[hf-xet v1.7.0]: Telemetry, Dynamic Download Buffers, and fixes

✨ New Features and Improvements

• Added client-side telemetry reports for each upload/download, see docs here (by @sirahd, @rajatarya in #932 #933 #934 #935 #936 #937 #987)
• Utilizing dynamic download buffers based on available RAM in machine/container, see docs here (by @rajatarya in #943)

🐛 Bug Fixes and Enhancements

• Release the GIL while waiting for the next stream chunk (by @hanouticelina in #990) - 1st contribution, thanks!
• Fix double-counting when reducing fragmentation (by @jgodlew in #931)
• Cap untrusted shard memory allocations (by @seanses in #941)
• Bump dependencies (by @rajatarya @sirahd in #950 #963 #954)
• Simulation enhancements (by @sirahd in #958 #962)
• agents.md file for agent-based contribution guidance (by @seanses in #985)
• Support rustls-no-provider TLS feature (by @valkum in #957) - 1st contribution, thanks!

What's Changed

• fix: remove double counting when reducing fragmentation by @jgodlew in #931
• feat(telemetry): runtime config group and pre-shutdown drain hook by @sirahd in #932
• feat(telemetry): client-side envelope, sink, and per-transfer aggregator by @sirahd in #933
• feat(telemetry): outcome vocabulary and transfer metric payloads by @sirahd in #934
• feat(telemetry): emit from session finalize, Drop, and heartbeats by @sirahd in #935
• feat(telemetry): classify xet_pkg errors and report from session groups by @sirahd in #936
• feat(telemetry): python stream-group semantics and user documentation by @sirahd in #937
• Cap untrusted shard parser memory allocations by @seanses in #941
• chore: bump h2 past RUSTSEC-2026-0258 by @rajatarya in #950
• Derive download buffer defaults from usable, cgroup-aware system memory by @rajatarya in #943
• fix: gate xet_pkg examples on the internal-tools feature by @assafvayner in #955
• perf(wasm): enable BLAKE3 SIMD and document chunker benchmarks by @assafvayner in #952
• chore(deps): move off the yanked der 0.8.0 by @sirahd in #963
• feat: add rustls-no-provider TLS feature by @valkum in #957
• feat(simulation): let the simulation store S3-style object tag sets on xorbs by @sirahd in #958
• fix(simulation): store uploaded shards the way CAS does for LocalClient by @sirahd in #962
• chore: enable Dependabot weekly GitHub Actions bumps by @hf-dependantbot-rollout[bot] in #854
• chore(deps): bump rustls to 0.23.45 to fix RUSTSEC-2026-0285 (cargo audit) by @assafvayner in #976
• Scope GITHUB_TOKEN permissions per job by @hf-security-analysis[bot] in #984
• fix(telemetry): honor huggingface_hub's telemetry opt-out env vars by @rajatarya in #987
• add agents.md by @seanses in #985
• fix(hf_xet): release the GIL while waiting for the next stream chunk by @hanouticelina in #990
• Allow setting the xet cache directory on XetSessionBuilder by @assafvayner in #996
• fix(shard): make an uploaded shard's bytes depend only on its content by @sirahd in #993
• chore: bump crate versions to 1.7.0 by @rajatarya in #1009
• bump hf-xet Python to 1.7.0 by @rajatarya in #1010

New Contributors

• @valkum made their first contribution in #957
• @hanouticelina made their first contribution in #990

Full Changelog: v1.6.0...v1.7.0