ColtenOuO opened a new pull request, #76688: URL: https://github.com/apache/airflow/pull/76688
`validate_sql()` skipped the data-modifying deep scan whenever `allowed_types` was not exactly `DEFAULT_ALLOWED_TYPES`. So a stricter list like `(exp.Select,)`, a reordered default, or the default plus `exp.Describe` let these through: ```sql WITH d AS (DELETE FROM users RETURNING *) SELECT * FROM d SELECT * INTO new_table FROM users ``` Now the deep scan is skipped only when the allow-list itself contains a data-modifying type (e.g. `exp.Insert`). Added tests cover the narrower, reordered and widened read-only lists. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 5.5) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
