[dependabot]

Bumps the pip-major group with 2 updates: huggingface-hub and websockets.

Updates huggingface-hub from 1.32.0 to 2.2.0

Release notes

Sourced from huggingface-hub's releases.

[v2.2.0] hf jobs stats snapshots, download and HfFileSystem fixes

A small release this week, mostly bug fixes and quality-of-life improvements. hf jobs stats now returns right away instead of streaming forever, concurrent downloads reliably use hf_xet, and HfFileSystem caching is more predictable. Two behavior changes are listed under Breaking changes.

📊 hf jobs stats prints a snapshot by default

hf jobs stats used to stream metrics until the job finished, so scripts and agents calling it on a running job hung until their own timeout. It now prints the latest sample of each job once and exits, like hf jobs logs and hf spaces logs. Use -f/--follow for the previous live view. Snapshot output also supports --format json|agent|quiet, which outputs the raw API metrics.

On the Python side, HfApi.fetch_job_metrics gets the same follow parameter as fetch_job_logs. It defaults to False and returns only the current sample. Pass follow=True to stream until the job completes.

>>> hf jobs stats 6ac3bd9afbc85ba6823a9ad4
JOB ID                CPU % NUM CPU MEM % MEM USAGE      NET I/O         GPU UTIL % GPU MEM % GPU MEM USAGE
--------------------- ----- ------- ----- -------------- --------------- ---------- --------- -------------
6ac3bd9afbc85ba682... 0%    2.0     0.01% 1.0MB / 16.0GB 0.0bps / 0.0bps N/A        N/A       N/A
Hint: Use `hf jobs stats -f celinah/6ac3bd9afbc85ba6823a9ad4` to follow live stats.
Stream live stats until the job completes
>>> hf jobs stats -f 6ac3bd9afbc85ba6823a9ad4

>>> from huggingface_hub import fetch_job_metrics
>>> for metrics in fetch_job_metrics(job_id=job.id, follow=True):
...     print(metrics)

Other Jobs fixes in this release: hf jobs logs and hf spaces logs without -f no longer hang while the job keeps printing, hf jobs stats no longer fails when one of the requested jobs has finished, and hf jobs stats --json prints [] when no job is running.

• [CLI] Snapshot by default in hf jobs stats, add -f/--follow by @​hanouticelina in #5090
• [CLI] Fix empty hf jobs stats --json output with no running jobs by @​hanouticelina in #5094
• [Jobs] Fix no-follow logs hanging while the job keeps printing by @​hanouticelina in #5092
• [Jobs] Ignore 406 from metrics endpoint for finished jobs by @​hanouticelina in #5091

📚 Documentation: Jobs guide

⚡ Concurrent downloads always use hf_xet

In a fresh process, the first concurrent hf_hub_download calls could read a placeholder version for hf_xet while another thread was still looking it up. Those calls treated hf_xet as missing and downloaded through the plain HTTP path. This mostly affected parallel downloads such as snapshot_download, where some of the files skipped Xet. The version lookup is now cached only once it is resolved, so every download sees the real value.

• Fix race in _get_version that makes concurrent downloads skip hf_xet by @​BramVanroy in #5102

📂 HfFileSystem cache fixes

Three fixes to how HfFileSystem caches listings and missing paths:

• ls() on a newly created empty bucket returns an empty list instead of raising FileNotFoundError.
• Directory listings are now replaced in the cache instead of appended to. Before, ls() after find() or ls(refresh=True) could return duplicate entries, refresh=True kept deleted files, and listing a single bucket file cached it as the whole folder's listing.
• exists(path, refresh=True) and invalidate_cache(path) now clear cached "not found" results. Before, a repo, branch or bucket created in the same process stayed missing until a full invalidate_cache().

</tr></table> 

... (truncated)

Commits

• acfdf30 Release: v2.2.0
• 193d9d9 Release: v2.2.0.rc0
• 5be3565 [Cache] Speed up delete_revisions with a set lookup (#5118)
• dab6a96 [CLI] Don't glob-expand arguments on Windows (#5117)
• cca4d3a [Download] Fix offline snapshot_download with a pinned revision (#5113)
• c6cc03e Fix argument name in raise_text_generation_error docstring (#5108)
• 8abbfe5 Fix race in _get_version that makes concurrent downloads skip hf_xet (#5102)
• bb3a875 [Docs] Fix from_pretrained integration example (#5105)
• cf992a9 [HfFileSystem] Make refresh=True clear cached not-found results (#5106)
• af74167 [Tests] Wait for bucket listings after writes (#5095)
• Additional commits viewable in compare view

Updates websockets from 15.0.1 to 17.2

Release notes

Sourced from websockets's releases.

17.2

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.1.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits

• a1664f4 Release version 17.2.
• d2060d8 Test against latest PyPy.
• 2af0aff Bump pypa/cibuildwheel from 4.2.0 to 4.2.1
• 603dd98 Document how to wait for clients to disconnect.
• f78b0b3 mypy is getting smarter.
• 32504a8 Prevent suprious log when proxy rejects connection.
• 7db6ba3 Decode credentials in WebSocket and proxy URIs.
• a591d62 Tighten heuristics for representing control frames.
• 5b63a4c Fix flaky tests.
• b8cfbfb Add deterrence against AI slop.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions