Skip to content

chore(deps): bump mlflow from 3.13.0 to 3.15.0 in /components/runners/ambient-runner in the uv group across 1 directory - #1734

Merged
mergify[bot] merged 2 commits into
mainfrom
dependabot/uv/components/runners/ambient-runner/uv-f812f65dec
Aug 17, 2026
Merged

mergify[bot] merged 2 commits into
mainfrom
dependabot/uv/components/runners/ambient-runner/uv-f812f65dec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the uv group with 1 update in the /components/runners/ambient-runner directory: mlflow.

Updates mlflow from 3.13.0 to 3.15.0

Release notes

Sourced from mlflow's releases.

v3.15.0

MLflow 3.15.0 includes several major features and improvements

Major New Features

  • 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
  • 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
  • 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
  • ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
  • 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

  • [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
  • [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
  • [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
  • [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
  • [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
  • [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
  • [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
  • [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
  • [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
  • [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
  • [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
  • [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
  • [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
  • [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
  • [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
  • [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
  • [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.15.0 (2026-07-31)

MLflow 3.15.0 includes several major features and improvements

Major New Features

  • 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
  • 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
  • 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
  • ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
  • 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

  • [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
  • [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
  • [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
  • [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
  • [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
  • [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
  • [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
  • [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
  • [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
  • [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
  • [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
  • [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
  • [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
  • [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
  • [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
  • [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
  • [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 1 update in the /components/runners/ambient-runner directory: [mlflow](https://github.com/mlflow/mlflow).


Updates `mlflow` from 3.13.0 to 3.15.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.13.0...v3.15.0)

---
updated-dependencies:
- dependency-name: mlflow
  dependency-version: 3.15.0
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 17, 2026
@netlify

netlify Bot commented Aug 17, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cheerful-kitten-f556a0 canceled.

Name Link
🔨 Latest commit 6a528d1
🔍 Latest deploy log https://app.netlify.com/projects/cheerful-kitten-f556a0/deploys/6a838df8bb3515000883624c

@mergify mergify Bot added the queued label Aug 17, 2026
@mergify

mergify Bot commented Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Merge Queue Status

  • ✅ Entered queue — 2026-08-17 23:09 UTC · Rule: default · triggered by rule autoqueue
  • ✅ Checks skipped · PR is already up-to-date
  • ✅ Merged — 2026-08-17 23:09 UTC · at 6a528d1dc0e9ec56d792a06c3399398bd1e28807 · squash

This pull request spent 31 seconds in the queue, including 4 seconds running CI.

Required conditions to merge

@mergify
mergify Bot merged commit 0b59fe7 into main Aug 17, 2026
53 of 55 checks passed
@mergify
mergify Bot deleted the dependabot/uv/components/runners/ambient-runner/uv-f812f65dec branch August 17, 2026 23:09
@mergify mergify Bot removed the queued label Aug 17, 2026
@github-actions

Copy link
Copy Markdown
Contributor

⚠️ SDD Preflight — Managed Paths Modified

This PR modifies files in SDD-managed component(s). These components are migrating to Spec-Driven Development.

File Component Mode
components/runners/ambient-runner/uv.lock runner warn

No action required — these components are in warn mode. Consider using the component's agent workflow for future changes.

📖 Specs: Runner Spec · Runner Constitution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants