The GitHub Actions job "Tests (ARM)" on airflow.git/v3-3-test has failed. Run started by GitHub user pierrejeambrun (triggered by pierrejeambrun).
Head commit for run: c91b6400c908187fdd522c4e84fe2dc87ee25ba7 / Pierre Jeambrun <[email protected]> Authorize Dag reparse against the file's Dags, not the query-string dag_id (#69471) (#70115) * Authorize Dag reparse against the file's Dags, not the query-string dag_id The PUT /parseDagFile/{file_token} endpoint authorized the caller through a route dependency that, with no dag_id path parameter, resolves the target from the query string, which is decoupled from the Dag file the signed file_token actually resolves to. Add a requires_access_dag_from_file_token dependency that decodes the token, resolves the Dags defined in that file, and authorizes the caller against exactly those Dags, so authorization always matches the Dag being reparsed regardless of any request parameter. * Update airflow-core/src/airflow/api_fastapi/core_api/security.py * Fix CI --------- (cherry picked from commit c5faeb1555b4076739665b9434f616db37559727) Co-authored-by: Amogh Desai <[email protected]> Report URL: https://github.com/apache/airflow/actions/runs/29738812266 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
