diff --git a/pyproject.toml b/pyproject.toml
index c8c912a..93698bc 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ dependencies = [
     "simple-websocket>=1.0",
     "claude-agent-sdk",
     "databricks-sdk>=0.20.0",
-    "mlflow-skinny==3.11.1",
+    "mlflow-skinny==3.12.0",
     "requests",
     "cryptography>=46.0.7",
     # Security floors — make CVE-driven minimums explicit so future resolves
diff --git a/requirements.txt b/requirements.txt
index 01715aa..05067c7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -104,7 +104,7 @@ markupsafe==3.0.3
     #   werkzeug
 mcp==1.27.0
     # via claude-agent-sdk
-mlflow-skinny==3.11.1
+mlflow-skinny==3.12.0
     # via coda (pyproject.toml)
 opentelemetry-api==1.41.1
     # via