Build: Bump huggingface-hub from 1.6.0 to 1.7.1

[dependabot]

Bumps huggingface-hub from 1.6.0 to 1.7.1.

Release notes

Sourced from huggingface-hub's releases.

[v1.7.0] pip-installable CLI extensions and multiple QoL improvements

This release brings major improvements to the hf CLI with extension discoverability, unified list commands, and multiple QoL improvements in the CLI.

🎉 The Homebrew formula of the Hugging Face CLI has been renamed to hf. Existing users just need to run brew update - Homebrew handles the rename automatically. New users can install with brew install hf.

🧩 CLI Extensions: pip-installable packages and discoverability

The hf CLI extensions system gets a major upgrade in this release. Extensions can now be full Python packages (with a pyproject.toml) installed in isolated virtual environments, in addition to the existing shell script approach. This means extension authors can use Python dependencies without conflicting with the user's system. The install command auto-detects whether a GitHub repo is a script or a Python package and handles both transparently.

A new hf extensions search command lets users discover available extensions directly from the terminal by querying GitHub repositories tagged with the hf-extension topic. Results are sorted by stars and show whether each extension is already installed locally. Additionally, a comprehensive guide on how to build, publish, and make extensions discoverable has been added to the documentation.

# Install a Python-based extension
hf extensions install alvarobartt/hf-mem
Discover available extensions
hf extensions search
NAME   REPO                    STARS DESCRIPTION                         INSTALLED

claude hanouticelina/hf-claude     2 Extension for hf CLI to launch... yes
agents hanouticelina/hf-agents       HF extension to run local coding...

• [CLI] Add pip installable repos support to hf extensions by @​Wauplin in #3892
• [CLI] Add hf extensions search command by @​julien-c in #3905
• [Docs] How to build a CLI extension guide by @​Wauplin in #3908

📚 Documentation: Create a CLI extension

🔐 hf auth login CLI update

A new --force flag lets you explicitly go through the full login flow again when needed, for example to switch tokens.

# Already logged in — returns immediately
hf auth login
Force re-login to switch tokens
hf auth login --force

• Default to skipping login if already logged in and add --force flag by @​hanouticelina in #3920

📚 Documentation: CLI guide

📦 Xet optimizations and fixes

hf-xet has been bumped to v1.4.2 with some optimizations:

• Avoid duplicate sha256 computation when uploading to a model/dataset repo
• Skip sha256 computation when uploading to a bucket

... (truncated)

Commits

• 9b518ff Release: v1.7.1
• 4171dde Merge branch 'v1.7-release' of github.com:huggingface/huggingface_hub into v1...
• f2d9fd3 Merge branch 'main' into v1.7-release
• 787603e feat: pass skip_sha256=True to hf_xet for bucket uploads (#3900)
• 72871b9 Prepare for v1.8.0 release (#3927)
• 3770383 Release: v1.7.0
• c062fb7 Merge branch 'main' into v1.7-release
• 141fcfd feat: pass pre-computed SHA-256 to hf_xet upload (#3876)
• f945c6f Validate release notes have no extra PRs from other releases (#3926)
• c94df18 Release: v1.7.0.rc1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)