MLRun Files

Features / Enhancements

• Jupyter: 1.12.x remediate high cves in jupyter image (#10053), [#10081], @GiladShapira94
• Requirements: Bump kfp to 1.8.24 to remedy protobuf cve-2026-0994 [1.12.x], [#10026], @liranbg
• Dockerfiles: Migrate to dockerhub [1.12.x], [#10024], @liranbg
• Log-collector: Bump vulnerable go dependencies [1.12.x], [#10023], @liranbg
• Requirements-automated: Upgrade lock files [1.12.x], [#10022], @mlrun-cicd[bot]
• Requirements-automated: Upgrade lock files [1.12.x], [#10002], @mlrun-cicd[bot]
• Authorization: Enforce non-root pods on security-context enrichment, [#9971], @liranbg
• Dependabot-automated: Bump docker/login-action from 4.5.2 to 4.6.0, [#9969], @dependabot[bot]
• Dependabot-automated: Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2, [#9970], @dependabot[bot]
• Docs: Add openai-compatible frontend, [#9890], @jillnogold
• Requirements-automated: Upgrade lock files, [#9954], @mlrun-cicd[bot]
• Dependabot-automated: Bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3, [#9952], @dependabot[bot]
• Dependabot-automated: Bump docker/login-action from 4.4.0 to 4.5.2, [#9959], @dependabot[bot]
• Datastore: Support gcs workload identity for signed archive urls, [#9957], @gtopper
• Events: Emit audit events for project secret create/update/delete, [#9955], @moranbental
• Docs: Add ce otel cfg, [#9925], @jillnogold
• Docs: Add deprecations in v1.12.0 to change log, [#9943], @jillnogold
• Docs: Add install mlrun ce on azure guide, [#9926], @shaharit1407
• DEVOPS-2054: [system tests] use ghcr proxy secret for enterprise registry, [#9948], @bar-shem-tov
• Authorization: Rename opa namespace resources → mlrun, [#9941], @elbamit
• Dependabot-automated: Bump astral-sh/setup-uv from 8.3.2 to 9.0.0, [#9944], @dependabot[bot]
• Dependabot-automated: Bump actions/labeler from 6 to 7, [#9940], @dependabot[bot]
• Dependabot-automated: Bump actions/setup-python from 6 to 7, [#9938], @dependabot[bot]
• Dependabot-automated: Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1, [#9939], @dependabot[bot]
• Log collector: Always build with the latest go patch version, [#9936], @liranbg
• Requirements-automated: Upgrade lock files, [#9935], @mlrun-cicd[bot]
• Dependabot-automated: Bump actions/setup-go from 6 to 7, [#9928], @dependabot[bot]
• Nuclio: Support gs:///gcs:// source archives for nuclio deploys, [#9927], @gtopper
• Docs: Add model monitoring support for application runtime and jobs, [#9902], @jillnogold
• Dependabot-automated: Bump actions/setup-node from 6 to 7, [#9921], @dependabot[bot]
• Requirements: Upgrade aiosmtplib to 5.1 and paramiko to 5.0, [#9916], @liranbg
• Requirements-automated: Upgrade lock files, [#9912], @mlrun-cicd[bot]
• Dependabot-automated: Bump astral-sh/setup-uv from 8.3.1 to 8.3.2, [#9907], @dependabot[bot]
• Spark: Disable executor service-account token automount, [#9897], @gtopper
• Dependabot-automated: Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.2, [#9903], @dependabot[bot]
• Patch: Support postgres/statefulset mlrun-db in --reset-db, [#9898], @liranbg
• Docs: Improve structure (returning custom http responses), [#9880], @jillnogold
• Dependabot-automated: Bump astral-sh/setup-uv from 8.3.0 to 8.3.1, [#9895], @dependabot[bot]
• Dependabot-automated: Bump docker/login-action from 4.2.0 to 4.4.0, [#9892], @dependabot[bot]
• Dependabot-automated: Bump denoland/setup-deno from 2.0.4 to 2.0.5, [#9893], @dependabot[bot]
• Dependabot-automated: Bump astral-sh/setup-uv from 8.2.0 to 8.3.0, [#9894], @dependabot[bot]
• Dependabot-automated: Update mlrun-pipelines-kfp-v1-8 requirement from ~=0.7.2 to ~=0.7.3, [#9891], @dependabot[bot]
• Tests: Disable subprocess coverage in integration tests, [#9878], @tomerm-iguazio
• Requirements-automated: Upgrade lock files, [#9888], @mlrun-cicd[bot]
• Docs: Document output_body_mappings and openai-compatible frontend, [#9872], @tomerm-iguazio
• Docs: Update git repo as hub, [#9650], @jillnogold
• Docs: Updates to artifacts doc, [#9870], @jillnogold
• Requirements-automated: Upgrade lock files, [#9853], @mlrun-cicd[bot]
• Requirements: Make v3io-frames an optional extra, [#9874], @gtopper
• Docs: Replace guardrails for data management page, [#9716], @jillnogold
• Tests: Collect pod logs on test_serving_as_a_job failure, [#9869], @alxtkr77
• Serving: Apply output mapping + response post-processing after await on async path, [#9862], @tomerm-iguazio
• Docs: Add mlrun counters integration with opentelemetry, [#9805], @jillnogold
• Model Monitoring: Remove deprecated old-batch controller monitoring path, [#9820], @alxtkr77
• Serving: Preserve handler response status code; skip output mapping on non-2xx (ml-12706), [#9844], @tomerm-iguazio
• Storey: Bump storey to 1.12.4, [#9856], @tomerm-iguazio
• Tests: Add ml-12647 repro: include_url_info body delivery, [#9846], @tomerm-iguazio
• Dependabot-automated: Bump actions/create-github-app-token from 2 to 3, [#9842], @dependabot[bot]
• Dependabot-automated: Bump actions/checkout from 6 to 7, [#9851], @dependabot[bot]
• Dependabot-automated: Bump actions/checkout from 6 to 7 in /.github/actions/image-matrix-prep, [#9850], @dependabot[bot]
• Dependabot-automated: Update mlrun-pipelines-kfp-v1-8 requirement from ~=0.7.1 to ~=0.7.2, [#9849], @dependabot[bot]
• Requirements-automated: Upgrade lock files, [#9847], @mlrun-cicd[bot]
• Migrations: Add head-squash mode and squash v1.12 migrations, [#9835], @daanvdk-mck
• Nuclio: Support az:// source archives for nuclio deploys, [#9837], @gtopper
• Unknown: Revert "[tests] respect lock files when building test docker images", [#9841], @liranbg
• Serving: Decode url-encoded mlrun_request_path, [#9830], @tomerm-iguazio
• CI: Adjust private release and release promotion workflows, [#9769], @pioardi
• Dependabot-automated: Update mlrun-pipelines-kfp-common requirement from ~=0.7.0 to ~=0.7.1, [#9834], @dependabot[bot]
• Docs: Add alerts cooldown period feature, [#9739], @jillnogold
• Requirements-automated: Upgrade lock files, [#9811], @mlrun-cicd[bot]
• Serving: Add http method injection to include_url_info, [#9825], @tomerm-iguazio
• Projects: Validate project text field lengths before db write, [#9803], @moranbental
• Requirements: Bump snowflake-connector-python to ~=4.6, [#9822], @royischoss
• Tests: Respect lock files when building test docker images, [#9815], @gtopper
• Model Monitoring: Remove deprecated fetch_credentials_from_sys_config param, [#9817], @alxtkr77
• Notifications: Test webhook verify_ssl via ut, [#9813], @liranbg
• Builder: Route gs/gcs sources through fetch-source init container, [#9809], @liranbg
• Deprecations: Remove 1.12.0-targeted deprecated apis (data-flows), [#9781], @alxtkr77
• Nuclio: Add optional timeout to wait_for_deployment(), [#9806], @gtopper
• Coverage: Changed coverage mounting point, [#9776], @tomerm-iguazio
• Runs: Return empty list when listing cross-project runs for users with no projects, [#9804], @Yacouby
• CI: Add missing system-tests branch list seed file, [#9808], @Yacouby
• Auth: Treat signed jwts as bearers, not iguazio sessions, [#9802], @gtopper
• Client: Add credentials.extra_headers for per-client default headers, [#9801], @gtopper
• Nuclio: Split deploy submit/wait: deploy(wait=false) + wait_for_deployment(), [#9790], @gtopper
• Events: Remove fields when publishing orca events, [#9799], @weilerN
• Docs: Add codeartifact user documentation, [#9751], @alxtkr77
• K8s: Retry pod creation on transient admission-webhook dial failures, [#9792], @quaark
• Patch: Honor active docker cli context in patch_remote, [#9783], @assaf758
• Secrets: Limit token storage to a single token per user, [#9729], @daanvdk-mck
• Requirements-automated: Upgrade lock files, [#9782], @mlrun-cicd[bot]
• Builder: Fetch kaniko-incompatible archive sources via init-container, [#9787], @liranbg
• Serving: Return http 422 for missing mandatory body mapping fields, [#9772], @tomerm-iguazio
• Model Monitoring: Single otel metric name for results/metrics with name label, [#9786], @davesh0812
• Events: Emit mlrun.logcollector.failed system event, [#9750], @daanvdk-mck
• Dependabot-automated: Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.2.0, [#9763], @dependabot[bot]
• Dependabot-automated: Bump mxschmitt/action-tmate from 3.23 to 3.24, [#9764], @dependabot[bot]
• Dependabot-automated: Bump astral-sh/setup-uv from 8.1.0 to 8.2.0, [#9773], @dependabot[bot]
• Makefile: Enhance docker schema compilation with host user permissions, [#9771], @shay79il
• Deprecations: Remove ml-base warning and list_runs 'state' param, [#9768], @Yacouby
• Deprecations: Remove deprecated artifact_path & out_path, [#9767], @Yacouby
• Workflow: Skip running project_setup.py for remote workflows, [#9548], @daanvdk-mck
• Client: Isolate pipeline_context per client session, [#9761], @gtopper
• Tests: Prevent test_project.py from writing scratch files to the repo and modifying a checked in yaml file, [#9762], @gtopper
• Client: Bypass project.yaml when using new client api, [#9759], @gtopper
• Client: Add mlrun.client with per-instance httprundb and credentials, [#9743], @gtopper
• Requirements-automated: Upgrade lock files, [#9758], @mlrun-cicd[bot]
• Telemetry: Add inventory counters for functions, alerts, and workflows, [#9749], @jond01
• Telemetry: Add project counters export to open telemetry, [#9722], @jond01
• Requirements-automated: Upgrade lock files, [#9701], @mlrun-cicd[bot]
• API: Support configurable system id length and normalize uuid-based system ids, [#9732], @TomerShor
• Workflows: Remove unused has_workflow_url property, [#9728], @daanvdk-mck
• Tokens: Remove user id from another error, [#9727], @daanvdk-mck
• Serving: Add openai rest api chat completions and responses endpoints, [#9718], @tomerm-iguazio
• API: Forward custom s3 endpoint to nuclio for source-archive fetch, [#9721], @gtopper
• Dependabot-automated: Bump docker/login-action from 4.1.0 to 4.2.0, [#9723], @dependabot[bot]
• UI: Features & enhancement

Bug fixes

• DB: Fix partitioned list_runs order overriding sort=true contract [1.12.x], [#10055], @moranbental
• DB: Fix non-deterministic order in partitioned queries [1.12.x], [#10051], @moranbental
• Pagination: Fix pagination-cache conflict dropping model-monitoring batches [1.12.x], [#10033], @liranbg
• Pipelines: Fix kfp 400 on page 2 of filtered run listing (revert [#9885]) [1.12.x], [#10037], @liranbg
• Pagination: Fix 500 on list endpoints when page-size given without page [1.12.x], [#10014], @liranbg
• Jupyter: Shrink basehome.tar to fix slow cold start [1.12.x], [#9990], @liranbg
• Docs: Fix multiple small issues, [#9968], @jillnogold
• API: Fix db.connection.failed missing on chief-startup outage, [#9967], @liranbg
• Partitioning: Fix postgres partition overlap after missed rotation, [#9966], @liranbg
• Test: Fix subprocess stdout/stderr pipe deadlock in test_httpdb server fixture, [#9951], @liranbg
• Pagination: Fix event-loop deadlock in cache-record update, [#9946], @liranbg
• Datastore: Fix empty partitioned parquet read from stale listing cache, [#9929], @Eyal-Danieli
• Utils: Fix tar-slip path traversal in clone_tgz archive extraction, [#9919], @PhinehasNarh
• Iguazio: Fix duplicate "using token" log from sdk client, [#9913], @liranbg
• DB: Fix postgres unique-violation misclassified as fatal on store, [#9911], @liranbg
• DB: Fix aborted-run notifications never delivered on postgres, [#9910], @liranbg
• DB: Fix transient "function tag not found" on function store, [#9908], @liranbg
• DB: Fix postgres groupingerror on multi-label filter queries, [#9905], @liranbg
• DB: Fix postgres undefinedcolumn when listing artifacts, [#9904], @liranbg
• Model Monitoring: Fix stream dropping events whose request id is 0, [#9900], @alxtkr77
• Functions: Fix address not synced when updating api-gateway invocation url, [#9899], @rokatyy
• DB: Fix schedule cron_trigger corruption on postgresql, [#9901], @liranbg
• ML-12858: Fix get_previous_version to include rc tags for prerelease promotions, [#9896], @bar-shem-tov
• Projects: Fix load_project() overwriting the project owner, [#9886], @moranbental
• Nuclio: Fix missing s3endpoint when using auto_mount_params, [#9884], @liranbg
• System Tests: Fix enterprise pod-log collection via remote kubectl over ssh, [#9883], @shay79il
• DB: Fix postgres/mysql tz-aware vs tz-naive datetime crash, [#9889], @liranbg
• Pipelines: Fix _paginate_runs dropping filters on page 2+, [#9885], @liranbg
• DB: Fix mysql-only sql rejected by postgresql, [#9879], @liranbg
• CI: Generalize release-promotion inputs and fix rc releases marked as latest, [#9868], @bar-shem-tov
• Model Monitoring: Fix evaluate() skip_overlap raising on fully-processed window, [#9873], @davesh0812
• Workflows: Fix run_setup passed to pre-1.12 clients, [#9864], @daanvdk-mck
• Datastore: Bound azure put() upload concurrency (fix log_model oom), [#9867], @alxtkr77
• Auth: Fix connect() discarding explicit bearer-token credentials, [#9863], @alxtkr77
• Tests: Fix test_hub_get_asset_from_default_source by retrying transient hub requests, [#9843], @Eyal-Danieli
• CI: Fix smoke checkout under actions/checkout@v7 (pwn-request guard), [#9857], @assaf758
• CI: Fix smoke auto-trigger running before pr approval, [#9855], @assaf758
• Datastore: Fix oom on azure/gcs put with large in-memory body, [#9845], @alxtkr77
• Pipelines: Fix unscoped kfp run scan when project has no matching experiment, [#9824], @yaelgen
• Telemetry: Fix inventory job label and scope function kinds, [#9827], @jond01
• Nuclio: Fix application stuck "ready" after a failed deploy, [#9784], @alxtkr77
• Serving: Fix output body mapping skipped when path includes query string, [#9838], @tomerm-iguazio
• Projects: Fix deletion when user token expires during nuclio poll, [#9831], @yaelgen
• Datastore: Fix dataset size reported as 0/n-a for directory targets, [#9836], @alxtkr77
• Nuclio: Fix invoke scheme for nodeport external urls, [#9828], @elbamit
• Feature Store: Fix onlinevectorservice.close() raising cross-loop errors, [#9821], @gtopper
• Runs: Use covering indexes to fix slow monitor jobs query, [#9798], @daanvdk-mck
• CI: Fix release promotion failing on whitespace in version input, [#9816], @shay79il
• Model Monitoring: Fix controller deploy failing on existing kafka topic, [#9819], @alxtkr77
• Requirements: Re-lock pytest to 9.1.0, fix test that breaks, [#9818], @gtopper
• Tests: Fix test_purge_redis, [#9814], @gtopper
• Model Monitoring: Fix sample df silently provide empy df. modify mm-parquet target flush time., [#9812], @royischoss
• Project Summaries: Fix resource counters query under load, [#9794], @jond01
• Runtimes: Fix unclear error when running unsupported dask runtime on ig4, [#9807], @moranbental
• Model Monitoring: Fix connect model endpoint to function in deployment stage, [#9795], @royischoss
• Tests: Fix kfp remote workflow system tests by saving project after set_function, [#9800], @alxtkr77
• Code Artifacts: Fix body code artifacts by requiring local_path or target_path, [#9770], @alxtkr77
• Runtimes: Fix application shown as running during image build, [#9791], @Yacouby
• CI: Fix system-tests branch list lost on data node reboot, [#9796], @Yacouby
• Runtimes: Fix opaque 404 when submitting mpijob on ig4, [#9793], @moranbental
• Events: Fix create_project_secrets, [#9789], @liranbg
• K8s: Fix build log output returned as raw bytes, [#9785], @daanvdk-mck
• Artifacts: Fix codeartifact requirements arg validation, [#9724], @alxtkr77
• LogCollector: Fix fd leak causing race on project delete, [#9778], @liranbg
• Datastore: Fix azure identity-based artifact logging when account name is absent, [#9775], @quaark
• Model Monitoring: Fix stream url fetch error handling and sdk cache, [#9738], @royischoss
• Runtimes: Fix mpijob results not populated after completion, [#9757], @daanvdk-mck
• Datastore: Fix azure workload-identity credential routing, [#9766], @daanvdk-mck
• Model Monitoring: Fix monitoring_mode ignored in create_user_model_endpoint, [#9747], @Roy Schossberger
• Code Artifacts: Fix image=x + run(auto_build=true) skipping build (ml-12617), [#9733], @alxtkr77
• Runtimes: Fix project secret suppressed by auto-mount plain values, [#9740], @daanvdk-mck
• SDK: Fix httpsessionwithretry losing retry attrs on copy/pickle, [#9756], @daanvdk-mck
• Auth: fix opa propagation race on owner-facing project endpoints, [#9748], @Amit Elbaz
• Builder: Fix kaniko build pods missing workload-identity labels (ml-12670), [#9760], @quaark
• Serving: Add prefix parameter to set_openai_frontend() for /v1/ path support, [#9746], @tomerm-iguazio
• Model Monitoring: Fix drain sigkill by wrapping blocking i/o in run_in_threadpool, [#9734], @alxtkr77
• Docs: Fix pdf build by converting svg images to png, [#9741], @Katerina Molchanova
• Runtimes: Fix auto-mount overriding user-set aws env vars, [#9737], @daanvdk-mck
• Deps: Avoid bugged k8s version, [#9726], @daanvdk-mck
• Model Monitoring: Fix applicationruntime deploy forward track_models, [#9730], @Roy Schossberger
• Serving: Fix output mandatory field errors not returned as http 400, [#9731], @tomerm-iguazio
• UI: Bug fixes

Pull requests:

90d9cef28 [Jupyter] 1.12.x Remediate High CVEs in Jupyter image (#10053) (#10081) dc7745835 [DB] Fix partitioned list_runs order overriding sort=True contract [1.12.x] (#10055) 610f03d15 [DB] Fix non-deterministic order in partitioned queries [1.12.x] (#10051) cb93499d3 [Pagination] Fix pagination-cache conflict dropping model-monitoring batches [1.12.x] (#10033) ac1022225 [Pipelines] Fix KFP 400 on page 2 of filtered run listing (revert [#9885]) [1.12.x] (#10037) 865b5d006 [Requirements] Bump kfp to 1.8.24 to remedy protobuf CVE-2026-0994 [1.12.x] (#10026) b7debc19b [Dockerfiles] Migrate to dockerhub [1.12.x] (#10024) 3946a3961 [Log-collector] Bump vulnerable Go dependencies [1.12.x] (#10023) a0df7628e [Requirements-automated] Upgrade lock files [1.12.x] (#10022) 29f94d275 [Pagination] Fix 500 on list endpoints when page-size given without page [1.12.x] (#10014) 5be862c92 [Requirements-automated] Upgrade lock files [1.12.x] (#10002) 756223ebf [Jupyter] Shrink basehome.tar to fix slow cold start [1.12.x] (#9990) a654e4c43 [Docs] Fix multiple small issues (#9968) ab0a322e9 [Authorization] Enforce non-root pods on security-context enrichment (#9971) 6bf29866c [Dependabot-automated] Bump docker/login-action from 4.5.2 to 4.6.0 (#9969) 999915db5 [Dependabot-automated] Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#9970) acbb7e931 [Docs] Add OpenAI-compatible frontend (#9890) f8f71a338 [API] Fix DB.Connection.Failed missing on chief-startup outage (#9967) 0af73b04d [Partitioning] Fix Postgres partition overlap after missed rotation (#9966) b217186b8 [Requirements-automated] Upgrade lock files (#9954) c10edb282 [Dependabot-automated] Bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 (#9952) 8719ad721 [Dependabot-automated] Bump docker/login-action from 4.4.0 to 4.5.2 (#9959) baa9a6147 [Datastore] Support GCS Workload Identity for signed archive URLs (#9957) 38edb409c [Events] Emit audit events for project secret create/update/delete (#9955) f559da64e [Docs] Add CE OTel cfg (#9925) ab421707f [Docs] Add deprecations in v1.12.0 to change log (#9943) e7b30b838 [Docs] Add Install MLRun CE on Azure guide (#9926) 46f7044fd [DEVOPS-2054] [System Tests] Use ghcr proxy secret for enterprise registry (#9948) c3af51a8a [Test] Fix subprocess stdout/stderr pipe deadlock in test_httpdb server fixture (#9951) c98c1524b [Authorization] Rename OPA namespace resources → mlrun (#9941) 230e6b6e2 [Dependabot-automated] Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#9944) ea99cf1e2 [Pagination] Fix event-loop deadlock in cache-record update (#9946) a9a39d52b [Dependabot-automated] Bump actions/labeler from 6 to 7 (#9940) e3c1cf931 [Datastore] Fix empty partitioned parquet read from stale listing cache (#9929) 9b3c6c760 [Dependabot-automated] Bump actions/setup-python from 6 to 7 (#9938) c7d8b8317 [Dependabot-automated] Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#9939) 7581637d5 [Log collector] Always build with the latest Go patch version (#9936) 2ce61a569 [Requirements-automated] Upgrade lock files (#9935) b8ee40609 [Dependabot-automated] Bump actions/setup-go from 6 to 7 (#9928) 94bce9744 [Nuclio] Support gs:///gcs:// source archives for Nuclio deploys (#9927) 3d2fb309b [Docs] Add model monitoring support for application runtime and jobs (#9902) eca14e93b [Utils] Fix tar-slip path traversal in clone_tgz archive extraction (#9919) 0182c4daa [Dependabot-automated] Bump actions/setup-node from 6 to 7 (#9921) 6e78bf7d0 [Requirements] Upgrade aiosmtplib to 5.1 and paramiko to 5.0 (#9916) 8453e27cd [Requirements-automated] Upgrade lock files (#9912) e115ba01e [Iguazio] Fix duplicate "Using token" log from SDK client (#9913) b1f2a2a1b [DB] Fix Postgres unique-violation misclassified as fatal on store (#9911) fc503e965 [DB] Fix aborted-run notifications never delivered on Postgres (#9910) 4acccc604 [Dependabot-automated] Bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#9907) 86b07616f [DB] Fix transient "Function tag not found" on function store (#9908) 28326b57c [Spark] Disable executor service-account token automount (#9897) 7ab6aec59 [DB] Fix Postgres GroupingError on multi-label filter queries (#9905) e13e8abdf [Dependabot-automated] Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.2 (#9903) 888efa8c2 [DB] Fix Postgres UndefinedColumn when listing artifacts (#9904) 3acb1ae7e [Model Monitoring] Fix stream dropping events whose request id is 0 (#9900) 1ba16e969 [Functions] Fix address not synced when updating API-gateway invocation URL (#9899) 7a3b88460 [Patch] Support Postgres/StatefulSet mlrun-db in --reset-db (#9898) 44abd497b [DB] Fix schedule cron_trigger corruption on PostgreSQL (#9901) 0cc958d54 [ML-12858] Fix get_previous_version to include RC tags for prerelease promotions (#9896) f57868a47 [Docs] Improve structure (Returning custom HTTP responses) (#9880) df42339f6 [Dependabot-automated] Bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#9895) 019b70585 [Projects] Fix load_project() overwriting the project owner (#9886) 384ffe821 [Nuclio] Fix missing s3Endpoint when using auto_mount_params (#9884) ed678791f [Dependabot-automated] Bump docker/login-action from 4.2.0 to 4.4.0 (#9892) 851c322c1 [Dependabot-automated] Bump denoland/setup-deno from 2.0.4 to 2.0.5 (#9893) 71a0e0cd9 [Dependabot-automated] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#9894) 67017b519 [Dependabot-automated] Update mlrun-pipelines-kfp-v1-8 requirement from ~=0.7.2 to ~=0.7.3 (#9891) d296bfa83 [System Tests] Fix enterprise pod-log collection via remote kubectl over SSH (#9883) 8563b01a8 [Tests] Disable subprocess coverage in integration tests (#9878) a7c051780 [DB] Fix Postgres/MySQL tz-aware vs tz-naive datetime crash (#9889) b11feb9ad [Requirements-automated] Upgrade lock files (#9888) cbd21713a [Pipelines] Fix _paginate_runs dropping filters on page 2+ (#9885) 2977ae901 [DB] Fix MySQL-only SQL rejected by PostgreSQL (#9879) b12005c71 [CI] Generalize release-promotion inputs and fix RC releases marked as latest (#9868) 5687e18a5 [Docs] Document output_body_mappings and OpenAI-compatible frontend (#9872) 3a0ff8111 [Docs] Update git repo as hub (#9650) 12901b29f [Docs] Updates to artifacts doc (#9870) 2e9d4f806 [Requirements-automated] Upgrade lock files (#9853) 635b6e8b8 [Requirements] Make v3io-frames an optional extra (#9874) 0697e1d95 [Model Monitoring] Fix evaluate() skip_overlap raising on fully-processed window (#9873) 0f11b50d1 [Workflows] Fix run_setup passed to pre-1.12 clients (#9864) 81ec26f05 [Docs] Replace Guardrails for data management page (#9716) 44e563570 [Tests] Collect pod logs on test_serving_as_a_job failure (#9869) ad1896b91 [Datastore] Bound Azure put() upload concurrency (fix log_model OOM) (#9867) 755c3c427 [Serving] Apply output mapping + Response post-processing after await on async path (#9862) 120ff29a5 [Docs] Add MLRun counters integration with OpenTelemetry (#9805) decc102fe [Auth] Fix connect() discarding explicit bearer-token credentials (#9863) 0a357304d [Model Monitoring] Remove deprecated old-batch controller monitoring path (#9820) 99ec9181b [Tests] Fix test_hub_get_asset_from_default_source by retrying transient hub requests (#9843) 9277b4b45 [CI] Fix smoke checkout under actions/checkout@v7 (pwn-request guard) (#9857) 497c16a1c [Serving] Preserve handler Response status code; skip output mapping on non-2xx (ML-12706) (#9844) 902542f08 [Storey] bump storey to 1.12.4 (#9856) 3133b1b4c [CI] Fix smoke auto-trigger running before PR approval (#9855) ee0c240b0 [Tests] Add ML-12647 repro: include_url_info body delivery (#9846) b00bb74f6 [Datastore] Fix OOM on Azure/GCS put with large in-memory body (#9845) f0a5fa0a4 [Dependabot-automated] Bump actions/create-github-app-token from 2 to 3 (#9842) f60aab409 [Dependabot-automated] Bump actions/checkout from 6 to 7 (#9851) 9ec0d0a6c [Dependabot-automated] Bump actions/checkout from 6 to 7 in /.github/actions/image-matrix-prep (#9850) 25ec4ef48 [Dependabot-automated] Update mlrun-pipelines-kfp-v1-8 requirement from ~=0.7.1 to ~=0.7.2 (#9849) bee063976 [Requirements-automated] Upgrade lock files (#9847) 5666a2100 [Migrations] Add head-squash mode and squash v1.12 migrations (#9835) 9c0e22288 [Pipelines] Fix unscoped KFP run scan when project has no matching experiment (#9824) 2a75150a0 [Nuclio] Support az:// source archives for Nuclio deploys (#9837) 81b8ccd1b [Telemetry] Fix inventory job label and scope function kinds (#9827) e9371bbdf [Nuclio] Fix application stuck "ready" after a failed deploy (#9784) 2457ea089 Revert "[Tests] Respect lock files when building test docker images" (#9841) 084055cce [Serving] Fix output body mapping skipped when path includes query string (#9838) 59fd96576 [Projects] Fix deletion when user token expires during Nuclio poll (#9831) 8b6954877 [Serving] Decode URL-encoded mlrun_request_path (#9830) 3b852c80a [Datastore] Fix dataset size reported as 0/N-A for directory targets (#9836) 90de48501 [CI] Adjust private release and release promotion workflows (#9769) f4f3e4ef4 [Dependabot-automated] Update mlrun-pipelines-kfp-common requirement from ~=0.7.0 to ~=0.7.1 (#9834) 9cc724d47 [Nuclio] Fix invoke scheme for NodePort external URLs (#9828) 58e3931e9 [Feature Store] Fix OnlineVectorService.close() raising cross-loop errors (#9821) d80e4e5c4 [Runs] Use covering indexes to fix slow Monitor Jobs query (#9798) 3695c1db5 [Docs] Add alerts cooldown period feature (#9739) 394c0584a [Requirements-automated] Upgrade lock files (#9811) 669a1b706 [Serving] Add HTTP method injection to include_url_info (#9825) 67e0f2180 [Projects] Validate project text field lengths before DB write (#9803) d7ed2602f [Requirements] Bump snowflake-connector-python to ~=4.6 (#9822) 5d8bdc5ec [CI] Fix release promotion failing on whitespace in version input (#9816) b6758515c [Model Monitoring] Fix controller deploy failing on existing Kafka topic (#9819) 2e546bdf5 [Requirements] Re-lock pytest to 9.1.0, fix test that breaks (#9818) bf3b5026d [Tests] Respect lock files when building test docker images (#9815) db72f9e2b [Model Monitoring] Remove deprecated fetch_credentials_from_sys_config param (#9817) cfac14d8e [Notifications] Test webhook verify_ssl via ut (#9813) 1001009e3 [Builder] Route gs/gcs sources through fetch-source init container (#9809) cec95488f [Deprecations] Remove 1.12.0-targeted deprecated APIs (data-flows) (#9781) f8f971ee2 [Tests] Fix test_purge_redis (#9814) 7667746d2 [Model Monitoring] Fix sample df silently provide empy df. modify mm-parquet target flush time. (#9812) 4ef1f73cd [Nuclio] Add optional timeout to wait_for_deployment() (#9806) fb9e9b0c8 [Coverage] Changed coverage mounting point (#9776) 0cac732d7 [Project Summaries] Fix resource counters query under load (#9794) 0cee6248e [Runs] Return empty list when listing cross-project runs for users with no projects (#9804) 0acc21518 [Runtimes] Fix unclear error when running unsupported Dask runtime on IG4 (#9807) 58e13c76a [CI] Add missing system-tests branch list seed file (#9808) 5f85cd2a9 [Auth] Treat signed JWTs as bearers, not Iguazio sessions (#9802) f4c61cbf6 [Model Monitoring] Fix connect model endpoint to function in deployment stage (#9795) 2275e8ad2 [Client] Add Credentials.extra_headers for per-client default headers (#9801) e7e93ca47 [Nuclio] Split deploy submit/wait: deploy(wait=False) + wait_for_deployment() (#9790) 85c30debb [Events] Remove fields when publishing orca events (#9799) 107d79d20 [Tests] Fix kfp remote workflow system tests by saving project after set_function (#9800) bc13121e5 [Code Artifacts] Fix body code artifacts by requiring local_path or target_path (#9770) 3f2a67fac [Docs] Add CodeArtifact user documentation (#9751) 262eef140 [K8s] Retry pod creation on transient admission-webhook dial failures (#9792) 69a6dff95 [Patch] Honor active Docker CLI context in patch_remote (#9783) 4e5ca4d8e [Secrets] Limit token storage to a single token per user (#9729) 8f4005a4c [Requirements-automated] Upgrade lock files (#9782) 55e3540fd [Builder] Fetch kaniko-incompatible archive sources via init-container (#9787) a7a7a1a93 [Runtimes] Fix application shown as running during image build (#9791) 0c3b180f9 [CI] Fix system-tests branch list lost on data node reboot (#9796) 9a6335452 [Runtimes] Fix opaque 404 when submitting MPIJob on IG4 (#9793) 5e18050a0 [Serving] Return HTTP 422 for missing mandatory body mapping fields (#9772) 6f0d283db [Events] Fix create_project_secrets (#9789) b551d27c0 [Model Monitoring] Single OTel metric name for results/metrics with name label (#9786) 022a5b83a [K8s] Fix build log output returned as raw bytes (#9785) c4b06d1b3 [Artifacts] Fix CodeArtifact requirements arg validation (#9724) 3bd6e68a9 [LogCollector] Fix FD leak causing race on project delete (#9778) 3a0f8a35b [Events] Emit MLRun.LogCollector.Failed system event (#9750) 0c4dceac0 [Dependabot-automated] Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.2.0 (#9763) cd43f9e73 [Dependabot-automated] Bump mxschmitt/action-tmate from 3.23 to 3.24 (#9764) 35f0ca6c2 [Dependabot-automated] Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#9773) 63ded67df [Datastore] Fix Azure identity-based artifact logging when account name is absent (#9775) dabe2ff4a [Makefile] Enhance Docker schema compilation with host user permissions (#9771) b3095c8ff [Model Monitoring] Fix stream URL fetch error handling and SDK cache (#9738) 4969e6f8e [Deprecations] Remove ml-base warning and list_runs 'state' param (#9768) 3542af01b [Deprecations] Remove deprecated artifact_path & out_path (#9767) 450871f50 [Workflow] Skip running project_setup.py for remote workflows (#9548) 58b22c16d [Runtimes] Fix mpijob results not populated after completion (#9757) 33cf0db8c [Datastore] Fix Azure workload-identity credential routing (#9766) 945e620b0 [Model Monitoring] Fix monitoring_mode ignored in create_user_model_endpoint (#9747) b83d6ed71 [Code Artifacts] Fix image=X + run(auto_build=True) skipping build (ML-12617) (#9733) ec8556283 [Runtimes] Fix project secret suppressed by auto-mount plain values (#9740) 66efef49b [SDK] Fix HTTPSessionWithRetry losing retry attrs on copy/pickle (#9756) 33bf6db8f [Client] Isolate pipeline_context per Client session (#9761) c3568f136 [Tests] Prevent test_project.py from writing scratch files to the repo and modifying a checked in yaml file (#9762) e04831875 [Client] Bypass project.yaml when using new Client API (#9759) f666fdf72 [Auth] Fix OPA propagation race on owner-facing project endpoints (#9748) 79591226d [Builder] Fix kaniko build pods missing workload-identity labels (ML-12670) (#9760) e68aad98e [Client] Add mlrun.Client with per-instance HTTPRunDB and credentials (#9743) 88ed43f94 [Serving] Add prefix parameter to set_openai_frontend() for /v1/ path support (#9746) 8a0f72c75 [Requirements-automated] Upgrade lock files (#9758) c5b73c470 [Model Monitoring] Fix drain SIGKILL by wrapping blocking I/O in run_in_threadpool (#9734) 81d47752d [Telemetry] Add inventory counters for functions, alerts, and workflows (#9749) 203bb5eeb [Docs] Fix PDF build by converting SVG images to PNG (#9741) 3ba93f058 [Telemetry] Add project counters export to Open Telemetry (#9722) 7bdf85d1d [Runtimes] Fix auto-mount overriding user-set AWS env vars (#9737) 6092d265b [Requirements-automated] Upgrade lock files (#9701) fee7b7143 [API] Support configurable system ID length and normalize UUID-based system IDs (#9732) f48fdae39 [Workflows] Remove unused has_workflow_url property (#9728) 7a9bd3196 [Deps] Avoid bugged k8s version (#9726) 140411e97 [Model Monitoring] Fix ApplicationRuntime deploy forward track_models (#9730) 59bc132ad [Serving] Fix output mandatory field errors not returned as HTTP 400 (#9731) e10435ff9 [Tokens] Remove user id from another error (#9727) 40c810fbe [Serving] Add OpenAI rest api chat completions and responses endpoints (#9718) e9a551427 [API] Forward custom S3 endpoint to Nuclio for source-archive fetch (#9721) ab66195df [Dependabot-automated] Bump docker/login-action from 4.1.0 to 4.2.0 (#9723)