The GitHub Actions job "Tests (AMD)" on airflow.git/bump-flask-appbuilder-5.2.1 has failed. Run started by GitHub user potiuk (triggered by potiuk).
Head commit for run: dfed5e10b208c269a0d00abfeff4baa1b5e12ba7 / Jarek Potiuk <[email protected]> Bump flask-appbuilder to 5.2.1 and mirror new auth event hooks Upstream FAB 5.2.1 was released to PyPI on 2026-04-09 (no GitHub release was cut, only a master commit `5dae8164` titled "release: 5.2.1"). It adds three vendored-relevant items on top of 5.2.0: - PR #2450 (commit 63e7708e) — three new no-op hook methods on BaseSecurityManager: on_user_login, on_user_login_failed, on_user_logout. update_user_auth_stat now calls on_user_login or on_user_login_failed at the end. AuthView.logout / SAML SLO call on_user_logout. Hook defaults are no-ops; subclasses can override for audit logging. - PR #2451 — _is_user_detached / _get_safe_user helpers + a rewrite of has_access to handle DetachedInstanceError on g.user (LocalProxy or detached ORM instance after some session boundary). Inherited automatically; not vendored in override.py so no mirror needed. - PR #2440 — security log redactions: OAuth tokens / responses no longer logged at debug level. Inherited; the redacted code paths are not vendored in override.py. Mirror the auth-event-hook pieces into FabAirflowSecurityManagerOverride since update_user_auth_stat is vendored. Without this mirror, the new hooks would not fire in Airflow because override.py shadows the upstream implementation. Specifically: - Add no-op on_user_login / on_user_login_failed / on_user_logout methods on FabAirflowSecurityManagerOverride mirroring the FAB defaults. - Append the on_user_login / on_user_login_failed dispatch at the end of FabAirflowSecurityManagerOverride.update_user_auth_stat, matching the upstream order (called after update_user, so the counters / last_login are already persisted before the hook runs). Bump EXPECTED_FAB_VERSION in test_fab_alignment.py to 5.2.1; all 7 alignment tests + 39 security_manager unit tests pass locally with flask-appbuilder==5.2.1 installed. The pyjwt floor pin from the parent commit on this branch is unchanged; the lock-file bump for it is included here because uv re-resolved the graph for the FAB version bump. Report URL: https://github.com/apache/airflow/actions/runs/25780340310 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
