Build(deps): Bump huggingface-hub from 1.15.0 to 1.16.1 in /requirements

[dependabot]

Bumps huggingface-hub from 1.15.0 to 1.16.1.

Release notes

Sourced from huggingface-hub's releases.

[v1.16.1] [Hot-fix] [Inference] Remove Together ASR task to drop urllib3 dependency

• [Hot-fix] [Inference] Remove Together ASR task to drop urllib3 dependency by @​Wauplin in #4248

Full Changelog: huggingface/huggingface_hub@v1.16.0...v1.16.1

[v1.16.0] Together goes multimodal on Inference Providers, CLI improvements, and token security

⚡ Together goes multimodal on Inference Providers

Together now supports five additional task types beyond chat and text-to-image on Inference Providers:

• feature_extraction
• text_to_speech
• automatic_speech_recognition EDIT: hot-fix v1.16.1 removed this task (see huggingface/huggingface_hub#4248) to fix a dependency issue. We will add it back in a future release.
• image_to_image
• text_to_video

from huggingface_hub import InferenceClient
client = InferenceClient(provider="together")
Embeddings
embeddings = client.feature_extraction("Hello world", model="intfloat/multilingual-e5-large-instruct")
Text-to-speech
audio = client.text_to_speech("Hello world", model="hexgrad/Kokoro-82M", extra_body={'voice': 'af_heart'})
Text-to-video
video = client.text_to_video("A cat on the moon", model="Wan-AI/Wan2.2-T2V-A14B")

• [Inference] Add embeddings, TTS, ASR, image-to-image and video tasks for Together by @​nbroad1881 in #4164

📚 Documentation: Inference guide

🔗 Centralized hf:// URI parsing

All scattered ad-hoc hf:// URI parsers throughout the codebase have been consolidated onto the new parse_hf_uri/parse_hf_mount helpers. This brings consistent parsing behavior, a new is_hf_uri public helper for validating URIs, and proper handling of @ in filenames (now treated as literal). The CLI error handler now catches HfUriError and displays a clean message instead of a raw traceback.

🚨 Breaking Changes

This migration includes several breaking changes: BucketUrl.handle has been renamed to BucketUrl.uri (type changed from str to HfUri, use .to_uri() for the string form), Volume.to_hf_handle() has been renamed to Volume.to_uri(), single-segment repo IDs (e.g. gpt2) are no longer supported in HfFileSystem paths or CLI -v flags — you must use the namespace/name format instead.

• [Core] Migrate hf:// URI parsing to centralized parse_hf_uri by @​Wauplin in #4189

📚 Documentation: CLI guide | Buckets guide

🖥️ CLI

Global --no-truncate flag for CLI tables

... (truncated)

Commits

• ff0cc60 Release: v1.16.1
• a77e961 [Inference] Remove Together ASR task to drop urllib3 dependency (#4248)
• c68a383 Release: v1.16.0
• fa7fc45 Release: v1.16.0.rc0
• 06d6990 [Jobs] Add ephemeral_storage field to JobHardware (#4233)
• 2618a54 [CLI] Surface job runtime fields in ps + inspect (#4211)
• 356b712 [CI] make test_model_info_with_security for robust (#4246)
• 609e64a [CLI] Raise error when both --local-dir and --cache-dir are provided (#4245)
• b4fd28d [Download] Fix snapshot bar inflation on http_get retry (#4209)
• a117e68 [CLI] Expose linked repos in PaperInfo (#4240)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)