# What changed in hf-xet

> 11 changes in hf-xet 1 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security, 4 new APIs and options. Each one cited. Sources checked 2026-10-28. HTML: https://unstale.sh/pypi/hf-xet/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## hf-xet 1

### Breaking changes

- Drops the pyo3 auto-initialize feature to avoid build failures when combined with a Python built with --disable-shared. (1.6.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.6.0)

### Security

- Memory allocations for untrusted shards are capped. (1.7.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.7.0)

### New APIs and options

- Added client-side telemetry reports for each upload and download. (1.7.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.7.0)
- Added support for the rustls-no-provider TLS feature. (1.7.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.7.0)
- Allows selecting the reqwest TLS backend through hf-xet features. (1.6.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.6.0)
- Adds Python upload progress reporting for validation, commit stages, and completion. (1.6.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.6.0)

### Performance

- The GIL is released while waiting for the next stream chunk. (1.7.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.7.0)
- Avoids cloning xorb bytes before streaming, improving upload efficiency. (1.6.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.6.0)

### Behavior and default changes

- Download buffers are dynamically sized based on available RAM in the machine or container. (1.7.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.7.0)
- Streams shard finalization progress through POST /v2/shards, making large-shard validation and commit visible instead of silently blocking after upload. (1.6.0) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.6.0)

### Fixes and other changes

- Fixes apparent hangs under poor network conditions when an HTTP request is retried more than twice. (1.5.2) — [release notes](https://github.com/huggingface/xet-core/releases/tag/v1.5.2)