The GitHub Actions job "Tests (AMD)" on airflow.git/sdk-client-quote-path-ids has succeeded. Run started by GitHub user naruto-lgtm (triggered by ashb).
Head commit for run: a25d1528a09dacd282621899d5e93bd1f0ee4c0d / naruto-lgtm <[email protected]> Quote remaining path identifiers in task SDK API client #68129 hardened DagsOperations.get so a dag_id could not escape its endpoint, but the sibling single-segment lookups still interpolated identifiers into the request path unescaped. A value containing a slash or '..' is collapsed by httpx dot-segment normalization, so a conn_id, dag_id, run_id or task_id could redirect the request onto an unrelated API path such as /variables/<key>. Quoting each identifier with safe='' keeps it a single path segment, completing the hardening started in #68129. Report URL: https://github.com/apache/airflow/actions/runs/27628406992 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
