Sourced from mlflow's releases.

v3.13.0rc0

We're excited to announce MLflow 3.13.0rc0, which deepens agent observability, tightens permissions, and broadens deployment options:

Major New Features:

• RBAC + Admin UI: Major overhaul of MLflow's Role-Based Access Control — legacy per-resource permission tables collapsed into role_permissions, unified per-user permission APIs under /mlflow/users/permissions/*, workspace USE permission lets users create experiments and registered models, default roles are seeded on workspace creation, prompt is promoted to a first-class RBAC resource_type, and a new 4-page Admin UI (account widget, /account page, Platform Admin pages, backend auth endpoints) opens to workspace managers scoped per their workspace. (#22855, #22857, #22859, #22928, #22929, #22941, #22973, #23086, #23247, #23248, #23337, #23379, @​PattaraS)

• Coding-Agent Tracing as Plugins: Claude Code, OpenClaw, Ollama, and OpenAI Codex are now wired into the AI Gateway as first-class assistant providers, plus a Claude Code TypeScript plugin with a setup wizard and settings.local.json support. The legacy Python autolog hook for mlflow autolog claude is replaced by the new official plugin, and a coding-agent endpoint creation flow is now available directly in the AI Gateway UI. (#20414, #22098, #22566, #22717, #23218, #23285, #23339, #23430, #23517, @​B-Step62, @​joelrobin18, @​Gkrumbach07, @​SuperSonnix71, @​TomeHirata)

• Trace Archival: End-to-end trace archival across the tracking stack. Includes archival configuration models, OTLP and artifact helpers, SQLAlchemy archival passes, archive-aware retrieval fallback, plus workspace/experiment/server-level archival settings in the UI. Read archived traces back seamlessly. (#23359, @​mprahl)

• Helm Charts for Kubernetes Deployment: First-class Helm chart for deploying MLflow to Kubernetes clusters — production-ready configuration, ingress, persistence, and appVersion wired to the released MLflow image. Get from helm install to a running tracking server without writing your own manifests. (#21973, @​WeichenXu123)

• mlflow.genai.test_agent for Automated Agent Stress-Testing: New API for stress-testing GenAI agents — generate adversarial inputs, replay them through your agent, and review the resulting traces in MLflow. Wires into the existing evaluation flow and assessment APIs. (#22990, @​serena-ruan)

• OpenTelemetry Span Links: Tracing now supports the OpenTelemetry Link entity via LiveSpan.add_link(), letting you connect causally related spans across traces. (#22797, @​khaledsulayman)

• Database Replica Routing: The SQL tracking store now supports reader/writer instance routing for database replicas, so read-heavy MLflow deployments can scale horizontally without overloading the primary. (#22910, @​ravidarbha)

Stay tuned for the full release, which will include even more features and bug fixes.

To try out this release candidate, please run:

pip install mlflow==3.13.0rc0

v3.12.0

MLflow 3.12.0 includes several major features and improvements

Major New Features

• 🖼️ Multimodal Tracing: Users can now store multimodal content in tracing spans as artifact attachments instead of inline binary data. We've also patched the UI to support the new mlflow-attachment:// style URI, with rich rendering available for PDFs, audio, and images.
• 🤖 Codex, Gemini, Qwen coding agent tracing support: Similar to our Claude Code tracing integration, we've now added support for the Codex, Gemini, and Qwen coding agent platforms as well!
• 🛡️ Gateway guardrails: You can now set guardrails on your gateway endpoints to prevent unsafe or non-compliant model inputs and outputs. Try it out in the MLflow UI!
• ⚡ Trace table pagination: The traces tab is now paginated, rather than fetching all traces up to a limit of 1000. This improves initial load time, and makes the page feel more responsive overall.

Breaking Changes

• [Scoring] Deprecate enable_mlserver in pyfunc serving backend (#22994, @​B-Step62)

Other Assorted Features & Improvements:

• [UI] Add coding agents section to AI Gateway quick start (#23006, @​TomeHirata)
• [Tracing] feat: record caller in gateway traces from request headers (#22926, @​TomeHirata)
• [] Run guardrails on passthrough endpoints; skip response_format for non-chat payloads (#22856, @​TomeHirata)
• [] Gateway: preserve client auth header for subscription-based CLI tools (claude-cli, Codex-Desktop, GeminiCLI) (#22915, @​TomeHirata)
• [Tracing] Expose Codex and Qwen Code hooks as installable CLI binaries (#22853, @​kriscon-db)
• [Tracking / UI] Add Portkey as a supported AI Gateway provider (#22830, @​sairavuri-sudo)
• [Tracking] Cache successful basic-auth credential checks to eliminate per-request PBKDF2 (#22817, @​PattaraS)
• [] Add last_updated_at field to model catalog entries (#22838, @​copilot-swe-agent)
• [Evaluation] Enable third-party scorer registration in OSS MLflow (#22634, @​smoorjani)

... (truncated)

Sourced from mlflow's changelog.

CHANGELOG

3.15.1 (2026-08-03)

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

Bug fixes:

• [Model Registry] Skip env_pack on ARM client images (#24762) (#24835, @​qyc)
• [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (+ lint rule) (#24799) (#24813, @​PattaraS)

Documentation updates:

• [Docs] Clarify scorer versioning documentation (#24769) (#24805, @​nihalmenon)

3.15.0 (2026-07-31)

MLflow 3.15.0 includes several major features and improvements

Major New Features

• 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
• 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
• 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
• ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
• 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

• [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
• [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
• [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
• [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
• [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
• [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
• [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
• [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
• [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
• [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
• [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
• [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
• [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
• [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
• [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
• [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
• [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

• [Tracing] Compute mlflow.llm.cost for Claude Code plugin traces on Databricks (#24416, @​harupy)

... (truncated)

• ad27537 Bump version to 3.13.0rc0 (#23495)
• eb5712d Cherry-pick: Add OpenAI Codex CLI as assistant provider (#22566) (#23517)
• 6b8dc19 Skip Spark/Delta tests in test_pandas_dataset.py on Windows CI (#23494)
• 44b6227 Update ML package versions for 3.13.0rc0 (#23491)
• c52797a Update requirements.yaml files for 3.13.0rc0 (#23490)
• 910199b Skip flaky tests/data/test_delta_dataset_source.py on Windows CI (#23493)
• d9b3c8d Adding metric filter to AI Gateway overview usage and endpoint usage tab (#23...
• e29e142 Surface user-facing resource type labels in RBAC pickers (#23409)
• 2525c11 Add load-rules subcommand to skills CLI (#23489)
• e09f2b1 Hide gateway_model_definition from RBAC resource type pickers (#23408)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.