Update mlflow requirement from <4,>=3.1 to >=3.16.0,<4 by dependabot[bot] · Pull Request #236 · databricks/mlops-stacks

dependabot · 2026-09-08T04:43:59Z

Updates the requirements on mlflow to permit the latest version.

Release notes

MLflow 3.16.0 includes several major features and improvements

Major New Features

🎨 Custom Trace Views: Design your own trace UI in plain English — describe the view you want and the MLflow Assistant builds it for you, laying out exactly the fields you care about with no config files or custom code. Save, name, and reuse views per experiment so your whole team shares the same lens on your traces.

🔭 Redesigned Trace Experience (now default): The trace explorer has been rebuilt from the ground up and is now the default — tighter row density, cleaner navigation, and a redesigned span-tree view. Reorder columns, add configurable custom columns from any trace tag or metadata field, and find multi-turn conversations inline via session grouping.

🔗 Span Links: Spans rarely stand alone. MLflow 3.16.0 adds first-class span links so relationships between spans — a retrieval step, a tool call, a downstream trace — are captured and navigable. Record links in your SDK and the trace explorer surfaces them in a dedicated Links tab to jump straight to the destination span.

Breaking changes:

[Server-infra / Tracking] basic-auth: enable fail-closed authorization by default (#25308, @PattaraS)

[Build / Models] Drop cross version testing for pyspark < 3.4.4 (#25098, @harupy)

[Gateway / Tracing] fix: Serve FastAPI-native routers under --static-prefix (#24511, @SeiichiroYoshioka)

Features:

[Evaluation / Tracing / Tracking] Add mlflow skills agent hints for GenAI anti-patterns (#25496, @james-fletcher-db)

[Tracing] Add shell-based MLflow Tracing setup wizard (#25441, @B-Step62)

[Gateway] Support per-user budget policies in the AI Gateway (USER scope + principal) (#24371, @joelrobin18)

[Tracing / UI] Add trace-table column reordering to V4 traces tab (#25428, @joshuawong-db)

[Tracing / UI] Add Expectation field to the traces table filter UI (#25460, @creater29)

[Tracing / UI] Add saved views to MLflow demo (#25392, @joshuawong-db)

[Tracing / UI] Add configurable custom trace columns (tags + metadata) to Traces V4 (#25427, @joshuawong-db)

[Tracing / Tracking / UI] Refresh the Traces V4 table: row density, header, and navigation (#25354, @joshuawong-db)

[Tracing / UI] Mount Traces V4 as the default traces experience (#25424, @joshuawong-db)

[Tracing / UI] Port redesigned trace explorer (v2) to OSS (#25355, @joshuawong-db)

[UI] Deprecate the experiment Sessions tab in favor of Traces session grouping (#25350, @joshuawong-db)

[Evaluation / Tracing] feat(typescript): add logFeedback and typed trace assessments (#25169, @rajudandigam)

[Tracing] Point coding agents at the MLflow tracing skill on import mlflow (#25247, @harupy)

[Evaluation / Gateway] Support UC model services in built-in judges (#25246, @TomeHirata)

[Tracing / UI] Enable shouldEnableModelTraceExplorerCustomTraceView in OSS (#25245, @aaronteo-db)

[Tracking] jobs: add configurable Huey storage URL for Redis (#22653, @jeevan6996)

[Tracking] [chart] Add optional External Secrets Operator support (#24523, @habibaikram1)

[Evaluation] Enrich mlflow scorers list --builtin with the full scorer catalog (#25003, @joshuawong-db)

[Tracing / UI] feat(ui): display scorer description in tooltip for custom judges (#22043, @adamgurary)

[UI] Add Image Grid toggle for run parameters (#23705, @jdoughty04)

[Tracing / Tracking / UI] [Custom View] Enforce saved view limit per experiment (#25064, @tanghaoji)

[Tracking] [1/6] basic-auth: fail-closed authorization net + coverage guard (#25065, @PattaraS)

[Build / Scoring] Bump model serving image to Ubuntu 24.04 and Python 3.11 (#25089, @harupy)

[] Add SpanLink support to TypeScript SDK (#23480, @robinnarsinghranabhat)

[Docs / Tracking] [Custom View] Increase experiment tag value limit to 20000 (#25062, @aaronteo-db)

[Tracing / Tracking] feat(ts-sdk): add MLFLOW_TRACKING_AUTH=kubernetes/kubernetes-namespaced support (#24243, @robinnarsinghranabhat)

[Tracing / UI] [Custom View] Add custom view deletion (#25057, @tanghaoji)

[Tracing / UI] [Custom View] Support local Assistant providers with structured responses (#25034, @tanghaoji)

[Tracing / UI] [Custom View] Submit custom view build prompts directly to Assistant (#25026, @aaronteo-db)

[] Support optimizing chat-type prompts in optimize_prompts (#23488, @gaurav0107)

[Docs / Tracking] Add --artifact-policy retarget to mlflow db move-resources for repointing experiment artifact roots (#24635, @gauthierpiarrette)

[] [5 / N] Add custom view tab UI, save/rename, and experiment tag persistence (#24798, @aaronteo-db)

[Evaluation] Expose generate_rationale_first through make_judge (#25002, @aaronteo-db)

[Tracing / UI] [4/N] Add client-tool pause/resume for render_custom_view in Assistant (#24796, @aaronteo-db)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.16.0 (2026-09-03)

MLflow 3.16.0 includes several major features and improvements

Breaking changes:

[Server-infra / Tracking] basic-auth: enable fail-closed authorization by default (#25308, @PattaraS)

[Build / Models] Drop cross version testing for pyspark < 3.4.4 (#25098, @harupy)

[Gateway / Tracing] fix: Serve FastAPI-native routers under --static-prefix (#24511, @SeiichiroYoshioka)

Features:

[Evaluation / Tracing / Tracking] Add mlflow skills agent hints for GenAI anti-patterns (#25496, @james-fletcher-db)

[Tracing] Add shell-based MLflow Tracing setup wizard (#25441, @B-Step62)

[Gateway] Support per-user budget policies in the AI Gateway (USER scope + principal) (#24371, @joelrobin18)

[Tracing / UI] Add trace-table column reordering to V4 traces tab (#25428, @joshuawong-db)

[Tracing / UI] Add Expectation field to the traces table filter UI (#25460, @creater29)

[Tracing / UI] Add saved views to MLflow demo (#25392, @joshuawong-db)

[Tracing / UI] Add configurable custom trace columns (tags + metadata) to Traces V4 (#25427, @joshuawong-db)

[Tracing / Tracking / UI] Refresh the Traces V4 table: row density, header, and navigation (#25354, @joshuawong-db)

[Tracing / UI] Mount Traces V4 as the default traces experience (#25424, @joshuawong-db)

[Tracing / UI] Port redesigned trace explorer (v2) to OSS (#25355, @joshuawong-db)

[UI] Deprecate the experiment Sessions tab in favor of Traces session grouping (#25350, @joshuawong-db)

[Evaluation / Tracing] feat(typescript): add logFeedback and typed trace assessments (#25169, @rajudandigam)

[Tracing] Point coding agents at the MLflow tracing skill on import mlflow (#25247, @harupy)

[Evaluation / Gateway] Support UC model services in built-in judges (#25246, @TomeHirata)

[Tracing / UI] Enable shouldEnableModelTraceExplorerCustomTraceView in OSS (#25245, @aaronteo-db)

[Tracking] jobs: add configurable Huey storage URL for Redis (#22653, @jeevan6996)

[Tracking] [chart] Add optional External Secrets Operator support (#24523, @habibaikram1)

[Evaluation] Enrich mlflow scorers list --builtin with the full scorer catalog (#25003, @joshuawong-db)

[Tracing / UI] feat(ui): display scorer description in tooltip for custom judges (#22043, @adamgurary)

[UI] Add Image Grid toggle for run parameters (#23705, @jdoughty04)

[Tracing / Tracking / UI] [Custom View] Enforce saved view limit per experiment (#25064, @tanghaoji)

[Tracking] [1/6] basic-auth: fail-closed authorization net + coverage guard (#25065, @PattaraS)

[Build / Scoring] Bump model serving image to Ubuntu 24.04 and Python 3.11 (#25089, @harupy)

[] Add SpanLink support to TypeScript SDK (#23480, @robinnarsinghranabhat)

[Docs / Tracking] [Custom View] Increase experiment tag value limit to 20000 (#25062, @aaronteo-db)

[Tracing / Tracking] feat(ts-sdk): add MLFLOW_TRACKING_AUTH=kubernetes/kubernetes-namespaced support (#24243, @robinnarsinghranabhat)

[Tracing / UI] [Custom View] Add custom view deletion (#25057, @tanghaoji)

[Tracing / UI] [Custom View] Support local Assistant providers with structured responses (#25034, @tanghaoji)

[Tracing / UI] [Custom View] Submit custom view build prompts directly to Assistant (#25026, @aaronteo-db)

[] Support optimizing chat-type prompts in optimize_prompts (#23488, @gaurav0107)

[Docs / Tracking] Add --artifact-policy retarget to mlflow db move-resources for repointing experiment artifact roots (#24635, @gauthierpiarrette)

[] [5 / N] Add custom view tab UI, save/rename, and experiment tag persistence (#24798, @aaronteo-db)

[Evaluation] Expose generate_rationale_first through make_judge (#25002, @aaronteo-db)

[Tracing / UI] [4/N] Add client-tool pause/resume for render_custom_view in Assistant (#24796, @aaronteo-db)

[Tracing] Enable OpenCode tracing plugin to include reasoning/thinking content in the Span (#22997, @robinnarsinghranabhat)

[UI] feat: enable parent-child run view in GenAI mode (#24790, @pasainatan)

[Tracing] Add workspace support to Claude Code plugin (#23773, @Gkrumbach07)

[Evaluation] Add Databricks scorer versioning support (#24940, @nihalmenon)

... (truncated)

Commits

998f710 Cherry-pick span link UI + i18n to branch-3.16 (#25573, #25580) (#25581)
2b8ae8b Reject IPv6-transition addresses embedding private IPv4 in webhook SSRF guard...
3334bc8 Bump version to 3.16.0 (#25558)
a59476f Update ML package versions for 3.16.0 (#25553)
68183ad Update uv.lock (#25549)
415fd8b Improve coding-agent guidance in mlflow agent setup (#25547)
5d499ca Use the current excludeAgent value in the code review instructions (#25544)
0cb8a50 Drop the parallel: group from the Copilot setup steps (#25545)
8e32822 Remove expired experimental decorators (#25497)
52fa09e Fix host-only Databricks CLI commands in tracing setup (#25529)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [mlflow](https://github.com/mlflow/mlflow) to permit the latest version. - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.1.0...v3.16.0) --- updated-dependencies: - dependency-name: mlflow dependency-version: 3.16.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-08T04:44:00Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested review from alexbaur, sdonohoo-db and veenaramesh as code owners September 8, 2026 04:44

dependabot Bot mentioned this pull request Sep 8, 2026

Update mlflow requirement from <4,>=3.1 to >=3.15.2,<4 #235

Closed

Navigation Menu

Uh oh!

Update mlflow requirement from <4,>=3.1 to >=3.16.0,<4 - #236

Update mlflow requirement from <4,>=3.1 to >=3.16.0,<4#236
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/mlflow-gte-3.16.0-and-lt-4

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026

Major New Features

3.16.0 (2026-09-03)

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants