[bug] typer<0.20 and click<=8.2.0 pins block huggingface-hub>=1.18.0 compatibility
Describe the bug The typer<0.20 and click<=8.2.0 dependency pins in pyproject.toml create an unresolvable conflict with huggingface-hub>=1.18.0, which requires click>=8.4.0 and typer>=0.20.0,<0.26.0. This makes it impossible to install guardrails-ai alongside modern huggingface-hub.
To Reproduce Steps to reproduce the behavior: pip install guardrails-ai huggingface-hub==1.18.0
Results in a dependency resolution error — pip cannot find compatible versions of typer and click that satisfy both packages.
Expected behavior
- guardrails-ai (latest from main)
- huggingface-hub==1.18.0
- typer 0.26+ (required by huggingface-hub)
- click 8.4+ (required by huggingface-hub)
Libraries used w/ versions: Example: guardrails-ai==0.7.2, guardrails-api==0.1.0a2, any Hub validators, etc.
Environment details: Any environment with Python 3.9+ using pip. Reproducible on Linux, macOS, and Windows.
Additional context
- guardrails-ai has zero direct click imports — only uses stable typer APIs (Typer(), Option(), Argument(), prompt())
- typer 0.26+ vendors click internally, so a separate click pin is unnecessary
- Fix submitted in PR #1501: removes the click pin and raises typer upper bound to <1.0.0
Source: guardrails-ai/guardrails