Skip to content

Updated mlflow to 3.11.1 for features + security#185

Merged
mikewoodward94 merged 9 commits into
mainfrom
feature-184/dependabot-security-updates
Jun 4, 2026
Merged

Updated mlflow to 3.11.1 for features + security#185
mikewoodward94 merged 9 commits into
mainfrom
feature-184/dependabot-security-updates

Conversation

@mikaelsimard5

@mikaelsimard5 mikaelsimard5 commented Jun 1, 2026

Copy link
Copy Markdown
Collaborator

This necessitates python3.10 so python versions in docker containers have also been updated to 3.10.

  • also requests to 2.33 and torch to 2.8 in unit testing.

Also bumped version to 0.10.1 to reflect this major mlflow update.

I verified that this works on MLOps-tutorial (will also do a PR on that repo so it works with the latest version of csc-mlops).

+ also requests to 2.33 and torch to 2.8 in unit testing.

Also bumped version to 0.10.1 to reflect this major mlflow update.
@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown

Coverage

Coverage Report
FileStmtsMissCoverMissing
mlops
   Experiment.py1754177%24, 54–59, 83, 88–89, 110, 112, 117, 173–184, 207–221, 240, 242–243, 291–292, 296–300, 304–305, 312–313
   ProjectFile.py23196%41
   cli.py551769%19–22, 36, 59–66, 86–88, 96–99, 107–108, 113
mlops/release
   Release.py33779%24, 28, 33–38
mlops/release/destinations
   ReleaseDestination.py9189%18
   SharepointDestination.py6267%12–13
   ZenodoDestination.py331942%21–25, 29–35, 43–60
mlops/release/sources
   MLFlowSource.py13654%13–14, 21–27
   ReleaseSource.py14286%14, 23
mlops/utils
   Config.py17170%1–24
TOTAL41511373% 

Tests Skipped Failures Errors Time
17 0 💤 0 ❌ 0 🔥 6m 44s ⏱️

@mikewoodward94 mikewoodward94 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One very minor comment!

Comment thread setup.cfg Outdated
[options]
packages = find:
python_requires = <3.12
python_requires = >=3.10,<3.12

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason to restrict to just versions 3.10 and 3.11?

@mikewoodward94

Copy link
Copy Markdown
Collaborator

As discussed, there are numerous packages within setup.cfg that aren't actually necessary for csc-mlops. Could these be removed as part of this security push?

@mikaelsimard5

Copy link
Copy Markdown
Collaborator Author

Removed packages unnecessary for csc-mlops via commit #a5a301f8c8eae1b935fb0a6de5e1b802164a304c.

We used torch before to query if cuda exists - replaced with subprocess running nvidia-smi.

@mikewoodward94 mikewoodward94 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mikewoodward94 mikewoodward94 merged commit 3d997e0 into main Jun 4, 2026
2 checks passed
@mikewoodward94 mikewoodward94 deleted the feature-184/dependabot-security-updates branch June 4, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants