chore(deps): bump mlflow from 3.14.0 to 3.15.0 in the pip group across 1 directory by dependabot[bot] · Pull Request #57 · Team-Deepiri/deepiri-modelkit

dependabot · 2026-08-26T22:01:37Z

Bumps the pip group with 1 update in the / directory: mlflow.

Updates mlflow from 3.14.0 to 3.15.0

Release notes

v3.15.0

MLflow 3.15.0 includes several major features and improvements

Major New Features

🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!

🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.

🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.

⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.

🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

[Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @B-Step62)

[Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @B-Step62)

[Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @joelrobin18)

[Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @shivamxtech)

[Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @AknA13)

[Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @B-Step62)

[Tracing / UI] [1/3] Run issue detection in the background (#24578, @B-Step62)

[Tracing] [BUG] Fix otel parent context propagation (#24444, @iyashk)

[Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @AknA13)

[Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @kramaranya)

[Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @DaoDaoNoCode)

[Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @joshuawong-db)

[Tracing] feat: add search traces to typescript sdk (#23660, @WUMIKE233)

[Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @tanghaoji)

[Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @tanghaoji)

[] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @TomeHirata)

[Tracing / Tracking] Support numeric assessment trace filters (#23948, @tanghaoji)

Bug fixes:

[Tracing] Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416, @harupy)

[UI] Fix artifact direct download capability checks in UI (#24748, @B-Step62)

[Tracing / UI] Refresh traces saved-view on load across multiple windows (#24746, @joshuawong-db)

[UI] Fix UnauthorizedError constructor message (#24729, @mihir2921)

[UI] Fall back to nested spans for Chat Sessions turn content (#24703, @MannXo)

[Tracing / Tracking] Fix experiment GC cascades for traces and logged models (#24351, @copilot-swe-agent)

[Tracking] Fix workspace-enabled tracking store crash-loop when the default experiment is renamed (#24598, @daniellok-db)

[Tracking] Fix Kubernetes auth token extraction for kubernetes-client 36+ (#24687, @HumairAK)

[UI] Refresh Assistant config when leaving settings so the provider indicator isn't stale (#24704, @joshuawong-db)

[Build] Fix imagePullSecrets for garbage collection CronJob (#24626, @nightcityblade)

[UI] Lift Assistant floating button above bottom-pinned action bars (#24606, @joshuawong-db)

[Evaluation / Tracing] Fix issue detection structured output schema (#24674, @B-Step62)

[Models] Add MLFLOW_ALLOW_PICKLE_DESERIALIZATION guard to mlflow.statsmodels flavor (#24686, @B-Step62)

[Tracking] Preserve static prefixes in notebook trace renderer URL (#24682, @mprahl)

[UI] Fix blank and fields in run detail sidebar (#24634, @aishdbx)

[Models / Scoring] Normalize reasoning content parts for ChatAgentMessage in parse_message (#24642, @iyashk)

[UI] Fix Evaluation Runs Actions dropdown remaining clickable when no runs are selected (#24676, @daniellok-db)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.15.0 (2026-07-31)

MLflow 3.15.0 includes several major features and improvements

Major New Features

🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!

🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.

🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.

⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.

🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

[Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @B-Step62)

[Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @B-Step62)

[Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @joelrobin18)

[Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @shivamxtech)

[Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @AknA13)

[Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @B-Step62)

[Tracing / UI] [1/3] Run issue detection in the background (#24578, @B-Step62)

[Tracing] [BUG] Fix otel parent context propagation (#24444, @iyashk)

[Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @AknA13)

[Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @kramaranya)

[Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @DaoDaoNoCode)

[Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @joshuawong-db)

[Tracing] feat: add search traces to typescript sdk (#23660, @WUMIKE233)

[Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @tanghaoji)

[Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @tanghaoji)

[] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @TomeHirata)

[Tracing / Tracking] Support numeric assessment trace filters (#23948, @tanghaoji)

Bug fixes:

[Tracing] Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416, @harupy)

[UI] Fix artifact direct download capability checks in UI (#24748, @B-Step62)

[Tracing / UI] Refresh traces saved-view on load across multiple windows (#24746, @joshuawong-db)

[UI] Fix UnauthorizedError constructor message (#24729, @mihir2921)

[UI] Fall back to nested spans for Chat Sessions turn content (#24703, @MannXo)

[Tracing / Tracking] Fix experiment GC cascades for traces and logged models (#24351, @copilot-swe-agent)

[Tracking] Fix workspace-enabled tracking store crash-loop when the default experiment is renamed (#24598, @daniellok-db)

[Tracking] Fix Kubernetes auth token extraction for kubernetes-client 36+ (#24687, @HumairAK)

[UI] Refresh Assistant config when leaving settings so the provider indicator isn't stale (#24704, @joshuawong-db)

[Build] Fix imagePullSecrets for garbage collection CronJob (#24626, @nightcityblade)

[UI] Lift Assistant floating button above bottom-pinned action bars (#24606, @joshuawong-db)

[Evaluation / Tracing] Fix issue detection structured output schema (#24674, @B-Step62)

[Models] Add MLFLOW_ALLOW_PICKLE_DESERIALIZATION guard to mlflow.statsmodels flavor (#24686, @B-Step62)

[Tracking] Preserve static prefixes in notebook trace renderer URL (#24682, @mprahl)

[UI] Fix blank and fields in run detail sidebar (#24634, @aishdbx)

[Models / Scoring] Normalize reasoning content parts for ChatAgentMessage in parse_message (#24642, @iyashk)

... (truncated)

Commits

d0f3152 Fix traces shared-view banner bleeding into non-saved-view pages (#24785) (#2...
58452f5 Bump version to 3.15.0 (#24757)
222f8e2 Update ML package versions for 3.15.0 (#24753)
569841a Update requirements.yaml files for 3.15.0 (#24752)
b3662f0 Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416)
f1820bf Fix artifact direct download capability checks in UI (#24748)
f08a8c8 Refresh traces saved-view on load across multiple windows (#24746)
6348007 Recover stale-missing shared-view links on the Runs page (#24747)
8bdec26 Update uv.lock (#24741)
8c2d5ef Fix UnauthorizedError constructor message copy-pasted from RateLimite (#24729)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 1 update in the / directory: [mlflow](https://github.com/mlflow/mlflow). Updates `mlflow` from 3.14.0 to 3.15.0 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.14.0...v3.15.0) --- updated-dependencies: - dependency-name: mlflow dependency-version: 3.15.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

jrb00013 · 2026-08-26T22:04:33Z

QA Approve — dependabot mlflow bump

Routine pip group bump 3.14.0 → 3.15.0. No conflicts. Merging to close out associated-service QA sweep.

* chore(ci): cut Actions minutes without dropping CD or CodeQL (#56) Keep PR CI/CodeQL on main/dev (including subsequent PR pushes), cancel stale runs, drop post-merge push double-fires, add paths-ignore and timeouts. CD deploy triggers left intact. Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Cursor <cursoragent@cursor.com> * chore(deps): bump mlflow in the pip group across 1 directory (#57) Bumps the pip group with 1 update in the / directory: [mlflow](https://github.com/mlflow/mlflow). Updates `mlflow` from 3.14.0 to 3.15.0 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.14.0...v3.15.0) --- updated-dependencies: - dependency-name: mlflow dependency-version: 3.15.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Merge dev into main [skip ci] * feat(streaming): add speech-events to StreamTopics allowlist Align ModelKit topics with Sugar Glider compose wiring for the speech plane. * test(streaming): assert speech-events in allowlist Address Sorge feedback by covering SPEECH_EVENTS in the shared topics and sugar_glider_allowlist assertions. * docs(streaming): clarify sugar_glider_allowlist returns stream topics Address Sorge feedback — the helper returns Redis stream topic names for compose allowlists, not SUGAR_GLIDER_/SIDECAR_ env var names. --------- Co-authored-by: Joe Black <jrb00013wvu@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Joe Black <jrb00013wvu@gmail.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat(streaming): add speech-events topic (#55) * feat(streaming): add speech-events to StreamTopics allowlist Align ModelKit topics with Sugar Glider compose wiring for the speech plane. Co-authored-by: Cursor <cursoragent@cursor.com> * test(streaming): assert speech-events in allowlist Address Sorge feedback by covering SPEECH_EVENTS in the shared topics and sugar_glider_allowlist assertions. Co-authored-by: Cursor <cursoragent@cursor.com> * docs(streaming): clarify sugar_glider_allowlist returns stream topics Address Sorge feedback — the helper returns Redis stream topic names for compose allowlists, not SUGAR_GLIDER_/SIDECAR_ env var names. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> * Merge main into dev [skip ci] * chore(ci): cut Actions minutes without dropping CD or CodeQL (#56) Keep PR CI/CodeQL on main/dev (including subsequent PR pushes), cancel stale runs, drop post-merge push double-fires, add paths-ignore and timeouts. CD deploy triggers left intact. Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Cursor <cursoragent@cursor.com> * chore(deps): bump mlflow in the pip group across 1 directory (#57) Bumps the pip group with 1 update in the / directory: [mlflow](https://github.com/mlflow/mlflow). Updates `mlflow` from 3.14.0 to 3.15.0 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.14.0...v3.15.0) --- updated-dependencies: - dependency-name: mlflow dependency-version: 3.15.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Merge dev into main [skip ci] * feat(streaming): add speech-events to StreamTopics allowlist Align ModelKit topics with Sugar Glider compose wiring for the speech plane. * test(streaming): assert speech-events in allowlist Address Sorge feedback by covering SPEECH_EVENTS in the shared topics and sugar_glider_allowlist assertions. * docs(streaming): clarify sugar_glider_allowlist returns stream topics Address Sorge feedback — the helper returns Redis stream topic names for compose allowlists, not SUGAR_GLIDER_/SIDECAR_ env var names. --------- Co-authored-by: Joe Black <jrb00013wvu@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Joe Black <jrb00013wvu@gmail.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Joe Black <jrb00013wvu@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 26, 2026

jrb00013 merged commit 56bfc1a into main Aug 26, 2026

dependabot Bot deleted the dependabot/pip/pip-f812f65dec branch August 26, 2026 22:04

christiankrider1 mentioned this pull request Aug 27, 2026

Merge main into dev [skip ci] #59

Merged

Navigation Menu

Uh oh!

chore(deps): bump mlflow from 3.14.0 to 3.15.0 in the pip group across 1 directory - #57

chore(deps): bump mlflow from 3.14.0 to 3.15.0 in the pip group across 1 directory#57
jrb00013 merged 1 commit into
mainfrom
dependabot/pip/pip-f812f65dec

dependabot Bot commented on behalf of github Aug 26, 2026

Uh oh!

jrb00013 commented Aug 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026

v3.15.0

Major New Features

Other Assorted Features & Improvements:

3.15.0 (2026-07-31)

Major New Features

Other Assorted Features & Improvements:

Uh oh!

jrb00013 commented Aug 26, 2026

QA Approve — dependabot mlflow bump

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant