chore(deps): bump mlflow from 3.14.0 to 3.15.1 in /src

[dependabot]

Bumps mlflow from 3.14.0 to 3.15.1.

Release notes

Sourced from mlflow's releases.

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

Bug fixes:

• [Model Registry] Skip env_pack on ARM client images (#24762, @​qyc)
• [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (#24799, @​PattaraS)

Documentation updates:

• [Docs] Clarify scorer versioning documentation (#24769, @​nihalmenon)

v3.15.0

MLflow 3.15.0 includes several major features and improvements

Major New Features

• 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
• 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
• 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
• ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
• 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

• [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
• [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
• [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
• [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
• [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
• [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
• [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
• [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
• [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
• [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
• [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
• [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
• [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
• [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
• [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
• [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
• [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

• [Tracing] Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416, @​harupy)
• [UI] Fix artifact direct download capability checks in UI (#24748, @​B-Step62)
• [Tracing / UI] Refresh traces saved-view on load across multiple windows (#24746, @​joshuawong-db)
• [UI] Fix UnauthorizedError constructor message (#24729, @​mihir2921)
• [UI] Fall back to nested spans for Chat Sessions turn content (#24703, @​MannXo)
• [Tracing / Tracking] Fix experiment GC cascades for traces and logged models (#24351, @​copilot-swe-agent)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.15.1 (2026-08-03)

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

Bug fixes:

• [Model Registry] Skip env_pack on ARM client images (#24762) (#24835, @​qyc)
• [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (+ lint rule) (#24799) (#24813, @​PattaraS)

Documentation updates:

• [Docs] Clarify scorer versioning documentation (#24769) (#24805, @​nihalmenon)

3.15.0 (2026-07-31)

MLflow 3.15.0 includes several major features and improvements

Major New Features

• 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
• 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
• 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
• ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
• 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

• [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
• [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
• [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
• [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
• [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
• [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
• [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
• [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
• [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
• [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
• [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
• [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
• [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
• [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
• [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
• [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
• [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

• [Tracing] Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416, @​harupy)
• [UI] Fix artifact direct download capability checks in UI (#24748, @​B-Step62)
• [Tracing / UI] Refresh traces saved-view on load across multiple windows (#24746, @​joshuawong-db)

... (truncated)

Commits

• 9a1c0d9 Skip env_pack on ARM client images (#24762)
• 20d1524 Update uv.lock (#24836)
• f560bc7 Bump version to 3.15.1 (#24817)
• 4debaa7 Harden version parsing against missing/non-PEP440 versions on Databricks Serv...
• fae40a0 Clarify scorer versioning documentation (#24769) (#24805)
• d0f3152 Fix traces shared-view banner bleeding into non-saved-view pages (#24785) (#2...
• 58452f5 Bump version to 3.15.0 (#24757)
• 222f8e2 Update ML package versions for 3.15.0 (#24753)
• 569841a Update requirements.yaml files for 3.15.0 (#24752)
• b3662f0 Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
mlflow	[>= 3.12.dev0, < 3.13]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Auto-regenerated requirements.txt lockfiles to match requirements.in.