Mlrun

Latest version: v1.7.2

Safety actively analyzes 707268 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 109

1.8.0rc34

Features / Enhancements
* **Model Monitoring**: Serialize the application results in evaluate, 7312, jond01
* **Model Monitoring**: Replace function hash to function uid, 7284, davesh0812
* **Alerts**: Increased limit of alerts up to 20k and make cache size configurable, 7306, rokatyy
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc34#features-and-enhancements)

Bug fixes
* **Model Monitoring**: Fix `test_count_app`, 7311, royischoss
* **Pagination**: Fix page_size documentation, 7309, moranbental
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc34#bug-fixes)


Pull requests:
0317ab67f [Model Monitoring] Serialize the application results in evaluate (7312)
67f20fc52 [Model Monitoring] Fix `test_count_app` (7311)
453f51bd2 [Pagination] Fix page_size documentation (7309)
4102fcf4c [Model Monitoring] replace function hash to function uid (7284)
406403aad [Alerts] Increased limit of alerts up to 20k and make cache size configurable (7306)

1.8.0rc33

Features / Enhancements
* **Artifacts**: Handle iterations when ensuring the latest tag during migration, 7294, moranbental
* **Dependabot-automated**: Bump k8s.io/api from 0.32.1 to 0.32.2 in /server/go/services/log-collector, 7289, dependabot[bot]
* **Dependabot-automated**: Bump k8s.io/client-go from 0.32.1 to 0.32.2 in /server/go/services/log-collector, 7290, dependabot[bot]
* **Python**: Remove distutils references, 7302, liranbg
* **Dependabot-automated**: Bump k8s.io/apimachinery from 0.32.1 to 0.32.2 in /server/go/services/log-collector, 7291, dependabot[bot]
* **Requirements-automated**: Upgrade lock files, 7300, iguazio-cicd
* **Helpers**: Convert timezone aware datetime to utc, 7288, Yacouby
* **Config**: Increase submit timeout, 7295, TomerShor
* **MPIJob**: Log response status on error, 7298, TomerShor
* **Python**: Run unit + integration tests against python 3.12, 7296, liranbg
* **Requirements-automated**: Upgrade lock files, 7293, iguazio-cicd
* **Model Monitoring**: Handle kafka broker config when provided as string instead of list, 7286, alxtkr77
* **Runs**: Enhancements to preemption handling, 7222, yaelgen
* **System id**: Generate system id using only lowercase letters and digits, 7280, Yacouby
* **Dependabot-automated**: Update mlrun-pipelines-kfp-common requirement from ~=0.3.9 to ~=0.3.10, 7276, dependabot[bot]
* **Function**: Show warning when inline encoded source code is over 10kb, 7279, quaark
* **Model Monitoring**: Update taoswrap and only create one connection object, 7278, gtopper
* **Model Monitoring**: Move evidently-related code into a dedicated module, 7256, gtopper
* **CI**: Ensure release notes runs lastly, 7275, liranbg
* **Notifications**: Support `end_time` w/ backwards compatible clients, 7273, quaark
* **Automation**: Add flags to patch remote, 7274, gtopper
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc33#features-and-enhancements)

Bug fixes
* **Docs**: Fix math docstrings, 7303, jond01
* **Scheduler**: Fix uninitialized scheduler shutdown, 7304, alonmr
* **CI**: Fix installing multi-python env, 7299, liranbg
* **Model Monitoring**: Fix 'inplace' mep creation and 'get_or_create_model_endpoint', 7285, royischoss
* **FastAPI**: Fix setting fastapi max workers, 7283, quaark
* **Security**: Kfp api version parsing vulnerability fix, 7282, quaark
* **Tests**: Fix mm env preparation for system tests, 7265, jond01
* **Unknown**: Revert "[security] url parsing vulnerability fix", 7281, liranbg
* **Tests**: Fix `testmonitoredservings::test_different_kind_of_serving`, 7258, gtopper
* **Security**: Url parsing vulnerability fix, 7277, quaark
* **Tests**: Fix `testbasics::test_basics`, 7257, gtopper
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc33#bug-fixes)


Pull requests:
35557735b [Docs] Fix math docstrings (7303)
7c36f471c [Scheduler] Fix uninitialized scheduler shutdown (7304)
50af4966e [Artifacts] Handle Iterations When Ensuring the Latest Tag During Migration (7294)
7a5958bfb [Dependabot-automated] Bump k8s.io/api from 0.32.1 to 0.32.2 in /server/go/services/log-collector (7289)
abea37db8 [Dependabot-automated] Bump k8s.io/client-go from 0.32.1 to 0.32.2 in /server/go/services/log-collector (7290)
e7552ceac [Python] Remove distutils references (7302)
6611eefbd [Dependabot-automated] Bump k8s.io/apimachinery from 0.32.1 to 0.32.2 in /server/go/services/log-collector (7291)
670d8a8d3 [Requirements-automated] Upgrade lock files (7300)
80959318e [Helpers] Convert timezone aware datetime to UTC (7288)
5d5542b59 [CI] Fix installing multi-python env (7299)
15143ba42 [Config] Increase submit timeout (7295)
9b5b0ad22 [MPIJob] Log response status on error (7298)
a5653b945 [Python] Run Unit + Integration tests against python 3.12 (7296)
1ee563674 [Model Monitoring] Fix 'inplace' mep creation and 'get_or_create_model_endpoint' (7285)
3e8f419aa [Requirements-automated] Upgrade lock files (7293)
64456b297 [Model Monitoring] Handle Kafka broker config when provided as string instead of list (7286)
432c0ca55 [Runs] Enhancements to preemption handling (7222)
0c431db94 [System id] Generate system ID using only lowercase letters and digits (7280)
ed50858f3 [FastAPI] Fix Setting FastAPI Max Workers (7283)
16b7d0ebd [Security] KFP API Version Parsing Vulnerability Fix (7282)
22f8af6e6 [Tests] Fix MM env preparation for system tests (7265)
b11e952c4 [Dependabot-automated] Update mlrun-pipelines-kfp-common requirement from ~=0.3.9 to ~=0.3.10 (7276)
dc0112321 Revert "[Security] URL Parsing Vulnerability Fix" (7281)
23e48cb3d [Tests] Fix `TestMonitoredServings::test_different_kind_of_serving` (7258)
6c513f24e [Function] Show Warning When Inline Encoded Source Code is Over 10KB (7279)
9e649ce5d [Model Monitoring] Update taoswrap and only create one connection object (7278)
eb214136a [Security] URL Parsing Vulnerability Fix (7277)
bfa5e2d15 [Model Monitoring] Move evidently-related code into a dedicated module (7256)
28fa76bb7 [CI] Ensure release notes runs lastly (7275)
a76a5ab1a [Tests] Fix `TestBasics::test_basics` (7257)
abd9614d0 [Notifications] Support `end_time` w/ Backwards Compatible Clients (7273)
649cd1d11 [Automation] Add flags to patch remote (7274)

1.8.0rc32

Not secure
Features / Enhancements
* **Dependencies**: Bump cryptography, 7272, liranbg
* **Model Monitoring**: Controller base period define by lookup table, 7267, davesh0812
* **Requirements-automated**: Upgrade lock files, 7271, iguazio-cicd
* **Notification**: Update `end_time` on runs from the run monitor loop, 7264, quaark
* **PipelinesAdapters**: Remove python 3.12 restriction, 7266, liranbg
* **Docs**: Update grafana description for v1.8, 7247, jillnogold
* **Pipelines**: Use yaml safe for loading pipelines, 7263, liranbg
* **Images**: Add extras-requirements to mlrun-kfp image requirements, 7254, TomerShor
* **Release-notes**: Allow square-brackets in username, 7262, assaf758
* **Notifications**: Always extract the project `notifiers` notifications for the running workflow, 7260, quaark
* **Golang**: Bump dependencies, 7259, liranbg
* **Requirements-automated**: Upgrade lock files, 7255, iguazio-cicd
* **Docs**: Delete notifications from "batch runs and workflows", 7228, jillnogold
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc32#features-and-enhancements)

Bug fixes
* **Model Monitoring**: Fix create_model_monitoring_alert_configs docstring, 7268, tomerm-iguazio
* **Model Monitoring**: Fix allow 'evaluate' to work with mep names, 7244, royischoss
* **KFP**: Resolve kfp fixed image, 7261, liranbg
* **CE Deployer**: Fix unsafe usage of subprocess.popen, 7237, adamdelman
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc32#bug-fixes)


Pull requests:
c816b6df6 [Dependencies] Bump cryptography (7272)
884e27a31 [Model Monitoring] Controller base period define by lookup table (7267)
ffc79f89d [Model Monitoring] fix create_model_monitoring_alert_configs docstring (7268)
fe41aedfe [Requirements-automated] Upgrade lock files (7271)
f4e181284 [Notification] Update `end_time` on runs from the Run Monitor Loop (7264)
1007924de [PipelinesAdapters] Remove python 3.12 restriction (7266)
dc55e0e32 [Docs] Update Grafana description for v1.8 (7247)
2ef3d6476 [Model Monitoring] Fix allow 'evaluate' to work with mep names (7244)
36da35c15 [Pipelines] Use yaml safe for loading pipelines (7263)
5530b2ab6 [KFP] Resolve kfp fixed image (7261)
de27f286b [CE Deployer] Fix unsafe usage of subprocess.Popen (7237)
d76c97f86 [Images] Add extras-requirements to mlrun-kfp image requirements (7254)
bc6305379 [Release-notes] allow square-brackets in username (7262)
bf26f50de [Notifications] Always extract the project `notifiers` notifications for the running workflow (7260)
06f1cd649 [Golang] Bump dependencies (7259)
642d5236a [Requirements-automated] Upgrade lock files (7255)
97a2f5e6d [Docs] Delete notifications from "Batch runs and workflows" (7228)

1.8.0rc31

Not secure
Features / Enhancements
* **Jupyter**: Update conda deps, 7252, liranbg
* **Model Monitoring**: Improve application `evaluate` docstring, 7253, jond01
* **Model Monitoring**: Combine alert name with result fqn, 7187, tomerm-iguazio
* **Model Monitoring**: Make sure the model outputs are not part of the model endpoint features, 7239, davesh0812
* **Model Monitoring**: Remove deprecated set credentials arguments, 7250, jond01
* **Images**: Update pip version, 7248, Yacouby
* **Model Monitoring**: Improve performance of mep augmentation from v3io tsdb, 7241, gtopper
* **KFP**: Return mlrun/mlrun image for kfp client < mlrun 1.8, 7240, adamdelman
* **Config**: Prioritize httpdb config first when reading env variables, 7246, Yacouby
* **Images**: Remove go source code from python images, 7245, TomerShor
* **Security**: Enforce strict ssh host key verification, 7227, Yacouby
* **Tools**: Make patch_remote.py docker image push concurrent, 7235, adamdelman
* **Logging**: Use contextvars to get consistent request ids when logging, 7211, adamdelman
* **Runs**: Improve delete runs flow, 7232, TomerShor
* **Pipelines**: Use mlrun-pipelines' retryable statuses for retry validation, 7236, TomerShor
* **Artifacts**: Add project-bestiteration-updated index for list artifacts query, 7230, quaark
* **Model Monitoring**: Update grafana to align with the new structure, 7218, Eyal-Danieli
* **Pipelines**: Add `unknown` to retryable statuses, 7231, TomerShor
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc31#features-and-enhancements)

Bug fixes
* **Artifacts**: Fix migration bug in "latest" tag creation for artifact, 7251, moranbental
* **Notifications**: Fix `add_notification` not taking effect on kfp engine workflows, 7243, quaark
* **KFP**: Fix incomplete url substring sanitization in kfp, 7238, adamdelman
* **Model Monitoring**: Fix `evaluate` with `datetime` in remote runs, 7220, jond01
* **Model Monitoring**: Fix credentials exposure in yaml, 7203, alxtkr77
* **Pipelines**: Fix class method `retryable_statuses`, 7233, TomerShor
* **Helpers**: Fix datetime usage, 7234, rokatyy
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc31#bug-fixes)


Pull requests:
d59051b8a [Jupyter] Update conda deps (7252)
54e046750 [Model Monitoring] Improve application `evaluate` docstring (7253)
54222409a [Model Monitoring] Combine alert name with result fqn (7187)
afa0b4f73 [Model Monitoring] Make sure the model outputs are not part of the model endpoint features (7239)
59de21550 [Model Monitoring] Remove deprecated set credentials arguments (7250)
613a03fd6 [Images] Update pip version (7248)
0bfc75438 [Model Monitoring] Improve performance of MEP augmentation from V3IO TSDB (7241)
88def3982 [Artifacts] Fix Migration Bug in "Latest" Tag Creation for Artifact (7251)
622807a2c [KFP] Return mlrun/mlrun image for kfp client < mlrun 1.8 (7240)
7fe64dbfd [Config] Prioritize httpdb config first when reading env variables (7246)
623d71682 [Dependabot-automated] Bump golang.org/x/sync from 0.10.0 to 0.11.0 in /server/go/services/log-collector (7242)
40437a6b5 [Images] Remove Go source code from python images (7245)
05c29d255 [Notifications] Fix `add_notification` not taking effect on KFP engine workflows (7243)
805544d1e [Security] Enforce strict SSH host key verification (7227)
7ea21a350 [Tools] Make patch_remote.py docker image push concurrent (7235)
160ad29ba [Logging] Use contextvars to get consistent request IDs when logging (7211)
53830e70b [KFP] fix Incomplete URL substring sanitization in KFP (7238)
4c9acae50 [Runs] Improve delete runs flow (7232)
82297f2a4 [Pipelines] Use mlrun-pipelines' retryable statuses for retry validation (7236)
d1a1fdf6f [Model Monitoring] Fix `evaluate` with `datetime` in remote runs (7220)
e22ea2f24 [Model Monitoring] Fix credentials exposure in YAML (7203)
de7151170 [Artifacts] Add Project-BestIteration-Updated Index for List Artifacts Query (7230)
22740bf9b [Pipelines] Fix class method `retryable_statuses` (7233)
79cc042b6 [Helpers] Fix datetime usage (7234)
347f203bc [Model Monitoring] Update Grafana to align with the new structure (7218)
33ecd8674 [Pipelines] Add `Unknown` to retryable statuses (7231)

Failed parsing:
623d71682 {dependabot[bot]} [Dependabot-automated] Bump golang.org/x/sync from 0.10.0 to 0.11.0 in /server/go/services/log-collector (7242)

1.8.0rc30

Not secure
Features / Enhancements
* **Model Monitoring**: Support kafka sasl, 7196, jond01
* **Security**: Sanitize user inputs to prevent path traversal, 7229, Yacouby
* **Pipelines**: Add "uknown" state to run state mapping, 7226, TomerShor
* **Config**: Use orderdict to preserve key order in env parsing, 7221, Yacouby
* **Pipelines**: Add "unknown" pipeline run status, 7216, TomerShor
* **Notification**: Set event loop when creating a new one, 7219, rokatyy
* **Artifacts**: Ignore best iteration on latest reassignment after deletion, 7197, TomerShor
* **KFP**: Change retry_pipeline signature to make project mandatory, 7208, adamdelman
* **Runs**: Adjust listing by end time filter in system test, 7213, Yacouby
* **Model Monitoring**: Add warning for empty alert config list, 7214, tomerm-iguazio
* **Runtime**: Enrich image pull secrets for deployed functions, 7198, adamdelman
* **HTTPDB**: Deprecate create_schedule functionality, 7164, adamdelman
* **Requirements-automated**: Upgrade lock files, 7204, iguazio-cicd
* **Jupyter**: Update jupyter deps, 7200, liranbg
* **Runs**: Enhance error messages for non-scheduled pods/preempted runs in runs monitoring, 7189, yaelgen
* **AsyncHTTPClient**: Enhance retry mechanism, 7192, liranbg
* **Automation**: Add `--chart` cli option to deployer, 7160, gtopper
* **Builder**: Ensure unzip on mlrun base images, 7186, liranbg
* **Artifacts**: Propagate iteration when deleting artifact, 7188, TomerShor
* **Docs**: Remove example based on ci-demo.git, 7133, jillnogold
* **Docs**: Add v1.7.2 to change log, additional doc updates, 7130, jillnogold
* **Runs**: Update the run's end time when job is in terminal state, 7171, Yacouby
* **RemoteRuntime**: Don't always override handler in with_source_archive, 7185, TomerShor
* **Model Monitoring**: Add `system_id` to model monitoring resources, 7179, Eyal-Danieli
* **Docs**: Update links in tutorials, 7175, jillnogold
* **KFP**: Return correct image for workflow runner, 7170, adamdelman
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc30#features-and-enhancements)

Bug fixes
* **Artifacts**: Fix 'get_model' with 'dataitem', 7223, royischoss
* **Security**: Fix ecr url detection to prevent substring matching issues, 7225, Yacouby
* **Model Monitoring**: Fix version field resp, 7178, royischoss
* **Serving**: Fix function serialization for workflows, 7206, davesh0812
* **KFP**: Fix kfp run summary formatting for kfp 2.x server, 7207, adamdelman
* **Model Monitoring**: Fix mm creation for `enrichmentvotingensemble`, 7215, davesh0812
* **Doc**: Fix function docstring, 7212, liranbg
* **Model Monitoring**: Controller fix- allow 'cron' event.trigger.type, 7209, royischoss
* **Security**: Fix verify_label_key, 7210, rokatyy
* **Docs**: Fix docstring in mlrunloader, 7205, alxtkr77
* **Model Monitoring**: Fixed 06-batch-infer.ipynb, 7195, royischoss
* **Docs**: Update and fix model monitoring related information, 7181, jond01
* **Runtimes**: Fix checking background task existence, 7202, liranbg
* **CI**: Fix secret system test, 7201, liranbg
* **Automation**: Fix patch remote's wait for pod readiness, 7199, TomerShor
* **DB**: Fix default timestamp fields to ensure unique values for each record insertion, 7194, Yacouby
* **Projects**: Fix set source and dirty check, 7184, liranbg
* **Docs**: Fix alert names in docs and tests, 7182, gtopper
* **Requirements**: Fix incorrect locking of protobuf in python 3.9, 7183, gtopper
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.8.0-rc30#bug-fixes)


Pull requests:
d77b75367 [Model Monitoring] Support Kafka SASL (7196)
204cd4ca7 [Artifacts] Fix 'get_model' with 'DataItem' (7223)
1abf172f2 [Security] Sanitize user inputs to prevent path traversal (7229)
66f047af9 [Pipelines] Add "Uknown" state to run state mapping (7226)
1235dc380 [Security] Fix ECR url detection to prevent substring matching issues (7225)
20cd19efc [Config] Use orderdict to preserve key order in env parsing (7221)
899762046 [Model Monitoring] Fix version field resp (7178)
8427057d0 [Serving] Fix function serialization for workflows (7206)
983443fa0 [Pipelines] Add "Unknown" pipeline run status (7216)
49c7741a1 [Notification] Set event loop when creating a new one (7219)
680faac12 [Artifacts] Ignore best iteration on latest reassignment after deletion (7197)
916f8e006 [KFP] Change retry_pipeline signature to make project mandatory (7208)
27ab81639 [KFP] Fix KFP run summary formatting for KFP 2.x server (7207)
13cb6f78d [Runs] Adjust listing by end time filter in system test (7213)
3e96680c8 [Model Monitoring] fix mm creation for `EnrichmentVotingEnsemble` (7215)
f8cc4c286 [Model Monitoring] Add warning for empty alert config list (7214)
5cb72534e [Doc] Fix function docstring (7212)
1dc269394 [Model Monitoring] Controller fix- allow 'cron' event.trigger.type (7209)
d7eda21eb [Security] Fix verify_label_key (7210)
0e6fcd795 [Docs] Fix docstring in MLRunLoader (7205)
aeac1614d [Model Monitoring] fixed 06-batch-infer.ipynb (7195)
eb6102a56 [Runtime] Enrich image pull secrets for deployed functions (7198)
336afff33 [Docs] Update and fix model monitoring related information (7181)
c0b813e06 [HTTPDB] Deprecate create_schedule functionality (7164)
ca4ee23d5 [Requirements-automated] Upgrade lock files (7204)
10e6bff9a [Jupyter] Update jupyter deps (7200)
0c5cd072f [Runs] Enhance error messages for non-scheduled pods/preempted runs in runs monitoring (7189)
af3210dfb [Runtimes] Fix checking background task existence (7202)
d51463c97 [CI] Fix secret system test (7201)
e96ee10ae [AsyncHTTPClient] Enhance retry mechanism (7192)
617068abe [Automation] Fix patch remote's wait for pod readiness (7199)
72bbbc4b7 [DB] Fix default timestamp fields to ensure unique values for each record insertion (7194)
031f7fd8b [Automation] Add `--chart` CLI option to deployer (7160)
ad183c940 [Builder] Ensure unzip on mlrun base images (7186)
057594694 [Artifacts] Propagate iteration when deleting artifact (7188)
e28d16bb7 [Docs] Remove example based on ci-demo.git (7133)
942b15909 [Docs] Add v1.7.2 to change log, additional doc updates (7130)
4ed9a737c [Runs] Update the run's end time when job is in terminal state (7171)
beabba52b [RemoteRuntime] Don't always override handler in with_source_archive (7185)
d072e645b [Projects] Fix set source and dirty check (7184)
debb2d603 [Docs] Fix alert names in docs and tests (7182)
47e63a32e [Requirements] Fix incorrect locking of protobuf in python 3.9 (7183)
5a6502daa [Model Monitoring] add `system_id` to model monitoring resources (7179)
0a58e3419 [Docs] Update links in tutorials (7175)
01ef68dbf [KFP] Return correct image for workflow runner (7170)

1.8.0rc29

Not secure

Page 1 of 109

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.