Who contributed to Hugging Face on August 18, 2026?

7 developers shipped this update, including Amandeep Chanyal, Tarek Ziade, zucchini-nlp, stevhliu, Remy, lhoestq, and osolmaz.

What were the notable Hugging Face updates?

feat(control): add capability-scoped Sandboxes, feat(control): add scoped worker inference credential, and fix(control): isolate protected ingress limits.

@huggingface

Transformers, Datasets, and the open AI-model layer

github ↗

Pick a date

Topics: Python AI / ML Full archive →

The Wire · Showcase

Harbor-HF Walls Off Sandboxes While Serge Patrols Its Gates

By RepoJournal · Filed 06:59 UTC on August 18, 2026 · About Hugging Face

7 people shipped this

osolmaz @osolmaz 5 cited

Tarek Ziade @tarekziade 4 cited

Remy @rtrompier 2 cited

Amandeep Chanyal @Aman2394

zucchini-nlp @zucchini-nlp

stevhliu @stevhliu

lhoestq @lhoestq

Overnight, Hugging Face's internal infrastructure hardened its edge: Harbor-HF locks down sandbox capabilities, Serge's verify workflow stops dispatching with empty inputs, and dataset-viewer workers finally log their own startups.

Harbor-HF shipped capability-scoped Sandbox operations, so reviewed workers can now submit results and drive sandboxes without ever touching the long-lived `HF_TOKEN` [1]. The control Space alone holds the secret, while workers receive short-lived signed capabilities and a separate inference-only credential that is rejected if it equals `HF_TOKEN` [2]. A canary exposed a real bypass: the hosting proxy passes caller-supplied `X-Forwarded-For` values, letting anyone rotate the header and dodge route limits, so Harbor-HF now ignores forwarded client identity and applies limits only after authentication [3]. It also protects public worker ingress and standardizes per-repository authorization so compaction doesn't lose approval context [4][5]. Meanwhile, Serge fixed two sharp edges: the verify workflow hard-fails with a 422 when tests live outside `tests/models/`, because empty `model` inputs count as missing, and a broken normalize gate was burning correction budgets on useless retries [6][7]. dataset-viewer's worker logs were silently dropped because `basicConfig` is a no-op when a handler exists, so `init_logging` now forces root config [8]. Their chart also adds an optional deny-all egress NetworkPolicy to shrink the SSRF surface [9]. Transformers stayed quiet on features, but moved mlinter to 0.1.4 and unpinned pytest in examples_torch [10][11].

Action items

→ Review Harbor-HF sandbox capability model before granting any worker sandbox access huggingface/harbor-hf [immediate]
→ Patch any Serge-based runner to distinguish broken normalize gates from bad patches huggingface/serge [immediate]
→ Verify your dispatch flows don't send empty 'model' inputs for tests outside tests/models/ huggingface/serge [plan]
→ Enable the deny-all egress NetworkPolicy for dataset-viewer workers taking data from untrusted sources huggingface/dataset-viewer [plan]

References

[1] feat(control): add capability-scoped Sandboxes ↗ huggingface/harbor-hf
[2] feat(control): add scoped worker inference credential ↗ huggingface/harbor-hf
[3] fix(control): isolate protected ingress limits ↗ huggingface/harbor-hf
[4] feat(control): protect public worker ingress ↗ huggingface/harbor-hf
[5] chore: standardize project authorization and skill paths ↗ huggingface/harbor-hf
[6] Never dispatch the verify workflow with an empty `model` input ↗ huggingface/serge
[7] Tell a broken normalize gate apart from a bad patch ↗ huggingface/serge
[8] fix(libcommon): force root logging config so worker INFO logs are not dropped (#3406) huggingface/dataset-viewer
[9] feat(chart): add deny-all egress NetworkPolicy for the workers ↗ huggingface/dataset-viewer
[10] Moving mlinter to 0.1.4 (#47918) huggingface/transformers
[11] unpin `pytest` in the `examples_torch` deps (#48023) huggingface/transformers

Quick answers

What shipped in Hugging Face on August 18, 2026?: Overnight, Hugging Face's internal infrastructure hardened its edge: Harbor-HF locks down sandbox capabilities, Serge's verify workflow stops dispatching with empty inputs, and dataset-viewer workers finally log their own startups. In total, 38 commits and 38 pull requests landed.
Who contributed to Hugging Face on August 18, 2026?: 7 developers shipped this update, including Amandeep Chanyal, Tarek Ziade, zucchini-nlp, stevhliu, Remy, lhoestq, and osolmaz.
What were the notable Hugging Face updates?: feat(control): add capability-scoped Sandboxes, feat(control): add scoped worker inference credential, and fix(control): isolate protected ingress limits.

TWO NEW TOOLCHAINS AND A PATCH THAT MATTERS

Hugging Face's kernels repo brings Intel's next-gen GPU into the fold, while Transformers quietly fixes a cross-attention bug that could have been eating your encoder context.

python 84 shipped

@huggingface Aug 17

HARBOR-HF SHIPS UNIFIED TYPESCRIPT CONTROL SERVICE, TRANSFORMERS PATCHES DEVICE MISMATCHES

Harbor-HF migrated from distributed Python services to a single hosted TypeScript control plane, while Transformers fixed critical device placement bugs and unlocked tokenizers 0.23.1 compatibility.

python 22 shipped

@huggingface Aug 16

AGENT-MANAGER FIXES DRAG-AND-DROP, MOBILE LAYOUT, AND TAB REFRESH

The sidebar drag-and-drop broke when groups became framed UI elements, and a series of layout and polling fixes landed to smooth mobile and desktop rendering.

python 25 shipped

@huggingface Aug 15

DIFFUSERS CLOSES LORA GAPS WHILE MOON-IDE PINS CACHE REPLICAS

Diffusers shipped LoRA loading for MiniMax-H3 and fixed test failures across the framework, while moon-ide added session affinity to stabilize prompt cache distribution.

python 31 shipped

Elsewhere on the wire

AI Agents Aug 19

CLINE DESKTOP GOES NATIVE WITH BACKGROUND ALERTS

Cline's desktop app just became a tool you can leave running while you grab coffee, and LangChain is quietly fixing the token math that makes DeepSeek caching actually count.

ai-agents 97 shipped

@CachyOS Aug 19

CACHYOS PUSHES KERNEL 7.1.8 AND SCHEDULER FIXES ACROSS THE STACK

CachyOS is shipping a new kernel meanwhile patching its scheduler stack, and that combination is exactly what you want before your next deploy.

infra 58 shipped

Elixir & Phoenix Aug 19

LiveView memory leak fix leads overnight Elixir cleanup

A handful of pull requests across Elixir and Phoenix are quietly fixing leaks and edge cases that have been nagging at production apps.

elixir 19 shipped

@dotnet Aug 19

MAUI Overhauls NuGet Publishing as FSharp Preps for VS 18.11

MAUI is replacing its custom NuGet publishing with Microsoft's 1ES.PublishNuget, and FSharp is rolling Microsoft.Build deps forward to VS 18.11, two moves that reshape release engineering across the .NET ecosystem.