Hugging Face released Transformers v5.22.2, a patch update focused on security and distributed-computing fixes. One change hardens the library’s Jinja sandbox, which helps limit what templated code can do. Another sets `device_id` only when using NCCL, a tool for communication between GPUs. The release notes link to the full list of changes from v5.22.1.
Why it matters
People using Transformers may benefit from stronger template safeguards and a targeted fix for NCCL-based distributed runs; the release notes do not specify further security details or affected versions.