potiuk opened a new pull request, #66588:
URL: https://github.com/apache/airflow/pull/66588
## Summary
The CI image bumper auto-pinned `alpine:20260127` (a daily-edge tag) instead
of `alpine:3.23` in apache/airflow#66580. Root cause:
`packaging.version.Version("20260127")` parses as a valid single-component PEP
440 version and sorts **higher** than `3.23`, so the bumper's "latest version"
selection picked Alpine's date-stamped daily build over the 3.23 release.
The same logic would auto-pin any other Docker Hub image to its date-stamped
daily under the right circumstances — Alpine just happens to publish daily edge
tags under a `YYYYMMDD` scheme that PEP 440 swallows whole.
## Fix
Pre-filter the tag list against a date-shaped regex (`v?\d{8}(\.\d+)?`)
before parsing as a `Version`. Belt-and-braces: also reject parsed `Version`
objects whose major component is implausibly large (≥ 10000), catching anything
the regex misses. Added `edge` to the existing floating-tag skiplist while
there.
## Tests
5 parametrised cases:
- alpine real-tag mix (release + date + edge): picks `3.23.5`, not
`20260127`.
- busybox style (mixed dotted releases + bare-major aliases): picks `1.37.0`.
- `v`-prefixed date tags: picks `v3.23.5`, not `v20260127`.
- date-with-revision-suffix (`20260127.1`): still rejected.
- regex unit-test verifying it matches date-shaped tags only, not legitimate
releases.
## Reproduces
apache/airflow#66580 (CI auto-bump PR).
---
##### Was generative AI tooling used to co-author this PR?
- [X] Yes — Claude Code (Opus 4.7)
Generated-by: Claude Code (Opus 4.7) following [the
guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
