- Ensure that
dag.partial_subset
doesn't mutate task group properties (#30129)
- Update
apache-airflow-providers-amazon
to7.3.0
to fix CVE-2023-25956. This update includes a breaking change for the Amazon provider, see the 6.0.0 Amazon provider changelog and 7.0.0 Amazon provider changelog for details. - Update
apache-airflow-providers-google
to8.11.0
to fix CVE-2023-25691 and CVE-2023-25692. - Update
werkzeug
to2.2.3
to fix CVE-2023-25577 - Update
cryptography
to39.0.2
to fix CVE-2023-0286 - Update
curl
to7.74.0-1.3+deb11u7
to fix CVE-2023-23916 - Update
gnutls
to3.7.1-5+deb11u3
to fix CVE-2023-0361
- Use time not tries for queued & running re-checks (#28586)
- Update
apache-airflow-providers-mysql
to4.0.0
andapache-airflow-providers-common-sql
to1.3.3
to fix CVE-2023-22884. This update includes a breaking change for the MySQL provider, see the 4.0.0 MySQL provider changelog for details. - Update
curl
to7.74.0-1.3+deb11u5
to fix CVE-2022-32221 - Update
openssl
to1.1.1n-0+deb11u4
to fix CVE-2023-0286
- Annotate KubernetesExecutor pods that we don't delete (#28844)
- Fix bad pods pickled in executor_config (#28454)
- Be more selective when adopting pods with KubernetesExecutor (#28899)
- Only patch single label when adopting pod (#28776)
- Don't re-patch pods that are already controlled by current worker (#26778)
- Fix backfill queued task getting reset to scheduled state (#23720)
- Update
pip
to22.3.1
- Update
wheel
to0.38.4
- Update
setuptools
to66.1.1
to fix CVE-2022-40897 - Update
future
to0.18.3
to fix CVE-2022-40899
- Fix deadlock when chaining multiple empty mapped tasks (#27964)
- Change the template to use human readable task_instance description (#25960)
- Update
certifi
to2022.12.7
to fix CVE-2022-23491 - Update
libtasn1
to4.16.0-2+deb11u1
to fix CVE-2021-46848 - Update
mariadb
to1:10.5.18-0+deb11u1
to fix a bunch of CVEs
- Don't overwrite connection extra with invalid json (#27142)
- Simplify origin string cleaning (#27143)
- Update
libexpat1
to2.2.10-2+deb11u5
to fix CVE-2022-43680
- Fix backporting issue with faulty executor config serialization logic
- Fix warning when using xcomarg dependencies (#26801)
- Revert "Cache the custom secrets backend so the same instance gets re-used" (#25556)
- Remove TaskFail duplicates check (#26714) (commit)
- Fix faulty executor config serialization logic (#26191) (commit)
- Updated
expat
to2.2.10-2+deb11u
to fix CVE-2022-40674
- Properly build URL to retrieve logs independently from system (#26337)
- Fix proper joining of the path for logs retrieved from celery worker (#26493)
- Fix UI redirect (#26409)
- Updated
pcre2
to10.36-2+deb11u1
to fix CVE-2022-1586 and CVE-2022-1587 - Updated
glibc
to2.31-13+deb11u4
to fix CVE-2021-3999 - Updated
zlib
to1:1.2.11.dfsg-2+deb11u2
to fix CVE-2022-37434 - Updated
Mako
to1.2.1
to fix CVE-2022-40023
User-facing CHANGELOG for AC 2.3.4+astro.1 from Airflow 2.3.4: