deps(deps): update huggingface-hub requirement from >=1.20.1 to >=1.23.0

[dependabot]

Updates the requirements on huggingface-hub to permit the latest version.

Release notes

Sourced from huggingface-hub's releases.

[v1.23.0] Space templates, CLI extension updates & smoother Xet downloads

🚀 Create Spaces from templates

You can now seed a new Space from one of the official Hub templates (JupyterLab, a Gradio chatbot, a Streamlit app, etc.) instead of starting from an empty repo. List what's available with the new list_space_templates() API or the hf spaces templates CLI command, then pass a template's repo_id (or its short name) to create_repo(..., space_template=...) or hf repos create --type space --template. The Space SDK is inferred from the template, and templates recommended as private (like JupyterLab) are created privately by default unless you explicitly choose a visibility.

# List available templates
$ hf spaces templates
NAME REPO_ID SDK PREFERRED_PRIVATE
----------- ----------------------------------- ------- -----------------
Streamlit streamlit/streamlit-template-space docker
JupyterLab SpacesExamples/jupyterlab docker ✔
Create a Space from a template
$ hf repos create my-jupyterlab --type space --template jupyterlab
✓ Repo created
repo_id: Wauplin/my-jupyterlab
url: https://huggingface.co/spaces/Wauplin/my-jupyterlab

>>>fromhuggingface_hubimportcreate_repo>>>create_repo("my-jupyterlab", repo_type="space", space_template="jupyterlab")

• Support creating a Space from a template by @​moon-bot-app[bot] in #4504

🔌 Update installed CLI extensions

A new hf extensions update command brings your installed CLI extensions to their latest published version on GitHub. Pass a name to update a single extension, or run it with no argument to check every installed extension and update the ones that are behind. Updates are applied in place — Python extensions reuse their existing venv and binary extensions are overwritten — so a failed update no longer leaves the extension uninstalled, and extensions that are already up to date are simply skipped.

# Update a single extension (accepts <name>, hf-<name> or OWNER/hf-<name>)
hf extensions update hf-claude
Check every installed extension and update the outdated ones
hf extensions update

• [CLI] Add hf extensions update command by @​Wauplin in #4496

📶 Smoother Xet download progress with dual bars

Xet downloads now show two progress bars so you can tell a transfer is alive even on a slow connection. The transfer bar advances as bytes arrive over the network, while the reconstruction bar tracks real progress as buffered chunks are written to disk — previously the single bar could sit at 0% for a long time while data was actually arriving. The dual bars are wired into single-file downloads (hf_hub_download), snapshot_download (where parallel file downloads feed the repo-level transfer and reconstruction bars), the hf download CLI, and bucket downloads.

big.bin: downloading bytes: | 52.4MB 1.2MB/s
big.bin: reconstructing file: | 52.4MB / 105MB 800kB/s
</tr></table> 

... (truncated)

Commits

• 0c92853 Release: v1.23.0
• 6bc5aa0 Release: v1.23.0.rc0
• 0815693 [CLI] Generate hf-cli skill locally instead of downloading from bucket (#4199)
• 923acb0 [Utils] Add get_cached_repo_tree utility (#4513)
• 7625ea3 Expose snapshot_path on IncompleteSnapshotError (#4500)
• c5a110d [CLI] Add --pipeline-tag, --gated, --apps filters to hf models ls (#4512)
• b63ed5b [Utils] Treat backslashes as path separators in filter_repo_objects (#4506)
• 6d40d9c docs: drop /new from Inference Endpoints web interface links (#4509)
• ed48426 [CI] Fix expand property type tests (#4510)
• 790120b Support creating a Space from a template (#4504)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nuntius-review]

Nuntius

Reviewed commits

Commit	Summary
52f9ae5	deps(deps): update huggingface-hub requirement from >=1.20.1 to >=1.23.0

An analysis of the changed files reveals a potential issue with the versioning of the huggingface_hub package.

Correctness & Build Stability

The huggingface_hub library is currently versioned under the 0.x.y release cycle (e.g., 0.23.0, 0.28.1). There are no 1.x.y releases of huggingface_hub yet.

Specifying huggingface_hub>=1.23.0 will cause package managers like pip to fail during installation with a No matching distribution found error. This appears to be a typo where 1.23.0 was written instead of 0.23.0 (and similarly, the previous line 1.20.1 was likely a typo for 0.20.1).

Here is the correction to ensure the installation succeeds:

requirements.txt
@@ -9,1 +9,1 @@-huggingface_hub>=1.23.0+huggingface_hub>=0.23.0

[nuntius-review]

Nuntius Analysis for 52f9ae5

[nuntius-review]

Here is the correction to ensure the installation succeeds:

Suggested change

	httpx==0.28.1
	huggingface_hub>=0.23.0

[dependabot]

Superseded by #92.