chore(deps): bump huggingface-hub from 1.16.1 to 1.17.0

[dependabot]

Bumps huggingface-hub from 1.16.1 to 1.17.0.

Release notes

Sourced from huggingface-hub's releases.

[v1.17.0] Cross-repo copies, ssh to Spaces, smarter CLI tables

📋 Copy files between repositories

You can now copy files or entire folders between different repositories on the Hub — model to model, model to dataset, any combination — without downloading or re-uploading data. CommitOperationCopy accepts src_repo_id and src_repo_type for cross-repo sources, and LFS blobs are deduplicated server-side via the /lfs-files/duplicate endpoint. Non-LFS files are fetched from the source repo and committed as regular payloads. copy_files and hf buckets cp now support repo-to-repo in addition to the existing bucket destinations.

>>> from huggingface_hub import copy_files
Copy an entire folder
>>> copy_files(
...     "hf://datasets/username/source-dataset/data/",
...     "hf://datasets/username/target-dataset/data/",
... )

• [Copy] Support cross-repo file copies by @​Wauplin in #4203

📚 Documentation: Upload guide — Copy files between repositories

🖥️ SSH into a Space with hf spaces ssh

A new hf spaces ssh command opens an SSH session directly into a Space's Dev Mode container. If Dev Mode is not enabled yet, the CLI prompts you to enable it. You can also use --dry-run to print the SSH command without running it, or -i to forward a specific key. Your SSH public key must be registered in your HF user settings.

# SSH into a Space
$ hf spaces ssh username/my-space
Print the SSH command without running it
$ hf spaces ssh username/my-space --dry-run

• [CLI] Add hf spaces ssh by @​gary149 in #4241

📚 Documentation: CLI guide — SSH into a Space | Spaces guide — SSH into a Space

📂 List all your repos with hf repos ls

A new hf repos ls command lists all your repositories — models, datasets, spaces, and buckets — with storage size and percentage of namespace total, sorted by storage usage. It supports --type, --search, --namespace, and --limit (default 30, --limit 0 for all), plus the standard --format family.

# List all your repos
$ hf repos ls
List all datasets under org with JSON output
$ hf repos ls --namespace my-org --type dataset --limit 0 --format json | jq '.[].id'

• [CLI] Add hf repos ls command by @​Wauplin in #4283

📚 Documentation: CLI guide — List repos | Repository guide — List your repositories

... (truncated)

Commits

• b529493 Release: v1.17.0
• e2f95ef Release: v1.17.0.rc0
• 06d2a3f [CLI] Add hf repos ls command (#4283)
• 714044e [Docs] Document missing parameters in lfs, hf_file_system, and repocard_data ...
• 5e8e940 [CLI] Auto right-align numeric columns in human table output (#4288)
• bb09fa4 [Copy] Support cross-repo file copies (#4203)
• b17ab0c [CLI] Drop legacy printing helpers from _cli_utils.py (#4285)
• 5c7920e [CLI] Migrate hf lfs-enable-largefiles, hf extensions, hf version to `o...
• ffc07b6 [Jobs] Decouple Job hardware from Spaces, auto-sync enums with Hub API (#4266)
• c06e976 [CLI] Auto-fit human tables to terminal width (#4251)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Automated Review Checklist

Before approving this PR, confirm each item:

Code quality

• Logic is correct and edge cases are handled
• No debug logs, dead code, or commented-out blocks left in
• Naming is clear — no abbreviations that need a comment to decode

Tests

• New behaviour is covered by tests, or existing tests updated
• poetry run pytest passes locally

Frontend (if applicable)

• UI renders correctly across light/dark mode
• No layout regressions on narrow viewports

Infrastructure / config (if applicable)

• Secrets/env vars are not hardcoded
• Docker build still passes (docker build .)

Docs

• CHANGELOG or PR description explains the why, not just the what
• Public API changes are reflected in docs

---

Review, check off what applies, then submit your formal Approve or Request Changes.