This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a change to branch hardened-python-base-images
in repository https://gitbox.apache.org/repos/asf/airflow.git
omit 8216e9e66e3 Keep perl-base in step with the perl apt can install
omit 59b9fad56d1 Keep apt from replacing the hardened images' Python
omit 2cee524c77f Export KinD logs when the lang-SDK K8S test setup fails
omit 5f9b703a285 Document the stricter C extension builds of the hardened
images
omit ba7715450ef Let old C extensions build in the trixie CI image
omit 3cdd32807d2 Install Java that exists on trixie in the Java examples
omit 0e964b1932e Invalidate the CI image mount cache for the trixie base
omit b1a69a878b6 Count only host keys when waiting for sshd in the CI image
omit cac2e373b4e Add trixie and sigstore to the docs spelling wordlist
omit b5142a07ccd Warn about apt pulling a second Python into hardened images
omit cde48f3dcd0 Refresh the shared library cache after apt runs in
hardened images
omit aa5d73dd0a2 Install the Python build dependencies for the legacy image
flavor
omit 8d2d88b0a48 Keep a second hardened Python out of the trixie images
omit d3c96ad4d9f Document the anonymous Debian package repository of the
hardened images
omit c3440b33868 Restore the PAM configs the trixie hardened images strip
omit 60f6aec205d Trust Microsoft's newer signing key for the trixie MSSQL
repository
omit 72473d80fcb Drop CI image packages that Debian trixie no longer has
omit 52147acd9c5 Support the trixie hardened images' Debian-packaged Python
and test legacy images like regular ones
omit a94a1726bbe Base images on trixie and keep a legacy bookworm PROD
image flavor
omit 3b025f96610 Base CI and PROD images on hardened Python images
add 3134ac232fa Add AwsEksExecutor to the Amazon provider (#74399)
add 5a64dfcc78e Java SDK: Add edge labels to native Dags (#74523)
add 51411acb7e5 Fix empty audit log dag_id for DAG.cli() subcommands
(#73379)
add 11ed2049e12 Fix stale-session assertion in mapped placeholder
promotion test (#75175)
add 99b90b0e4a4 Update Magpie floor to 0.9.0.dev202610192305 (#75174)
add c6e4d52f61b Complete Hindi (hi) UI translations (#75057)
add 9091cd0c7b0 Java SDK: Send log timestamps in UTC (#74783)
add 3e69e05f0d3 Unexclude Vespa on Python 3.14 (#75062)
add 94ce2c9f998 TS SDK: Collect dag_dependencies in the tasks pass (#75032)
add bd29fed01b6 Fix breeze translation key sorting to match the UI ESLint
rule (#75065)
add 0a4b5d8e495 [main] Upgrade important CI environment (#73822)
add 6aee277d4a9 Fix log template sync failing when a custom SQL Alchemy
schema is configured (#70793)
add 7126d336e94 Log the retry reason in airflowctl API client retries
(#75059)
add 1c4af038874 Java SDK: Reject IDs that collide with task group join
nodes (#74781)
new 1c816dfd331 Base CI and PROD images on hardened Python images
new 05d4e3b2e21 Base images on trixie and keep a legacy bookworm PROD
image flavor
new a0babc024c8 Support the trixie hardened images' Debian-packaged Python
and test legacy images like regular ones
new 029f22dbc76 Drop CI image packages that Debian trixie no longer has
new 0a4e88d64a0 Trust Microsoft's newer signing key for the trixie MSSQL
repository
new d042da46812 Restore the PAM configs the trixie hardened images strip
new ac949d76223 Document the anonymous Debian package repository of the
hardened images
new a81cba26587 Keep a second hardened Python out of the trixie images
new 5450349d3b2 Install the Python build dependencies for the legacy image
flavor
new 4beba5dfa8c Refresh the shared library cache after apt runs in
hardened images
new b627487f53d Warn about apt pulling a second Python into hardened images
new 67ba300ec7c Add trixie and sigstore to the docs spelling wordlist
new d328cfc0a7d Count only host keys when waiting for sshd in the CI image
new a09d4114d68 Invalidate the CI image mount cache for the trixie base
new 1b62d71e5be Install Java that exists on trixie in the Java examples
new 27ac584bca4 Let old C extensions build in the trixie CI image
new cdff2105257 Document the stricter C extension builds of the hardened
images
new 30adda5d952 Export KinD logs when the lang-SDK K8S test setup fails
new 02d924e954d Keep apt from replacing the hardened images' Python
new 8601348edb9 Keep perl-base in step with the perl apt can install
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (8216e9e66e3)
\
N -- N -- N refs/heads/hardened-python-base-images (8601348edb9)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
The 20 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.apache-magpie.lock | 6 +-
.pre-commit-config.yaml | 4 +-
Dockerfile | 2 +-
Dockerfile.ci | 6 +-
.../language-sdks/java.rst | 54 +-
airflow-core/docs/best-practices.rst | 2 +-
airflow-core/pyproject.toml | 2 +-
airflow-core/src/airflow/models/backfill.py | 5 +-
airflow-core/src/airflow/models/dag.py | 7 +-
airflow-core/src/airflow/models/dagrun.py | 4 +-
.../airflow/ui/public/i18n/locales/hi/admin.json | 15 +-
.../airflow/ui/public/i18n/locales/hi/assets.json | 16 +-
.../airflow/ui/public/i18n/locales/hi/browse.json | 32 +
.../airflow/ui/public/i18n/locales/hi/common.json | 150 +-
.../ui/public/i18n/locales/hi/components.json | 45 +-
.../src/airflow/ui/public/i18n/locales/hi/dag.json | 133 +-
.../airflow/ui/public/i18n/locales/hi/dags.json | 54 +-
.../ui/public/i18n/locales/hi/dashboard.json | 17 +-
airflow-core/src/airflow/utils/db.py | 14 +-
.../tests/unit/models/test_mappedoperator.py | 16 +-
airflow-core/tests/unit/utils/test_cli_util.py | 16 +
airflow-core/tests/unit/utils/test_db.py | 50 +-
airflow-ctl/src/airflowctl/api/client.py | 4 +-
.../airflowctl/api/datamodels/auth_generated.py | 2 +-
.../src/airflowctl/api/datamodels/generated.py | 2 +-
airflow-ctl/tests/airflow_ctl/api/test_client.py | 31 +
airflow-e2e-tests/pyproject.toml | 2 +-
contributing-docs/30_new_language_sdk.rst | 12 +-
dev/breeze/doc/ci/02_images.md | 4 +-
dev/breeze/pyproject.toml | 2 +-
.../commands/release_management_commands.py | 8 +-
.../src/airflow_breeze/commands/ui_commands.py | 65 +-
dev/breeze/src/airflow_breeze/global_constants.py | 2 +-
dev/breeze/tests/test_selective_checks.py | 1 -
dev/breeze/tests/test_ui_commands.py | 28 +-
dev/breeze/uv.lock | 1132 +--
devel-common/pyproject.toml | 4 +-
.../example/nativedag/AnnotationExample.java | 5 +-
.../example/nativedag/InterfaceExample.java | 6 +-
java-sdk/gradle/verification-metadata.xml | 13 -
.../org/apache/airflow/sdk/AirflowProcessor.kt | 15 +-
.../org/apache/airflow/sdk/AirflowProcessorTest.kt | 202 +
.../ci/prek/check_serialization_conformance.py | 2 +-
java-sdk/sdk/build.gradle.kts | 1 -
.../main/kotlin/org/apache/airflow/sdk/DagDef.kt | 84 +-
.../src/main/kotlin/org/apache/airflow/sdk/Deps.kt | 69 +-
.../main/kotlin/org/apache/airflow/sdk/Label.kt | 93 +
.../kotlin/org/apache/airflow/sdk/TaskGroupRef.kt | 13 +-
.../org/apache/airflow/sdk/execution/Logger.kt | 16 +-
.../org/apache/airflow/sdk/execution/Serde.kt | 52 +-
.../kotlin/org/apache/airflow/sdk/internal/Ids.kt | 13 +
.../kotlin/org/apache/airflow/sdk/EdgeLabelTest.kt | 323 +
.../kotlin/org/apache/airflow/sdk/TaskGroupTest.kt | 98 +
.../airflow/sdk/conformance/SerializeJava.kt | 6 +-
.../org/apache/airflow/sdk/execution/LogTest.kt | 62 +
providers/.pre-commit-config.yaml | 2 +-
providers/amazon/README.rst | 4 +-
providers/amazon/docs/executors/eks-executor.rst | 223 +
providers/amazon/docs/executors/general.rst | 6 +-
providers/amazon/docs/executors/index.rst | 4 +
providers/amazon/docs/index.rst | 4 +-
providers/amazon/provider.yaml | 41 +
providers/amazon/pyproject.toml | 4 +-
.../amazon/aws/executors/eks}/__init__.py | 7 +-
.../amazon/aws/executors/eks/_client_factory.py | 170 +
.../amazon/aws/executors/eks/eks_executor.py | 189 +
.../providers/amazon/aws/executors/eks/utils.py} | 34 +-
.../providers/amazon/aws/utils/eks_get_token.py | 17 +-
.../airflow/providers/amazon/get_provider_info.py | 34 +
.../src/airflow/providers/amazon/version_compat.py | 2 +
.../unit/amazon/aws/executors/eks}/__init__.py | 0
.../aws/executors/eks/test__client_factory.py | 261 +
.../amazon/aws/executors/eks/test_eks_executor.py | 238 +
.../unit/amazon/aws/executors/eks/test_utils.py | 21 +-
.../unit/amazon/aws/utils/test_eks_get_token.py | 53 +-
providers/common/ai/provider.yaml | 2 +
.../providers/common/ai/get_provider_info.py | 2 +
.../providers/common/ai/utils/sql_validation.py | 12 +-
.../ai/tests/unit/common/ai/operators/test_llm.py | 5 +-
.../tests/unit/common/ai/test_provider_metadata.py | 19 +-
.../unit/common/ai/utils/test_prompt_cache.py | 38 +-
.../unit/common/ai/utils/test_sql_validation.py | 4 +-
providers/google/README.rst | 16 +-
providers/google/docs/index.rst | 16 +-
providers/google/pyproject.toml | 16 +-
providers/hashicorp/docs/index.rst | 2 +-
providers/hashicorp/pyproject.toml | 2 +-
providers/microsoft/azure/README.rst | 2 +-
providers/microsoft/azure/docs/index.rst | 2 +-
providers/microsoft/azure/pyproject.toml | 2 +-
providers/snowflake/README.rst | 1 +
providers/snowflake/docs/index.rst | 1 +
providers/snowflake/pyproject.toml | 5 +
providers/vespa/README.rst | 11 +-
providers/vespa/docs/changelog.rst | 5 +
providers/vespa/docs/index.rst | 9 +-
providers/vespa/provider.yaml | 3 -
providers/vespa/pyproject.toml | 6 +-
pyproject.toml | 6 +-
scripts/ci/prek/check_imports_in_providers.py | 2 +-
scripts/ci/prek/ruff_format.py | 2 +-
scripts/tools/setup_breeze | 2 +-
.../src/airflow/sdk/api/datamodels/_generated.py | 2 +-
task-sdk/src/airflow/sdk/definitions/dag.py | 3 +
.../src/airflow/sdk/execution_time/supervisor.py | 10 +-
.../task_sdk/execution_time/test_supervisor.py | 24 +
ts-sdk/src/coordinator/serde.ts | 40 +-
uv.lock | 7724 +++++++++++---------
108 files changed, 8048 insertions(+), 4284 deletions(-)
create mode 100644 java-sdk/sdk/src/main/kotlin/org/apache/airflow/sdk/Label.kt
create mode 100644
java-sdk/sdk/src/test/kotlin/org/apache/airflow/sdk/EdgeLabelTest.kt
create mode 100644 providers/amazon/docs/executors/eks-executor.rst
copy {airflow-ctl-tests/tests/airflowctl_tests =>
providers/amazon/src/airflow/providers/amazon/aws/executors/eks}/__init__.py
(88%)
create mode 100644
providers/amazon/src/airflow/providers/amazon/aws/executors/eks/_client_factory.py
create mode 100644
providers/amazon/src/airflow/providers/amazon/aws/executors/eks/eks_executor.py
copy
providers/{apache/kafka/tests/integration/apache/kafka/plugins/dags/demo_dag.py
=> amazon/src/airflow/providers/amazon/aws/executors/eks/utils.py} (60%)
copy {airflow-core/src/airflow/_shared =>
providers/amazon/tests/unit/amazon/aws/executors/eks}/__init__.py (100%)
create mode 100644
providers/amazon/tests/unit/amazon/aws/executors/eks/test__client_factory.py
create mode 100644
providers/amazon/tests/unit/amazon/aws/executors/eks/test_eks_executor.py
copy airflow-core/src/airflow/models/xcom_arg.py =>
providers/amazon/tests/unit/amazon/aws/executors/eks/test_utils.py (62%)
