[air](deps): Update wandb requirement from >=0.23.1 to >=0.28.0 in /python/requirements/ml

[dependabot]

Updates the requirements on wandb to permit the latest version.

Release notes

Sourced from wandb's releases.

v0.28.0

What's Changed

Notable Changes

This version drops compatibility with server versions older than 0.65.0.

Added

• High-resolution image rendering in terminals supporting the Kitty protocol with ANSI fallback in the W&B LEET TUI media pane (wandb leet command) (@​dmitryduev in wandb/wandb#11806)
• Synced scrubbing in the W&B LEET media pane: press l to link scrubbing, then the scrub keys (←/→/↑/↓/home/end) move a shared cursor over the union step timeline and every image tile follows it (@​dmitryduev in wandb/wandb#12033)
• Basic remote-run support in W&B LEET TUI (wandb leet <run-url> command) (@​jacobromero in wandb/wandb#11261)
• The following paginated artifacts and registry API methods now accept an optional order string as a keyword argument: Api.artifacts(), Api.artifact_collections(), Api.registries(), Api.registries().collections(), Registry.collections() (@​tonyyli-wandb in wandb/wandb#11990)

Changed

• W&B LEET, the terminal UI for viewing W&B runs, is now generally available as wandb leet; wandb beta leet is kept as an alias (@​dmitryduev in wandb/wandb#12028)
• wandb.Api().runs() no longer loads Sweeps for each run by default to improve query performance. Sweep data is loaded on first access of the sweep property (@​kmikowicz-wandb in wandb/wandb#12019)
• Lists of images logged under a single key are now displayed in the W&B LEET media pane, one tile per image (@​dmitryduev in wandb/wandb#12033)

Fixed

• File.download() no longer fails after a hardcoded 5-second timeout; downloads go through wandb-core and respect the file transfer settings (@​dmitryduev in wandb/wandb#12039)
• wandb.Api().viewer (and Api().user() / Api().users()) no longer fail with WandbApiFailedError: relogin required for some API keys, a regression in 0.27.1 (@​dmitryduev in wandb/wandb#12009)
• When a wandb.Image carrying multiple box or mask layers with distinct class_labels is logged inside a wandb.Table, each layer's labels are now preserved in new box_class_maps / mask_class_maps fields in the table.json. Previously, there was only as single class_map that got incorrectly clobbered by each set of class labels. The next server release will contain a corresponding frontend fix that reads these per-layer fields. Legacy servers will retain the current behavior. (@​kelu-wandb in wandb/wandb#11901)
• Artifact file operations now consistently require normalized relative paths (@​tonyyli-wandb in wandb/wandb#11735)
• Logging an artifact (whether via WandbLogger or run.log_artifact) now writes the manifest file to the artifact's staging directory instead of the OS temp dir ($TMPDIR), avoiding silent failures when $TMPDIR is missing or unwritable (@​ibindlish in wandb/wandb#11958)
• Logging artifacts in shared mode works again, and in particular, wandb.init(mode="shared") with code-saving enabled no longer raises an error (@​timoffex in wandb/wandb#12017)
• git_root setting is now preferred for creating the diff.patch file, the root_dir setting is now used as a fallback (@​TomSiegl in wandb/wandb#11967)
• Apple system metrics (GPU, CPU, power, and temperature) are now collected on Apple M5 Macs (@​dmitryduev in wandb/wandb#12061)
• file download progress is now shown when using wandb.Api().run(...).download_history_exports (@​jacobromero in wandb/wandb#12063)
• Run.scan_history() no longer returns no rows for a run whose history exists but has not been exported to parquet (e.g. an active run; a regression in 0.27.1) (@​dmitryduev in wandb/wandb#12073)

Changelog

Sourced from wandb's changelog.

[0.28.0] - 2026-06-22

Notable Changes

This version drops compatibility with server versions older than 0.65.0.

Added

• High-resolution image rendering in terminals supporting the Kitty protocol with ANSI fallback in the W&B LEET TUI media pane (wandb leet command) (@​dmitryduev in wandb/wandb#11806)
• Synced scrubbing in the W&B LEET media pane: press l to link scrubbing, then the scrub keys (←/→/↑/↓/home/end) move a shared cursor over the union step timeline and every image tile follows it (@​dmitryduev in wandb/wandb#12033)
• Basic remote-run support in W&B LEET TUI (wandb leet <run-url> command) (@​jacobromero in wandb/wandb#11261)
• The following paginated artifacts and registry API methods now accept an optional order string as a keyword argument: Api.artifacts(), Api.artifact_collections(), Api.registries(), Api.registries().collections(), Registry.collections() (@​tonyyli-wandb in wandb/wandb#11990)

Changed

• W&B LEET, the terminal UI for viewing W&B runs, is now generally available as wandb leet; wandb beta leet is kept as an alias (@​dmitryduev in wandb/wandb#12028)
• wandb.Api().runs() no longer loads Sweeps for each run by default to improve query performance. Sweep data is loaded on first access of the sweep property (@​kmikowicz-wandb in wandb/wandb#12019)
• Lists of images logged under a single key are now displayed in the W&B LEET media pane, one tile per image (@​dmitryduev in wandb/wandb#12033)

Fixed

• File.download() no longer fails after a hardcoded 5-second timeout; downloads go through wandb-core and respect the file transfer settings (@​dmitryduev in wandb/wandb#12039)
• wandb.Api().viewer (and Api().user() / Api().users()) no longer fail with WandbApiFailedError: relogin required for some API keys, a regression in 0.27.1 (@​dmitryduev in wandb/wandb#12009)
• When a wandb.Image carrying multiple box or mask layers with distinct class_labels is logged inside a wandb.Table, each layer's labels are now preserved in new box_class_maps / mask_class_maps fields in the table.json. Previously, there was only as single class_map that got incorrectly clobbered by each set of class labels. The next server release will contain a corresponding frontend fix that reads these per-layer fields. Legacy servers will retain the current behavior. (@​kelu-wandb in wandb/wandb#11901)
• Artifact file operations now consistently require normalized relative paths (@​tonyyli-wandb in wandb/wandb#11735)
• Logging an artifact (whether via WandbLogger or run.log_artifact) now writes the manifest file to the artifact's staging directory instead of the OS temp dir ($TMPDIR), avoiding silent failures when $TMPDIR is missing or unwritable (@​ibindlish in wandb/wandb#11958)
• Logging artifacts in shared mode works again, and in particular, wandb.init(mode="shared") with code-saving enabled no longer raises an error (@​timoffex in wandb/wandb#12017)
• git_root setting is now preferred for creating the diff.patch file, the root_dir setting is now used as a fallback (@​TomSiegl in wandb/wandb#11967)
• Apple system metrics (GPU, CPU, power, and temperature) are now collected on Apple M5 Macs (@​dmitryduev in wandb/wandb#12061)
• file download progress is now shown when using wandb.Api().run(...).download_history_exports (@​jacobromero in wandb/wandb#12063)
• Run.scan_history() no longer returns no rows for a run whose history exists but has not been exported to parquet (e.g. an active run; a regression in 0.27.1) (@​dmitryduev in wandb/wandb#12073)

[0.27.2] - 2026-06-06

Fixed

• Run.scan_history() no longer returns duplicate or missing steps when getting run history (@​jacobromero in wandb/wandb#12010)

[0.27.1] - 2026-06-04

Added

• The automations API now supports artifact tag, collection tag, and artifact unlinking events (@​tonyyli-wandb in wandb/wandb#11922)

Changed

• wandb.Api GraphQL operations are routed through the wandb-core service instead of the legacy Python GraphQL client. Failures from these operations now raise WandbApiFailedError instead of requests HTTP exceptions, and customizations made by patching requests no longer affect these GraphQL calls (@​dmitryduev in wandb/wandb#11818)

Removed

... (truncated)

Commits

• a4305a7 Bump version and update CHANGELOG for release 0.28.0
• 0ef7349 fix: scan_history returning empty for active runs (#12073)
• 19df79f chore: bump actions/checkout from 6 to 7 in /.github/workflows (#12068)
• 7bbde6d chore: update go dependencies (#12072)
• 12d9004 refactor: route API file downloads through wandb-core (#12039)
• eeceff6 feat(artifacts): accept order kwarg in artifacts and registries paginators + ...
• 0f6e0b0 fix: display download stats for wandb.Api.Run.download_history_exports (#12063)
• 12967f6 feat: collect system metrics on Apple M5 Macs (#12061)
• f344939 chore: fix windows unit tests for git_root (#12062)
• ed21b2e chore(launch): update chainguard-base (#12045)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)