Skip to content

chore(deps): update huggingface-hub requirement from >=0.23 to >=1.25.1 - #6

Merged
musharna merged 1 commit into
mainfrom
dependabot/pip/huggingface-hub-gte-1.25.1
Jul 28, 2026
Merged

chore(deps): update huggingface-hub requirement from >=0.23 to >=1.25.1#6
musharna merged 1 commit into
mainfrom
dependabot/pip/huggingface-hub-gte-1.25.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on huggingface-hub to permit the latest version.

Commits
  • 9bf0595 Release: v1.25.1
  • aace894 [Sandbox] Don't inject the HF token in sandbox jobs as SBX_DL_TOKEN (#4583)
  • 16fffe4 Release: v1.25.0
  • 61a0164 Release: v1.25.0.rc0
  • 922b819 [Repocard] Fix catastrophic backtracking (ReDoS) in REGEX_YAML_BLOCK (#4526)
  • e8bb319 [Upload] Forward token in _final_commit_info repo_info lookup (#4572)
  • d5c4425 [HfFileSystem] Raise FileNotFoundError when streaming a missing file (#4562)
  • 1ae04ff [Jobs] Auto-name Jobs on creation (#4566)
  • 74213cb [Repocard] Preserve order of appended keys in CardData.to_yaml (#4561)
  • 3a60f15 [Download] [Fix] Update file-count progress bar on completion (#4560)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 28, 2026
@musharna

Copy link
Copy Markdown
Owner

⚠️ No CI ran on this PR — "mergeable" is not "verified"

This PR shows no status checks. orchid-clip has no workflows at all. So a green/clean state here means only "no merge
conflicts"
— nothing has actually exercised this dependency change.

Review the changelog for breaking changes before merging.

Before merging, smoke-test locally:

pip install -r requirements.txt
python app.py   # confirm it launches and renders

This gap exists because enabling the pip ecosystem gave this repo dependency PRs it has
no test suite to validate. Options: add a minimal import/launch smoke workflow, or narrow
.github/dependabot.yml so pip only opens security updates.

@musharna

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/pip/huggingface-hub-gte-1.25.1 branch from b0e7765 to bb02cee Compare July 28, 2026 03:22
@musharna

Copy link
Copy Markdown
Owner

@dependabot rebase

Updates the requirements on [huggingface-hub](https://github.com/huggingface/huggingface_hub) to permit the latest version.
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.23.0...v1.25.1)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 1.25.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/huggingface-hub-gte-1.25.1 branch from bb02cee to e807e89 Compare July 28, 2026 04:28
@musharna
musharna merged commit 5a4c34f into main Jul 28, 2026
1 check passed
@musharna
musharna deleted the dependabot/pip/huggingface-hub-gte-1.25.1 branch July 28, 2026 04:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant