This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/pip/airflow-core/pip-security-updates-6edc297103
in repository https://gitbox.apache.org/repos/asf/airflow.git
omit 032ff5cfce4 Bump gitpython
add 32be8fa754e Detect duplicate remote-logging schemes in provider.yaml
check (#70921)
add 09e49b4cae5 Avoid backlink noise when notifying PRs of uv.lock
conflicts (#71001)
add fb99b1dc0e0 Fix pytest class-scoped fixture deprecation warning in
extract_permissions tests (#71002)
add a1a2e94679f Make provider release changelog entries read for users,
not for us (#70948)
add fc8d6d8b619 Mask nested entities when writing bulk audit-log entries
(#70890)
add ed87a1a024a Refuse a separator-bearing secret id before the team
scoped lookup (#70902)
add 1baee0bf987 Do not import the stored path when rebuilding a Callback
from serialized data (#70704)
add 381339d5e7f Record the relaxed types-paramiko bound in uv.lock (#71039)
add bbb3c066109 Support require_approval in LLMBranchOperator (#70651)
add 79db9950006 Release TI lock before asset listener callbacks (#70951)
add b99aa145c40 Add regression test for SERVER_TERMINATED precedence over
retry (#70774)
add ee2e15e5e51 Update description on What is Airflow (#70547)
add b968192cd3a Mask list-shaped Variable values on deserialization
(#70891)
add 26d53bd1e84 Resolve the constraints a release ships instead of tagging
whatever exists (#71040)
add f0c13dc5f94 Fix task callbacks being skipped when
`TriggerDagRunOperator` gets a 404 (#70719)
add 64002a40580 Explicitly rollback on task state update exception (#71076)
add 22096909486 Only refuse team scoped like secret ids when multi_team is
on (#71078)
add a6265b77cf5 Resolve backfill_id in the access dependency with the type
the routes declare (#70889)
add f81459835ad Resolve the Dag's team when authorizing a Dag found by
lookup (#70893)
add d41ac7b6d21 Hide team scoped values of options registered as sensitive
(#70755)
add 8a15796a93c Add OpensearchRemoteLogIO.from_config and register
opensearch scheme (#70295)
add a424a811da8 Fix typos in README_RELEASE_PYTHON_CLIENT (#71089)
add 7071b79c7e3 Bump gitpython
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (032ff5cfce4)
\
N -- N -- N
refs/heads/dependabot/pip/airflow-core/pip-security-updates-6edc297103
(7071b79c7e3)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.../prepare-providers-documentation/SKILL.md | 70 ++++-
.github/workflows/generate-constraints.yml | 16 +-
...traints-on-push.yml => release-constraints.yml} | 207 +++++++-------
README.md | 2 +
airflow-core/docs/index.rst | 6 +-
airflow-core/newsfragments/70755.significant.rst | 29 ++
.../api_fastapi/core_api/routes/public/assets.py | 6 +-
.../api_fastapi/core_api/routes/public/config.py | 4 +-
.../api_fastapi/core_api/routes/public/dag_run.py | 5 +-
.../src/airflow/api_fastapi/core_api/security.py | 21 +-
.../api_fastapi/core_api/services/public/config.py | 5 +
.../execution_api/routes/task_instances.py | 21 +-
.../src/airflow/api_fastapi/logging/decorators.py | 59 +++-
airflow-core/src/airflow/assets/manager.py | 63 +++--
airflow-core/src/airflow/models/taskinstance.py | 13 +-
.../src/airflow/secrets/environment_variables.py | 46 +--
.../always/test_secrets_environment_variables.py | 44 +++
.../core_api/routes/public/test_assets.py | 28 ++
.../core_api/routes/public/test_config.py | 64 +++++
.../core_api/routes/public/test_dag_run.py | 26 ++
.../unit/api_fastapi/core_api/test_security.py | 51 +++-
.../versions/head/test_task_instances.py | 78 +++++
.../unit/api_fastapi/logging/test_decorators.py | 150 ++++++++++
airflow-core/tests/unit/assets/test_manager.py | 38 +++
dev/README_RELEASE_AIRFLOW.md | 50 +++-
dev/README_RELEASE_PYTHON_CLIENT.md | 4 +-
dev/breeze/doc/09_release_management_tasks.rst | 21 ++
...put_release-management_generate-constraints.svg | 54 ++--
...put_release-management_generate-constraints.txt | 2 +-
.../output_setup_check-all-params-in-groups.svg | 24 +-
.../output_setup_check-all-params-in-groups.txt | 2 +-
.../output_setup_regenerate-command-images.svg | 2 +-
.../output_setup_regenerate-command-images.txt | 2 +-
dev/breeze/doc/images/output_workflow-run.svg | 14 +-
dev/breeze/doc/images/output_workflow-run.txt | 2 +-
.../output_workflow-run_release-constraints.svg | 138 +++++++++
.../output_workflow-run_release-constraints.txt | 1 +
.../commands/release_candidate_command.py | 31 +-
.../src/airflow_breeze/commands/release_command.py | 48 +---
.../commands/release_management_commands.py | 4 +
.../commands/release_management_commands_config.py | 1 +
.../airflow_breeze/commands/workflow_commands.py | 44 +++
.../commands/workflow_commands_config.py | 12 +-
.../airflow_breeze/utils/release_constraints.py | 61 ++++
dev/breeze/tests/test_release_command.py | 57 +---
dev/breeze/tests/test_release_constraints.py | 91 ++++++
.../amazon/aws/secrets/secrets_manager.py | 6 +
.../amazon/aws/secrets/systems_manager.py | 6 +
.../amazon/aws/secrets/test_secrets_manager.py | 26 ++
.../amazon/aws/secrets/test_systems_manager.py | 22 ++
providers/common/ai/docs/operators/llm_branch.rst | 34 +++
.../providers/common/ai/decorators/llm_branch.py | 11 +-
.../common/ai/example_dags/example_llm_branch.py | 35 +++
.../airflow/providers/common/ai/mixins/approval.py | 30 +-
.../airflow/providers/common/ai/operators/llm.py | 9 +-
.../providers/common/ai/operators/llm_branch.py | 72 ++++-
.../providers/common/ai/operators/llm_sql.py | 9 +-
.../unit/common/ai/decorators/test_llm_branch.py | 19 ++
.../tests/unit/common/ai/mixins/test_approval.py | 12 +
.../unit/common/ai/operators/test_llm_branch.py | 314 ++++++++++++++++++++-
.../google/cloud/secrets/secret_manager.py | 7 +-
.../google/cloud/secrets/test_secret_manager.py | 22 ++
.../providers/microsoft/azure/secrets/key_vault.py | 6 +
.../unit/microsoft/azure/secrets/test_key_vault.py | 20 ++
providers/opensearch/docs/logging/index.rst | 16 ++
providers/opensearch/provider.yaml | 4 +
.../providers/opensearch/get_provider_info.py | 6 +
.../providers/opensearch/log/os_task_handler.py | 38 +++
.../unit/opensearch/log/test_os_task_handler.py | 121 ++++++++
.../airflow/providers/yandex/secrets/lockbox.py | 6 +
.../tests/unit/yandex/secrets/test_lockbox.py | 26 ++
scripts/ci/notify_uv_lock_conflicts.py | 18 +-
scripts/in_container/run_generate_constraints.py | 48 ++++
.../in_container/run_provider_yaml_files_check.py | 34 +++
scripts/tests/ci/prek/test_extract_permissions.py | 6 +-
scripts/tests/ci/test_notify_uv_lock_conflicts.py | 29 ++
.../in_container/test_run_generate_constraints.py | 39 +++
.../src/airflow_shared/configuration/parser.py | 124 +++++++-
.../tests/configuration/test_parser.py | 143 ++++++++++
task-sdk/src/airflow/sdk/definitions/callback.py | 22 ++
task-sdk/src/airflow/sdk/execution_time/context.py | 5 +
.../src/airflow/sdk/execution_time/task_runner.py | 98 ++++++-
.../tests/task_sdk/definitions/test_callback.py | 127 +++++++++
.../tests/task_sdk/execution_time/test_context.py | 35 ++-
.../task_sdk/execution_time/test_supervisor.py | 17 ++
.../task_sdk/execution_time/test_task_runner.py | 308 +++++++++++++++++++-
uv.lock | 2 +-
87 files changed, 3217 insertions(+), 432 deletions(-)
copy .github/workflows/{update-constraints-on-push.yml =>
release-constraints.yml} (51%)
create mode 100644 airflow-core/newsfragments/70755.significant.rst
create mode 100644
dev/breeze/doc/images/output_workflow-run_release-constraints.svg
create mode 100644
dev/breeze/doc/images/output_workflow-run_release-constraints.txt
create mode 100644 dev/breeze/src/airflow_breeze/utils/release_constraints.py
create mode 100644 dev/breeze/tests/test_release_constraints.py