Who contributed to Hugging Face on July 19, 2026?

8 developers shipped this update, including Onur Solmaz, Functionhx, dependabot, albertvillanova, chenyangzhu1, akshan-main, alejandro-ao, and rian-dolphin.

What were the notable Hugging Face updates?

fix: host authenticated gateways on protected Spaces, fix(brokerkit): consume canonical operator contract, and fix(deploy): reconcile update version metadata.

@huggingface

Transformers, Datasets, and the open AI-model layer

github ↗

Pick a date

Topics: Python AI / ML Full archive →

The Wire · Showcase

MLCLAW TIGHTENS AUTHENTICATION, TAU SHIPS REASONING PERSISTENCE

By RepoJournal · Filed 06:59 UTC on July 19, 2026 · About Hugging Face

8 people shipped this

Onur Solmaz @osolmaz 5 cited

alejandro-ao @alejandro-ao 4 cited

rian-dolphin @rian-dolphin 1 cited

Functionhx @Functionhx

dependabot @dependabot

albertvillanova @albertvillanova

chenyangzhu1 @chenyangzhu1

akshan-main @akshan-main

MLClaw fixed a critical authentication gap where private Space edge cookies weren't reaching approval requests, forcing a shift to protected Space defaults across all hosted gateways.

In brief

mlclaw now hosts authenticated gateways on protected Spaces. no more exposing your inference endpoints to randoms.
Tau 0.2.1 ships reasoning persistence. your model's thought chain survives restarts. finally stops wasting inference tokens on re-reasoning.
Tau TUI themes are now JSON data files. swap themes without recompiling, import them at project level. actually portable for once.
Long transcripts in tau TUI no longer lag to hell. optimized rendering means you can actually trace 10k token conversations.

The fix [1] delegates approval through identity-aware edges by hosting gateways on protected Spaces by default, only allowing public visibility when explicitly requested. That same push also standardized MLClaw's request schema to consume BrokerKit's canonical Operator V1 validators directly [2], eliminating a second hand-written contract that was causing the approvals popover to reject valid requests. Version state tracking got fixed too [3]: mlclaw update now persists the same effective image across the local manifest and canonical desired state, preparing patch 0.4.9. The website infrastructure tightened simultaneously [4] [5], moving to mlclaw.dev with strict quality gates so the site runs through the full repository CI pipeline instead of bypassing standards. Over in Tau, the 0.2.1 release [6] persists thinking and reasoning blocks across event streams and session storage, while startup now coerces the thinking level to what the loaded model actually supports [7], killing the crash when a model only accepts xhigh reasoning. The TUI got two substantial upgrades: themes moved from hardcoded Python to discoverable JSON files [8], and both sidebar insights [9] and transcript rendering [10] were optimized to show cumulative usage, estimated costs, and handle long sessions with bounded widget windows.

Action items

→ Deploy MLClaw 0.4.9 with fixed Space visibility and version state reconciliation huggingface/mlclaw [immediate]
→ Verify your Tau model supports the default thinking level before upgrading to 0.2.1 huggingface/tau [plan]
→ Monitor TRL's DPO/KTO eval_dataset preprocessing fix in your training pipelines huggingface/trl [monitor]

References

[1] fix: host authenticated gateways on protected Spaces ↗ huggingface/mlclaw
[2] fix(brokerkit): consume canonical operator contract ↗ huggingface/mlclaw
[3] fix(deploy): reconcile update version metadata ↗ huggingface/mlclaw
[4] fix(website): serve from mlclaw.dev custom domain huggingface/mlclaw
[5] fix(website): add quality gates ↗ huggingface/mlclaw
[6] Tau 0.2.1 ↗ huggingface/tau
[7] Coerce startup thinking level to a mode the model supports ↗ huggingface/tau
[8] Make TUI themes data: JSON theme files with user and project discovery ↗ huggingface/tau
[9] Improve TUI sidebar session insights ↗ huggingface/tau
[10] Optimize long TUI transcript rendering ↗ huggingface/tau

Quick answers

What shipped in Hugging Face on July 19, 2026?: MLClaw fixed a critical authentication gap where private Space edge cookies weren't reaching approval requests, forcing a shift to protected Space defaults across all hosted gateways. In total, 32 commits, 28 pull requests, and 9 releases landed.
Who contributed to Hugging Face on July 19, 2026?: 8 developers shipped this update, including Onur Solmaz, Functionhx, dependabot, albertvillanova, chenyangzhu1, akshan-main, alejandro-ao, and rian-dolphin.
What were the notable Hugging Face updates?: fix: host authenticated gateways on protected Spaces, fix(brokerkit): consume canonical operator contract, and fix(deploy): reconcile update version metadata.

DIFFUSERS SHIPS COSMOS3 FEW-STEP INFERENCE, LEROBOT STRIPS 3K LINES OF VENDORED CODE

Cosmos3 distilled checkpoints hit diffusers with 4-step T2I and I2V support, while lerobot kills its Qwen2.5-VL fork and rebases onto native transformers.

python 40 shipped 1-min read

@huggingface 2 days ago

SENTENCE-TRANSFORMERS FIXES SILENT GRADIENT CORRUPTION ON GPU

A critical bug in cached losses was silently producing wrong gradients on GPU, and it's fixed now [ref:1].

python 60 shipped 1-min read

@huggingface 3 days ago

TRANSFORMERS 5.14 SHIPS WITH INKLING MULTIMODAL MODEL

Hugging Face shipped transformers v5.14.0 with native support for Inkling, a 975B parameter multimodal model that processes text, image, and audio in a single forward pass.

python 53 shipped 1-min read

@huggingface 4 days ago

TRANSFORMERS PATCHES TORCH.COMPILE CRASH; KERNELS SHIP LAYER REGISTRY UPDATES

Transformers just fixed a half-precision torch.compile crash that broke DETR models in v5.9.0, while the kernel ecosystem shipped three layer-repo updates that unify the custom kernel interface across rotary, liger, and rope implementations.

python 39 shipped 2-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 10 hours ago

CACHYOS LINUX 7.1.4 SHIPS WITH SCHEDULER REVERT AND AMD AUDIO FIXES

The kernel bumped to 7.1.4 overnight with a critical scheduler revert and targeted audio driver fixes for AMD systems.

infra 57 shipped 1-min read

Elixir & Phoenix about 10 hours ago

ECTO FIXES SILENT DATA CORRUPTION IN MAP UPDATES AND BELONGS_TO LOOKUPS

Two critical Ecto bugs that silently corrupt changeset data are now fixed, and you should merge these immediately if you're using map or association updates.

elixir 10 shipped 1-min read

Mobile platforms about 10 hours ago

SWIFT COMPILER DROPS DECADE-OLD INTEROP WORKAROUND, REIMPLEMENTS CORE OPTIMIZER IN PURE SWIFT

Swift's ClangImporter finally stopped stripping type aliases that have been unnecessary since 2014, while the compiler's foundational SSAUpdater moved entirely off C++ dependencies.

mobile 28 shipped 1-min read

@dotnet about 10 hours ago

SOURCE.DOT.NET PROXY LAYER BROKEN, SOURCEBROWSER GETS MAJOR OVERHAUL

source.dot.net is serving HTTP 500s and stale assets because the proxy layer exposes bugs that local-disk deployments never catch, and SourceBrowser just got a significant upgrade that's likely its last.

dotnet 12 shipped 1-min read