MLflow

MLflow 3.17.0 adds fine-grained permission controls for runs, traces, and versions with wildcard and DENY grants, plus opt-in daily rollups that speed up SQL analytics queries on large trace datasets. This release requires a coordinated database schema upgrade for SQL-backed servers: stop all writers, take a restorable backup, and run mlflow db upgrade before restarting replicas, since mixed-version rolling upgrades are not supported.

Matters for: Teams operating SQL-backed MLflow tracking servers with multiple writer replicas and large-scale trace data.

MLflow 3.16.0 lets you build custom trace UIs in plain English via the MLflow Assistant, adds first-class span links to navigate relationships between spans, and makes a redesigned trace explorer with reordering, custom columns, and session grouping the new default. Basic-auth now enables fail-closed authorization by default, so deployments relying on the previous fail-open behavior must update their auth configuration to avoid unexpected access denials.

Matters for: Teams running MLflow's tracking server with basic-auth enabled, and teams building GenAI agents that rely on multi-span traces for tool calls and retrieval steps.