Skip to content

build(deps-dev): Update mlflow requirement from <3.0,>=2.10 to >=2.10,<4.0 in /packages/agent-sre#885

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/packages/agent-sre/mlflow-gte-2.10-and-lt-4.0
Open

build(deps-dev): Update mlflow requirement from <3.0,>=2.10 to >=2.10,<4.0 in /packages/agent-sre#885
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/packages/agent-sre/mlflow-gte-2.10-and-lt-4.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 7, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Updates the requirements on mlflow to permit the latest version.

Release notes

Sourced from mlflow's releases.

v3.10.1

MLflow 3.10.1 is a patch release that contains some minor feature enhancements, bug fixes, and documentation updates.

Features:

Bug fixes:

Documentation updates:

  • [Docs] Update SSO oidc plugin doc: add google identity platform / AWS cognito / Azure Entra ID configuration guide (#20591, @​WeichenXu123)
  • [Docs / Tracing] Fix distributed tracing rendering and improve doc (#21070, @​B-Step62)
  • [Docs] docs: Add single quotes to install commands with extras to prevent zsh errors (#21227, @​mshavliuk)
  • [Docs / Model Registry] Fix outdated docstring claiming models:/ URIs are unsupported in register_model (#21197, @​copilot-swe-agent)
  • [Docs] Replace MinIO with RustFS in docker-compose setup (#21099, @​jmaggesi)

Small bug fixes and documentation updates:

#20740, #21148, #21149, #21096, @​TomeHirata; #21368, #21118, @​B-Step62; #21384, #21345, #21236, #21106, #21033, #21115, #21034, @​smoorjani; #21326, #21133, #21036, @​copilot-swe-agent; #21293, @​daniellok-db; #21175, @​caponetto; #21305, #21264, @​serena-ruan; #21216, @​justinwei-db; #21038, #21082, @​bbqiu; #21143, #20733, @​mprahl; #20488, @​mdalvz0000; #21142, @​EPgg92; #21094, @​PattaraS

Changelog

Sourced from mlflow's changelog.

3.10.1 (2026-03-05)

MLflow 3.10.1 is a patch release that contains some minor feature enhancements, bug fixes, and documentation updates.

Features:

Bug fixes:

Documentation updates:

  • [Docs] Update SSO oidc plugin doc: add google identity platform / AWS cognito / Azure Entra ID configuration guide (#20591, @​WeichenXu123)
  • [Docs / Tracing] Fix distributed tracing rendering and improve doc (#21070, @​B-Step62)
  • [Docs] docs: Add single quotes to install commands with extras to prevent zsh errors (#21227, @​mshavliuk)
  • [Docs / Model Registry] Fix outdated docstring claiming models:/ URIs are unsupported in register_model (#21197, @​copilot-swe-agent)
  • [Docs] Replace MinIO with RustFS in docker-compose setup (#21099, @​jmaggesi)

Small bug fixes and documentation updates:

#20740, #21148, #21149, #21096, @​TomeHirata; #21368, #21118, @​B-Step62; #21384, #21345, #21236, #21106, #21033, #21115, #21034, @​smoorjani; #21326, #21133, #21036, @​copilot-swe-agent; #21293, @​daniellok-db; #21175, @​caponetto; #21305, #21264, @​serena-ruan; #21216, @​justinwei-db; #21038, #21082, @​bbqiu; #21143, #20733, @​mprahl; #20488, @​mdalvz0000; #21142, @​EPgg92; #21094, @​PattaraS

3.10.0 (2026-02-20)

... (truncated)

Commits
  • cadc323 Bump version to 3.10.1 (#21396)
  • 3d17d6c Add back virtualenv to fix the docker build until the next release (#20740)
  • 3cfc12f Update SSO oidc plugin doc: add google identity platform / AWS cognito / Azur...
  • bcaad26 Fix "View full dashboard" link in gateway usage tab when workspace is enabled...
  • ff3249f Update GenAI link and video in the getting started page (#21368)
  • 1591d03 Persist AI Gateway default passphrase security banner dismissal to localStora...
  • 32979c9 Demote unused parameters log message from WARNING to DEBUG in instructions ju...
  • 18eeea0 Make simulator explicitly avoid stating goal in first message (#21384)
  • 42d4356 Clear "All" time selector when switching to overview tab (#21371)
  • 1a14934 Fix Traces view in Prompts tab not being scrollable (#21282)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [mlflow](https://github.com/mlflow/mlflow) to permit the latest version.
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v2.10.0...v3.10.1)

---
updated-dependencies:
- dependency-name: mlflow
  dependency-version: 3.10.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 7, 2026
@github-actions github-actions bot added the agent-sre agent-sre package label Apr 7, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Welcome to the Agent Governance Toolkit! Thanks for your first pull request.
Please ensure tests pass, code follows style (ruff check), and you have signed the CLA.
See our Contributing Guide.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 6eb26aa.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

@github-actions github-actions bot added the size/XS Extra small PR (< 10 lines) label Apr 7, 2026
@imran-siddique
Copy link
Copy Markdown
Member

Review: NEEDS VERIFICATION 📊

Diff reviewed — widens mlflow version range from >=2.10,<3.0 to >=2.10,<4.0 in optional [mlflow] extra (packages/agent-sre/pyproject.toml). Clean diff, 2 lines changed.

Concerns:

  • This allows mlflow 3.x — a major version jump that can introduce breaking changes.
  • Per our anomaly detection policy: Review Dependabot version bumps for major version jumps before merging.

Before merging: Verify agent-sre mlflow integration is compatible with mlflow 3.x. Check the mlflow 3.0 release notes for breaking changes.

All other checks pass. No dependency confusion risk (mlflow is a well-known ML platform package).

Copy link
Copy Markdown
Member

@imran-siddique imran-siddique left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVED ✅ — Optional [mlflow] extra. Widens range to allow mlflow 3.x. Low blast radius (only affects users who explicitly install agent-sre[mlflow]). Merge once CI green.

@imran-siddique imran-siddique enabled auto-merge (squash) April 9, 2026 16:33
@imran-siddique
Copy link
Copy Markdown
Member

@dependabot rebase

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent-sre agent-sre package dependencies Pull requests that update a dependency file size/XS Extra small PR (< 10 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant