Skip to content

sync: main to stable-2.x#309

Merged
tarilabs merged 53 commits intostable-2.xfrom
main
Aug 28, 2025
Merged

sync: main to stable-2.x#309
tarilabs merged 53 commits intostable-2.xfrom
main

Conversation

@github-actions
Copy link
Copy Markdown

sync-branches: New code has just landed in main, so let's bring stable-2.x up to speed!

tarilabs and others added 30 commits August 14, 2025 14:04
Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
… the latest image, fixes 1478 (#1479)

Signed-off-by: Dhiraj Bokde <dhirajsb@users.noreply.github.com>
Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
#1480)

fix lint tests



address comments



address comment



versions cards rebase

Signed-off-by: Taj010 <arsyed@redhat.com>
Signed-off-by: Mike Turley <mike.turley@alum.cs.umass.edu>
Co-authored-by: Taj010 <arsyed@redhat.com>
* test: refresh integration testing

- remove unused parameter name f/up #1375
- describe applied

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

* Show async-upload Job ci/GHA failing

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

* use correct image

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

---------

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
see kubeflow#1267 (review)

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
…/ui/frontend (#1335)

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.25.5 and updates ancestor dependency [@module-federation/enhanced](https://github.com/module-federation/core/tree/HEAD/packages/enhanced). These dependencies need to be updated together.


Updates `esbuild` from 0.17.19 to 0.25.5
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.17.19...v0.25.5)

Updates `@module-federation/enhanced` from 0.13.1 to 0.17.0
- [Release notes](https://github.com/module-federation/core/releases)
- [Changelog](https://github.com/module-federation/core/blob/main/packages/enhanced/CHANGELOG.md)
- [Commits](https://github.com/module-federation/core/commits/v0.17.0/packages/enhanced)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.25.5
  dependency-type: indirect
- dependency-name: "@module-federation/enhanced"
  dependency-version: 0.17.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.33.3 to 0.33.4.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ui/bff (#1484)

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.33.3 to 0.33.4.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… in /clients/ui/bff (#1421)

Bumps [github.com/brianvoe/gofakeit/v7](https://github.com/brianvoe/gofakeit) from 7.1.2 to 7.3.0.
- [Release notes](https://github.com/brianvoe/gofakeit/releases)
- [Commits](brianvoe/gofakeit@v7.1.2...v7.3.0)

---
updated-dependencies:
- dependency-name: github.com/brianvoe/gofakeit/v7
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.3 to 0.2.4.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.3...v0.2.4)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1488)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.12.8 to 0.12.9.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.8...0.12.9)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.12.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [boto3](https://github.com/boto/boto3) from 1.40.6 to 1.40.11.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.6...1.40.11)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.40.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…on (#1492)

Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.10.3 to 7.10.4.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.3...7.10.4)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ython (#1493)

Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 0.34.3 to 0.34.4.
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.34.3...v0.34.4)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…c-upload (#1497)

Bumps [huggingface-hub](https://github.com/huggingface/huggingface_hub) from 0.33.5 to 0.34.4.
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.33.5...v0.34.4)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ython (#1491)

Bumps [schemathesis](https://github.com/schemathesis/schemathesis) from 4.0.25 to 4.1.0.
- [Release notes](https://github.com/schemathesis/schemathesis/releases)
- [Changelog](https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md)
- [Commits](schemathesis/schemathesis@v4.0.25...v4.1.0)

---
updated-dependencies:
- dependency-name: schemathesis
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
)

Signed-off-by: manaswinidas <dasmanaswini10@gmail.com>
Signed-off-by: ppadti <ppadti@redhat.com>
* Updated dependencies in package.json

Signed-off-by: Uday Thakur <uday35700@gmail.com>
Signed-off-by: Jenny <32821331+jenny-s51@users.noreply.github.com>

* fix dependencies and lockfile

Signed-off-by: Jenny <32821331+jenny-s51@users.noreply.github.com>

---------

Signed-off-by: Uday Thakur <uday35700@gmail.com>
Signed-off-by: Jenny <32821331+jenny-s51@users.noreply.github.com>
Co-authored-by: Uday Thakur <uday35700@gmail.com>
* feat(async-upload): generate requirements.txt and VCS

generate requirements.txt as part of 'poetry install'
helpful for hermetic builds of the Container image too

place the requirements.txt in VCS git repo

ensure with ci/GHA that the file committed is
up-to-date, like for other ci/GHA already in place

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

* real requirements.txt

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

---------

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
* fix IN comparator for filterQuery

This adds handling of array values so we can do something like
`id IN (6,7,8)` to filterQuery:

  curl 'http://localhost:8080/api/model_registry/v1alpha3/experiment_runs?filterQuery=id+IN+(6,7,8)'

AI-assisted: Cursor (claude-4-sonnet)
Signed-off-by: Jon Burdo <jon@jonburdo.com>

* use cleaner code patterns, naming

Signed-off-by: Jon Burdo <jon@jonburdo.com>

* add service-level tests

Signed-off-by: Jon Burdo <jon@jonburdo.com>

* support empty arrays in filterQuery

Signed-off-by: Jon Burdo <jon@jonburdo.com>

---------

Signed-off-by: Jon Burdo <jon@jonburdo.com>
Some providers may include a version in the model name, so update the
error message accordingly.

Signed-off-by: Paul Boyd <paul@pboyd.io>
…ients/ui/bff (#1420)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.37.0 to 1.38.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.37.0...v1.38.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
* feat: support for experiments on client

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* fix: casting from generated client overrides

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* docs: readme

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* refactor: align param to mlflow-style ease of use

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* refactor: description param

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* feat: temp disable test

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* fix: lint + override for older py verisons

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* feat: reduce complexity of `start_experiment_run`

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* feat: p3.9 fix

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* fix: <py3.11 fix

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* fix: py3.9 future annotations

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* feat: remove uneeded test after refactor

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* docs: fmt

Co-authored-by: Jon Burdo <jon@jonburdo.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* docs: typo

Co-authored-by: Jon Burdo <jon@jonburdo.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* fix: some additional cleanup

Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* docs: typo

Co-authored-by: Jon Burdo <jon@jonburdo.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* feat: move __repr_str__ to base model obj

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* fix: str literal fmt

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* fix: incorrect artifacttype

Co-authored-by: Matteo Mortari <matteo.mortari@gmail.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>

* fix: cleanup

Signed-off-by: syntaxsdev <sglinton@redhat.com>

* fix: artifactType

Co-authored-by: Matteo Mortari <matteo.mortari@gmail.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>

---------

Signed-off-by: syntaxsdev <sglinton@redhat.com>
Signed-off-by: Sidney Glinton <sglinton@redhat.com>
Co-authored-by: Jon Burdo <jon@jonburdo.com>
Co-authored-by: Matteo Mortari <matteo.mortari@gmail.com>
….4.0 (#1512)

Bumps [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](go-viper/mapstructure@v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Aug 27, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Aug 27, 2025

Hi @github-actions[bot]. Thanks for your PR.

I'm waiting for a opendatahub-io member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[pull] main from kubeflow:main
tarilabs and others added 7 commits August 27, 2025 11:40
Description

follow-up to:
- kubeflow#323

the Kubeflow Community has decided to opt for OAuth setup, instead of what originally acted on with kubeflow#323 (comment) with a push-only token safely exposed per recommendation:
- https://github.com/fossa-contrib/fossa-action?tab=readme-ov-file#push-only-api-token

and also as adopted by other CNCF projects:
- cncf/foundation#109

either way, aligning with Kubeflow community decision with this PR.

How Has This Been Tested?

kubeflow#1527 (comment)

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>
…n /clients/ui/bff (#1520)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… tests (#1528)

* Add support for setting verify ssl, user token and request headers in tests

Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>

* Update clients/python/tests/conftest.py

Co-authored-by: Sidney Glinton <sglinton@redhat.com>
Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>

* Update clients/python/tests/conftest.py

Co-authored-by: Sidney Glinton <sglinton@redhat.com>
Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>

* Update clients/python/tests/REST_bindings_test.py

Co-authored-by: Sidney Glinton <sglinton@redhat.com>
Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>

* Update clients/python/tests/REST_bindings_test.py

Co-authored-by: Sidney Glinton <sglinton@redhat.com>
Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>

---------

Signed-off-by: Debarati Basu-Nag <dbasunag@redhat.com>
Co-authored-by: Sidney Glinton <sglinton@redhat.com>
Signed-off-by: Yulia Krimerman <juliapiterova@hotmail.com>
…-sync

Signed-off-by: Dhiraj Bokde <dhirajsb@users.noreply.github.com>
@dhirajsb dhirajsb added the lgtm label Aug 27, 2025
Copy link
Copy Markdown

@dhirajsb dhirajsb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Aug 27, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dhirajsb, github-actions[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tarilabs
Copy link
Copy Markdown
Member

merging by merge commit.

@tarilabs tarilabs merged commit d0559b3 into stable-2.x Aug 28, 2025
51 of 54 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.