build(deps-dev): update huggingface-hub requirement from <0.21.0,>=0.19.0 to >=0.19.0,<1.9.0 in /backend

[dependabot]

Updates the requirements on huggingface-hub to permit the latest version.

Release notes

Sourced from huggingface-hub's releases.

[v1.8.0] Mounted volumes on Jobs, complete papers CLI, and more

🚀 Jobs can now mount volumes

Jobs can now access Hugging Face repositories (models, datasets, Spaces) and Storage Buckets directly as mounted volumes in their containers. This enables powerful workflows like running queries directly against datasets, loading models without explicit downloads, and persisting training checkpoints to buckets.

from huggingface_hub import run_job, Volume
job = run_job(
image="duckdb/duckdb",
command=["duckdb", "-c", "SELECT * FROM '/data/**/*.parquet' LIMIT 5"],
volumes=[
Volume(type="dataset", source="HuggingFaceFW/fineweb", mount_path="/data"),
],
)

hf jobs run -v hf://datasets/HuggingFaceFW/fineweb:/data duckdb/duckdb duckdb -c "SELECT * FROM '/data/**/*.parquet' LIMIT 5"

• Add volume mounting support for buckets and repos by @​XciD in #3936

📖 Papers CLI is now complete

The hf papers command now has full functionality: search papers by keyword, get structured JSON metadata, and read the full paper content as markdown. The ls command is also enhanced with new filters for week, month, and submitter.

# Search papers
hf papers search "vision language"
Get metadata
hf papers info 2601.15621
Read as markdown
hf papers read 2601.15621

• Complete hf papers with search, info, read + ls filters by @​mishig25 in #3952

🖥️ CLI repo ID shorthand

You can now use repo ID prefixes like spaces/user/repo, datasets/user/repo, and models/user/repo as a shorthand for user/repo --type space. This works automatically for all CLI commands that accept a --type flag.

# Before
hf download user/my-space --type space
hf discussions list user/my-dataset --type dataset
After
</tr></table>

... (truncated)

Commits

• 8b7c45c Release: v1.8.0
• 5e62f96 Release: v1.8.0.rc0
• 701fb0b feat(jobs): add volume mounting support for buckets and repos (#3936)
• 98e9a94 Use huggingface-hub-bot for post-release PR creation (#3967)
• 9e7fbad [CLI] Accept spaces/user/repo as repo ID prefix shorthand (#3929)
• da46c21 More robust stream to stdout in hf cp command (#3968)
• e41dce2 Add visibility parameter to HfApi repo create/update/duplicate methods (#...
• 274fabf [CLI] Mention hf-mount in CLI skill (#3966)
• 778d306 [CLI] Add space-specific options to hf repos create and `hf repos duplicate...
• 5596477 Update hardware flavors with HF Hub (#3965)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.