chore(deps): update hf-hub requirement from 0.5.0 to 1.0.0 in the cargo group

[dependabot]

Updates the requirements on hf-hub to permit the latest version.
Updates hf-hub to 0.5.0

Release notes

Sourced from hf-hub's releases.

v0.5.0

What's Changed

• Upgrade ureq by @​Narsil in huggingface/hf-hub#114
• Update indicatif to current version in Cargo.toml by @​gordonmessmer in huggingface/hf-hub#126
• Fix failing API tests due to outdated model metadata expectations by @​bmqube in huggingface/hf-hub#124
• fix: fix typo by @​AndyDai-nv in huggingface/hf-hub#121
• Updating tests and dependencies. by @​Narsil in huggingface/hf-hub#127
• Remove markdown from Cargo.toml by @​gordonmessmer in huggingface/hf-hub#128
• Fixup the docstrings for download function (which always downloads). by @​Narsil in huggingface/hf-hub#130
• Expose metadata and pointer_path methods by @​danieldk in huggingface/hf-hub#136

New Contributors

• @​gordonmessmer made their first contribution in huggingface/hf-hub#126
• @​bmqube made their first contribution in huggingface/hf-hub#124
• @​AndyDai-nv made their first contribution in huggingface/hf-hub#121
• @​danieldk made their first contribution in huggingface/hf-hub#136

Full Changelog: huggingface/hf-hub@v0.4.3...v0.5.0

Changelog

Sourced from hf-hub's changelog.

Releasing hf-hub

This document covers the full release process for the hf-hub crate. If anything here is unclear or out of date, please open a PR.

What gets released

A single tag push releases one artifact:

• hf-hub Rust crate on crates.io, via .github/workflows/rust-release.yml.

The workflow triggers on tags matching v* (e.g., v1.0.0, v1.0.0-rc.0).

There are no Python components in this repo. The other workspace members are not published:

• hfrs/ — CLI binary, distributed via cargo install --git.
• examples/, benches/, integration-tests/ — internal-only, version 0.0.0, never published.

Pre-release checklist

1. CI is green on main. The Rust workflow must be passing on every platform in the matrix (Ubuntu, Windows, macOS) with both feature configurations ("" and --all-features).
2. Review the diff since the last release.

   git log --oneline v0.5.0..main
   git diff v0.5.0..main --stat -- hf-hub/

   Pay particular attention to changes under hf-hub/src/ — those are the only changes that actually ship to crates.io.
3. Identify breaking changes. Anything that changes the public Rust API (types, function signatures, removed re-exports, builder fields) needs to be reflected in the version bump per semver and called out in the release notes.
4. Run the full pre-release test sweep (see next section).

Pre-release test sweep

Run all of these from the repo root before tagging. They mirror what CI runs, plus a publish dry-run that CI does not currently do.

Format and lint

cargo +nightly fmt --all -- --check
cargo clippy --workspace --all-targets -- -D warnings
cargo clippy --workspace --all-targets --all-features -- -D warnings

Unit tests (hf-hub)

cargo test -p hf-hub
cargo test -p hf-hub --features blocking

Integration tests (integration-tests)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[anush008]

@dependabot ignore hf-hub major version

[dependabot]

OK, I won't notify you about version 0.x.x of hf-hub again, unless you unignore it.