This is an automated email from the ASF dual-hosted git repository. rahulvats pushed a commit to branch changes-3.1.8rc1 in repository https://gitbox.apache.org/repos/asf/airflow.git
commit 0cceac2f3e0ab98cbb667e7edca33e92f46be72e Author: vatsrahul1001 <[email protected]> AuthorDate: Wed Mar 4 16:20:34 2026 +0530 Update RELEASE_NOTES.rst --- RELEASE_NOTES.rst | 105 +++++++++++++++++++++++ airflow-core/newsfragments/61400.significant.rst | 20 ----- reproducible_build.yaml | 4 +- 3 files changed, 107 insertions(+), 22 deletions(-) diff --git a/RELEASE_NOTES.rst b/RELEASE_NOTES.rst index 793b84dc28f..a8aaac2b968 100644 --- a/RELEASE_NOTES.rst +++ b/RELEASE_NOTES.rst @@ -24,6 +24,111 @@ .. towncrier release notes start +Airflow 3.1.8 (2026-03-10) +-------------------------- + +Significant Changes +^^^^^^^^^^^^^^^^^^^ + +- AuthManager Backfill permissions are now handled by the ``requires_access_dag`` on the ``DagAccessEntity.Run`` + + ``is_authorized_backfill`` of the ``BaseAuthManager`` interface has been removed. Core will no longer call this method and their + provider counterpart implementation will be marked as deprecated. + Permissions for backfill operations are now checked against the ``DagAccessEntity.Run`` permission using the existing + ``requires_access_dag`` decorator. In other words, if a user has permission to run a DAG, they can perform backfill operations on it. + + Please update your security policies to ensure that users who need to perform backfill operations have the appropriate ``DagAccessEntity.Run`` permissions. (Users + having the Backfill permissions without having the DagRun ones will no longer be able to perform backfill operations without any update) + +Bug Fixes +""""""" +- Variable table handle long words break when values are expanded (#62416) (#62781) +- UI: Fix use ISO dates in Gantt chart for cross-browser consistency (#61250) (#62784) +- Fix: Restore task_instance_history sequence on downgrade (#62759) +- UI variables page: added option to view text as multi lines (#61679) (#62779) +- Fix broken dag_processing.total_parse_time metric (#62128) (#62764) +- Fix Trigger UI form rendering for null enum values (#62060) (#62767) +- Fix timer.duration unit labels in logs (#61824) (#62757) +- Refactor DataTable to handle internal scrolling and fix overflow on narrow viewports (#62603) +- Fix XCom migration failing for NaN/Infinity float values (#62686) (#62760) +- SQL not rendered in Rendered Templates view (#60739) (#62348) +- Add readable dags checks for the dependencies endpoint (#62046) (#62586) +- Changed dag_bundle.signed_url_template from varchar(200) to text (#61041) (#62568) +- Fix WASB remote logging base path handling (#58946) (#61013) (#62456) +- Handle non-dictionary json payload during logging to avoid internal server error. (#62355) (#62367) +- UI: Fix unique keys for pagination ellipses (#62352) (#62366) +- UI: Fix only apply elk.portConstraints for LR orientation in graph view (#62144) (#62187) +- Fix grid view crash when task converted to TaskGroup (#61208) (#61279) (#62181) +- UI: Fix show active backfill in banner instead of first one (#61851) (#62137) +- Use start_date and end_date to calculate duration when duration is null for running taskinstance (#61898) (#62136) +- Fix deferrable sensors not respecting soft_fail on timeout (#61132) (#61421) +- Do not dilute task failures with finalization errors during execution (#62070) (#62113) +- Add missing ti.start and ti.finish metrics in Airflow 3 (#62019) (#62110) +- Fix DepContext mutation leak and restore reschedule-mode guard (#62089) +- Fix scheduler heartbeat misses caused by slow reschedule dependency check (#61983) (#62068) +- Flush in-memory OTel metrics at process shutdown (#61808) (#61869) +- Fix slots negative infinity (#61140) (#61768) +- Fix recursion depth error in _redact_exception_with_context (#61776) (#61795) +- API: Fix disable uvloop if PYTHONASYNCIODEBUG=1 to prevent segfault … (#61281) (#61933) +- Fix scheduler crash when enqueuing TI with null dag_version_id (#61813) (#61846) +- UI: Fix Fix star icon visibility in Favorite filter buttons when selected (#61862) +- Fix secrets masking in Rendered Templates for complex objects (#61394) (#61763) +- Fix list dag versions permissions (#61675) (#61733) +- Fix Triggerer crashing if Trigger uses builtin print function (#60258) (#61703) +- Fix GZipMiddleware with correct comment placement (#61538) (#61566) +- Fix: Fix grid view tooltip z-index issue (#61275) (#61403) +- Fix middleware order to prevent chunked FastAPI responses (#61043) (#61539) +- Fix: fix minimap on DAG graph view not showing DAG nodes (#61511) (#61530) +- UI: Fix Remove explicit bg color from filter buttons to fix pale appearance (#60346 backport fix) (#61457) +- Fix Liveness / Readiness / Startup probe path for Airflow 3.x #58129 (#58734) (#61411) + +Miscellaneous +""""""""""""" +- Add logging to detect try number race (#62703) (#62821) +- Fix minimatch ReDoS vulnerabilities via pnpm overrides (#62805) +- Override tar dependency in Simple auth manager (#62787) +- Remove mp_start_method remnants (#61150) (#62762) +- Expose literal and ParamsDict at SDK top level (#59782) (#62756) +- Fix Preserve variable value formatting in edit dialog (#58757) (#62339) +- Bulk connection var usage (#61570) (#62076) +- Add LOG_MAX_SIZE environment variables to log groomer (#61559) (#61950) +- Add on_task_instance_skipped listener hookspec (#59467) (#61863) +- Persist table columns visibility in local storage (#61858) (#61868) +- Make conn_type optional in task SDK Connection datamodel (#61728) (#61835) +- Grid merge node dict storage (#61656) (#61789) +- Add XCom serilizer for pendulum.date.Date (#61176) (#61717) +- Alias run_after for XComResponse (#61443) (#61672) +- Fix missing translation keys for blocking dependencies in UI (#61314) (#61366) (#61638) +- Fix main content margin to align with navigation sidebar width (#61614) (#61622) +- Add access_key and connection_string to DEFAULT_SENSITIVE_FIELDS (#61580) (#61582) +- Add error handling for pause/unpause toggle permission errors (#61389) (#61533) +- Select filepath using cursor (#61011) (#61506) +- Add task_display_name to LightGridTaskInstanceSummary model (#61440) (#61505) +- Deprecate BackfillDetails and use DagAcccessEntity.Run for backfill p… (#61456) +- Update healthcheck command syntax for celery worker (#58861) (#61412) +- Flatten grid structure endpoint memory consumption (#61273) (#61393) +- Fix language selector state not updating on change (#61060) (#61263) +- Performance: optimize grid view refresh pressure on the API (#62085) (#62135) + +Doc Only Changes +^^^^^^^^^^^^^^^^ +- Slight rephrase of experimental warning (#62836) +- Fix typo in PL translation (#62031) (#62761) +- Close Catalan translation gap in v3-1-test (#62477) +- Add release notes about grpcio downgraded for Python 3.12, 2.11.1 image. (#62635) (#62642) +- Fill Taiwanese Mandarian translation gap (#62397) +- [DOCS] Extension on System Tests, documenting dag.test() (#59390) (#62131) +- Remove docs mentioning old, unsupported hybrid executors (#62093) (#62096) +- Update versions in README.md (#61944) (#61966) +- Clarify security model of Airflow (#61754) (#61770) +- Clarify ExternalTaskSensor path in dags.rst (#61555) (#61617) +- Close German Translation Gaps 2026-02-05 v3-1 (#61478) +- Add missing translations for PL 3.1 branch (#61423) +- Clarify policy for exposing sensitive data (#59864) (#61392) +- Clarify template context for asset-triggered DAGs in airflow-core docs (#61258) (#61282) +- Add Keycloak token documentation to Security/API (#61228) (#61248) + + Airflow 3.1.7 (2026-02-04) -------------------------- diff --git a/airflow-core/newsfragments/61400.significant.rst b/airflow-core/newsfragments/61400.significant.rst deleted file mode 100644 index 7bdee4390a7..00000000000 --- a/airflow-core/newsfragments/61400.significant.rst +++ /dev/null @@ -1,20 +0,0 @@ -AuthManager Backfill permissions are now handled by the ``requires_access_dag`` on the ``DagAccessEntity.Run`` - -``is_authorized_backfill`` of the ``BaseAuthManager`` interface has been removed. Core will no longer call this method and their -provider counterpart implementation will be marked as deprecated. -Permissions for backfill operations are now checked against the ``DagAccessEntity.Run`` permission using the existing -``requires_access_dag`` decorator. In other words, if a user has permission to run a DAG, they can perform backfill operations on it. - -Please update your security policies to ensure that users who need to perform backfill operations have the appropriate ``DagAccessEntity.Run`` permissions. (Users -having the Backfill permissions without having the DagRun ones will no longer be able to perform backfill operations without any update) - -* Types of change - - * [ ] Dag changes - * [ ] Config changes - * [x] API changes - * [ ] CLI changes - * [x] Behaviour changes - * [ ] Plugin changes - * [ ] Dependency changes - * [ ] Code interface changes diff --git a/reproducible_build.yaml b/reproducible_build.yaml index d0a2e167978..cdd80402a95 100644 --- a/reproducible_build.yaml +++ b/reproducible_build.yaml @@ -1,2 +1,2 @@ -release-notes-hash: 247684ecee6c11341ef00683ee92ab7d -source-date-epoch: 1769763434 +release-notes-hash: db8c830fe1cb5f83d846b2573f0355ac +source-date-epoch: 1772621353
