[{"slug":"ZV-2026-0259","server_name":"huggingface.co","severity":"breaking","title":"huggingface.co: Field cmd was removed from hf_fs input; consumers still sending it may be rejected or silently ignored.","summary":"[risky] Description of hf_fs changed (61% word delta). [breaking] Field cmd was removed from hf_fs input; consumers still sending it may be rejected or silently ignored. [breaking] Field args was removed from hf_fs input; consumers still sending it may be rejected or silently ignored. [breaking] New required field operations on hf_fs; requests without it will fail. [breaking] Field op was removed from hf_fs output; consumers reading it will break. [breaking] Field lfs was removed from hf_fs output; consumers reading it will break. [breaking] Field uri was removed from hf_fs output; consumers reading it will break. [breaking] Field url was removed from hf_fs output; consumers reading it will break. [breaking] Field path was removed from hf_fs output; consumers reading it will break. [breaking] Field size was removed from hf_fs output; consumers reading it will break. [breaking] Field type was removed from hf_fs output; consumers reading it will break. [breaking] Field bytes was removed from hf_fs output; consumers reading it will break. [breaking] Field exists was removed from hf_fs output; consumers reading it will break. [breaking] Field content was removed from hf_fs output; consumers reading it will break. [breaking] Field entries was removed from hf_fs output; consumers reading it will break. [breaking] Field section was removed from hf_fs output; consumers reading it will break. [breaking] Field warnings was removed from hf_fs output; consumers reading it will break. [breaking] Field arxiv_url was removed from hf_fs output; consumers reading it will break. [breaking] Field mime_type was removed from hf_fs output; consumers reading it will break. [breaking] Field namespace was removed from hf_fs output; consumers reading it will break. [breaking] Field target_uri was removed from hf_fs output; consumers reading it will break. [breaking] Field next_offset was removed from hf_fs output; consumers reading it will break. [breaking] Field content_type was removed fro","changes":[{"kind":"description_changed","tool":"hf_fs","after":"Use hf_fs for Hugging Face Hub filesystem operations. Call it with operations, an array of {cmd, args} items; multiple operations may be submitted together.\n\nUsage:\n  {\"operations\":[{\"cmd\":\"ls\",\"args\":[\"hf://models/org/repo\"]}]}\n\nGrammar; each string below is one args array item:\n  ls     URI [--recursive] [--glob GLOB] [--type TYPE] [--sort SORT] [--limit N]\n  cat    URI [--offset N] [--max-bytes N]\n  attach URI [--max-bytes N]\n  stat   URI\n  find   URI [--name GLOB] [--path GLOB] [--type TYPE] [--limit N]\n  search URI [QUERY] [--type TYPE] [--sort SORT] [--tag TAG] [--kind mcp] [--limit N]\n\nCOMMAND = ls|cat|attach|stat|find|search.\nTYPE = file|dir|repo|bucket|collection|paper|link.\nSORT = createdAt|downloads|likes|lastModified|likes30d|trendingScore|mainSize|id|trending|upvotes.\nURI is a canonical hf:// URI. QUERY and GLOB are each one string.\n\nUse search for discovery, ls for a known directory, find for recursive matching within a known scope, stat for filesystem metadata or an uncertain target type, cat for text contents, and attach for a complete JPEG, PNG, or WebP image. When the request gives an exact text-file URI, use cat directly; do not add ls or stat first. stat does not read the contents of JSON, Markdown, or other text files.\n\nSearch scopes: hf://models|datasets|spaces[/OWNER], hf://collections[/OWNER], hf://papers, and hf://docs[/...]. Paper and documentation search require QUERY. Repeat --tag only for search hf://spaces; --kind mcp selects MCP Spaces.\nUse ls hf://models/trending, hf://datasets/trending, hf://spaces/trending, or hf://papers/trending for trending listings.\nFor a named paper.md or metadata.json, use cat directly. Use ls on a paper only to discover an unnamed related resource.\nOmit --limit, --sort, and --type unless the request requires them. Limits and path-specific behavior are documented at hf://README.md. Issue one hf_fs call.","before":"Use to access the Hugging Face Hub. Navigate resources with ls, cat, attach, find, stat, and search over hf:// URIs. Roots: hf://models, hf://datasets, hf://spaces, hf://buckets, hf://collections, hf://papers, hf://docs. For papers, ls hf://papers/ARXIV_ID to discover related resources; cat hf://papers/ARXIV_ID/paper.md or metadata.json. Documentation paths include the current version from each product's llms.txt manifest.\n\nGrammar; each token below is one args array element:\n  ls     URI [(-R|-r|-lR|-laR|--recursive)] [(-l|-a|-la|-al|--long)] [--glob GLOB]\n             [(-type|--type|--entry-type) TYPE] [--sort SORT] [(-limit|--limit) N]\n  cat    URI [RELATIVE_PATH] [(-offset|--offset) N] [(-max-bytes|--max-bytes) N]\n  attach URI [--max-bytes N]\n  stat   URI [RELATIVE_PATH]\n  find   URI [(-R|-r|--recursive)] [(-name|--name|--glob) GLOB] [(-path|--path) GLOB]\n             [(-type|--type|--entry-type) TYPE] [(-limit|--limit) N]\n  search URI [QUERY...] [(-type|--type|--entry-type) TYPE] [--sort SORT]\n                        [--tag TAG] [--kind mcp] [(-limit|--limit) N]\n\nTYPE = file|dir|repo|bucket|collection|paper|link.\nType aliases: f=file, d=dir, l=link, model|dataset|space=repo.\nSORT = createdAt|downloads|likes|lastModified|likes30d|trendingScore|mainSize|id|trending|upvotes.\nURI uses hf://, a typed shorthand such as models/OWNER/REPO, or a canonical https://huggingface.co URL. QUERY and GLOB are each one string token.\nSearch URI: hf://models|datasets|spaces[/OWNER], hf://collections[/OWNER], any hf://docs scope, or exactly hf://papers; not hf://.\nRepository and collection searches may omit QUERY to browse or filter; documentation and paper searches require it.\nSearch joins multiple positional QUERY tokens with spaces. Cat and stat join one RELATIVE_PATH token to URI. Attach accepts exactly one complete URI and no RELATIVE_PATH or offset.\nDiscover before access: use search, ls, or find to locate targets; use stat when target type is uncertain; then reuse the returned URI, or the Target URI for links, verbatim.\nCat reads confirmed UTF-8 text files only. It rejects repositories, directories, model weights, archives, images, media, Parquet, and other binary content. Use stat for metadata instead.\nAttach returns a complete JPEG, PNG, or WebP repository or bucket file as image content. It classifies only by file extension, never truncates, and has a default and hard limit of 4 MiB; --max-bytes may only lower it.\nFind recursively matches names and paths within an owner namespace, repository, or supported documentation scope. Use search—not an unscoped find—for global repository, collection, documentation, paper, or Space discovery.\nLong-list flags are accepted for compatibility; hf_fs listings are already structured, so they do not alter output.\nFind is already recursive, so recursive flags are accepted without altering behavior.\nSpace search: hf://spaces uses semantic search; repeat --tag to require tags, or use --kind mcp for --tag mcp-server. hf://spaces/OWNER uses owner-scoped keyword search.\nDocumentation: ls hf://docs for products; search any docs scope; use returned hf:// URIs verbatim.\nTrending listings: ls hf://models/trending, hf://datasets/trending, or hf://spaces/trending. They return up to 20 entries.\nTrending paths imply trending order; --sort trending|trendingScore is redundant but valid.\nTrending papers: ls hf://papers/trending.\nSort is route-specific: use it with search or supported owner/collection listings, never with repository file listings or documentation. For global trending repositories, use the /trending listing URI.\nTYPE filters mixed results; omit it when the URI already fixes the result type.\nLimits and path-specific behavior are documented at hf://README.md.\nOmit --limit and --sort unless the request asks for a cap, ordering, or exhaustive results.\nNo pipes, redirects, shell expansion, or multiple commands.","detail":"Description of `hf_fs` changed (61% word delta).","severity":"risky","descriptionDelta":0.6148409893992932},{"kind":"input_property_removed","path":"inputSchema.properties.cmd","tool":"hf_fs","before":{"enum":["ls","cat","attach","stat","find","search"],"type":"string","description":"Command to execute."},"detail":"Field `cmd` was removed from `hf_fs` input; consumers still sending it may be rejected or silently ignored.","severity":"breaking"},{"kind":"input_property_removed","path":"inputSchema.properties.args","tool":"hf_fs","before":{"type":"array","items":{"type":"string"},"description":"Command arguments; each array item is one grammar token."},"detail":"Field `args` was removed from `hf_fs` input; consumers still sending it may be rejected or silently ignored.","severity":"breaking"},{"kind":"input_required_added","path":"inputSchema.properties.operations","tool":"hf_fs","after":{"type":"array","items":{"type":"object","required":["cmd","args"],"properties":{"cmd":{"enum":["ls","cat","attach","stat","find","search"],"type":"string","description":"Command to execute."},"args":{"type":"array","items":{"type":"string"},"description":"Command arguments; each array item is one grammar token."}},"additionalProperties":false},"maxItems":30,"minItems":1},"detail":"New required field `operations` on `hf_fs`; requests without it will fail.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.op","tool":"hf_fs","before":{"enum":["ls","cat","attach","stat","find","search"],"type":"string"},"detail":"Field `op` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.lfs","tool":"hf_fs","before":{"type":"boolean"},"detail":"Field `lfs` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.uri","tool":"hf_fs","before":{"type":"string"},"detail":"Field `uri` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.url","tool":"hf_fs","before":{"type":"string"},"detail":"Field `url` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.path","tool":"hf_fs","before":{"type":"string"},"detail":"Field `path` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.size","tool":"hf_fs","before":{"type":"number"},"detail":"Field `size` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.type","tool":"hf_fs","before":{"enum":["namespace","repo","dir","file","collection","paper","link","missing"],"type":"string"},"detail":"Field `type` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.bytes","tool":"hf_fs","before":{"type":"number"},"detail":"Field `bytes` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.exists","tool":"hf_fs","before":{"type":"boolean"},"detail":"Field `exists` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.content","tool":"hf_fs","before":{"type":"string"},"detail":"Field `content` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.entries","tool":"hf_fs","before":{"type":"array","items":{"type":"object","required":["type","path"],"properties":{"lfs":{"type":"boolean"},"sdk":{"type":"string"},"uri":{"type":"string"},"url":{"type":"string"},"name":{"type":"string"},"path":{"type":"string"},"size":{"type":"number"},"tags":{"type":"array","items":{"type":"string"}},"task":{"type":"string"},"type":{"enum":["file","dir","repo","bucket","collection","paper","link"],"type":"string"},"gated":{"anyOf":[{"type":"boolean","const":false},{"enum":["auto","manual"],"type":"string"}]},"likes":{"type":"number"},"title":{"type":"string"},"anchor":{"type":"string"},"library":{"type":"string"},"private":{"type":"boolean"},"upvotes":{"type":"number"},"category":{"type":"string"},"arxiv_url":{"type":"string"},"downloads":{"type":"number"},"repo_type":{"enum":["model","dataset","space","bucket"],"type":"string"},"created_at":{"type":"string"},"target_uri":{"type":"string"},"updated_at":{"type":"string"},"description":{"type":"string"},"observed_at":{"type":"string"},"total_files":{"type":"number"},"content_type":{"enum":["application/json","text/markdown"],"type":"string"},"published_at":{"type":"string"},"trending_score":{"type":"number"},"daily_papers_uri":{"type":"string"},"daily_papers_date":{"type":"string"},"semantic_relevance":{"type":"number"}},"additionalProperties":false}},"detail":"Field `entries` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.section","tool":"hf_fs","before":{"type":"string"},"detail":"Field `section` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.warnings","tool":"hf_fs","before":{"type":"array","items":{"type":"string"}},"detail":"Field `warnings` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.arxiv_url","tool":"hf_fs","before":{"type":"string"},"detail":"Field `arxiv_url` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.mime_type","tool":"hf_fs","before":{"enum":["image/jpeg","image/png","image/webp"],"type":"string"},"detail":"Field `mime_type` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.namespace","tool":"hf_fs","before":{"type":"string"},"detail":"Field `namespace` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.target_uri","tool":"hf_fs","before":{"type":"string"},"detail":"Field `target_uri` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.next_offset","tool":"hf_fs","before":{"type":"number"},"detail":"Field `next_offset` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.content_type","tool":"hf_fs","before":{"enum":["application/json","text/markdown"],"type":"string"},"detail":"Field `content_type` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.published_at","tool":"hf_fs","before":{"type":"string"},"detail":"Field `published_at` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.daily_papers_uri","tool":"hf_fs","before":{"type":"string"},"detail":"Field `daily_papers_uri` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.daily_papers_date","tool":"hf_fs","before":{"type":"string"},"detail":"Field `daily_papers_date` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_removed","path":"outputSchema.properties.truncation_message","tool":"hf_fs","before":{"type":"string"},"detail":"Field `truncation_message` was removed from `hf_fs` output; consumers reading it will break.","severity":"breaking"},{"kind":"output_property_added","path":"outputSchema.properties.results","tool":"hf_fs","after":{"type":"array","items":{"oneOf":[{"type":"object","required":["index","status","result"],"properties":{"index":{"type":"integer","maximum":9007199254740991,"minimum":0},"result":{"type":"object","allOf":[{"if":{"required":["op"],"properties":{"op":{"const":"attach"}}},"then":{"required":["path","mime_type","bytes"],"properties":{"path":{"type":"string"},"bytes":{"type":"integer","maximum":8388608,"minimum":0},"mime_type":{"enum":["image/jpeg","image/png","image/webp"],"type":"string"}}}}],"required":["uri","op"],"properties":{"op":{"enum":["ls","cat","attach","stat","find","search"],"type":"string"},"lfs":{"type":"boolean"},"uri":{"type":"string"},"url":{"type":"string"},"path":{"type":"string"},"size":{"type":"number"},"type":{"enum":["namespace","repo","dir","file","collection","paper","link","missing"],"type":"string"},"bytes":{"type":"number"},"exists":{"type":"boolean"},"content":{"type":"string"},"entries":{"type":"array","items":{"type":"object","required":["type","path"],"properties":{"lfs":{"type":"boolean"},"sdk":{"type":"string"},"uri":{"type":"string"},"url":{"type":"string"},"name":{"type":"string"},"path":{"type":"string"},"size":{"type":"number"},"tags":{"type":"array","items":{"type":"string"}},"task":{"type":"string"},"type":{"enum":["file","dir","repo","bucket","collection","paper","link"],"type":"string"},"gated":{"anyOf":[{"type":"boolean","const":false},{"enum":["auto","manual"],"type":"string"}]},"likes":{"type":"number"},"title":{"type":"string"},"anchor":{"type":"string"},"library":{"type":"string"},"private":{"type":"boolean"},"upvotes":{"type":"number"},"category":{"type":"string"},"arxiv_url":{"type":"string"},"downloads":{"type":"number"},"repo_type":{"enum":["model","dataset","space","bucket"],"type":"string"},"created_at":{"type":"string"},"target_uri":{"type":"string"},"updated_at":{"type":"string"},"description":{"type":"string"},"observed_at":{"type":"string"},"total_files":{"type":"number"},"content_type":{"enum":["application/json","text/markdown"],"type":"string"},"published_at":{"type":"string"},"trending_score":{"type":"number"},"daily_papers_uri":{"type":"string"},"daily_papers_date":{"type":"string"},"semantic_relevance":{"type":"number"}},"additionalProperties":false}},"section":{"type":"string"},"warnings":{"type":"array","items":{"type":"string"}},"arxiv_url":{"type":"string"},"mime_type":{"enum":["image/jpeg","image/png","image/webp"],"type":"string"},"namespace":{"type":"string"},"truncated":{"type":"boolean"},"target_uri":{"type":"string"},"next_offset":{"type":"number"},"content_type":{"enum":["application/json","text/markdown"],"type":"string"},"published_at":{"type":"string"},"daily_papers_uri":{"type":"string"},"daily_papers_date":{"type":"string"},"truncation_reason":{"enum":["entry_limit","max_bytes","limit","provider_limit"],"type":"string"},"truncation_message":{"type":"string"}},"additionalProperties":false},"status":{"type":"string","const":"success"},"output_truncated":{"type":"boolean"}},"additionalProperties":false},{"type":"object","required":["index","status","error"],"properties":{"error":{"type":"object","required":["code","message","recovery","retryable"],"properties":{"code":{"enum":["HF_FS_INVALID_ARGUMENT","HF_FS_NOT_FOUND","HF_FS_NOT_A_DIRECTORY","HF_FS_NOT_A_FILE","HF_FS_UNSUPPORTED_OPERATION","HF_FS_ACCESS_DENIED","HF_FS_TEXT_ONLY","HF_FS_IMAGE_ONLY","HF_FS_UNSUPPORTED_MEDIA","HF_FS_IMAGE_TOO_LARGE","HF_FS_ATTACHMENT_BUDGET_EXCEEDED","HF_FS_IMAGE_CONTENT_DISABLED","HF_FS_ATTACHMENT_INTEGRITY"],"type":"string"},"message":{"type":"string"},"recovery":{"type":"string"},"retryable":{"type":"boolean","const":false},"suggestedOperation":{"enum":["ls","cat","attach","stat","search"],"type":"string"}},"additionalProperties":false},"index":{"type":"integer","maximum":9007199254740991,"minimum":0},"status":{"type":"string","const":"error"}},"additionalProperties":false}]},"maxItems":30,"minItems":1},"detail":"Field `results` was added to `hf_fs` output.","severity":"risky"},{"kind":"enum_value_removed","path":"outputSchema.properties.truncation_reason","tool":"hf_fs","before":"entry_limit","detail":"Enum value `entry_limit` removed from `truncation_reason` on `hf_fs`.","severity":"breaking"},{"kind":"enum_value_removed","path":"outputSchema.properties.truncation_reason","tool":"hf_fs","before":"max_bytes","detail":"Enum value `max_bytes` removed from `truncation_reason` on `hf_fs`.","severity":"breaking"},{"kind":"enum_value_removed","path":"outputSchema.properties.truncation_reason","tool":"hf_fs","before":"limit","detail":"Enum value `limit` removed from `truncation_reason` on `hf_fs`.","severity":"breaking"},{"kind":"enum_value_removed","path":"outputSchema.properties.truncation_reason","tool":"hf_fs","before":"provider_limit","detail":"Enum value `provider_limit` removed from `truncation_reason` on `hf_fs`.","severity":"breaking"}],"published_at":"2026-08-21T09:26:51.659Z"}]