chore(deps): update dependency kfp to v2.15.2

[konflux-internal-p02]

This PR contains the following updates:

Package	Change	Age	Confidence
kfp (changelog)	==2.13.0 -> ==2.15.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

kubeflow/pipelines (kfp)

v2.15.0

Bug Fixes

• CI Reduces CI time. Fixes #​11768 (#​12093)
• sdk Set spec.description when compiling to Kubernetes manifests (#​12132)
• manifests Include WC Deployment patch when updating Argo manifests. Fixes #​12144 (#​12145)
• tools Fix a typo in convert_to_k8s_format (#​12161)
• docs Fix local development after the SeaweedFS migration (#​12160)
• backend Fix mutating webhook when pipeline name label value is too long (#​12162)
• docs Fix driver remote debugging instructions (#​12177)
• backend Used bitnamilegacy Docker images instead of bitnami ones which will cease to work on Thursday, August 28, 2025. Fixes #​12170 (#​12171)
• CI Fix the CI failures due to disk space (#​12179)
• doc Add a release note for the additional_funcs component option (#​12182)
• CI Fix a variable reference typo in the GitHub workflow (#​12181)
• backend Return from pipeline deletions after the cache is updated (#​12153)
• backend/sdk Fix REST API outputs for pipeline versions with invalid platform specs (#​12183)
• backend Add support for additional filters on the Kubernetes native API (#​12189)
• backend Guard against panic when MLMD execution publishing fails (#​12203)
• CI Fix test-config sample CI failure (#​12223)
• ui Disable caching for AWS credential files (#​12225)
• sdk Add support for SELinux on the Docker runner and fix workspace mounts in Docker runner (#​12236)
• backend Fix critical and high CVEs found by Trivy (#​12233)
• frontend Fix artifact downloading. Fixes #​12000 (#​12244)
• fix first interaction workflow (#​12247)
• manifests Fix a typo in the multi-user roles (#​12261)
• deps Bump Go versions to address CVE CVE-2025-47907 (#​12267)
• CI Build the generator and release images on pushes (#​12273)
• ci correct PROXY check in workflow files (#​12266)
• sdk Align the versions on kfp[kubernetes] install (#​12283)
• docs/CI Small documentation updates and CI fixes after test refactoring (#​12279)
• tests Fix ginkgo compiler tests for disabled cache (#​12304)
• CI Switch the Kind cluster in CI to use root for storage (#​12309)
• replace delete with null assignment (#​12316)
• Fix go linting errors (#​12326)
• test fix migration script integration test (#​12331)
• include requirements files in python sdist (#​12330)
• logging reduce verbose logging for security. Fixes #​12293 (#​12295)
• test fix timeout error caused by KFP Kubernetes Native Migration Tests (#​12335)
• include requirements files in python sdist for kfp-pipeline-spec (#​12339)
• test respect TLSEnabled flag in integration tests (#​12338)
• CI ensure SeaweedFS S3 auth is set up before tests (#​12322)
• test/backend Fix pod to pod TLS (#​12357)
• backend Fix pod name truncation issue in PVC creation. Fixes #​12350 (#​12351)
• test overriding kfp version when loading component def from yaml (#​12364)
• artifact-proxy sets namespace. Fixes #​12041 (#​12374)
• backend RetrievePodName with POD_NAMES v1 (#​12303)
• backend Remove the default workspace configuration (#​12369)
• components Replace deprecated method_whitelist with allowed_methods in urllib3 Retry. Fixes #​12134 (#​12397)
• CI Harden PR commands workflow (#​12395)
• components Fix for dataproc batch components pipeline failure
• manifests Fix the profile controller for Minio deployment (#​12404)
• components Remove deprecated AutoML XGBoost trainer
• CI/SDK Fix tests for pipelines with optional input parameters and an SDK syntax error (#​12420)
• manifests update minio image ref (#​12424)
• components enforce mutual exclusivity between network and psc_interface_config in custom job spec from GCPC SDK
• backend Allow pod namespace configuration on env.go metadata-grpc service address (#​12428)
• sdk Add support for list and dict parameter type hints (#​12410)
• backend Parse JSON and decode base64 in artifact client (#​12467)

Documentation

• KEP K8s native api test plan (WIP) (#​12035)
• add pipeline anatomy documentation (#​12142)
• Document the supported Argo Workflows versions (#​12190)
• KEP adding test plan for to validate different argo workflow controller versions (#​12152)
• Add pipeline flow details to contribution (#​12226)
• Add an AGENTS.md file (#​12254)
• Add a KEP for Jupyter notebook components (#​12238)
• testplan adding MLMD removal test plan (#​12323)
• Add a --insecure flag for the Kubernetes native API migration script (#​12286)

Features

• backend/sdk define and use dsl.WORKSPACE_PATH_PLACEHOLDER for workspace access (#​12078)
• components Explicitly set base_image=python:3.9 for all dsl.component's, in case the default python image changes
• Updated dockerfile to support Power (#​12125)
• frontend Add custom credential provider (#​12173)
• sdk Allow sharing util functions across components (#​12178)
• components Introduce psc_interface_config to custom job to v1 GCPC custom job components/utils
• sdk/backend Support forwarding task configuration to external workloads (#​12185)
• sdk Add Docker runner support for KFP workspaces (#​12215)
• backend Add mounted PVCs to the generated cache key (#​12220)
• SDK+backend Add optional field for the secret/configmap as env vars (#​12216)
• Make artifact proxy opt-in via ARTIFACTS_PROXY_ENABLED configuration (#​12242)
• backend Add support for Pythonic artifacts (#​12256)
• sdk add compile-time validation for workspace size (#​12234)
• backend adding a retry logic to object store s3 configuration (#​12281)
• bump express version (#​12045)
• SDK Add SemaphoreKey and MutexName fields to DSL (#​11340)
• sdk Add notebook components and embedded artifacts support (#​12294)
• backend Add configuration to conditionally disable shared pipeline resources (#​12202)
• backend Adding Multi-CPU architecture support in Dockerfile.* files for supporting Arm64 platform (#​12313)
• backend Patch pipeline spec from APIServer EnvVar (#​12317)
• backend, sdk Add custom_path field to RuntimeArtifact (#​12248)
• metadata-writer Configure gRPC max_receive_message_length via environment variable (#​12438)
• backend/sdk Add download_to_workspace option to dsl.importer (#​12353)

Fix

• Seaweedfs admin credentials not loaded after restart (#​12460)

Other

• cherrypick 2.14 release branch (#​12112)
• update sphinx deps (#​12114)
• ignore adding pb2.py files for kfp-k8s docs (#​12115)
• switch to using git-cliff instead of changelog and test for kfp-server codegen (#​12113)
• add ci to test sphinx builds (#​12116)
• deps bump tmp from 0.2.3 to 0.2.4 in /frontend/server (#​12118)
• update release instructions (#​12117)
• Add security context at pod level for workflow-controller (#​12124)
• CI Fix invalid references in workflow conditions and update GitHub Actions to use actions/checkout@v5 consistently (#​12121)
• backend migrate GORM v1 to v2 (#​12013)
• Seaweedfs as Minio replacement (#​11965)
• deps bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 (#​12167)
• deps-dev bump cipher-base from 1.0.4 to 1.0.6 in /frontend (#​12166)
• Run e2e CI tests using various versions of AWF. Fixes #​12150 (#​12151)
• Add CI for uploading pipelines as Kubernetes objects (#​12148)
• Add gmfrasca to Reviewers lists (#​12195)
• fix bold syntax in release instructions (#​12199)
• backend introduce dialect-aware LargeText and replace longtext (+call-site type adjustments). Part of #​12063 (#​12163)
• fix import order in 6 files (baseline formatting) (#​12201)
• release bump version to 2.14.3 on master branch (#​12207)
• components Bump image version for Structured Data pipelines
• CI fixing typo in cluster variable name (#​12133)
• backend correct node id for metrics reporting (#​12213)
• add Sophotech to adopters list (#​12221)
• CI add vuln scan workflow (#​12219)
• samples/components Remove abandoned contrib components and samples (#​12237)
• components GCPC 2.21.0 Release
• update mlmd removal proto/schema design (#​12253)
• frontend Increase node version to 22.19.0 (#​12257)
• frontend Remediate CVE-2021-23358 (underscore) (#​12268)
• frontend remediate CVE-2023-36665 and CVE-2022-25878 protobufjs (#​12270)
• refactor Test refactor with workflow refactor (#​12222)
• Updating frontend dependency versions (#​12272)
• fix broken link in README (#​12282)
• frontend Remediating vulns in frontend package.json (#​12280)
• frontend update node-fetch and node-forge to remediate vulns (#​12287)
• frontend vuln fixes in frontend/server package.json (#​12288)
• fix import order and redundance in 15 files (baseline formatting) (#​12296)
• Replace sdk in pipeline files (#​12297)
• ci adding nsingla as a reviewer and an approver (#​12311)
• frontend upgrade http-proxy-middleware to fix CVE-2024-21536 (#​12300)
• refactor pre-commit workflow to correctly detect new lint issues (#​12302)
• remove --whole-files flag from precommit check (#​12319)
• refactor Sdk Tests Refactor (#​12310)
• Add Integration tests for Kubernetes Native API Migration script (#​12180)
• Carryover 2.14.5 (#​12337)
• add publish package workflow (#​12344)
• regenerate files for ver upgrade (#​12341)
• update versioning policy (#​12342)
• remove pin on protobuf 6 ver (#​12345)
• update release process (#​12359)
• Add artifact proxy deployment to sync.py (#​12285)
• tests add errorToMessage tests (#​12360)
• Apply patches for Openshift env to seaweedfs deployment (#​12314)
• Apply patches for Openshift env to init-seaweedfs job (#​12384)
• Consolidate system CA bundle logic into launcher_v2.go (#​12382)
• Upgrade to Argo Workflows v3.7.3 (#​12312)
• add GH Workflow linter & format existing workflows (#​12371)
• update py image refs to 3.11 (#​12383)
• components Bump image version for Structured Data pipelines
• update SeaweedFS to 4.00 and make it more robust (#​12406)
• ci updating k8s version in the CI workflows (#​12365)
• ci do not add any check annotations as it causes lot of noise for the re… (#​12409)
• fixing http client creation and renaming e2e pipeline name prefix (#​12421)
• components GCPC 2.22.0 Release
• update google-cloud-components-image (#​12432)
• add repo agnosticism to e2e/integration tests (#​12378)
• deps bump min-document from 2.19.0 to 2.19.2 in /frontend (#​12443)
• Extend and update the stalebot (#​12408)
• add missing branch name to v1 upgrade test (#​12446)
• deps bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /test/tools/project-cleaner (#​12464)

[cherry-pick]

• chore: update release notes and scripts (#​12470) (#​12471)

Chrore

• adding myself as a reviewer (#​12325)

Ci

• first interaction (#​12209)#

2.14.3 (2025-08-28)

Bug Fixes

• backend: Add support for additional filters on the Kubernetes native API (#​12189) (8bb97be)
• backend: Fix mutating webhook when pipeline name label value is too long (#​12162) (1b6fd87)
• backend: Return from pipeline deletions after the cache is updated (#​12153) (df79a7a)
• backend/sdk: Fix REST API outputs for pipeline versions with invalid platform specs (#​12183) (0cafb3d)
• sdk: Set spec.description when compiling to Kubernetes manifests (#​12132) (5ffddad)
• tools: Fix a typo in convert_to_k8s_format (#​12161) (9984fb7)

Other Pull Requests

• Cherry-Pick 2.14.2 SDK changes (#​12123) (ec00fa3)
• ignore adding pb2.py files for kfp-k8s docs (3fad4df)
• update sphinx deps (25805b8)

v2.14.4: Version 2.14.4

Compare Source

What's Changed

• chore: release 2.14.4 by @​HumairAK in #​12299
• Release 2.14 by @​HumairAK in #​12336
• chore: release 2.14.6 by @​HumairAK in #​12355
• fix(manifests): update minio image ref (#​12424) by @​HumairAK in #​12427
• fix visualization docker build failures by bumping python by @​HumairAK in #​12429
• chore(release): bumped version to 2.14.4 by @​HumairAK in #​12433

Full Changelog: kubeflow/pipelines@2.14.3...2.14.4

v2.14.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: konflux-internal-p02[bot]

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @konflux-internal-p02[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud