Repository navigation
Use HF Trusted Publisher token in update_metadata workflow - #15096
Merged
Merged
Conversation
sayakpaul
approved these changes
Oct 22, 2026
10 tasks
mingyi456
added a commit
to mingyi456/diffusers
that referenced
this pull request
Oct 24, 2026
…/mingyi456/diffusers into animatextconditioner-single-file * 'animatextconditioner-single-file' of https://github.com/mingyi456/diffusers: (50 commits) Remove expired non_ema_revision deprecation blocks from training examples (huggingface#15118) Remove duplicated converter and fix import order Update src/diffusers/loaders/single_file_utils.py add fibo-2 LoRA training and loading (huggingface#15084) [ci] fix compilation CI. (huggingface#15092) [LoRA] apply .alpha to Qwen-Image lora_A/lora_B LoRAs (huggingface#15016) Use HF Trusted Publisher token in update_metadata workflow (huggingface#15096) [ci] skip bf16 precision test on T4. (huggingface#15091) [LTX-2] Add `motion_speed` to condition the positional time base apart from the playback frame rate (huggingface#14967) [ci] fix misnamed test steps in push_tests.yml (huggingface#15094) [ci] use python 3.11 when using metadata. (huggingface#15093) Fix model imports when torchao is older than 0.15 (huggingface#15095) [tests] xfail some kandinsky6 tests (huggingface#14977) Add RFD4-Proteina (huggingface#15088) Add Bria fibo-2 (huggingface#14991) Fix PyArrow compatibility in CPU CI (huggingface#15082) [feat] add KVAE-Audio autoencoder (huggingface#14384) move unpack out of the flux, krea2 and ltx decoders into the core denoise groups (huggingface#14737) post-release 0.41.0 (huggingface#15062) FLUX.3: match the released BFL reference image sizing (huggingface#15073) ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Replaces the long-lived
SAYAK_HF_TOKENsecret in theupdate_metadataworkflow with a short-lived (1h) token from the Hub's Trusted Publishers, scoped todatasets/huggingface/diffusers-metadataonly.id-token: writeso the job can request a GitHub OIDC tokenhuggingface_hub>=1.19.0for the OIDC token exchangeHF_OIDC_RESOURCEinstead ofHF_TOKEN