dependabot[bot] opened a new pull request, #110: URL: https://github.com/apache/incubator-liminal/pull/110
Bumps [apache-airflow](https://github.com/apache/airflow) from 2.1.2 to 2.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/airflow/releases";>apache-airflow's releases</a>.</em></p> <blockquote> <h2>Apache Airflow 2.7.0</h2> <h2>Significant Changes</h2> <h3>Remove Python 3.7 support (<a href="https://redirect.github.com/apache/airflow/issues/30963";>#30963</a>)</h3> <p>As of now, Python 3.7 is no longer supported by the Python community. Therefore, to use Airflow 2.7.0, you must ensure your Python version is either 3.8, 3.9, 3.10, or 3.11.</p> <h3>Old Graph View is removed (<a href="https://redirect.github.com/apache/airflow/issues/32958";>#32958</a>)</h3> <p>The old Graph View is removed. The new Graph View is the default view now.</p> <h3>The trigger UI form is skipped in web UI if no parameters are defined in a DAG (<a href="https://redirect.github.com/apache/airflow/issues/33351";>#33351</a>)</h3> <p>If you are using <code>dag_run.conf</code> dictionary and web UI JSON entry to run your DAG you should either:</p> <ul> <li><code>Add params to your DAG <https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/params.html#use-params-to-provide-a-trigger-ui-form></code>_</li> <li>Enable the new configuration <code>show_trigger_form_if_no_params</code> to bring back old behaviour</li> </ul> <h3>The "db init", "db upgrade" commands and "[database] load_default_connections" configuration options are deprecated (<a href="https://redirect.github.com/apache/airflow/issues/33136";>#33136</a>).</h3> <p>Instead, you should use "airflow db migrate" command to create or upgrade database. This command will not create default connections. In order to create default connections you need to run "airflow connections create-default-connections" explicitly, after running "airflow db migrate".</p> <h3>In case of SMTP SSL connection, the context now uses the "default" context (<a href="https://redirect.github.com/apache/airflow/issues/33070";>#33070</a>)</h3> <p>The "default" context is Python's <code>default_ssl_contest</code> instead of previously used "none". The <code>default_ssl_context</code> provides a balance between security and compatibility but in some cases, when certificates are old, self-signed or misconfigured, it might not work. This can be configured by setting "ssl_context" in "email" configuration of Airflow.</p> <p>Setting it to "none" brings back the "none" setting that was used in Airflow 2.6 and before, but it is not recommended due to security reasons ad this setting disables validation of certificates and allows MITM attacks.</p> <h3>Disable default allowing the testing of connections in UI, API and CLI(<a href="https://redirect.github.com/apache/airflow/issues/32052";>#32052</a>)</h3> <p>For security reasons, the test connection functionality is disabled by default across Airflow UI, API and CLI. The availability of the functionality can be controlled by the <code>test_connection</code> flag in the <code>core</code> section of the Airflow configuration (<code>airflow.cfg</code>). It can also be controlled by the environment variable <code>AIRFLOW__CORE__TEST_CONNECTION</code>.</p> <p>The following values are accepted for this config param:</p> <ol> <li><code>Disabled</code>: Disables the test connection functionality and disables the Test Connection button in the UI.</li> </ol> <p>This is also the default value set in the Airflow configuration. 2. <code>Enabled</code>: Enables the test connection functionality and activates the Test Connection button in the UI.</p> <ol start="3"> <li><code>Hidden</code>: Disables the test connection functionality and hides the Test Connection button in UI.</li> </ol> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/airflow/blob/main/RELEASE_NOTES.rst";>apache-airflow's changelog</a>.</em></p> <blockquote> <h2>Airflow 2.7.0 (2023-08-18)</h2> <p>Significant Changes ^^^^^^^^^^^^^^^^^^^</p> <p>Remove Python 3.7 support (<a href="https://redirect.github.com/apache/airflow/issues/30963";>#30963</a>) """""""""""""""""""""""""""""""""" As of now, Python 3.7 is no longer supported by the Python community. Therefore, to use Airflow 2.7.0, you must ensure your Python version is either 3.8, 3.9, 3.10, or 3.11.</p> <p>Old Graph View is removed (<a href="https://redirect.github.com/apache/airflow/issues/32958";>#32958</a>) """""""""""""""""""""""""""""""""" The old Graph View is removed. The new Graph View is the default view now.</p> <p>The trigger UI form is skipped in web UI if no parameters are defined in a DAG (<a href="https://redirect.github.com/apache/airflow/issues/33351";>#33351</a>) """""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""</p> <p>If you are using <code>dag_run.conf</code> dictionary and web UI JSON entry to run your DAG you should either:</p> <ul> <li><code>Add params to your DAG <https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/params.html#use-params-to-provide-a-trigger-ui-form></code>_</li> <li>Enable the new configuration <code>show_trigger_form_if_no_params</code> to bring back old behaviour</li> </ul> <p>The "db init", "db upgrade" commands and "[database] load_default_connections" configuration options are deprecated (<a href="https://redirect.github.com/apache/airflow/issues/33136";>#33136</a>). """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" Instead, you should use "airflow db migrate" command to create or upgrade database. This command will not create default connections. In order to create default connections you need to run "airflow connections create-default-connections" explicitly, after running "airflow db migrate".</p> <p>In case of SMTP SSL connection, the context now uses the "default" context (<a href="https://redirect.github.com/apache/airflow/issues/33070";>#33070</a>) """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" The "default" context is Python's <code>default_ssl_contest</code> instead of previously used "none". The <code>default_ssl_context</code> provides a balance between security and compatibility but in some cases, when certificates are old, self-signed or misconfigured, it might not work. This can be configured by setting "ssl_context" in "email" configuration of Airflow.</p> <p>Setting it to "none" brings back the "none" setting that was used in Airflow 2.6 and before, but it is not recommended due to security reasons ad this setting disables validation of certificates and allows MITM attacks.</p> <p>Disable default allowing the testing of connections in UI, API and CLI(<a href="https://redirect.github.com/apache/airflow/issues/32052";>#32052</a>) """""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" For security reasons, the test connection functionality is disabled by default across Airflow UI, API and CLI. The availability of the functionality can be controlled by the <code>test_connection</code> flag in the <code>core</code> section of the Airflow configuration (<code>airflow.cfg</code>). It can also be controlled by the environment variable <code>AIRFLOW__CORE__TEST_CONNECTION</code>.</p> <p>The following values are accepted for this config param:</p> <ol> <li><code>Disabled</code>: Disables the test connection functionality and</li> </ol> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/airflow/commit/c08c82e9dd0e4aabaa5121519819a636df635210";><code>c08c82e</code></a> fixup! Update RELEASE_NOTES.rst</li> <li><a href="https://github.com/apache/airflow/commit/57114c653891ac2cb5015a8f9e5011ebb9723220";><code>57114c6</code></a> Improve graph nesting logic (<a href="https://redirect.github.com/apache/airflow/issues/33421";>#33421</a>)</li> <li><a href="https://github.com/apache/airflow/commit/119407d81990e61a1983b287234f5806d70efdf0";><code>119407d</code></a> Fix eager upgrade failures for canary builds (<a href="https://redirect.github.com/apache/airflow/issues/33395";>#33395</a>)</li> <li><a href="https://github.com/apache/airflow/commit/bade0efeb9efa59fe92c35b1f253bb932170d7c0";><code>bade0ef</code></a> Restore <code>--builder</code> command for cache building (<a href="https://redirect.github.com/apache/airflow/issues/33387";>#33387</a>)</li> <li><a href="https://github.com/apache/airflow/commit/f170861c4315846ffcda3a885f5e3dbb737b136b";><code>f170861</code></a> Add better instructions to constraint files (<a href="https://redirect.github.com/apache/airflow/issues/33367";>#33367</a>)</li> <li><a href="https://github.com/apache/airflow/commit/c68372ccc13baf8fe378ac09c09310b8c882018d";><code>c68372c</code></a> Improve handling of CI image timeout when backtracking (<a href="https://redirect.github.com/apache/airflow/issues/33364";>#33364</a>)</li> <li><a href="https://github.com/apache/airflow/commit/c67408664a12a044fd82e9eb84d9c25e69e2b777";><code>c674086</code></a> Add update-constraints command that allows to modify released ones (<a href="https://redirect.github.com/apache/airflow/issues/33144";>#33144</a>)</li> <li><a href="https://github.com/apache/airflow/commit/21ecb41ff6a06a4d9fb34a96b5ef1fb469e7b4f0";><code>21ecb41</code></a> Bring back the decision buttons on DAG trigger (<a href="https://redirect.github.com/apache/airflow/issues/33394";>#33394</a>)</li> <li><a href="https://github.com/apache/airflow/commit/f5d8201ea7935d17cecaf25fc90d4ef0ccdd627b";><code>f5d8201</code></a> Remove user sessions when resetting password (<a href="https://redirect.github.com/apache/airflow/issues/33347";>#33347</a>)</li> <li><a href="https://github.com/apache/airflow/commit/a817f21fb52d01cbf8dce924801d76f9b23c55b0";><code>a817f21</code></a> Fix links in security docs (<a href="https://redirect.github.com/apache/airflow/issues/33329";>#33329</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/airflow/compare/2.1.2...2.7.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/incubator-liminal/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@liminal.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
