7.20.1 (2026-09-24)
Bug Fixes
- auth: authorize every request source a resource id can come from (#384) (9f73030), closes #285
- auth: deny artifact paths that name no experiment and gate the ungated artifact routes (#386) (5de2f1d), closes #385 #384
- auth: fold head onto get and gate run, trace and webhook routes (#385) (34f3284), closes #286 #286 #291 #289
- auth: refuse routes without a validator and add validators for the remaining mlflow families (#387) (78657ad), closes #384 #385 #386 #384