jedcunningham commented on code in PR #37563: URL: https://github.com/apache/airflow/pull/37563#discussion_r1496571110
########## RELEASE_NOTES.rst: ########## @@ -21,6 +21,105 @@ .. towncrier release notes start +Airflow 2.8.2 (2024-02-26) +-------------------------- + +Significant Changes +^^^^^^^^^^^^^^^^^^^ + +The ``allowed_deserialization_classes`` flag now follows a glob pattern (#36147). +""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" + +For example if one wants to add the class ``airflow.tests.custom_class`` to the +``allowed_deserialization_classes`` list, it can be done by writing the full class +name (``airflow.tests.custom_class``) or a pattern such as the ones used in glob +search (e.g., ``airflow.*``, ``airflow.tests.*``). + +If you currently use a custom regexp path make sure to rewrite it as a glob pattern. + +Alternatively, if you still wish to match it as a regexp pattern, add it under the new +list ``allowed_deserialization_classes_regexp`` instead. + +The audit_logs permissions have been updated for heightened security (#37501). +"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" + +This was done under the policy that we do not want users like Viewer, Ops, +and other users apart from Admin to have access to audit_logs. The intention behind +this change is to restrict users with less permissions from viewing user details +like First Name, Email etc. from the audit_logs when they are not permitted to. + +The impact of this change is that the existing users with non admin rights won't be able +to view or access the audit_logs, both from the Browse tab or from the DAG run. + +Bug Fixes +""""""""" +- Change margin to padding so first task can be selected (#37527) +- Fix Airflow serialization for ``namedtuple`` (#37168) +- Fix bug with clicking url-unsafe tags (#37395) +- ``Treeview`` - deterministic and new getter (#37162) +- Fix permissions of parent folders for log file handler (#37310) +- Fix permission check on DAGs when ``access_entity`` is specified (#37290) +- Fix the value of ``dateTimeAttrFormat`` constant (#37285) +- Resolve handler close race condition at triggerer shutdown (#37206) +- Fixing status icon alignment for various views (#36804) +- Remove superfluous ``@Sentry.enrich_errors`` (#37002) +- Use execution_date= param as a backup to base date for grid view (#37018) +- Handle SystemExit raised in the task. (#36986) +- Revoking audit_log permission from all users except admin (#37501) +- Fix broken regex for allowed_deserialization_classes (#36147) +- Fix the bug that affected the DAG end date. (#36144) +- Adjust node width based on task name length (#37254) +- fix: PythonVirtualenvOperator crashes if any python_callable function is defined in the same source as DAG (#37165) +- Fix collapsed grid width, line up selected bar with gantt (#37205) +- Adjust graph node layout (#37207) +- Revert the sequence of initializing configuration defaults (#37155) +- Displaying "actual" try number in TaskInstance view (#34635) +- Bugfix Triggering DAG with parameters is mandatory when show_trigger_form_if_no_params is enabled (#37063) +- Secret masker ignores passwords with special chars (#36692) +- Fix DagRuns with UPSTREAM_FAILED tasks get stuck in the backfill. (#36954) +- Disable ``dryrun`` auto-fetch (#36941) +- Fix copy button on a DAG run's config (#36855) +- Fix bug introduced by replacing spaces by + in run_id (#36877) +- Fix webserver always redirecting to home page if user was not logged in (#36833) +- REST API set description on POST to ``/variables`` endpoint (#36820) +- Sanitize the conn_id to disallow potential script execution (#32867) +- fix copy-bug (#34904) Review Comment: ```suggestion - Fix task id copy button copying wrong id (#34904) ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
