Repository navigation
chore(deps): update huggingface-hub requirement from <2.0.0,>=1.5.0 to >=1.5.0,<3.0.0 - #1007
Merged
cemililik merged 3 commits intoOct 18, 2026
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
2 tasks done
cemililik
added a commit
that referenced
this pull request
Oct 18, 2026
…y 4-5 (#1014) ## Summary Four Dependabot range bumps (#1003, #1008, #1010, #1011) combined into one pull request so they cost one CI round instead of four (each merge makes the others "behind" and the branch protection requires an up-to-date branch). Dependabot closes its own pull requests when the same change lands. The individual Dependabot commits are merged unchanged. ## What each range change admits, and the evidence | Dependency | Range | Where it is used | Evidence | |---|---|---|---| | `datasketch` | `<2` → `<3` | `ingestion-scale` extra (MinHash LSH) | **CI installs 2.0.0** for the full suite (5868 passed, 22 skipped); the data-audit modules also pass locally on 2.0.0 (283 passed) | | `pytest-randomly` | `<4` → `<6` | `dev` extra | **CI installs 5.0.0** for the full suite (5868 passed, 22 skipped) | | `xxhash` | `<4` → `<5` | `ingestion` extra (simhash) | **Not exercised by CI** (the extra is not installed there). Locally on 4.0.1 the data-audit modules give the same result as on 3.8: 283 passed, 1 skipped | | `pypdf` | `<6` → `<7` | `ingestion` extra (PDF reading) | **Not exercised by CI**: pypdf is not installed there, so the PDF tests skip (224 passed, 19 skipped). Locally the same modules give 238 passed, 5 skipped on both 5.9.0 and 6.21.1 | So for xxhash and pypdf the green CI proves nothing; the local runs above are the evidence. ### Not included **#1007 (`huggingface_hub` `<2` → `<3`)** is left open on purpose. CI installs 1.33.0 either way, so the change is untested, and widening the range lets pip install hub 2.x for users once their other dependencies allow it. That is a claim ForgeLM has not checked, and the core stack (`huggingface_hub`, transformers, torch, TRL, PEFT, accelerate, datasets) is migrated deliberately, not by an automatic bump. I would close it, and add a Dependabot `ignore` for semver-major bumps of that stack; that is a separate change. ## Type - [x] Dependency ## Testing - CI (lint, validate, tests on Python 3.10–3.13) on this branch. - Local runs against throwaway installs of datasketch 2.0.0, xxhash 4.0.1 and pypdf 5.9.0 / 6.21.1 as in the table. ## Checklist - [x] CHANGELOG entry under `[Unreleased]` 🤖 Generated with [Claude Code](https://claude.com/claude-code) ## Summary by Sourcery Expand dependency compatibility ranges for ingestion extras and development tooling while retaining the existing huggingface_hub constraint. Enhancements: - Broaden supported version ranges for optional ingestion dependencies and development tooling, admitting pypdf 6, xxhash 4, datasketch 2, and pytest-randomly 4–5. Documentation: - Document the newly admitted dependency major versions and their validation status in the unreleased changelog. Tests: - Validate compatibility with the newer dependency versions through CI and targeted local test runs. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Expanded supported version ranges for optional ingestion and scaling packages, plus the development testing package. Minimum supported versions are unchanged. * Verified ingestion tests with updated package versions and CI with the newer scaling and testing package versions. * Updated the changelog to document these compatibility updates. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
Updates the requirements on [huggingface-hub](https://github.com/huggingface/huggingface_hub) to permit the latest version. - [Release notes](https://github.com/huggingface/huggingface_hub/releases) - [Commits](huggingface/huggingface_hub@v1.5.0...v2.2.0) --- updated-dependencies: - dependency-name: huggingface-hub dependency-version: 2.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/huggingface-hub-gte-1.5.0-and-lt-3.0.0
branch
from
October 18, 2026 11:24
452c644 to
d323ddb
Compare
…in CI CI on this branch resolved huggingface_hub 2.2.0 with transformers 5.20.1 and passed the full suite on Python 3.10 to 3.13; every huggingface_hub symbol ForgeLM imports exists in 2.2.0. transformers 5.10 to 5.17 pin the hub below 2, 5.18 and later allow 2.x. The entry that said the hub stays below 2 is corrected. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
dependabot
Bot
deleted the
dependabot/pip/huggingface-hub-gte-1.5.0-and-lt-3.0.0
branch
October 18, 2026 13:03
10 tasks done
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on huggingface-hub to permit the latest version.
Release notes
Sourced from huggingface-hub's releases.
... (truncated)
Commits
acfdf30Release: v2.2.0193d9d9Release: v2.2.0.rc05be3565[Cache] Speed up delete_revisions with a set lookup (#5118)dab6a96[CLI] Don't glob-expand arguments on Windows (#5117)cca4d3a[Download] Fix offline snapshot_download with a pinned revision (#5113)c6cc03eFix argument name in raise_text_generation_error docstring (#5108)8abbfe5Fix race in_get_versionthat makes concurrent downloads skip hf_xet (#5102)bb3a875[Docs] Fix from_pretrained integration example (#5105)cf992a9[HfFileSystem] Make refresh=True clear cached not-found results (#5106)af74167[Tests] Wait for bucket listings after writes (#5095)