Update mlflow requirement from <2.5.0,>=2.4.1 to >=2.4.1,<2.6.0

[dependabot]

Updates the requirements on mlflow to permit the latest version.

Release notes

Sourced from mlflow's releases.

MLflow 2.5.0 includes several major features and improvements:

• [MLflow AI Gateway] We are excited to announce the release of MLflow AI Gateway, a powerful tool designed to streamline the usage and management of various large language model (LLM) providers, such as OpenAI and Anthropic, within an organization. It offers a standardized interface that simplifies the interaction with these services and delivers centralized, secure management of credentials. To get started with MLflow AI Gateway, check out the docs at https://mlflow.org/docs/latest/gateway/index.html. (#8694, @​harupy, @​BenWilson2, @​dbczumar)
• [Auth] We are excited to announce the release of authentication and authorization support for MLflow Tracking and the MLflow Model Registry, providing integrated access control capabilities to both services. To get started, check out the docs at https://mlflow.org/docs/latest/auth/index.html. (#9000, #8975, #8626, #8837, #8841, @​gabrielfu, @​harupy)

Features:

• [Models] Add Support to the LangChain flavor for chains that contain unserializable components (#8736, @​liangz1)
• [Scoring] Infer spark udf return type from model output schema (#8934, @​WeichenXu123)
• [Models] Add support for automated signature inference (#8860, #8782 #8795, #8725, @​jerrylian-db)

Bug fixes:

• [Security] Improve robustness to LFI attacks on Windows by enhancing path validation (#8999, @​serena-ruan)
  • If you are using mlflow server or mlflow ui on Windows, we recommend upgrading to MLflow 2.5.0 as soon as possible.
• [Scoring] Support nullable array type values as spark_udf return values (#9014, @​WeichenXu123)
• [Models] Revert cache deletion of system modules when adding custom model code to the system path (#8722, @​trungn1)
• [Models] add micro version to mlflow version pinning (#8687, @​C-K-Loan)
• [Artifacts] Prevent manually deleted artifacts from causing artifact garbage collection to fail (#8498, @​PenHsuanWang)

Documentation updates:

• [Docs] Update .push_model_to_sagemaker docs (#8851, @​pdifranc)
• [Docs] Fix invalid link for Azure ML documentation (#8800, @​dunnkers)
• [Artifacts / Docs / Models / Projects] Adds information on the OCI MLflow plugins for seamless integration with Oralce Cloud Infrastructure services. (#8707, @​mrDzurb)

Deprecation:

• [Models] Deprecate the gluon model flavor. The mlflow.gluon module will be removed in a future release. (#8968, @​harupy)

Small bug fixes and documentation updates:

#9069, #9056, #9055, #9054, #9048, #9043, #9035, #9034, #9037, #9038, #8993, #8966, #8985, @​BenWilson2; #9039, #9036, #8902, #8924, #8866, #8861, #8810, #8761, #8544, @​jerrylian-db; #8903, @​smurching; #9080, #9079, #9078, #9076, #9075, #9074, #9071, #9063, #9062, #9032, #9031, #9027, #9023, #9022, #9020, #9005, #8994, #8979, #8983, #8984, #8982, #8970, #8962, #8969, #8968, #8959, #8960, #8958, #8956, #8955, #8954, #8949, #8950, #8952, #8948, #8946, #8947, #8943, #8944, #8916, #8917, #8933, #8929, #8932, #8927, #8930, #8925, #8921, #8873, #8915, #8909, #8908, #8911, #8910, #8907, #8906, #8898, #8893, #8889, #8892, #8891, #8887, #8875, #8876, #8882, #8874, #8868, #8872, #8869, #8828, #8852, #8857, #8853, #8854, #8848, #8850, #8840, #8835, #8832, #8831, #8830, #8829, #8839, #8833, #8838, #8819, #8814, #8825, #8818, #8787, #8775, #8749, #8766, #8756, #8753, #8751, #8748, #8744, #8731, #8717, #8730, #8691, #8720, #8723, #8719, #8688, #8721, #8715, #8716, #8718, #8696, #8698, #8692, #8693, #8690, @​harupy; #9030, @​AlimurtuzaCodes; #9029, #9025, #9021, #9013, @​viktoriussuwandi; #9010, @​Bncer; #9011, @​Pecunia201; #9007, #9003, @​EdAbati; #9002, @​prithvikannan; #8991, #8867, @​AveshCSingh; #8951, #8896, #8888, #8849, @​gabrielfu; #8913, #8885, #8871, #8870, #8788, #8772, #8771, @​serena-ruan; #8879, @​maciejskorski; #7752, @​arunkumarkota; #9083, #9081, #8765, #8742, #8685, #8682, #8683, @​dbczumar; #8791, @​mhattingpete; #8739, @​yunpark93

Changelog

Sourced from mlflow's changelog.

2.5.0 (2023-07-17)

MLflow 2.5.0 includes several major features and improvements:

• [MLflow AI Gateway] We are excited to announce the release of MLflow AI Gateway, a powerful tool designed to streamline the usage and management of various large language model (LLM) providers, such as OpenAI and Anthropic, within an organization. It offers a standardized interface that simplifies the interaction with these services and delivers centralized, secure management of credentials. To get started with MLflow AI Gateway, check out the docs at https://mlflow.org/docs/latest/gateway/index.html. (#8694, @​harupy, @​BenWilson2, @​dbczumar)
• [Auth]: We are excited to announce the release of authentication and authorization support for MLflow Tracking and the MLflow Model Registry, providing integrated access control capabilities to both services. To get started, check out the docs at https://mlflow.org/docs/latest/auth/index.html. (#9000, #8975, #8626, #8837, #8841, @​gabrielfu, @​harupy)

Features:

• [Models] Add Support to the LangChain flavor for chains that contain unserializable components (#8736, @​liangz1)
• [Scoring] Infer spark udf return type from model output schema (#8934, @​WeichenXu123)
• [Models] Add support for automated signature inference (#8860, #8782 #8795, #8725, @​jerrylian-db)

Bug fixes:

• [Security] Improve robustness to LFI attacks on Windows by enhancing path validation (#8999, @​serena-ruan)
  • If you are using mlflow server or mlflow ui on Windows, we recommend upgrading to MLflow 2.5.0 as soon as possible.
• [Scoring] Support nullable array type values as spark_udf return values (#9014, @​WeichenXu123)
• [Models] Revert cache deletion of system modules when adding custom model code to the system path (#8722, @​trungn1)
• [Models] add micro version to mlflow version pinning (#8687, @​C-K-Loan)
• [Artifacts] Prevent manually deleted artifacts from causing artifact garbage collection to fail (#8498, @​PenHsuanWang)

Documentation updates:

• [Docs] Update .push_model_to_sagemaker docs (#8851, @​pdifranc)
• [Docs] Fix invalid link for Azure ML documentation (#8800, @​dunnkers)
• [Artifacts / Docs / Models / Projects] Adds information on the OCI MLflow plugins for seamless integration with Oralce Cloud Infrastructure services. (#8707, @​mrDzurb)

Deprecation:

• [Models] Deprecate the gluon model flavor. The mlflow.gluon module will be removed in a future release. (#8968, @​harupy)

Small bug fixes and documentation updates:

#9069, #9056, #9055, #9054, #9048, #9043, #9035, #9034, #9037, #9038, #8993, #8966, #8985, @​BenWilson2; #9039, #9036, #8902, #8924, #8866, #8861, #8810, #8761, #8544, @​jerrylian-db; #8903, @​smurching; #9080, #9079, #9078, #9076, #9075, #9074, #9071, #9063, #9062, #9032, #9031, #9027, #9023, #9022, #9020, #9005, #8994, #8979, #8983, #8984, #8982, #8970, #8962, #8969, #8968, #8959, #8960, #8958, #8956, #8955, #8954, #8949, #8950, #8952, #8948, #8946, #8947, #8943, #8944, #8916, #8917, #8933, #8929, #8932, #8927, #8930, #8925, #8921, #8873, #8915, #8909, #8908, #8911, #8910, #8907, #8906, #8898, #8893, #8889, #8892, #8891, #8887, #8875, #8876, #8882, #8874, #8868, #8872, #8869, #8828, #8852, #8857, #8853, #8854, #8848, #8850, #8840, #8835, #8832, #8831, #8830, #8829, #8839, #8833, #8838, #8819, #8814, #8825, #8818, #8787, #8775, #8749, #8766, #8756, #8753, #8751, #8748, #8744, #8731, #8717, #8730, #8691, #8720, #8723, #8719, #8688, #8721, #8715, #8716, #8718, #8696, #8698, #8692, #8693, #8690, @​harupy; #9030, @​AlimurtuzaCodes; #9029, #9025, #9021, #9013, @​viktoriussuwandi; #9010, @​Bncer; #9011, @​Pecunia201; #9007, #9003, @​EdAbati; #9002, @​prithvikannan; #8991, #8867, @​AveshCSingh; #8951, #8896, #8888, #8849, @​gabrielfu; #8913, #8885, #8871, #8870, #8788, #8772, #8771, @​serena-ruan; #8879, @​maciejskorski; #7752, @​arunkumarkota; #9083, #9081, #8765, #8742, #8685, #8682, #8683, @​dbczumar; #8791, @​mhattingpete; #8739, @​yunpark93

2.4.2 (2023-07-10)

MLflow 2.4.2 is a patch release containing the following bug fixes and changes:

Bug fixes:

• [Models] Add compatibility for legacy transformers serialization (#8964, @​BenWilson2)
• [Models] Fix downloading MLmodel files from alias-based models:/ URIs (#8764, @​smurching)
• [Models] Fix reading model flavor config from URI for models in UC (#8728, @​smurching)
• [Models] Support feature_deps in ModelVersion creation for UC (#8867, #8815, @​AveshCSingh)
• [Models] Add support for listing artifacts in UC model registry artifact repo (#8803, @​smurching)
• [Core] Include resources for recipes in mlflow-skinny (#8895, @​harupy)
• [UI] Enable datasets tracking UI (#8886, @​harupy)
• [Artifacts] Use MLFLOW_ENABLE_MULTIPART_DOWNLOAD in DatabricksArtifactRepository (#8884, @​harupy)

... (truncated)

Commits

• 9ee9f4e Run python3 dev/update_mlflow_versions.py pre-release ... (#9093)
• 0235cc8 Fix IntegrityError handling in amind user creation (#9090)
• d137caf Run blacken-docs in autoformat workflow (#9082)
• 3bec11b Add missing __init__.py files (#9089)
• aca9980 Fix the default value of candidate_count (#9088)
• bc0d21e Gateway: Improve documentation for query parameters (#9083)
• e293a73 Gateway docs tweaks / improvements (#9081)
• 5a8e4a1 Run gateway workflow on push (#9080)
• 7ce907c Fix texts to text (#9079)
• 2cc56da Fix curl examples in gateway docs (#9078)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)