build(deps-dev): bump the ml-stack group with 4 updates by dependabot[bot] · Pull Request #95 · danielededo/cashato

dependabot · 2026-10-26T10:37:32Z

Bumps the ml-stack group with 4 updates: scikit-learn, joblib, mlflow and sentence-transformers.

Updates scikit-learn from 1.6.0 to 1.9.1

Release notes

Scikit-learn 1.9.1

We're happy to announce the 1.9.1 release.

This release contains a few bug fixes and is the first version supporting Python 3.15.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.9.html#version-1-9-1

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn
Thanks to everyone who contributed to this release !

Scikit-learn 1.9.0

We're happy to announce the 1.9.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.9.html

This release adds narwhals as a new dependency that will help to improve dataframe interoperability across the project.

This version supports Python versions 3.11 to 3.14.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn
Release 1.8.0

We're happy to announce the 1.8.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_8_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.8.html

This version supports Python versions 3.11 to 3.14 and features support of free-threaded CPython.

You can upgrade with pip as usual:

... (truncated)

Commits

866c0f5 generate changelog
12f135f update upper bounds
43ff2f2 bump version
b851524 DOC Mark dev index as orphan (#34916)
01d56d4 DOC Fix wikipedia principal eigenvector example references (#34915)
b86a1e2 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
d282698 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#34897)
eb34279 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
7581303 FIX: Fix QuantileTransformer(ignore_implicit_zeros=True) sub-sampling behav...
ac47f4d FIX: avoid EfficiencyWarning in OPTICS with metric='precomputed' (#34692)
Additional commits viewable in compare view

Updates joblib from 1.4.2 to 1.6.0

Changelog

Sourced from joblib's changelog.

Release 1.6.0 - 2026/08/31

Fix caching of functions whose source cannot be retrieved, such as functions defined in a notebook cell. Their identity fell back to str(hash(func.__code__)), which is salted by PYTHONHASHSEED and so differed between processes. A worker reading the func_code.py written by another one concluded that the function had changed and wiped the whole cache directory for it, discarding results computed by its peers. func_code.py is also no longer rewritten in place, so a reader can no longer catch it half-written and draw the same conclusion. joblib/joblib#1694

Drop python 3.9 support. The oldest supported Python version is now Python 3.10. joblib/joblib#1773

Fix eval_expr (used to evaluate the pre_dispatch argument of Parallel) to raise a ValueError as documented instead of leaking a ZeroDivisionError for expressions that divide or take a modulo by zero. joblib/joblib#1810

MemorizedResult now forwards mmap_mode to its store backend, so a cached array reconstructed from a location is memory-mapped as requested instead of being loaded fully into memory. joblib/joblib#1799

Unvendor cloudpickle to more quickly benefit from maintenance releases of cloudpickle joblib/joblib#1775

Fix Memory.cache for functions with a keyword-only argument that has a default declared before a keyword-only argument without a default. joblib/joblib#1731

Fix behavior of filter_args on some precise cases. joblib/joblib#1800

Fix a concurrency error that could happen with unordered generator. joblib/joblib#1789

Fix: dump() now accepts any input os.PathLike object to be consistent with load. joblib/joblib#1812

The documentation now uses pydata sphinx theme. Furthermore, optional dependencies test and docs have been added to pyproject.toml. joblib/joblib#1774

Vendor loky 3.6.0

... (truncated)

Commits

cd9a6b0 Release 1.6.0 (#1844)
d873f97 MNT vendor loky 3.6.0 (#1843)
4ff61af Bump the github-actions group with 4 updates (#1832)
804f472 FIX make func_code stable across processes when the source is unavailable (#1...
65cc49d TST Restore RNG sequence in hash compatibility test (#1837)
c1b6541 CI Use pytest-run-parallel on free-threaded build (#1819)
f6b80d3 MNT Simplify isinstance check in hashing (#1835)
fa4d5af MNT remove python 3.9 from CI (#1773)
53cea7b DOC Update release docs to reflect usage of trusted publishing (#1826)
26500e9 Bump the github-actions group across 1 directory with 3 updates (#1790)
Additional commits viewable in compare view

Updates mlflow from 2.19.0 to 3.17.2

Release notes

Sourced from mlflow's releases.

MLflow 3.17.2 is a patch release that contains a minor feature enhancement and bug fixes.

Features:

[Evaluation] Record dataset, scorer, and agent lineage on mlflow.genai.evaluate runs (#26543, @joshuawong-db)

Bug fixes:

[Tracking] Reseed sampler and forward batch settings on MlflowSparkStudy executors (#26714, @iyashk)

[Tracking] Fix MlflowStorage marking Optuna trials finished before their values are saved (#26713, @iyashk)

MLflow 3.17.1 is a patch release that contains some minor feature enhancements, bug fixes, and documentation updates.

Features:

[Docs / Evaluation] Support Decision API in make_judge() (#26578, @B-Step62)

[Evaluation] Add mlflow.genai.databricks.review_queues for managing review queues on Databricks (#26414, @harupy)

Bug fixes:

[Tracing] Fix Claude Code OTel trace rendering in the MLflow UI (#26547, @joshuawong-db)

[Evaluation] Load latest Databricks scorers from the scheduled-scorers REST config so feedback records the scorer version (#26542, @joshuawong-db)

Small bug fixes and documentation updates:

#26680, @joshuawong-db; #26584, @copilot-swe-agent; #26705, @kriscon-db

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Jev Decisions Across Evaluation, Gateway, and Tracing: Use TypeSafe models in built-in scorers and custom judges with typed Boolean or categorical feedback. (#26100, @B-Step62)

Fine-Grained Permissions for Shared Resources: Control access to contained resource types, including runs, traces, and versions, with wildcard grants and explicit DENY. (#26157, @rrrkharse)

Faster Analytics for Large Trace Datasets: Reduce SQL analytics query overhead with opt-in daily summaries and raw-query fallback. (#25991, @HumairAK)

Clearer Evaluation Results: Associate aggregate logged-model evaluation metrics with the managed dataset that produced them. (#25927, @joshuawong-db)

Assistant Improvements for Shared Servers: Keep saved conversations scoped to the signed-in user and reset the active session when accounts change. (#26009, @kriscon-db)

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

[Tracing / UI] Add rich rendering for TypeSafe System One traces (#26276, @B-Step62)

[Build] Show issue-triage progress in a GitHub issue comment (#26454, @copilot-swe-agent)

[Docs / Evaluation] Allow custom base_url for direct TypeSafe judges (#26445, @B-Step62)

[Docs / Gateway] Allow custom typesafe_api_base for TypeSafe Gateway endpoints (#26442, @B-Step62)

[Evaluation / Tracking] Support name IN (...) filters for evaluation-dataset search (#26374, @HumairAK)

[Docs / Evaluation / Gateway / UI] Support TypeSafe and OpenRouter Jev judges through Gateway System One (#26243, @joshuawong-db)

[Build / Docs / Tracing / Tracking] Add @mlflow/typesafe tracing integration for TypeSafe AI (#26342, @B-Step62)

[Build / Docs] Publish Helm charts after stable release images (#26064, @joshuawong-db)

[Tracing / UI] Add TraceImage to custom trace views (#26297, @chris-chieu)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.17.2 (2026-10-20)

MLflow 3.17.2 is a patch release that contains a minor feature enhancement and bug fixes.

Features:

[Evaluation] Record dataset, scorer, and agent lineage on mlflow.genai.evaluate runs (#26543, @joshuawong-db)

Bug fixes:

[Tracking] Reseed sampler and forward batch settings on MlflowSparkStudy executors (#26714, @iyashk)

[Tracking] Fix MlflowStorage marking Optuna trials finished before their values are saved (#26713, @iyashk)

3.17.1 (2026-10-13)

MLflow 3.17.1 is a patch release that contains some minor feature enhancements, bug fixes, and documentation updates.

Features:

[Docs / Evaluation] Support Decision API in make_judge() (#26578, @B-Step62)

[Evaluation] Add mlflow.genai.databricks.review_queues for managing review queues on Databricks (#26414, @harupy)

Bug fixes:

[Tracing] Fix Claude Code OTel trace rendering in the MLflow UI (#26547, @joshuawong-db)

[Evaluation] Load latest Databricks scorers from the scheduled-scorers REST config so feedback records the scorer version (#26542, @joshuawong-db)

Small bug fixes and documentation updates:

#26680, @joshuawong-db; #26584, @copilot-swe-agent; #26705, @kriscon-db

3.17.0 (2026-10-06)

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Jev Decisions Across Evaluation, Gateway, and Tracing: Use TypeSafe models in built-in scorers and custom judges with typed Boolean or categorical feedback. (#26100, @B-Step62)

Fine-Grained Permissions for Shared Resources: Control access to contained resource types, including runs, traces, and versions, with wildcard grants and explicit DENY. (#26157, @rrrkharse)

Faster Analytics for Large Trace Datasets: Reduce SQL analytics query overhead with opt-in daily summaries and raw-query fallback. (#25991, @HumairAK)

Clearer Evaluation Results: Associate aggregate logged-model evaluation metrics with the managed dataset that produced them. (#25927, @joshuawong-db)

Assistant Improvements for Shared Servers: Keep saved conversations scoped to the signed-in user and reset the active session when accounts change. (#26009, @kriscon-db)

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

[Tracing / UI] Add rich rendering for TypeSafe System One traces (#26276, @B-Step62)

[Build] Show issue-triage progress in a GitHub issue comment (#26454, @copilot-swe-agent)

[Docs / Evaluation] Allow custom base_url for direct TypeSafe judges (#26445, @B-Step62)

... (truncated)

Commits

d0b397f Reseed sampler and forward batch settings on MlflowSparkStudy executors (#2...
b58d40d Fix MlflowStorage marking Optuna trials finished before their values are sa...
3be0c9d Record dataset, scorer, and agent lineage on mlflow.genai.evaluate runs (#2...
eaf7df1 Bump version to 3.17.2 (#26911)
7fc49ae Cherry-picks for v3.17.1 (#26706)
47335e1 Bump version to 3.17.1 (#26705)
6dd94c6 Bump version to 3.17.0 (#26464)
83764b3 Update ML package versions for 3.17.0 (#26458)
40cea47 Replace triage’s nginx gateway proxy with an in-memory Node proxy (#26457)
b56ead6 Include skills submodule in wheel builds (#26456)
Additional commits viewable in compare view

Updates sentence-transformers from 3.3.1 to 6.2.0

Release notes

Sourced from sentence-transformers's releases.

v6.2.0 - Model merging, faster loading, and distributed evaluation

This release adds model merging for all four model types, reduces redundant Hub requests when loading models, and distributes evaluator inference across DDP ranks. It also includes lower-memory training losses, more flexible multi-vector compression, and fixes throughout inference, training, and evaluation.

Install this version with
# Inference only, use one of:
pip install sentence-transformers==6.2.0
pip install sentence-transformers[openvino]==6.2.0
Multimodal dependencies (optional):
pip install sentence-transformers[image]==6.2.0
pip install sentence-transformers[audio]==6.2.0
pip install sentence-transformers[video]==6.2.0
Training + Inference
pip install sentence-transformers[train]==6.2.0
pip install sentence-transformers[merge]==6.2.0
Or combine as needed:
pip install sentence-transformers[train,image]==6.2.0
Model merging for all four model types (#3776)

Combine compatible fine-tuned checkpoints without another training run using SentenceTransformer.merge, SparseEncoder.merge, CrossEncoder.merge, or MultiVectorEncoder.merge. The integration uses Arcee AI's mergekit and supports well over a dozen methods such as Linear, SLERP, TIES, and DARE.

Install the merge extra with pip install "sentence-transformers[merge]". For example, take a weighted average of two compatible MiniLM models:
from sentence_transformers import SentenceTransformer
models = [
"sentence-transformers/all-MiniLM-L6-v2",
"sentence-transformers/multi-qa-MiniLM-L6-cos-v1",
]
merged = SentenceTransformer.merge(
models,
method="linear",
parameters={"weight": [0.6, 0.4]},
)
merged.save_pretrained("merged-MiniLM-L6")
embeddings = merged.encode(["Combining compatible model weights."])
Or interpolate between the same inputs with SLERP:
</tr></table> 

... (truncated)

Commits

0b6937d Release v6.2.0
45682ed Update documentation announcement for v6.2 (#4243)
aed573b Forward gradient checkpointing options to Transformers (#4241)
c7adf47 Skip bfloat16 transformer head tests on affected Windows runners (#4242)
1b4b624 Fix blank rows in CrossEncoder and RRF evaluator CSVs on Windows (#4077)
ea5435c Treat a string positive or negative as one document in RerankingEvaluator (#4...
3a5232b Follow only duplicate pairs in the paraphrase mining transitive closure (#4120)
7d64d3b Keep the RRF fusion order the same from run to run (#4067)
67f11a3 Evaluate the main similarity function in TripletEvaluator (#4088)
fd6b188 Accept a string main_score_function in NanoBEIREvaluator (#4034)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ml-stack group with 4 updates: [scikit-learn](https://github.com/scikit-learn/scikit-learn), [joblib](https://github.com/joblib/joblib), [mlflow](https://github.com/mlflow/mlflow) and [sentence-transformers](https://github.com/huggingface/sentence-transformers). Updates `scikit-learn` from 1.6.0 to 1.9.1 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](scikit-learn/scikit-learn@1.6.0...1.9.1) Updates `joblib` from 1.4.2 to 1.6.0 - [Release notes](https://github.com/joblib/joblib/releases) - [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst) - [Commits](joblib/joblib@1.4.2...1.6.0) Updates `mlflow` from 2.19.0 to 3.17.2 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v2.19.0...v3.17.2) Updates `sentence-transformers` from 3.3.1 to 6.2.0 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](huggingface/sentence-transformers@v3.3.1...v6.2.0) --- updated-dependencies: - dependency-name: scikit-learn dependency-version: 1.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ml-stack - dependency-name: joblib dependency-version: 1.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ml-stack - dependency-name: mlflow dependency-version: 3.17.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: ml-stack - dependency-name: sentence-transformers dependency-version: 6.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: ml-stack ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 26, 2026

danielededo closed this Oct 26, 2026

danielededo deleted the dependabot/pip/ml-stack-d6be99354a branch October 26, 2026 16:19

Navigation Menu

Repository navigation

build(deps-dev): bump the ml-stack group with 4 updates - #95

build(deps-dev): bump the ml-stack group with 4 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ml-stack-d6be99354a

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

Scikit-learn 1.9.1

Scikit-learn 1.9.0

Release 1.8.0

Release 1.6.0 - 2026/08/31

Major New Features

Other Assorted Features & Improvements:

3.17.2 (2026-10-20)

3.17.1 (2026-10-13)

3.17.0 (2026-10-06)

Major New Features

Other Assorted Features & Improvements:

v6.2.0 - Model merging, faster loading, and distributed evaluation

Model merging for all four model types (#3776)

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant