sergiopaniego · Sep 30, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026
diff --git a/docs/source/environments/harbor.md b/docs/source/environments/harbor.md
diff --git a/envs/harbor_env/README.md b/envs/harbor_env/README.md
diff --git a/envs/harbor_env/pyproject.toml b/envs/harbor_env/pyproject.toml
@@ -11,11 +11,14 @@ dependencies = [
     # reports the pair as unsatisfiable and the image build fails. Neither is a sandbox backend
     # we offer, so both are dropped and everything else kept. Re-check on a Harbor upgrade.
     "harbor[e2b,modal,daytona,gke,ec2,runloop,novita,blaxel,beam,islo,opensandbox,cwsandbox,use-computer,cua]>=0.22.0",
-    "huggingface_hub>=1.12",
+    "huggingface_hub>=1.29.0",
     "fastapi>=0.104",
     "uvicorn[standard]>=0.24",
     "httpx>=0.27",
     "gradio>=5",
+    # "Sign in with Hugging Face" on a Space (Gradio's OAuth: the `gradio[oauth]` extra's two).
+    "authlib>=1.3",
+    "itsdangerous>=2.1",
 ]
 
 [project.scripts]

diff --git a/envs/harbor_env/uv.lock b/envs/harbor_env/uv.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -24,7 +24,7 @@ dependencies = [
     "typer>=0.9.0",
     "rich>=13.0.0",
     "pyyaml>=6.0",
-    "huggingface_hub>=0.20.0",
+    "huggingface_hub>=1.29.0",
     "openai>=2.7.2",
     "tomli>=2.3.0",
     "tomli-w>=1.2.0",
@@ -83,6 +83,7 @@ include-package-data = true
 "openenv.cli.importers" = ["templates/**/*"]
 "openenv.validation" = ["policies/*.json", "schemas/*.json"]
 "openenv.discovery" = ["schemas/**/*.json"]
+"openenv.harbor" = ["ui_assets/*"]
 
 [tool.setuptools.exclude-package-data]
 "*" = ["*.pyc", "*.pyo", "__pycache__/*"]