Hugging Face Hub’s official `huggingface_hub` Python client and `hf` CLI to interact with Hugging Face Hub. Use it to download and upload models and related files, search the Hub, and perform Hub tasks like running inference or jobs.
Project status
- Actively maintained, with an upstream push on 2026-11-05 and frequent recent updates.
- Updates have appeared roughly weekly, with several updates in October 2026.
AI summary generated
Recent updates
v2.4.0
v2.4.0 adds `HfFileSystem` copy operations into Buckets and CLI extension version checks, update hints, and repair for broken Python environments. It also fixes webhook domain handling, cache verification and path validation issues, and several `HfFileSystem` behaviors.
BreakingSecurityFeaturesv2.3.0
Version 2.3.0 adds live-following for Bucket listings, parallel recursive repository listings, discussion attachments, and a one-request API for reading sharded safetensors metadata. It also updates access-request handling for repositories that hide requester details and includes fixes across inference, Jobs, downloads, cache management, and other APIs.
BreakingFeaturesv2.2.0
This v2.2.0 release changes `hf jobs stats` to print a snapshot by default (non-blocking), introduces `-f/--follow` for the previous streaming behavior, and adds `follow` support to `HfApi.fetch_job_metrics`. It also fixes concurrent download behavior to consistently use `hf_xet`, and improves `HfFileSystem` cache correctness for listings and cache invalidation.
Breakingv2.1.1
Release v2.1.1 updates the Hugging Face Hub CLI to rename the Spaces ZeroGPU quota command. The CLI now exposes ZeroGPU as a dedicated `zero-gpu` subcommand group with a `quota` command underneath it.
Breakingv2.1.0
v2.1.0 introduces multiple Jobs improvements (retries, reruns, rescheduling, and port exposure), adds ZeroGPU quota tracking (API wrapper plus CLI), and migrates the Inference Endpoints model catalog to a new v1 API. It also tightens sandbox credential handling for pooled sandboxes and improves various CLI and bucket pattern behaviors.
BreakingSecurityFeaturesv2.0.0
v2.0.0 makes a major HTTP stack migration from httpx to httpx2 throughout huggingface_hub, affecting client behavior and exception types. It also removes all deprecated 1.x APIs and several CLI entry points/options, aligned with the v2 migration guide.
Breakingv1.33.0
v1.33.0 improves large Xet upload UX by adding explicit validation progress, and changes `hf skills add` so skills are installed for all agents (including Claude Code) by default, with `--claude` deprecated as a no-op. It also introduces a documented breaking change for `create_inference_endpoint` PrivateLink parameters by moving AWS PrivateLink settings under `privateService` and adding new parameters.
BreakingFeaturesv1.32.0
v1.32.0 introduces a cross-repo shared blob store for Xet-backed downloads, adds the ability for Jobs UV scripts to embed runtime launch configuration in a PEP 723 header, and performs substantial Sandbox security hardening. It also improves cache management (hf:// URIs, kernel repo support), speeds up package imports and CLI command registration, and extends Inference Endpoints with container registry credentials.
BreakingSecurityFeaturesv1.31.0
v1.31.0 adds dedicated Sandbox support for custom Job labels and ships multiple fixes to make downloads more resilient to atypical server and network behavior. It also improves safety by validating remote filenames before writing locally, re-exports the underlying httpx module for integrators, and tightens a few CLI edge cases (notably Windows behavior).
BreakingSecurityFeaturesv1.30.0
v1.30.0 adds richer filtering for `hf jobs scheduled ls` (status, labels, and name) and introduces repo-aware revision pinning via `ResolvedRevision`. It also relaxes hf-inference task gating for conversational chat completion models and updates file resolution to follow redirects across Hub hosts more reliably.
BreakingFeaturesv1.29.0
v1.29.0 focuses on improving large Xet downloads by reusing cached connection info (fewer Hub API calls), adds the ability to change bucket visibility, and includes security fixes for bucket sync path traversal and safetensors extension-confusion. It also refreshes some CLI help rendering behavior for Click 8.5, tightens sandbox documentation/security messaging, and tweaks inference error messaging for 504 timeouts.
BreakingSecurityFeaturesv1.25.1
Release v1.25.1 contains essentially no documented changes in the provided release notes (only a changelog comparison link). The code diff shows a small version bump and a meaningful modification to the sandbox bootstrap process related to how the server artifact is downloaded and authenticated.
v1.26.1
v1.26.1 primarily adds support for a new inference provider, Baseten, by wiring it into the inference client provider routing. The release notes provided do not list any specific changes beyond a changelog link, so the Baseten addition and related doc/CLI updates are not explicitly documented here.
Featuresv1.28.0
This release introduces the new `hf endpoints hardware` command (and `list_inference_endpoints_hardware()` in the SDK) to discover deployable Inference Endpoint hardware combinations with quota and pricing. It also extends managed engine image support for Inference Endpoints by changing the `custom_image` payload shape, and adds parallelism-related CLI flags for vLLM and SGLang.
BreakingFeaturesv1.27.0
v1.27.0 adds automatic management of the `hf-cli` AI-agent skill, including global installation by default in the standalone installers, periodic (daily) local hints when the skill is missing or out of date, and an `hf update` refresh flow that respects opting out. It also extends Inference Endpoints to allow `--container-command` and `--container-args` without requiring `--custom-image`, supports those settings via `endpoints update` and the underlying Python API, and introduces the new Baseten inference provider for conversational chat completions.
BreakingFeaturesv1.26.0
v1.26.0 introduces a new revision-pinning mechanism via `HfApi.resolve_revision` and `ResolvedRevision`, so multi-file downloads can be pinned to the same commit with fewer HTTP requests. It also ships security hardening for `local_dir` and sandbox bootstrap, adds organization resource group support for Jobs and Collections, and improves the Jobs CLI to surface and filter by job name.
BreakingSecurityFeaturesv1.25.0
v1.25.0 introduces automatic job naming at creation time, along with progress bar and cache diagnostics improvements. It also adds a `timeout` parameter to safetensors metadata parsing, plus several bug fixes across jobs, cache handling, repocard parsing, and file system streaming.
Featuresv1.24.0
v1.24.0 documents new optional naming support for Jobs via both the CLI and Python APIs, plus documentation updates and a bug fix for xet download rate display. The provided code diff (v1.24.0.rc3 to v1.24.0) shows only a version string change in the package __init__.py.
Featuresv1.24.0.rc3
This release (v1.24.0.rc3) contains no documented release notes from the publisher. The only observed code change is a patch-level update to the package version string.
v1.24.0.rc2
No release notes were provided for v1.24.0.rc2, so there is no publisher-documented information about new features, bug fixes, or breaking changes. Treat this release as a candidate for code-level review (diff/changelog scan) before upgrading, especially if you rely on recently changed APIs or behavior.