e16afa3c3cc";><code>031d002</code></a> [CLI] Expose <code>out</code> singleton publicly + add <code>out.log</code> method (<a href="https://redirect.github.com/huggingface/huggingface_hub/issues/4471";>#4471</a>)</li> <li>Additional commits viewable in <a href="https://github.com/huggingface/huggingface_hub/compare/v1.21.0...v1.22.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
