The GitHub Actions job "Check newsfragment PR number" on 
airflow.git/ghaeli/callback-context-execution-api has succeeded.
Run started by GitHub user seanghaeli (triggered by seanghaeli).

Head commit for run:
926b1a7fa89a6f505e545a8fa36ba29915b5f86f / Sean Ghaeli <[email protected]>
Fix workload token auth: use ExecutionAPIRoute on connections/variables/xcoms

The connections, variables, and xcoms routers used plain APIRouter without
route_class=ExecutionAPIRoute, so the Security(require_auth, scopes=[...])
at router level was never picked up by the allowed_token_types precomputation.
Every route defaulted to frozenset({"execution"}), rejecting workload tokens
with 403. Callback subprocesses use workload tokens and need these endpoints.

Fix: switch all three routers to ExecutionAPIRoute and move Security to
per-route decorators (matching the pattern in dag_runs.py).

Also register unusual_prefix_{hash}_{stem} bundle modules before import_string
on both the executor path (callback_supervisor.py) and triggerer path
(callback.py), so user callbacks defined in dags-folder DAG files can be
imported by their serialized mangled module name.

Report URL: https://github.com/apache/airflow/actions/runs/26601814048

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to