Version 2.16.0

What's Changed

• chore: update release notes and scripts by @HumairAK in #12470
• Add fsGroup and seaweedfs by @juliusvonkohout in #12474
• ci: fixing and reenabling upgrade tests by @nsingla in #12475
• ci: adding a retry logic to create cluster step in case it fails by @nsingla in #12476
• chore: remove reusable publishing code, pypi does not allow it by @HumairAK in #12482
• Add release 2.15 changes to master by @HumairAK in #12486
• configure ml-pipeline service address within driver.go by @alyssacgoins in #12481
• fix(sdk): align sdk versions in reqs by @droctothorpe in #12489
• ci: Git artifact check by @nsingla in #12477
• chore: remove duplicate default-allow-same-namespace network policy by @akagami-harsh in #12492
• chore: add commit step to kfp k8s branch creation script changes by @HumairAK in #12500
• ci: add path references verification in the github workflows to CI/CD sec… by @nsingla in #12502
• fix(sdk): fix set_container_image within ParallelFor. Fixes #12413 by @uzi0espil in #12414
• ci: adding concurrency behavior to cancel in progress workflows if a new … by @nsingla in #12504
• ci: adding a github action to generate test summary with html report link attached by @nsingla in #12478
• fix(sdk): Set custom_path in executor output only when used by @mprahl in #12514
• chore: Sync KFP SDK 2.15.2 in master by @mprahl in #12518
• chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /backend/metadata_writer by @dependabot[bot] in #12531
• Enhance security context in cache-deployer deployment by @juliusvonkohout in #12538
• Cleanup kind workflows and Harden release downloads(incl. artifact paging) by @sduvvuri1603 in #12549
• fix(manifests): Allow same-namespace access to SeaweedFS for standalone deployments by @hbelmiro in #12543
• fix(backend): add commonEnvs to driver for PVCs by @JerT33 in #12499
• ci: skipping artifacts in cache check for master builds by @nsingla in #12557
• chore(deps): bump github.com/expr-lang/expr from 1.17.5 to 1.17.7 by @dependabot[bot] in #12559
• ci: moving free up disk space to a github action by @nsingla in #12558
• chore(deps): bump github.com/argoproj/argo-workflows/v3 from 3.7.3 to 3.7.5 by @dependabot[bot] in #12544
• fix(metadata-writer): add back general exception to prevent constant pod restarts. Fixes #12468 by @JerT33 in #12469
• fix(ci): resolve trivy rate limiting by @droctothorpe in #12562
• fix(ci): setup trivy caching and move actionlint to pre-commit by @droctothorpe in #12563
• Fix Local SubprocessRunner to work without Docker by @aniketpati1121 in #12553
• feat(metadata-envoy): Bumping version of envoy by @TiagoMoreira003 in #12545
• fix(backend): add formatting to make parameter macros such as [[CurrentTime]] forward compatible from v1 to v2 by @Siva-Sainath in #12497
• chore: remove unnecessary server img patch for k8s native mode by @HumairAK in #12566
• ci: blanket okay-to-test approval by @droctothorpe in #12561
• Fix /default parameters not displayed in Compare Runs by @rishabh998186 in #12541
• chore: Remove DharmitD and rimolive due to inactivity by @mprahl in #12567
• fix(manifests): remove trailing whitespace to prevent kustomize build issues by @juhyeon-cha in #12575
• fix(ci): fix ok-to-test-ci workflow by @droctothorpe in #12578
• fix(ci): handle ok-to-test edge case by @droctothorpe in #12576
• fix(ci): pass ok-to-test-ci.yml for trusted contributors by @droctothorpe in #12582
• fix(ci): retry auto workflow approval by @droctothorpe in #12583
• fix(ci): adopt trainer wf approval pattern by @droctothorpe in #12584
• Configurable metadata_service_host domain fixes by @ajugeorge97 in #12539
• feat(sdk): adding support for dsl.condition and dsl.parallelFor to local runner by @nsingla in #12511
• fix(ci): disable annotations by @droctothorpe in #12585
• fix(ci): update ginkgo skip by @droctothorpe in #12586
• fix(ui): Enforce min of 1 on interval input spinner. Fixes #12579 by @JerT33 in #12580
• fix(sdk): Added missing path property setter to kfp.dsl.types.artifact_types.Model class. Fixes #11728 by @jbojar in #12551
• chore: add GitHub welcome workflow for new contributors by @aniketpati1121 in #12527
• fix(ci): Fix step order in SDK client tests workflow by @JerT33 in #12592
• feat(kubernetes): add sub_path parameter to mount_pvc for mounting PVC subdirectories. Fixes #11832 by @BhoomiAgrawal12 in #12595
• docs(KEP): Support Literal pipeline input parameters by @alyssacgoins in #12400
• Update CA Cert Conditional by @alyssacgoins in #12572
• fix(ci): run trivy on a schedule like codeql by @droctothorpe in #12612
• move temp CA bundle and cert env var logic ahead of downloadArtifacts() by @alyssacgoins in #12614
• Initialize MLPipelineTLSEnabled on every templateOptions instance by @alyssacgoins in #12626
• chore(deps): bump werkzeug from 3.1.3 to 3.1.5 in /backend/src/apiserver/visualization by @dependabot[bot] in #12629
• chore: remove disabled renovate.json5 config by @jeffspahr in #12631
• Add optional just command runner for developer convenience by @sameerdattav in #12634
• chore(CI): Embed Argo Workflow logs into HTML test reports by @hbelmiro in #12540
• fix(frontend): stabilize E2E integration tests. Fixes #10881 by @jeffspahr in #12636
• test: add unit tests for k8s-helper kubernetes API functions by @jeffspahr in #12635
• fix(ci): port-forward minio-service instead of pod by @kaikaila in #12657
• fix(backend): Refactor S3 bucket management by replacing MinIO client code with AWS SDK v2 and improving configuration validation by @hbelmiro in #12512
• fix(frontend): restrict pods API based on namespace access by @demarna1 in #12528
• feat(backend): double input size limit. Fixes #12510 by @neo99zhang in #12519
• chore: Reduce the number of annotations produced by skipped tests by @nsingla in #12667
• adding support for oidc by @nsingla in #12687
• chore(tests): Optimize workflows with caching and action upgrades by @hbelmiro in #12658
• test(sdk): Replace deprecated dsl.Condition with dsl.If in compiler tests by @Vedant2005goyal in #12679
• chore(deps): bump github.com/argoproj/argo-workflows/v3 from 3.7.5 to 3.7.8 by @dependabot[bot] in #12690
• Fix unresolved create/schedule time placeholders by @sameerdattav in #12628
• Fix: pip upgrade in backend API Dockerfile by @sduvvuri1603 in #12694
• chore(ci): use author_association to avoid API rate limits in approve workflow by @hbelmiro in #12698
• ci: adding myself as reviewer and approver for github workflows & actions by @nsingla in #12710
• chore(deps): bump urllib3 from 2.5.0 to 2.6.3 in /.github/resources/scripts/kfp-readiness by @dependabot[bot] in #12621
• chore(ci): Replace GitHub REST API calls with event payload and cache lookups by @hbelmiro in #12712
• chore(deps): bump wheel from 0.45.1 to 0.46.2 in /backend/src/apiserver/visualization by @dependabot[bot] in #12697
• chore(deps): bump urllib3 from 2.5.0 to 2.6.3 in /components/aws/sagemaker by @dependabot[bot] in #12619
• chore(deps): bump urllib3 from 2.6.0 to 2.6.3 in /backend/metadata_writer by @dependabot[bot] in #12624
• chore(deps): bump pyasn1 from 0.6.1 to 0.6.2 in /backend/metadata_writer by @dependabot[bot] in #12660
• chore(deps): bump pyasn1 from 0.6.1 to 0.6.2 in /backend/src/apiserver/visualization by @dependabot[bot] in #12661
• chore(deps): bump urllib3 from 2.5.0 to 2.6.3 in /backend by @dependabot[bot] in #12622
• chore(deps): bump urllib3 from 2.5.0 to 2.6.3 in /sdk/python by @dependabot[bot] in #12620
• chore(deps): bump pyasn1 from 0.6.1 to 0.6.2 in /sdk/python by @dependabot[bot] in #12674
• feat(launcher): Add credential refresh to launcher by @cmdevoto in #12708
• fix(testing) retention for image-builds-with-cache artifacts by @alyssacgoins in #12735
• Update ML Pipeline server address to facilitate TLS-enabled gRPC connection by @alyssacgoins in #12718
• feat(backend): add propagation policy option to DeleteRecurringRun. Fixes #7421, fixes #12573 by @JerT33 in #12574
• fix(ci): update expected workflow compiler stub by @zazulam in #12739
• chore(sdk): Add deprecation notice to add_node_selector_constraint docstring by @hbelmiro in #12741
• chore: expose Kubeflow Pipelines version via public ConfigMap by @sameerdattav in #12717
• docs: fix broken Kubeflow Pipelines installation link by @aniketpati1121 in #12753
• Recurring Runs Queue Throughput Optimization by @ntny in #12610
• Fix the reconciliation bug: by @ntny in #12648
• fix(frontend): show logs for terminated pods. Fixes #11969 by @AnaySh in #12742
• ci: add pr number to the cache key by @nsingla in #12764
• Fix executor handling for collected list artifacts by @sduvvuri1603 in #12707
• feat(backend): add gRPC metrics to api-server (RPS/latency), optimize execution spec reporting by @ntny in #12010
• chore(ci): Simplify image-build workflow by removing caching logic by @hbelmiro in #12769
• feat(ci): optimize copilot reviews by @droctothorpe in #12768
• fix: resolve 6 CVEs in frontend server via ESM + k8s client upgrade by @jeffspahr in #12756
• fix(frontend): require podnamespace for pod logs when authz is enabled by @jeffspahr in #12778
• chore(ci): Update image-build workflow to use github.run_id for artifact path by @hbelmiro in #12773
• fix: support non-default cluster domain for metadata service by @Priyanshu-u07 in #12701
• fix: argument list to long error for large DAGs. Fixes #12453 by @AnaySh in #12737
• fix(multi-user): sync frontend images on namespace deployments by @jsonmp-k8 in #12783
• fix(frontend): Patch Artifact Storage Key XSS Vulnerability. Fixes #12670 by @JerT33 in #12671
• feat(frontend): migrate CRA to Vite + Vitest by @jeffspahr in #12754
• chore(ci): Refine SeaweedFS S3 auth setup and enhance wait logic in deployment scripts by @hbelmiro in #12772
• fix(ci): pass build-args to Docker builds to fix unknown ref in tutorial links by @jsonmp-k8 in #12795
• fix(frontend): update server integration tests to support Vite build output by @kaikaila in #12796
• docs : replace broken project argo link with offical argo workflow d… by @aniketpati1121 in #12781
• chore(frontend): drop .vitest. prefix from test filenames by @Priyanshu-u07 in #12799
• Prevent duplicate shell completion entries in kfp CLI by @Riddhima8 in #12699
• fix(sdk): add type inference for CLI run parameters. Fixes #11607 by @puwun in #12767
• chore: Remove minio by @akagami-harsh in #12613
• feat: add UI smoke test tool for visual regression testing by @jeffspahr in #12784
• fix(backend): increase gRPC message size limit for MLMD. Fixes #11949 by @jsonmp-k8 in #12803
• fix(ci): use localhost for Docker push to local registry in deploy action by @kaikaila in #12807
• Fix SeaweedFS IAM endpoint in profile controller by @sduvvuri1603 in #12792
• test: fix ray pipeline and lower casing pipeline names in upgrade tests by @nsingla in #12766
• feat(security): enforce pod and container security contexts by @jsonmp-k8 in #12782
• chore(ci): upgrade kind to v0.31.0 and helm/kind-action to v1.13.0 by @jsonmp-k8 in #12820
• chore(ci): upgrade trivy-action to 0.34.0 and golangci-lint-action to v9 by @jsonmp-k8 in #12821
• fix(frontend): make UIServer shutdown await socket close by @jeffspahr in #12815
• fix(frontend); make cluster domain configurable for TensorBoard by @Priyanshu-u07 in #12786
• fix(frontend): restore initial sidenav auto-collapse behavior by @jeffspahr in #12819
• chore(frontend): upgrade material-ui to v4 by @jeffspahr in #12793
• fix(ci): handle fork PR metadata in frontend e2e freshness check by @jeffspahr in #12831
• chore: upgrade EOL base images (alpine, envoy) by @jsonmp-k8 in #12824
• chore(ci): Reverted changes in the CI check workflow from PR #12793 by @hbelmiro in #12810
• docs(KEP): add proposal for consolidating the python packages by @zazulam in #12548
• chore(test): Align test/ and test_data/ OWNERS with .github/OWNERS by @hbelmiro in #12809
• chore(frontend): add jeffspahr to OWNERS reviewers by @jeffspahr in #12841
• feat: add runAsUser/runAsGroup security context to KFP SDK by @jsonmp-k8 in #12832
• feat(backend): add Literal parameter validation in API Server and Driver. Fixes #12602 by @khushiiagrawal in #12607
• refactor(frontend): replace react-vis with recharts by @jeffspahr in #12829
• chore(frontend): bump react to 17 by @jeffspahr in #12849
• fix(backend): Fix mismatched task name in ParallelFor - Fixes #11964 by @cbartram in #12808
• chore(deps): bump werkzeug from 3.1.5 to 3.1.6 in /backend/src/apiserver/visualization by @dependabot[bot] in #12861
• chore(frontend): remove eslint-config-react-app by @jeffspahr in #12864
• fix: switch Python base images to slim to resolve CVEs by @jsonmp-k8 in #12868
• fix(sdk): remove overly restrictive accelerator limit validation Fixes #12865 by @kevo-1 in #12866
• fix: upgrade OpenTelemetry SDK to v1.40.0 (GO-2026-4394) by @jsonmp-k8 in #12870
• chore(frontend): add jeffspahr as frontend approver by @jeffspahr in #12869
• chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 in /frontend by @dependabot[bot] in #12867
• fix(backend): Publish executor logs for failed components in KFPv2 by @alenawang in #12877
• test(frontend): guard PagedTable against DOM nesting warnings by @jeffspahr in #12855
• chore(deps): bump qs and express in /frontend/mock-backend by @dependabot[bot] in #12814
• chore(deps): bump diff from 4.0.2 to 4.0.4 in /frontend by @dependabot[bot] in #12828
• chore(deps): bump qs from 6.14.1 to 6.14.2 in /frontend/server by @dependabot[bot] in #12816
• chore(deps): bump axios from 1.13.4 to 1.13.5 in /frontend/server by @dependabot[bot] in #12797
• chore(deps): bump lodash from 4.17.21 to 4.17.23 in /frontend by @dependabot[bot] in #12693
• fix(frontend): upgrade re-resizable to clear legacy lifecycle warning by @jeffspahr in #12858
• feat: add global admin defaults for security context runAsUser/runAsGroup/runAsNonRoot by @jsonmp-k8 in #12859
• fix(ci): add error handling for GitHub API in upgrade-test.yml. by @Priyanshu-u07 in #12876
• fix(ci): pin GCP SDK for proxy by @droctothorpe in #12886
• Update version tags to 2.16.0 by @droctothorpe in #12887
• chore(sdk): bump sdk versions to 2.16.0 by @droctothorpe in #12888
• fix(docs): update doc generation deps by @droctothorpe in #12908
• fix(docs): update readthedocs python version by @droctothorpe in #12909

New Contributors

• @uzi0espil made their first contribution in #12414
• @TiagoMoreira003 made their first contribution in #12545
• @Siva-Sainath made their first contribution in #12497
• @rishabh998186 made their first contribution in #12541
• @juhyeon-cha made their first contribution in #12575
• @ajugeorge97 made their first contribution in #12539
• @jbojar made their first contribution in #12551
• @BhoomiAgrawal12 made their first contribution in #12595
• @jeffspahr made their first contribution in #12631
• @sameerdattav made their first contribution in #12634
• @neo99zhang made their first contribution in #12519
• @Vedant2005goyal made their first contribution in #12679
• @Priyanshu-u07 made their first contribution in #12701
• @jsonmp-k8 made their first contribution in #12783
• @Riddhima8 made their first contribution in #12699
• @puwun made their first contribution in #12767
• @khushiiagrawal made their first contribution in #12607
• @kevo-1 made their first contribution in #12866
• @alenawang made their first contribution in #12877

Full Changelog: 2.15.0...2.16.0