This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a change to branch ci-upgrade-main
in repository https://gitbox.apache.org/repos/asf/airflow.git
omit 9e67cf2b8ca Reference in-repo actions with GitHub's self-repository
syntax
omit 1f64733284f [main] CI: Upgrade important CI environment
add 9e509db2a7b docs - add create_async_metadata_engine example (#71663)
add 01f904b866a documentation - first example more explicit on airflow
syntax (#71316)
add 3b9df4f8c93 TimeDeltaSensor - delta templated (#71314)
add b42de709745 Run breeze from the locked dev/breeze environment (#72113)
add a7342c7210e Add tests for DataFusion base classes (#71983)
add e5ed00fc8f9 Revert "Suspend Apache Beam Provider due to grpcio
limitation (#61926)" (#66952)
add bc7068f292e Clarify when auth managers' is_authorized_hitl_task hook
runs (#72587)
add 91657fe9fde Remove unused FAB app-init helpers that could never run
(#72610)
add 930770211e5 Invalidate a user's sessions when their password is
changed through the API (#72657)
add d1acf31b442 Validate id_token issuer and audience in the FAB Authentik
provider (#72645)
add 132d4526cf0 Bump the fab-ui-package-updates group across 1 directory
with 2 updates (#72726)
add d8d78647229 Propagate OpenLineage context to Databricks job runs
(#72643)
add 860233f3c72 Fix missing HTTP access logs when api-server omits the
core app (#72026)
add 428e873c9fc Support full downstream skip on LLM branch reject (#72183)
add 0e516c37571 Improve deadline diagnostics for null DagRun fields
(#71767)
add d9d0d2cc07a Add tests for the AWS Batch executor boto schemas (#72609)
add 0ade0fba989 providers-fab: close sessions after users and roles
collection reads (#72578)
add a763ae3ea2b Keep HttpEventTrigger asset watchers polling after a
failed request (#72376)
add ff9576347ee Fix region_name being ignored by the Step Functions
execution trigger (#72625)
add ff839573e94 Bound remaining single-row lookups with .limit(1) (#72699)
add 0f5a23a469e Scope asset API responses to the assets a user may read
(#72682)
add 36a9a63ac08 Fix Calendar view computing cron planned runs in UTC
instead of the Dag's timezone (#71243)
add 27e882439f6 Gate asset event partition_key behind execution API
2026-06-30 (#72327)
add 39c6e268811 Fix Iceberg watcher crash by reverting to the sync state
store (#72312)
add c2c8dce0e47 Preserve custom operator defaults in mapped tasks (#72589)
add 7e6eeb0383c Document scope boundaries the security model leaves
implicit (#72172)
add 2aa581ea02b Add async asset store accessors for async tasks and
watcher triggers (#72127)
add 03a6b85690e Avoid retrying XCom expand actions (#72305)
add 4ddb6b46210 Fix clipping of Last run state badge (#72459)
add 777e727372d Bump the auth-ui-package-updates group across 1 directory
with 14 updates (#72813)
add 1b19d73936b Add failure-path and serialization tests for
StepFunctionsExecutionCompleteTrigger (#72570)
add 90787d5a2da Fix airflow info --file-io uploading an empty report
(#72707)
add 65c4ad1edd6 [main] CI: Upgrade important CI environment
add 2b36c243b95 Keep workspace-relative action references in CI workflows
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (9e67cf2b8ca)
\
N -- N -- N refs/heads/ci-upgrade-main (2b36c243b95)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/actions/prepare_all_ci_images/action.yml | 10 +-
.../actions/prepare_breeze_and_image/action.yml | 2 +-
.github/workflows/additional-ci-image-checks.yml | 2 +-
.github/workflows/additional-prod-image-tests.yml | 40 +-
.github/workflows/airflow-distributions-tests.yml | 4 +-
.github/workflows/airflow-e2e-tests.yml | 2 +-
.github/workflows/automatic-backport.yml | 2 +-
.github/workflows/basic-tests.yml | 16 +-
.github/workflows/ci-amd.yml | 66 +-
.github/workflows/ci-arm.yml | 66 +-
.github/workflows/ci-image-build.yml | 2 +-
.github/workflows/ci-image-checks.yml | 10 +-
.github/workflows/finalize-tests.yml | 4 +-
.github/workflows/generate-constraints.yml | 4 +-
.github/workflows/helm-tests.yml | 4 +-
.github/workflows/integration-system-tests.yml | 18 +-
.github/workflows/k8s-tests.yml | 4 +-
.github/workflows/kustomize-overlays-tests.yml | 2 +-
.github/workflows/milestone-tag-assistant.yml | 2 +-
.github/workflows/openlineage-e2e-compat-tests.yml | 2 +-
.github/workflows/prod-image-build.yml | 6 +-
.github/workflows/prod-image-extra-checks.yml | 2 +-
.github/workflows/publish-docs-to-s3.yml | 22 +-
.github/workflows/push-image-cache.yml | 4 +-
.github/workflows/refresh-constraints.yml | 2 +-
.github/workflows/refresh-image-registry-cache.yml | 6 +-
.github/workflows/registry-backfill.yml | 6 +-
.github/workflows/registry-build.yml | 14 +-
.github/workflows/release-constraints.yml | 6 +-
.github/workflows/release_dockerhub_image.yml | 4 +-
.../workflows/release_single_dockerhub_image.yml | 4 +-
.github/workflows/run-unit-tests.yml | 8 +-
.github/workflows/scheduled-upgrade-check-main.yml | 2 +-
.github/workflows/special-tests.yml | 22 +-
.github/workflows/test-providers.yml | 8 +-
.github/workflows/ui-e2e-tests.yml | 4 +-
.../update-constraints-on-push-stable.yml | 6 +-
.github/workflows/update-constraints-on-push.yml | 6 +-
.github/workflows/upgrade-check.yml | 4 +-
.github/zizmor.yml | 18 +
AGENTS.md | 2 +-
.../cluster-policies.rst | 21 +-
.../docs/core-concepts/asset-state-store.rst | 25 +-
.../docs/core-concepts/auth-manager/index.rst | 6 +-
airflow-core/docs/index.rst | 18 +-
airflow-core/docs/security/security_model.rst | 136 +-
airflow-core/docs/security/workload.rst | 18 +
airflow-core/newsfragments/71767.bugfix.rst | 1 +
airflow-core/newsfragments/72327.bugfix.rst | 1 +
airflow-core/newsfragments/72682.feature.rst | 1 +
airflow-core/src/airflow/api_fastapi/app.py | 8 +
.../api_fastapi/auth/managers/base_auth_manager.py | 55 +-
.../auth/managers/models/resource_details.py | 2 +
.../auth/managers/simple/simple_auth_manager.py | 4 -
.../auth/managers/simple/ui/package.json | 28 +-
.../auth/managers/simple/ui/pnpm-lock.yaml | 1648 ++++++++++----------
.../src/airflow/api_fastapi/core_api/app.py | 8 +-
.../api_fastapi/core_api/routes/public/assets.py | 6 +
.../api_fastapi/core_api/routes/public/dags.py | 4 +-
.../api_fastapi/core_api/routes/ui/assets.py | 3 +
.../src/airflow/api_fastapi/core_api/security.py | 73 +-
.../api_fastapi/core_api/services/ui/calendar.py | 26 +-
.../execution_api/routes/task_instances.py | 2 +-
.../api_fastapi/execution_api/versions/__init__.py | 2 +
.../execution_api/versions/v2026_04_06.py | 7 +-
.../execution_api/versions/v2026_06_30.py | 23 +
.../src/airflow/cli/commands/info_command.py | 7 +-
airflow-core/src/airflow/models/asset.py | 8 +
.../src/airflow/serialization/definitions/dag.py | 16 +
.../airflow/serialization/definitions/deadline.py | 9 +-
.../ui/src/components/FilterBar/FilterBar.test.tsx | 27 +-
.../components/FilterBar/filters/SelectFilter.tsx | 12 +-
.../src/airflow/ui/tests/e2e/pages/XComsPage.ts | 7 +-
.../tests/unit/always/test_example_dags.py | 12 -
.../tests/unit/always/test_project_structure.py | 5 +-
.../managers/simple/test_simple_auth_manager.py | 2 -
.../auth/managers/test_base_auth_manager.py | 74 +-
.../core_api/routes/public/test_assets.py | 90 +-
.../core_api/routes/public/test_dags.py | 18 +-
.../api_fastapi/core_api/routes/ui/test_assets.py | 24 +-
.../core_api/routes/ui/test_calendar.py | 121 +-
.../unit/api_fastapi/core_api/test_security.py | 99 ++
.../versions/head/test_task_instances.py | 25 +
.../versions/v2026_04_06/test_task_instances.py | 54 +-
.../versions/v2026_06_30/test_dag_runs.py | 57 +
.../versions/v2026_06_30/test_task_instances.py | 82 +-
airflow-core/tests/unit/api_fastapi/test_app.py | 13 +
.../tests/unit/cli/commands/test_info_command.py | 10 +
airflow-core/tests/unit/models/test_dagrun.py | 58 +
airflow-core/tests/unit/models/test_deadline.py | 35 +-
contributing-docs/03_contributors_quick_start.rst | 7 +-
.../contributors_quick_start_gitpod.rst | 5 +-
dev/README_AIRFLOW3_DEV.md | 3 +-
dev/README_RELEASE_AIRFLOW.md | 2 +-
dev/breeze/README.md | 7 +-
dev/breeze/doc/01_installation.rst | 7 +-
.../doc/adr/0016-use-uv-tool-to-install-breeze.md | 2 +-
...017-use-uvx-to-run-breeze-from-local-sources.md | 74 +-
dev/breeze/doc/images/output_build-docs.svg | 124 +-
dev/breeze/doc/images/output_build-docs.txt | 2 +-
...tput_release-management_add-back-references.svg | 62 +-
...tput_release-management_add-back-references.txt | 2 +-
...elease-management_classify-provider-changes.svg | 22 +-
...elease-management_classify-provider-changes.txt | 2 +-
...management_generate-issue-content-providers.svg | 22 +-
...management_generate-issue-content-providers.txt | 2 +-
...e-management_prepare-provider-distributions.svg | 22 +-
...e-management_prepare-provider-distributions.txt | 2 +-
...e-management_prepare-provider-documentation.svg | 22 +-
...e-management_prepare-provider-documentation.txt | 2 +-
.../output_release-management_publish-docs.svg | 88 +-
.../output_release-management_publish-docs.txt | 2 +-
.../images/output_workflow-run_publish-docs.svg | 98 +-
.../images/output_workflow-run_publish-docs.txt | 2 +-
dev/breeze/src/airflow_breeze/utils/path_utils.py | 10 +-
dev/breeze/src/airflow_breeze/utils/reinstall.py | 13 +-
dev/breeze/tests/test_packages.py | 4 +-
dev/breeze/tests/test_selective_checks.py | 52 +-
dev/breeze/tests/test_shim_version_check.py | 8 +-
dev/skill-evals/last-eval-hash.txt | 2 +-
.../src/tests_common/test_utils/providers.py | 2 +-
.../amazon/aws/auth_manager/aws_auth_manager.py | 30 +
.../providers/amazon/aws/triggers/step_function.py | 5 +-
.../aws/auth_manager/test_aws_auth_manager.py | 52 +-
.../amazon/aws/executors/batch/test_boto_schema.py | 124 ++
.../unit/amazon/aws/triggers/test_step_function.py | 130 ++
providers/apache/beam/README.rst | 2 +-
providers/apache/beam/docs/index.rst | 39 +-
providers/apache/beam/provider.yaml | 4 +-
providers/apache/beam/pyproject.toml | 4 +-
.../providers/apache/iceberg/triggers/iceberg.py | 4 +-
.../unit/apache/iceberg/triggers/test_iceberg.py | 51 +-
providers/common/ai/docs/operators/llm_branch.rst | 19 +-
.../providers/common/ai/operators/llm_branch.py | 19 +-
.../unit/common/ai/operators/test_llm_branch.py | 42 +-
.../tests/unit/common/sql/datafusion/test_base.py | 74 +
.../unit/common/sql/datafusion}/test_exceptions.py | 26 +-
providers/databricks/docs/operators/run_now.rst | 29 +
providers/databricks/docs/operators/submit_run.rst | 16 +
.../providers/databricks/operators/databricks.py | 93 +-
.../providers/databricks/utils/openlineage.py | 101 ++
.../unit/databricks/operators/test_databricks.py | 211 +++
.../unit/databricks/utils/test_openlineage.py | 140 ++
.../docs/auth-manager/webserver-authentication.rst | 19 +
.../fab/auth_manager/api_fastapi/services/roles.py | 21 +-
.../fab/auth_manager/api_fastapi/services/users.py | 69 +-
.../providers/fab/auth_manager/fab_auth_manager.py | 21 +
.../fab/auth_manager/security_manager/override.py | 33 +-
providers/fab/src/airflow/providers/fab/www/app.py | 12 -
.../providers/fab/www/extensions/init_views.py | 15 -
.../fab/src/airflow/providers/fab/www/package.json | 4 +-
.../src/airflow/providers/fab/www/pnpm-lock.yaml | 235 ++-
.../api_fastapi/services/test_roles.py | 22 +-
.../api_fastapi/services/test_users.py | 150 +-
.../fab/tests/unit/fab/auth_manager/conftest.py | 1 -
.../auth_manager/security_manager/test_override.py | 149 ++
.../unit/fab/auth_manager/test_fab_auth_manager.py | 6 +
providers/fab/tests/unit/fab/decorators.py | 4 -
providers/fab/tests/unit/fab/www/views/conftest.py | 1 -
providers/google/docs/index.rst | 4 +-
providers/google/pyproject.toml | 4 +
.../tests/unit/google/cloud/hooks/test_dataflow.py | 23 +-
.../unit/google/cloud/operators/test_dataflow.py | 4 -
.../google/cloud/operators/test_datapipeline.py | 3 -
.../unit/google/cloud/sensors/test_dataflow.py | 3 -
.../unit/google/cloud/triggers/test_dataflow.py | 50 +-
.../utils/test_mlengine_prediction_summary.py | 4 -
providers/http/docs/triggers.rst | 8 +
.../src/airflow/providers/http/triggers/http.py | 57 +-
.../http/tests/unit/http/triggers/test_http.py | 102 +-
.../keycloak/auth_manager/keycloak_auth_manager.py | 32 +
.../auth_manager/test_keycloak_auth_manager.py | 38 +
providers/openlineage/docs/spark.rst | 6 +
.../providers/standard/sensors/time_delta.py | 19 +-
.../tests/unit/standard/sensors/test_time_delta.py | 30 +
providers/yandex/README.rst | 3 +-
providers/yandex/docs/index.rst | 3 +-
providers/yandex/pyproject.toml | 7 +-
pyproject.toml | 10 +
scripts/ci/install_breeze.sh | 7 +-
scripts/ci/prek/breeze_cmd_line.py | 40 +-
scripts/ci/prek/common_prek_utils.py | 55 +-
.../in_container/run_provider_yaml_files_check.py | 13 +-
scripts/in_container/verify_providers.py | 8 +-
scripts/tests/ci/prek/test_breeze_cmd_line.py | 10 +-
scripts/tests/ci/prek/test_common_prek_utils.py | 47 +
scripts/tools/setup_breeze | 16 +-
task-sdk/src/airflow/sdk/bases/operator.py | 19 +-
task-sdk/src/airflow/sdk/execution_time/context.py | 92 +-
.../task_sdk/definitions/test_mappedoperator.py | 23 +-
.../tests/task_sdk/execution_time/test_context.py | 225 ++-
uv.lock | 853 ++++++----
192 files changed, 5632 insertions(+), 2246 deletions(-)
create mode 100644 airflow-core/newsfragments/71767.bugfix.rst
create mode 100644 airflow-core/newsfragments/72327.bugfix.rst
create mode 100644 airflow-core/newsfragments/72682.feature.rst
create mode 100644
providers/amazon/tests/unit/amazon/aws/executors/batch/test_boto_schema.py
create mode 100644
providers/amazon/tests/unit/amazon/aws/triggers/test_step_function.py
create mode 100644
providers/common/sql/tests/unit/common/sql/datafusion/test_base.py
copy providers/{openai/tests/unit/openai =>
common/sql/tests/unit/common/sql/datafusion}/test_exceptions.py (62%)
