Python client for the Hugging Face Hub API
npx @buildinternet/releases get hubhf jobs scheduled ls now filters by --status, repeatable --label, and --name, matching hf jobs ls; the old -f/--filter flag is accepted but ignored with a warning and will be removed in a future release. ResolvedRevision now records the repo_id and repo_type it was resolved for, so re-resolving for the same repo returns as-is while different repos are resolved again.
New chunked loss option for SFT reduces peak activation memory by processing tokens in checkpointed chunks, enabling longer sequences without OOM errors. Includes new DPO loss variant, OpenReward adapter, Cohere Cohere2 Gemma 3 Qwen3 Qwen2.5 chat templates; fixes CLI wildcard uploads and click 8.5 compatibility.
The new hf endpoints hardware command lists valid hardware combinations with pricing and quota, mirrored in the SDK via list_inference_endpoints_hardware(). custom_image now accepts engine-specific container types (keyed by engine name) with new --engine, --tensor-parallel-size, and --data-parallel-size flags for deploy and update, while INFERENCE_ENDPOINT_IMAGE_KEYS is removed.
The hf-cli skill for AI agents is now installed globally by default by the standalone installers (bash and PowerShell), refreshed on hf update, with a once-daily hint if missing — silenced by HF_HUB_DISABLE_UPDATE_CHECK=1. --container-command and --container-args no longer require --custom-image for Inference Endpoints and can be changed after deploy via hf endpoints update; --health-route and --port still require a custom image. Baseten joins as an inference provider for the conversational task, plus a bucket prefix collision fix in HfFileSystem and a fix preventing double deletion of snapshot files.
HfApi.resolve_revision and ResolvedRevision let libraries pin a revision once and guarantee all files come from the same commit. Two security fixes: downloads now reject absolute, UNC, and traversal filenames on all platforms, and the sandbox bootstrap no longer injects the HF token. Resource groups are now supported for Jobs and Collections, and the CLI surfaces job names as a first-class field.
Jobs now get an automatic name derived from the Docker image plus a command hash, making reruns and grouping easier. Also adds timeout parameter to safetensors metadata methods, updates file-count progress bars on download completion, and warns on cache inconsistency.
Jobs on the Hub now support an optional --name flag on the CLI and a name parameter on the Python API, making them easier to find in the UI. The README was recast to put the hf CLI first, with a new "For AI agents" section.
Sandboxes introduce isolated cloud VMs with live-streamed output, file transfer, and a proxy for reaching in-sandbox servers. Snapshot downloads now cache repo file listings on disk for a single-network-call re-download. The CLI was rebuilt on Click, deprecating Typer. Breaking changes include case-sensitive pattern matching on all platforms, removal of six inference providers, and deprecation of upload_large_folder.
Browser-based OAuth Device Code flow is now the default login method, and hf upload uses a streamed multi-commit pipeline for faster, resumable large folder uploads. Also adds job wait commands, SSH access to running Jobs, and custom-container deployment for Inference Endpoints, with breaking changes around multi-commit uploads and non-detached job exit codes.
Keyless CI/CD authentication is now supported via Trusted Publishers, allowing workflows to authenticate without storing an HF_TOKEN secret. The CLI now accepts hf:// URIs for uploading and downloading, and jobs can expose container ports through the public jobs proxy.
A new unified hf cp command handles all file-copy workflows (upload, download, remote-to-remote) with consistent hf:// URI syntax and rsync-style semantics. parse_hf_uri now accepts Hugging Face web URLs directly. Fixed a data corruption bug where concurrent hf_hub_download calls could append to the same .incomplete file on Lustre, GPFS, and some NFS mounts where flock(2) provides no mutual exclusion; downloads now use fresh temporary files instead of resuming incomplete ones, making the download path safe even when file locking is broken. This is a breaking change: resuming previously failed partial downloads is no longer possible.
You can now copy files or entire folders between different repositories without downloading or re-uploading, with LFS blobs deduplicated server-side. Added hf spaces ssh to open SSH sessions directly into a Space's Dev Mode container, and hf repos ls to list all your repositories with storage size and usage sorting. CLI tables now auto-fit to terminal width with per-column width caps and automatically right-align numeric columns.
Capped typer below 0.26.0 to resolve CLI incompatibility, and added click as an explicit dependency.
The Together ASR task has been removed from the Inference API to eliminate the urllib3 dependency.