From f811b0b2353cd3550f782b049d0c49f950360fd0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 00:09:03 +0000
Subject: [PATCH] pip(deps): bump huggingface-hub from 1.28.0 to 1.29.0

Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 1.28.0 to 1.29.0.
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](https://github.com/huggingface/huggingface_hub/compare/v1.28.0...v1.29.0)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.in  | 2 +-
 requirements.txt | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/requirements.in b/requirements.in
index 06e2af8b9..ca5977115 100644
--- a/requirements.in
+++ b/requirements.in
@@ -33,7 +33,7 @@ python-slugify==8.0.4
 # container Python at 3.12: numpy<2.0 ships no cp313+ wheels, which is why
 # the Dockerfiles pin python3.12 via deadsnakes.
 numpy<2.0
-huggingface_hub>=1.28.0
+huggingface_hub>=1.29.0
 
 # Cross-episode ad training (fingerprinting + text matching)
 pyacoustid>=1.2.0
diff --git a/requirements.txt b/requirements.txt
index c59250aff..dd18103ac 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -798,9 +798,9 @@ httpx2==2.12.0 \
     # via
     #   anthropic
     #   openai
-huggingface-hub==1.28.0 \
-    --hash=sha256:46a2e950c09234de54093d587d1675382f0d08dbd600d9fb599b5932f5b2c6cb \
-    --hash=sha256:58a8bacb03072edfc38067065e9dc24bbb34805410fcd36a1632de0b329660bb
+huggingface-hub==1.29.0 \
+    --hash=sha256:6ebb385a581435325cf6d5c5b233d5d4bc91175834d99fd65dae14379b36e9ad \
+    --hash=sha256:b00f7782afc14db4bc6572763810a635bdfbab8623d957bfb553bd18e03852cd
     # via
     #   -r requirements.in
     #   faster-whisper