RepoJournal
Hugging Face @huggingface
112 wires and counting

$ follow Hugging Face

Keep up with Hugging Face in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-29
stories 35
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

TRANSFORMERS HARDENS CI RELAY; HUB FIXES XET CACHE BUG

By RepoJournal · Filed · About Hugging Face · Composed from the cited sources · methodology

tarekziade albertvillanova seanses stevhliu IlyasMoutawwakil dependabot Pierrci
7 people shipped this
tarekziade @tarekziade 4 cited albertvillanova @albertvillanova 1 cited seanses @seanses 1 cited stevhliu @stevhliu IlyasMoutawwakil @IlyasMoutawwakil dependabot @dependabot Pierrci @Pierrci

Serge review automation is now reachable behind the VPN, and a critical xet file download issue tied to redacted hashes in gated repos is resolved.

Transformers shipped a VPN relay workflow [1] that re-signs and re-delivers webhook events to Serge's internal endpoint, making AI-assisted code review functional for the first time. The same PR established .ai/review-rules.md to orient the model toward repo conventions. In parallel, the CI harness unified all GitHub API calls into a single function [2] with pre-flight token validation and per-request rate-limit logging, eliminating silent failures from expired credentials. Transformers-ci split its slowest-tests and failing-tests panels by CPU vs GPU [4], after GPU jobs dominated the raw leaderboard and pushed actionable CPU tests off-screen; the same series added run_id to failure traces [3] so the dashboard can now answer "has this test failed in the last N runs of its job?" The huggingface_hub team fixed a critical xet download failure [6] where tree-cache queries returned redacted hashes (64 asterisks) on gated repos, causing hex parsing to fail; the fix validates cache entries on read and write. TRL unblocked bitsandbytes 0.50.0 support [5] by fixing quantization tests and reverting a temporary version pin, while also correcting a latent dtype-comparison bug.

Action items

References

  1. [1] CI: Add serge review relay workflow and review rules ↗ huggingface/transformers
  2. [2] CI: use a single function for GH calls ↗ huggingface/transformers
  3. [3] trace-exporter: add run_id to pytest_test_last_failure_info ↗ huggingface/transformers-ci
  4. [4] dashboard: split Failing/Slowest panels by CPU vs GPU ↗ huggingface/transformers-ci
  5. [5] Fix test_peft_with_quantization tests for bitsandbytes 0.50.0 ↗ huggingface/trl
  6. [6] [Download] Reject redacted Xet hashes from tree cache ↗ huggingface/huggingface_hub

$ ls huggingface/reviews/ # the step-back reads

the week in review OpenEnv 0.5.0 ships as typed clients get fixed the month in review Cache-billing leak fixed, and everything from robots to diffusers gets harder to break
Topics: Python AI / ML Full archive → Weekly reviews →

Quick answers

What shipped in Hugging Face on July 29, 2026?
Serge review automation is now reachable behind the VPN, and a critical xet file download issue tied to redacted hashes in gated repos is resolved. In total, 16 commits, 18 pull requests, and 1 releases landed.
Who contributed to Hugging Face on July 29, 2026?
7 developers shipped this update, including tarekziade, stevhliu, IlyasMoutawwakil, albertvillanova, dependabot, seanses, and Pierrci.
What were the notable Hugging Face updates?
CI: Add serge review relay workflow and review rules, CI: use a single function for GH calls, and trace-exporter: add run_id to pytest_test_last_failure_info.
♥

$ log @huggingface --recent

Flash and sage varlen prep work under torch.compile dynamic shapes 6 shipped OpenEnv closes soupsieve CVEs in two more envs, TRL reshapes GRPO log-probs 63 shipped OpenEnv 0.5.0 ships new public surface, capture proxy gains an admin key 48 shipped pwc-cli exposes every read-only command as an MCP tool 47 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.