Bump the all-dependencies group across 1 directory with 3 updates #89

dependabot · 2025-10-01T18:27:06Z

Bumps the all-dependencies group with 3 updates in the / directory: click, mlflow and pytest-cov.

Updates click from 8.1.8 to 8.3.0

Release notes

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030

Allow default to be set on Argument for nargs = -1. #2164 #3030

Show correct auto complete value for nargs option in combination with flag option #2813

Show correct auto complete value for nargs option in combination with flag option #2813

Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

Lazily import shutil. #3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-2 Milestone: https://github.com/pallets/click/milestone/25

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. #2952 #2956

Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying functino _join_param_hints allows for it. #2777 #2990

Use the value of Enum choices to render their default value in help screen. #2911 #3004

Fix completion for the Z shell (zsh) for completion items containing colons. #2703 #2846

Don't include envvar in error hint when not configured. #2971 #2972

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.0

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030

Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

Show correct auto complete value for nargs option in combination with flag option :issue:2813

Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

Lazily import shutil. :pr:3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. :issue:2952 :pr:2956

Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying function _join_param_hints allows for it. :issue:2777 :pr:2990

Use the value of Enum choices to render their default value in help screen. Refs :issue:2911 :pr:3004

Fix completion for the Z shell (zsh) for completion items containing colons. :issue:2703 :pr:2846

Don't include envvar in error hint when not configured. :issue:2971 :pr:2972

Fix a rare race in click.testing.StreamMixer's finalization that manifested as a ValueError on close in a multi-threaded test session. :issue:2993 :pr:2991

Version 8.2.1

Released 2025-05-20

... (truncated)

Commits

00fadb8 Release version 8.3.0
2a0e3ba testing/CliRunner: Fix regression related to EOF introduced in 262bdf0 (#2940)
e11a1ef Merge branch 'main' into fix-cli-runner-prompt-eof-handling
36deba8 Forward exception information to resources registered in a context (#3058)
f2cae7a #2447 Add summary of PR to changelog for 8.3.x
7c7ec36 #2447 Split resource exception handling tests in single and nested
92129c5 #2447 Added exception forwarding to context tests
555fa9b #2447 Forward exception data to exit stack when calling __exit__
16fe802 Add more tests on Enum rendering (#3053)
d36de6f Add more tests on Enum rendering their item's names and not values
Additional commits viewable in compare view

Updates mlflow from 3.1.1 to 3.4.0

Release notes

Sourced from mlflow's releases.

v3.4.0

MLflow 3.4.0rc0 includes several major features and improvements

Major New Features

📊 OpenTelemetry Metrics Export: MLflow now exports span-level statistics as OpenTelemetry metrics, providing enhanced observability and monitoring capabilities for traced applications. (#17325, @dbczumar)

🤖 MCP Server Integration: Introducing the Model Context Protocol (MCP) server for MLflow, enabling AI assistants and LLMs to interact with MLflow programmatically. (#17122, @harupy)

🧑‍⚖️ Custom Judges API: New make_judge API enables creation of custom evaluation judges for assessing LLM outputs with domain-specific criteria. (#17647, @BenWilson2, @dbczumar, @alkispoly-db, @smoorjani)

📈 Correlations Backend: Implemented backend infrastructure for storing and computing correlations between experiment metrics using NPMI (Normalized Pointwise Mutual Information). (#17309, #17368, @BenWilson2)

🗂️ Evaluation Datasets: MLflow now supports storing and versioning evaluation datasets directly within experiments for reproducible model assessment. (#17447, @BenWilson2)

🔗 Databricks Backend for MLflow Server: MLflow server can now use Databricks as a backend, enabling seamless integration with Databricks workspaces. (#17411, @nsthorat)

🤖 Claude Autologging: Automatic tracing support for Claude AI interactions, capturing conversations and model responses. (#17305, @smoorjani)

🌊 Strands Agent Tracing: Added comprehensive tracing support for Strands agents, including automatic instrumentation for agent workflows and interactions. (#17151, @joelrobin18)

🧪 Experiment Types in UI: MLflow now introduces experiment types, helping reduce clutter between classic ML/DL and GenAI features. MLflow auto-detects the type, but you can easily adjust it via a selector next to the experiment name. (#17605, @daniellok-db)

Features:

[Evaluation] Add ability to pass tags via dataframe in mlflow.genai.evaluate (#17549, @smoorjani)

[Evaluation] Add custom judge model support for Safety and RetrievalRelevance builtin scorers (#17526, @dbrx-euirim)

[Tracing] Add AI commands as MCP prompts for LLM interaction (#17608, @nsthorat)

[Tracing] Add MLFLOW_ENABLE_OTLP_EXPORTER environment variable (#17505, @dbczumar)

[Tracing] Support OTel and MLflow dual export (#17187, @dbczumar)

[Tracing] Make set_destination use ContextVar for thread safety (#17219, @B-Step62)

[CLI] Add MLflow commands CLI for exposing prompt commands to LLMs (#17530, @nsthorat)

[CLI] Add 'mlflow runs link-traces' command (#17444, @nsthorat)

[CLI] Add 'mlflow runs create' command for programmatic run creation (#17417, @nsthorat)

[CLI] Add MLflow traces CLI command with comprehensive search and management capabilities (#17302, @nsthorat)

[CLI] Add --env-file flag to all MLflow CLI commands (#17509, @nsthorat)

[Tracking] Backend for storing scorers in MLflow experiments (#17090, @WeichenXu123)

[Model Registry] Allow cross-workspace copying of model versions between WMR and UC (#17458, @arpitjasa-db)

[Models] Add automatic Git-based model versioning for GenAI applications (#17076, @harupy)

[Models] Improve WheeledModel._download_wheels safety (#17004, @serena-ruan)

[Projects] Support resume run for Optuna hyperparameter optimization (#17191, @lu-wang-dl)

[Scoring] Add MLFLOW_DEPLOYMENT_CLIENT_HTTP_REQUEST_TIMEOUT environment variable (#17252, @dbczumar)

[UI] Add ability to hide/unhide all finished runs in Chart view (#17143, @joelrobin18)

[Telemetry] Add MLflow OSS telemetry for invoke_custom_judge_model (#17585, @dbrx-euirim)

Bug fixes:

[Evaluation] Implement DSPy LM interface for default Databricks model serving (#17672, @smoorjani)

[Evaluation] Fix aggregations incorrectly applied to legacy scorer interface (#17596, @BenWilson2)

[Evaluation] Add Unity Catalog table source support for mlflow.evaluate (#17546, @BenWilson2)

[Evaluation] Fix custom prompt judge encoding issues with custom judge models (#17584, @dbrx-euirim)

[Tracking] Fix OpenAI autolog to properly reconstruct Response objects from streaming events (#17535, @WeichenXu123)

[Tracking] Add basic authentication support in TypeScript SDK (#17436, @kevin-lyn)

[Tracking] Update scorer endpoints to v3.0 API specification (#17409, @WeichenXu123)

[Tracking] Fix scorer status handling in MLflow tracking backend (#17379, @WeichenXu123)

[Tracking] Fix missing source-run information in UI (#16682, @WeichenXu123)

[Scoring] Fix spark_udf to always use stdin_serve for model serving (#17580, @WeichenXu123)

[Scoring] Fix a bug with Spark UDF usage of uv as an environment manager (#17489, @WeichenXu123)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.4.0rc0 (2025-09-11)

MLflow 3.4.0rc0 includes several major features and improvements

Major New Features

📊 OpenTelemetry Metrics Export: MLflow now exports span-level statistics as OpenTelemetry metrics, providing enhanced observability and monitoring capabilities for traced applications. (#17325, @dbczumar)

🤖 MCP Server Integration: Introducing the Model Context Protocol (MCP) server for MLflow, enabling AI assistants and LLMs to interact with MLflow programmatically. (#17122, @harupy)

🧑‍⚖️ Custom Judges API: New make_judge API enables creation of custom evaluation judges for assessing LLM outputs with domain-specific criteria. (#17647, @BenWilson2, @dbczumar, @alkispoly-db, @smoorjani)

📈 Correlations Backend: Implemented backend infrastructure for storing and computing correlations between experiment metrics using NPMI (Normalized Pointwise Mutual Information). (#17309, #17368, @BenWilson2)

🗂️ Evaluation Datasets: MLflow now supports storing and versioning evaluation datasets directly within experiments for reproducible model assessment. (#17447, @BenWilson2)

🔗 Databricks Backend for MLflow Server: MLflow server can now use Databricks as a backend, enabling seamless integration with Databricks workspaces. (#17411, @nsthorat)

🤖 Claude Autologging: Automatic tracing support for Claude AI interactions, capturing conversations and model responses. (#17305, @smoorjani)

🌊 Strands Agent Tracing: Added comprehensive tracing support for Strands agents, including automatic instrumentation for agent workflows and interactions. (#17151, @joelrobin18)

🧪 Experiment Types in UI: MLflow now introduces experiment types, helping reduce clutter between classic ML/DL and GenAI features. MLflow auto-detects the type, but you can easily adjust it via a selector next to the experiment name. (#17605, @daniellok-db)

Features:

[Evaluation] Add ability to pass tags via dataframe in mlflow.genai.evaluate (#17549, @smoorjani)

[Evaluation] Add custom judge model support for Safety and RetrievalRelevance builtin scorers (#17526, @dbrx-euirim)

[Tracing] Add AI commands as MCP prompts for LLM interaction (#17608, @nsthorat)

[Tracing] Add MLFLOW_ENABLE_OTLP_EXPORTER environment variable (#17505, @dbczumar)

[Tracing] Support OTel and MLflow dual export (#17187, @dbczumar)

[Tracing] Make set_destination use ContextVar for thread safety (#17219, @B-Step62)

[CLI] Add MLflow commands CLI for exposing prompt commands to LLMs (#17530, @nsthorat)

[CLI] Add 'mlflow runs link-traces' command (#17444, @nsthorat)

[CLI] Add 'mlflow runs create' command for programmatic run creation (#17417, @nsthorat)

[CLI] Add MLflow traces CLI command with comprehensive search and management capabilities (#17302, @nsthorat)

[CLI] Add --env-file flag to all MLflow CLI commands (#17509, @nsthorat)

[Tracking] Backend for storing scorers in MLflow experiments (#17090, @WeichenXu123)

[Model Registry] Allow cross-workspace copying of model versions between WMR and UC (#17458, @arpitjasa-db)

[Models] Add automatic Git-based model versioning for GenAI applications (#17076, @harupy)

[Models] Improve WheeledModel._download_wheels safety (#17004, @serena-ruan)

[Projects] Support resume run for Optuna hyperparameter optimization (#17191, @lu-wang-dl)

[Scoring] Add MLFLOW_DEPLOYMENT_CLIENT_HTTP_REQUEST_TIMEOUT environment variable (#17252, @dbczumar)

[UI] Add ability to hide/unhide all finished runs in Chart view (#17143, @joelrobin18)

[Telemetry] Add MLflow OSS telemetry for invoke_custom_judge_model (#17585, @dbrx-euirim)

Bug fixes:

[Evaluation] Implement DSPy LM interface for default Databricks model serving (#17672, @smoorjani)

[Evaluation] Fix aggregations incorrectly applied to legacy scorer interface (#17596, @BenWilson2)

[Evaluation] Add Unity Catalog table source support for mlflow.evaluate (#17546, @BenWilson2)

[Evaluation] Fix custom prompt judge encoding issues with custom judge models (#17584, @dbrx-euirim)

[Tracking] Fix OpenAI autolog to properly reconstruct Response objects from streaming events (#17535, @WeichenXu123)

[Tracking] Add basic authentication support in TypeScript SDK (#17436, @kevin-lyn)

[Tracking] Update scorer endpoints to v3.0 API specification (#17409, @WeichenXu123)

[Tracking] Fix scorer status handling in MLflow tracking backend (#17379, @WeichenXu123)

[Tracking] Fix missing source-run information in UI (#16682, @WeichenXu123)

[Scoring] Fix spark_udf to always use stdin_serve for model serving (#17580, @WeichenXu123)

... (truncated)

Commits

78d0750 ResponsesAgent: additional helpers and parsing code (#15964)
cf51b18 Fix bug in Evaluation Datasets handler and misconfigured test (#17780)
8202730 Fix builtin judge deserialization code (#17766)
f8abcfa Fix create_experiment to return RESOURCE_ALREADY_EXISTS instead of `BAD_R...
c16fb51 Make Scorer.register using active experiment if experiment_id param is not pr...
4149587 Exclude immutable tags when setting tags (#17748)
126412c Run python3 dev/update_mlflow_versions.py pre-release ... (#17761)
1efa7aa Strands test fix (#17666)
fa7dc63 Remove duplicate redirects from the config file (#17706)
9110f2a Add docs for make_judge (#17690)
Additional commits viewable in compare view

Updates pytest-cov from 6.3.0 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

Dropped support for subprocesses measurement.

It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

.. code-block:: ini

[run] patch = subprocess

This release also requires at least coverage 7.10.6.

Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

Removed some not really necessary testing deps like six.

Commits

224d896 Bump version: 6.3.0 → 7.0.0
73424e3 Cleanup the docs a bit.
36f1cc2 Bump pins in template.
f299c59 Bump the github-actions group with 2 updates
25f0b2e Update docs/config.rst
bb23eac Improve configuration docs
a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
82f9993 Update changelog.
211b5cd Fix links.
97aadd7 Update some ci config, reformat and apply some lint fixes.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 3 updates in the / directory: [click](https://github.com/pallets/click), [mlflow](https://github.com/mlflow/mlflow) and [pytest-cov](https://github.com/pytest-dev/pytest-cov). Updates `click` from 8.1.8 to 8.3.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.8...8.3.0) Updates `mlflow` from 3.1.1 to 3.4.0 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.1.1...v3.4.0) Updates `pytest-cov` from 6.3.0 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.3.0...v7.0.0) --- updated-dependencies: - dependency-name: click dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: mlflow dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-10-01T18:27:15Z

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

dependabot · 2025-11-01T21:28:46Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 1, 2025

dependabot bot requested a review from a team as a code owner October 1, 2025 18:27

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 1, 2025

dependabot bot closed this Nov 1, 2025

dependabot bot deleted the dependabot/pip/all-dependencies-e9538ddc72 branch November 1, 2025 21:28

github-actions bot locked and limited conversation to collaborators Nov 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-dependencies group across 1 directory with 3 updates #89

Bump the all-dependencies group across 1 directory with 3 updates #89

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 1, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all-dependencies group across 1 directory with 3 updates #89

Bump the all-dependencies group across 1 directory with 3 updates #89

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.3.0

8.2.2

Version 8.3.0

Version 8.2.2

Version 8.2.1

v3.4.0

Major New Features

3.4.0rc0 (2025-09-11)

Major New Features

7.0.0 (2025-09-09)

Uh oh!

github-actions bot commented Oct 1, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 1, 2025 •

edited

Loading