Hub

The new hf endpoints hardware command lists valid hardware combinations with pricing and quota, mirrored in the SDK via list_inference_endpoints_hardware(). custom_image now accepts engine-specific container types (keyed by engine name) with new --engine, --tensor-parallel-size, and --data-parallel-size flags for deploy and update, while INFERENCE_ENDPOINT_IMAGE_KEYS is removed.

The hf-cli skill for AI agents is now installed globally by default by the standalone installers (bash and PowerShell), refreshed on hf update, with a once-daily hint if missing — silenced by HF_HUB_DISABLE_UPDATE_CHECK=1. --container-command and --container-args no longer require --custom-image for Inference Endpoints and can be changed after deploy via hf endpoints update; --health-route and --port still require a custom image. Baseten joins as an inference provider for the conversational task, plus a bucket prefix collision fix in HfFileSystem and a fix preventing double deletion of snapshot files.

HfApi.resolve_revision and ResolvedRevision let libraries pin a revision once and guarantee all files come from the same commit. Two security fixes: downloads now reject absolute, UNC, and traversal filenames on all platforms, and the sandbox bootstrap no longer injects the HF token. Resource groups are now supported for Jobs and Collections, and the CLI surfaces job names as a first-class field.

Jobs now get an automatic name derived from the Docker image plus a command hash, making reruns and grouping easier. Also adds timeout parameter to safetensors metadata methods, updates file-count progress bars on download completion, and warns on cache inconsistency.

Jobs on the Hub now support an optional --name flag on the CLI and a name parameter on the Python API, making them easier to find in the UI. The README was recast to put the hf CLI first, with a new "For AI agents" section.

Sandboxes introduce isolated cloud VMs with live-streamed output, file transfer, and a proxy for reaching in-sandbox servers. Snapshot downloads now cache repo file listings on disk for a single-network-call re-download. The CLI was rebuilt on Click, deprecating Typer. Breaking changes include case-sensitive pattern matching on all platforms, removal of six inference providers, and deprecation of upload_large_folder.

Browser-based OAuth Device Code flow is now the default login method, and hf upload uses a streamed multi-commit pipeline for faster, resumable large folder uploads. Also adds job wait commands, SSH access to running Jobs, and custom-container deployment for Inference Endpoints, with breaking changes around multi-commit uploads and non-detached job exit codes.

Keyless CI/CD authentication is now supported via Trusted Publishers, allowing workflows to authenticate without storing an HF_TOKEN secret. The CLI now accepts hf:// URIs for uploading and downloading, and jobs can expose container ports through the public jobs proxy.

You can now copy files or entire folders between different repositories without downloading or re-uploading, with LFS blobs deduplicated server-side. Added hf spaces ssh to open SSH sessions directly into a Space's Dev Mode container, and hf repos ls to list all your repositories with storage size and usage sorting. CLI tables now auto-fit to terminal width with per-column width caps and automatically right-align numeric columns.

Capped typer below 0.26.0 to resolve CLI incompatibility, and added click as an explicit dependency.

The create_bucket and create_repo APIs now accept an optional region argument ("us" or "eu") to pin new resources to a specific cloud region, with matching --region flags on the CLI. A new hf skills list command lists all available marketplace skills and shows which are already installed across project, global, and Claude locations. Help output now uses ANSI styling with underlined section headings and bold option names for better readability in terminals.