build(deps-dev): bump the python-development group with 6 updates by dependabot[bot] · Pull Request #49 · Yash-Chindam/Production-Local-LLM-Inference-Routing-Platform

dependabot · 2026-10-11T22:39:15Z

Updates the requirements on mlflow-skinny, sqlalchemy, datasets, transformers, opentelemetry-exporter-otlp-proto-http and opentelemetry-sdk to permit the latest version.
Updates mlflow-skinny to 3.17.0

Release notes

Sourced from mlflow-skinny's releases.

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Jev Decisions Across Evaluation, Gateway, and Tracing: Use TypeSafe models in built-in scorers and custom judges with typed Boolean or categorical feedback. (#26100, @B-Step62)

Fine-Grained Permissions for Shared Resources: Control access to contained resource types, including runs, traces, and versions, with wildcard grants and explicit DENY. (#26157, @rrrkharse)

Faster Analytics for Large Trace Datasets: Reduce SQL analytics query overhead with opt-in daily summaries and raw-query fallback. (#25991, @HumairAK)

Clearer Evaluation Results: Associate aggregate logged-model evaluation metrics with the managed dataset that produced them. (#25927, @joshuawong-db)

Assistant Improvements for Shared Servers: Keep saved conversations scoped to the signed-in user and reset the active session when accounts change. (#26009, @kriscon-db)

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

[Tracing / UI] Add rich rendering for TypeSafe System One traces (#26276, @B-Step62)

[Build] Show issue-triage progress in a GitHub issue comment (#26454, @copilot-swe-agent)

[Docs / Evaluation] Allow custom base_url for direct TypeSafe judges (#26445, @B-Step62)

[Docs / Gateway] Allow custom typesafe_api_base for TypeSafe Gateway endpoints (#26442, @B-Step62)

[Evaluation / Tracking] Support name IN (...) filters for evaluation-dataset search (#26374, @HumairAK)

[Docs / Evaluation / Gateway / UI] Support TypeSafe and OpenRouter Jev judges through Gateway System One (#26243, @joshuawong-db)

[Build / Docs / Tracing / Tracking] Add @mlflow/typesafe tracing integration for TypeSafe AI (#26342, @B-Step62)

[Build / Docs] Publish Helm charts after stable release images (#26064, @joshuawong-db)

[Tracing / UI] Add TraceImage to custom trace views (#26297, @chris-chieu)

[Tracing] Simplify tracing setup defaults in setup.sh (#26341, @B-Step62)

[Build / Docs / Tracing / Tracking] Add TypeSafe SDK autologging support (#26129, @B-Step62)

[Tracing / Tracking] Expose OTLP ingestion metrics for Prometheus (#25192, @ashtarkb)

[Tracing] Compute LLM trace costs client-side for SageMaker tracking (#26178, @B-Step62)

[Model Registry / Models] Add uc_model_service UC model-version dependency support (#26140, @TomeHirata)

[Models] Add DatabricksUCModelService resource type (#26137, @TomeHirata)

[Docs / Tracing / Tracking] Maintain SQL trace analytics daily rollups (#25489, @NeriCarcasci)

[Docs / Tracing / Tracking] Serve trace analytics reads from opt-in SQL daily rollups (#25239, @NeriCarcasci)

[Gateway / UI] Add TypeSafe Jev support to the AI Gateway (#26048, @xq-yin)

[Tracking] Support order_by in search_prompts() across the client, fluent, and GenAI APIs (#25967, @avanish-garg)

[Docs / Gateway] Add OpenAI-compatible model discovery to the MLflow Gateway (#25940, @RussellLuo)

[Gateway] Add Anthropic Messages passthrough to AmazonBedrockProvider (#25863, @rhamzatov)

[Tracking] Support logged model artifacts in the createPresignedUploadUrl endpoint (#24765, @henishborad)

[Tracking] Add mlflow.restore_experiment() and mlflow.restore_run() to the fluent API (#25852, @avanish-garg)

[Build] Configure topology spread constraints in the Helm chart (#25778, @daanknoope)

[Docs / Tracing] Add source metadata to TypeScript agent traces (#25825, @B-Step62)

[Model Registry / UI] Add a source logged model link to the model version page (#25727, @rrioh)

[Build / Docs] charts: Expose Helm liveness/readiness/startup probes as configuration variables (#25560, @creater29)

[Gateway / UI] Allow administrators to disable AI Gateway with MLFLOW_ENABLE_AI_GATEWAY (#25236, @DaoDaoNoCode)

[UI] Add dataset ID to UI (#25234, @janald99)

[Tracing] Add first-class span description support to @mlflow.trace and mlflow.start_span (#25548, @Rohitkanithi)

Bug fixes:

[Evaluation] Use the baseline's magnitude in min_relative_change checks (#26252, @mavericksea-ai)

[UI] Support wrapped MCP registry server definitions (#25764, @mprahl)

[Tracing / Tracking] Fix decimal metric sums and reduce SQL trace query and rollup overhead (#26369, @HumairAK)

... (truncated)

Changelog

Sourced from mlflow-skinny's changelog.

3.17.0 (2026-10-06)

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Jev Decisions Across Evaluation, Gateway, and Tracing: Use TypeSafe models in built-in scorers and custom judges with typed Boolean or categorical feedback. (#26100, @B-Step62)

Fine-Grained Permissions for Shared Resources: Control access to contained resource types, including runs, traces, and versions, with wildcard grants and explicit DENY. (#26157, @rrrkharse)

Faster Analytics for Large Trace Datasets: Reduce SQL analytics query overhead with opt-in daily summaries and raw-query fallback. (#25991, @HumairAK)

Clearer Evaluation Results: Associate aggregate logged-model evaluation metrics with the managed dataset that produced them. (#25927, @joshuawong-db)

Assistant Improvements for Shared Servers: Keep saved conversations scoped to the signed-in user and reset the active session when accounts change. (#26009, @kriscon-db)

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

[Tracing / UI] Add rich rendering for TypeSafe System One traces (#26276, @B-Step62)

[Build] Show issue-triage progress in a GitHub issue comment (#26454, @copilot-swe-agent)

[Docs / Evaluation] Allow custom base_url for direct TypeSafe judges (#26445, @B-Step62)

[Docs / Gateway] Allow custom typesafe_api_base for TypeSafe Gateway endpoints (#26442, @B-Step62)

[Evaluation / Tracking] Support name IN (...) filters for evaluation-dataset search (#26374, @HumairAK)

[Docs / Evaluation / Gateway / UI] Support TypeSafe and OpenRouter Jev judges through Gateway System One (#26243, @joshuawong-db)

[Build / Docs / Tracing / Tracking] Add @mlflow/typesafe tracing integration for TypeSafe AI (#26342, @B-Step62)

[Build / Docs] Publish Helm charts after stable release images (#26064, @joshuawong-db)

[Tracing / UI] Add TraceImage to custom trace views (#26297, @chris-chieu)

[Tracing] Simplify tracing setup defaults in setup.sh (#26341, @B-Step62)

[Build / Docs / Tracing / Tracking] Add TypeSafe SDK autologging support (#26129, @B-Step62)

[Tracing / Tracking] Expose OTLP ingestion metrics for Prometheus (#25192, @ashtarkb)

[Tracing] Compute LLM trace costs client-side for SageMaker tracking (#26178, @B-Step62)

[Model Registry / Models] Add uc_model_service UC model-version dependency support (#26140, @TomeHirata)

[Models] Add DatabricksUCModelService resource type (#26137, @TomeHirata)

[Docs / Tracing / Tracking] Maintain SQL trace analytics daily rollups (#25489, @NeriCarcasci)

[Docs / Tracing / Tracking] Serve trace analytics reads from opt-in SQL daily rollups (#25239, @NeriCarcasci)

[Gateway / UI] Add TypeSafe Jev support to the AI Gateway (#26048, @xq-yin)

[Tracking] Support order_by in search_prompts() across the client, fluent, and GenAI APIs (#25967, @avanish-garg)

[Docs / Gateway] Add OpenAI-compatible model discovery to the MLflow Gateway (#25940, @RussellLuo)

[Gateway] Add Anthropic Messages passthrough to AmazonBedrockProvider (#25863, @rhamzatov)

[Tracking] Support logged model artifacts in the createPresignedUploadUrl endpoint (#24765, @henishborad)

[Tracking] Add mlflow.restore_experiment() and mlflow.restore_run() to the fluent API (#25852, @avanish-garg)

[Build] Configure topology spread constraints in the Helm chart (#25778, @daanknoope)

[Docs / Tracing] Add source metadata to TypeScript agent traces (#25825, @B-Step62)

[Model Registry / UI] Add a source logged model link to the model version page (#25727, @rrioh)

[Build / Docs] charts: Expose Helm liveness/readiness/startup probes as configuration variables (#25560, @creater29)

[Gateway / UI] Allow administrators to disable AI Gateway with MLFLOW_ENABLE_AI_GATEWAY (#25236, @DaoDaoNoCode)

[UI] Add dataset ID to UI (#25234, @janald99)

[Tracing] Add first-class span description support to @mlflow.trace and mlflow.start_span (#25548, @Rohitkanithi)

Bug fixes:

[Evaluation] Use the baseline's magnitude in min_relative_change checks (#26252, @mavericksea-ai)

... (truncated)

Commits

6dd94c6 Bump version to 3.17.0 (#26464)
83764b3 Update ML package versions for 3.17.0 (#26458)
40cea47 Replace triage’s nginx gateway proxy with an in-memory Node proxy (#26457)
b56ead6 Include skills submodule in wheel builds (#26456)
edaaf64 Use the baseline's magnitude in min_relative_change checks (#26252)
ab118da Update bundled mlflow/assistant/skills to latest upstream (#26455)
da15884 Add rich rendering for TypeSafe System One traces (#26276)
69c5b42 Show triage progress in an issue comment (#26454)
f0b891d Update model catalog from upstream sources (#26453)
297144c Allow custom base_url for direct TypeSafe judges (#26445)
Additional commits viewable in compare view

Updates sqlalchemy to 2.1.4

Release notes

Sourced from sqlalchemy's releases.

2.1.4

Released: October 7, 2026

orm

[orm] [bug] [regression] Fixed regression caused by #13333 where assigning a MetaData object to the metadata attribute of a mapped Declarative class, in order to place that class's Table in a MetaData collection other than that of the _orm.registry, would emit a warning that the attribute name metadata should be left reserved. The warning is now emitted only when the metadata attribute is assigned to an object other than a MetaData.

References: #13659

engine

[engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected. The cursor is now closed immediately, as was the case in 1.3 and as is already the case for INSERT, UPDATE, DELETE and _sql.text() statements.

This change is also backported to: 2.0.55

References: #13640

[engine] [bug] Fixed issue in the _engine.Connection.execution_options.logging_token option where setting the value to None or another false value would raise AttributeError if a logging token had not already been established on that _engine.Connection, such as on a newly checked out connection, when the option was set at the _engine.Engine level, or when the token was reset to None more than once. Regression introduced in 2.0.30 as part of #11210.

This change is also backported to: 2.0.55

References: #13641

[engine] [bug] [regression] Fixed regression where iterating a Result directly would create reference cycles that prevented the Result along with the DBAPI

... (truncated)

Commits

See full diff in compare view

Updates datasets to 5.1.0

Release notes

Sourced from datasets's releases.

5.1.0

New Formats

Harbor ⚓: RL environments:

Add harbor benchmarks by @lhoestq in huggingface/datasets#8729

Vortex 🌀: High performance columnar data

Add support for datasets backed by vortex file format by @robert3005 in huggingface/datasets#8502

Bio formats 🧬: store biological data like DNA sequences, protein chains, and 3D molecular structures

feat(fasta): add lightweight FASTA file format support by @behroozazarkhalili in huggingface/datasets#7923

Decode BioSequence and BioStructure records with universal newlines by @behroozazarkhalili in huggingface/datasets#8600

Add lightweight FASTQ file format support by @behroozazarkhalili in huggingface/datasets#7924

feat: Add GenBank file format support for biological sequence data by @behroozazarkhalili in huggingface/datasets#7951

Add lightweight PDB (Protein Data Bank) file support by @behroozazarkhalili in huggingface/datasets#7926

feat: Add mmCIF file support for macromolecular structures by @behroozazarkhalili in huggingface/datasets#7925

feat(features): add BioSequence and BioStructure decodable features by @behroozazarkhalili in huggingface/datasets#8542

Dataset Features

Add a strategy argument to split_dataset_by_node for iterable datasets by @behroozazarkhalili in huggingface/datasets#8565

Allow IterableDataset.push_to_hub num_shards above dataset.num_shards by @behroozazarkhalili in huggingface/datasets#8716

Other improvements and bug fixes

Fix fixed size binary by @Alex-PLACET in huggingface/datasets#8281

Fix offline simulation with huggingface_hub 1.27 by @hanouticelina in huggingface/datasets#8414

Fix info from data_dir/data_files or malformed yaml by @lhoestq in huggingface/datasets#8462

Forward iter_arrow, is_typed and features from RepeatExamplesIterable by @ebarkhordar in huggingface/datasets#8395

Fix archive path check allowing sibling-directory escapes by @icn5381 in huggingface/datasets#8490

disallow hdf5 external links by @lhoestq in huggingface/datasets#8523

Fix deepcopy bottleneck in state_dict() by @yuxin00j in huggingface/datasets#8387

Optimize PyArrow block shuffling with dynamic rebatched chunk interleaving by @yuxin00j in huggingface/datasets#8407

Fix Pdf.decode_example raising TypeError on remote non-Hub paths by @behroozazarkhalili in huggingface/datasets#8566

Fix dead PDF processing link in README by @aarushkandukoori in huggingface/datasets#8512

Forward max_buffer_input_shards from IterableDatasetDict.shuffle by @vineethsaivs in huggingface/datasets#8594

Preserve storage options across URL hops by @tandede in huggingface/datasets#8496

Better error when a column written as null gets values in a later batch by @ebarkhordar in huggingface/datasets#8591

Advance the user-supplied generator in Dataset.shuffle even on cache hits by @BenYang12 in huggingface/datasets#8589

Bump fsspec upper bound to 2026.7.0 by @roshanjrajan in huggingface/datasets#8561

Shard the sources when skipping a distributed IterableDataset by @ebarkhordar in huggingface/datasets#8569

Fix infinite repetition of empty iterable datasets by @Jokasa7 in huggingface/datasets#8577

Reject a non-callable generator in GeneratorConfig by @LeSingh1 in huggingface/datasets#8585

Fix async map checkpoint accounting across repeated resumes by @SBrouck in huggingface/datasets#8575

[httpx migration] Import httpx from huggingface_hub, require huggingface_hub>=1.31.0 by @Wauplin in huggingface/datasets#8598

chore: enable Dependabot weekly GitHub Actions bumps by @hf-dependantbot-rollout[bot] in huggingface/datasets#8221

[docs] Fix legacy hf CLI references (datasets) by @Wauplin in huggingface/datasets#8657

Scope GITHUB_TOKEN permissions per job by @hf-security-analysis[bot] in huggingface/datasets#8672

Pin GitHub Actions to commit SHAs by @hf-security-analysis[bot] in huggingface/datasets#8673

Fix push_to_hub for IterableDataset with unknown features by @davanstrien in huggingface/datasets#8658

Vectorize interleave_datasets index generation (probabilities + first/all_exhausted) by @saforem2 in huggingface/datasets#8318

Fix torchcodec docs links by @pratikgx in huggingface/datasets#8700

[docs] Fix HF_HOME example in cache guide by @ZainnQureshii in huggingface/datasets#8694

Fix broken internal anchor link in share.mdx by @aarushkandukoori in huggingface/datasets#8666

Keep Json fields inside a struct from being double-encoded when some struct rows are null by @breken-ai in huggingface/datasets#8712

... (truncated)

Commits

efe6ea4 release 5.1.0 (#8745)
7f58239 harbor: fix paths on windows (#8739)
c657c2d fix default iterable dataset dict and polars exports (#8632)
278d485 Fix repeated Arrow rebatch checkpoint restoration (#8727)
b83f8b5 Speed up JSON export of indexed datasets (#8662)
2989571 Preserve source shards when shuffling iterable datasets (#8670)
dcf79fd Bump huggingface_hub upper bound to <3.0 (datasets) (#8678)
f63c726 Fix IterableDataset.filter with arrow, pandas and polars formats (#8725)
0358671 Allow IterableDataset.push_to_hub num_shards above dataset.num_shards (#8716)
a826eb2 Fix epoch iteration after skipping or taking a streaming subset (#8707)
Additional commits viewable in compare view

Updates transformers to 5.19.0

Release notes

Sourced from transformers's releases.

Release v5.19.0

New Model additions

EmbeddingGemma2

EmbeddingGemma 2 is a multimodal embedding model from Google built on the Gemma 4 architecture. It encodes text, images, audio, and video, individually or combined in one input, into a shared 768-dimensional vector space for cross-modal retrieval, semantic similarity, clustering, and classification. It uses Matryoshka Representation Learning, so embeddings can be truncated to 512, 256, or 128 dimensions. It also offers configurable visual and video token budgets, and unused vision or audio towers can be disabled at load time to save memory.

Links: Documentation

Smthn smthn (#49364) by @vasqu in #49364

Breaking changes

All MoE models whose routers compute logits now return them when output_router_logits=True, following the Qwen3-MoE pattern (a router_logits recorder on the base model, MoeModelOutputWithPast from the backbone, and a MoE causal LM output from the head), so code that relied on the previous outputs or their absence should read the router logits from these output classes.

🚨 Return router logits from every MoE model that computes them (#48920) by @qgallouedec

Owlv2ForObjectDetection.embed_image_query now selects the query box with the highest objectness score, as in the original OWLv2 notebook, instead of the OWL-ViT heuristic, so image-guided query embeddings and detections may differ from earlier releases.

🚨 Select the OWLv2 image query by objectness (#49200) by @qgallouedec

The "paged|" prefix for SDPA and flash attention implementations is deprecated, so users should set the regular attention implementation (e.g. sdpa or flash_attention_2) for continuous batching instead of paged|sdpa or paged|flash_attention_2.

🚨 Attention 🚨 Deprecate "paged|" prefix for SDPA and flash (#49112) by @remi-or

The regular flash and SDPA attention functions (flash_attention.py, sdpa_attention.py) now support continuous batching directly, and "paged|..." implementations for these are redirected to them, while eager still requires the "paged|eager" prefix.

🚨 Attention 🚨 Make regular attention support CB (#49101) by @remi-or

In continuous batching, the cache update for the index-based and block-table paths is now fused into a single call, which slightly changes the cache update function's behavior and affects any custom code that calls the separate update paths.

🚨 [CB] 🚨 Fuse update for index and block table path (#49088) by @remi-or

Continuous batching internals changed in preparation for removing "paged": `max

🚨 [CB] 🚨 Little fixes before removing "paged" (#49069) by @remi-or

Parallelization

Expert parallelism gains a token-dispatch implementation, selected via the new ep_dispatch_experts plan rule and now the default for Qwen3 MoE and Mellum, which removes the requirement that EP size equal TP size. The Trainer was also adapted to work with expert parallelism, and the docs now note that PEFT adapters support tensor parallelism. A CI-related fix for pipeline-parallel chart2table inference was also included.

[distributed]: adapt Trainer to work Expert Parallel (#48873) by @3outeille in #48873

[distributed] Add expert-parallel token dispatch, default for Qwen3 MoE (#48865) by @3outeille in #48865

Fix pp chart2table inference (#49225) by @zucchini-nlp in #49225

[docs] TP for PEFT adapters (#49060) by @stevhliu in #49060

Cache

... (truncated)

Commits

c4c4605 v5.19.0
92cd495 Smthn smthn (#49364)
a7e8ff2 Revert "[CI] Temporarily disable AMD scheduled CI trigger" (#49271) (#49362)
571c5cc ALM testx fIxing... (#49355)
b4526a7 Fix DataCollatorForLanguageModeling ignoring seed=0 (#49349)
5a27d2d Fix explicit kernelization modes for evaluation models (#49339)
23c21ac fix(cohere_compass): add video to input_modalities (#49320) (#49323)
f1d0d9f GPT-OSS: read the clamped SwiGLU's alpha and limit from the config (#49346)
9921402 [distributed] Default MoE ep_plans to token dispatch (#49160)
8625785 [distributed]: adapt Trainer to work Expert Parallel (#48873)
Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-http to 1.45.1

Release notes

Sourced from opentelemetry-exporter-otlp-proto-http's releases.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Changelog

Sourced from opentelemetry-exporter-otlp-proto-http's changelog.

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental

... (truncated)

Commits

14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
See full diff in compare view

Updates opentelemetry-sdk to 1.45.1

Release notes

Sourced from opentelemetry-sdk's releases.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental

... (truncated)

Commits

14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version wi...

Description has been truncated

Updates the requirements on [mlflow-skinny](https://github.com/mlflow/mlflow), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [datasets](https://github.com/huggingface/datasets), [transformers](https://github.com/huggingface/transformers), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) and [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) to permit the latest version. Updates `mlflow-skinny` to 3.17.0 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.16.1...v3.17.0) Updates `sqlalchemy` to 2.1.4 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `datasets` to 5.1.0 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.1...5.1.0) Updates `transformers` to 5.19.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.18.0...v5.19.0) Updates `opentelemetry-exporter-otlp-proto-http` to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.45.0...v1.45.1) Updates `opentelemetry-sdk` to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.45.0...v1.45.1) --- updated-dependencies: - dependency-name: mlflow-skinny dependency-version: 3.17.0 dependency-type: direct:development dependency-group: python-development - dependency-name: sqlalchemy dependency-version: 2.1.4 dependency-type: direct:development dependency-group: python-development - dependency-name: datasets dependency-version: 5.1.0 dependency-type: direct:development dependency-group: python-development - dependency-name: transformers dependency-version: 5.19.0 dependency-type: direct:development dependency-group: python-development - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.1 dependency-type: direct:development dependency-group: python-development - dependency-name: opentelemetry-sdk dependency-version: 1.45.1 dependency-type: direct:development dependency-group: python-development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies python labels Oct 11, 2026

github-actions Bot merged commit 90b0e54 into main Oct 11, 2026
6 checks passed

github-actions Bot deleted the dependabot/pip/python-development-9acfd7fc21 branch October 11, 2026 22:41

Navigation Menu

Repository navigation

build(deps-dev): bump the python-development group with 6 updates - #49

build(deps-dev): bump the python-development group with 6 updates#49
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/python-development-9acfd7fc21

dependabot Bot commented on behalf of github Oct 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 11, 2026

Major New Features

Other Assorted Features & Improvements:

3.17.0 (2026-10-06)

Major New Features

Other Assorted Features & Improvements:

2.1.4

orm

engine

5.1.0

New Formats

Dataset Features

Other improvements and bug fixes

Release v5.19.0

New Model additions

EmbeddingGemma2

Breaking changes

Parallelization

Cache

Version 1.45.1/0.66b1

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

Version 1.45.1/0.66b1

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants