Skip to content
This repository has been archived by the owner on Jul 19, 2023. It is now read-only.

Bump mlflow from 2.2.2 to 2.4.1 #258

Merged
merged 1 commit into from
Jul 8, 2023
Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 12, 2023

Bumps mlflow from 2.2.2 to 2.4.1.

Release notes

Sourced from mlflow's releases.

MLflow 2.4.1 is a patch release containing the following features, bug fixes and changes:

Features:

  • [Tracking] Extend SearchRuns to support datasets (#8622, @​prithvikannan)
  • [Models] Add an mlflow.johnsnowlabs flavor for the johnsnowlabs package (#8556, @​C-K-Loan)
  • [Models] Add a warning for duplicate pip requirements specified in save_model and log_model for the transformers flavor (#8678, @​BenWilson2)

Bug fixes:

  • [Security] Improve robustness to LFI attacks (#8648, @​serena-ruan)
    • If you are using mlflow server or mlflow ui, we recommend upgrading to MLflow 2.4.1 as soon as possible.
  • [Models] Fix an issue with transformers serialization for ModelCards that contain invalid characters (#8652, @​BenWilson2)
  • [Models] Fix connection pooling deadlocks that occurred during large file downloads (#8682, @​dbczumar; #8660, @​harupy)

Small bug fixes and documentation updates:

#8677, #8674, #8646, #8647, @​dbczumar; #8654, #8653, #8660, #8650, #8642, #8636, #8599, #8637, #8608, #8633, #8623, #8628, #8619, @​harupy; #8655, #8609, @​BenWilson2; #8648, @​serena-ruan; #8521, @​ka1mar; #8638, @​smurching; #8634, @​PenHsuanWang

MLflow 2.4.0 includes several major features and improvements

Features:

Bug fixes:

  • [Tracking] Terminate Spark callback server when Spark Autologging is disabled or Spark Session is shut down (#8508, @​WeichenXu123)
  • [Tracking] Fix compatibility of mlflow server with Flask<2.0 (#8463, @​kevingreer)
  • [Models] Convert mlflow.transformers pyfunc scalar string output to list of strings during batch inference (#8546, @​BenWilson2)
  • [Models] Fix a bug causing outdated pyenv versions to be installed by mlflow models build-docker (#8488, @​Hellzed)
  • [Model Registry] Remove aliases from storage when a Model Version is deleted (#8459, @​arpitjasa-db)

... (truncated)

Changelog

Sourced from mlflow's changelog.

2.4.1 (2023-06-09)

MLflow 2.4.1 is a patch release containing the following features, bug fixes and changes:

Features:

  • [Tracking] Extend SearchRuns to support datasets (#8622, @​prithvikannan)
  • [Models] Add an mlflow.johnsnowlabs flavor for the johnsnowlabs package (#8556, @​C-K-Loan)
  • [Models] Add a warning for duplicate pip requirements specified in save_model and log_model for the transformers flavor (#8678, @​BenWilson2)

Bug fixes:

  • [Security] Improve robustness to LFI attacks (#8648, @​serena-ruan)
    • If you are using mlflow server or mlflow ui, we recommend upgrading to MLflow 2.4.1 as soon as possible.
  • [Models] Fix an issue with transformers serialization for ModelCards that contain invalid characters (#8652, @​BenWilson2)
  • [Models] Fix connection pooling deadlocks that occurred during large file downloads (#8682, @​dbczumar; #8660, @​harupy)

Small bug fixes and documentation updates:

#8677, #8674, #8646, #8647, @​dbczumar; #8654, #8653, #8660, #8650, #8642, #8636, #8599, #8637, #8608, #8633, #8623, #8628, #8619, @​harupy; #8655, #8609, @​BenWilson2; #8648, @​serena-ruan; #8521, @​ka1mar; #8638, @​smurching; #8634, @​PenHsuanWang

2.4.0 (2023-06-06)

MLflow 2.4.0 includes several major features and improvements

Features:

Bug fixes:

  • [Tracking] Terminate Spark callback server when Spark Autologging is disabled or Spark Session is shut down (#8508, @​WeichenXu123)
  • [Tracking] Fix compatibility of mlflow server with Flask<2.0 (#8463, @​kevingreer)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from DougTrajano as a code owner June 12, 2023 01:57
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 12, 2023
Bumps [mlflow](https://github.com/mlflow/mlflow) from 2.2.2 to 2.4.1.
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v2.2.2...v2.4.1)

---
updated-dependencies:
- dependency-name: mlflow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/mlflow-2.4.1 branch from b3afaf2 to 48951c7 Compare July 8, 2023 19:31
@DougTrajano DougTrajano merged commit d0a04ae into main Jul 8, 2023
@dependabot dependabot bot deleted the dependabot/pip/mlflow-2.4.1 branch July 8, 2023 19:33
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant