Skip to content

Bump apache-airflow from 2.6.3 to 3.1.7#4

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/uv/apache-airflow-3.1.7
Open

Bump apache-airflow from 2.6.3 to 3.1.7#4
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/uv/apache-airflow-3.1.7

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 11, 2026

Bumps apache-airflow from 2.6.3 to 3.1.7.

Release notes

Sourced from apache-airflow's releases.

Apache Airflow 3.1.7

📦 PyPI: https://pypi.org/project/apache-airflow/3.1.7/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.7/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.7/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.7" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.7

Significant Changes

No significant changes.

Bug Fixes

  • Fix JWT token generation with unset issuer/audience config (#61331)
  • Fix callback files losing priority during queue resort (#61232) (#61243)
  • Fix Dag callback for versioned bundles in the processor (#60734) (#61230)
  • Add 404 handling for non-existent Dag (#61131) (#61225)
  • Add guardrail to handle Dag deserialization errors in scheduler (#61162) (#61210)
  • Fix asset scheduling for stale Dags (#59337) (#60022) (#61106)
  • Fix unnecessary Dag version churn when Dag file paths change (#60799)
  • Fix missing warning when Bundle path may not be accessible to impersonated user (#60278)
  • Fix TriggerDagRunOperator deferring when wait_for_completion=False (#60052)
  • Fix NoneType error when updating serialized Dag (#56422)
  • Fix Pool API slots validation (#61071) (#61114)
  • Fix DagBag parsing by adding bundle_path temporarily to sys.path (#55894) (#61053)
  • Fix API to respect maximum page limit (#60989) (#61073)
  • Prevent Triggerer from crashing when a trigger event isn't serializable (#60152) (#60981)
  • Fix permissions on get_event_logs endpoint (#60936) (#60958)
  • Fix Dag access control for dag_id in query param (#60935) (#60959)
  • Fix root logger to use log_level instead of hardcoded INFO level (#60784) (#60970)
  • Fix Dag processor OOM by Avoid loading all TaskInstances when checking DagVersion in write_dag (#60937) (#60962)
  • Fix worker startup Dag load failures by rescheduling tasks instead of exiting (#59604) (#60926)
  • Fix permissions check in import error APIs (#60801) (#60884)
  • Fix refresh-token invalidation by logging out the user (#60781) (#60881)
  • Fix connection test API to restore masked password/extra from existing connections (#59643) (#60873)
  • Fix Dag processor overhead by applying gc.freeze (#60505) (#60845)
  • Fix Dag processor crashing due to MySQL deadlock errors (#60166) (#60418)
  • Ensure unique run_id across manually triggered Dags with schedules (#59477) (#60468)
  • UI: Avoid gantt annotation error during resize (#60877)
  • UI: Fix react apps plugins router (#61206)
  • UI: Reset pagination on search in all pages (#61169)
  • UI: Explicitly set UI table ordering (#60609) (#61216)
  • UI: Plugins pagination fix #61055 (#61059) (#61129)
  • UI: Fix ui get dags permission endpoint for user without Dag run permissions (#60979) (#60988)
  • UI: Convert Tasks Table from card to table mode (#60830) (#60874)
  • UI: Fix slow log scrolling for large task logs (#60806) (#60875)
  • UI: Grey out trigger button on API 403 (#60648) (#60777)
  • UI: Remove API error from disabling submit (#60473) (#60658)
  • UI: Added toasters for permission denied (#57966) (#58016) (#60646)
  • UI: Move row count and display toggle into DataTable (#57680) (#60639)
  • UI: Fix/backfill permission error handling (#60582) (#60587)

... (truncated)

Changelog

Sourced from apache-airflow's changelog.

.. Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

.. http://www.apache.org/licenses/LICENSE-2.0

.. Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Dockerfile Changelog

The Dockerfile does not strictly follow the SemVer <https://semver.org/>_ approach of Apache Airflow when it comes to features and backwards compatibility. While Airflow code strictly follows it, the Dockerfile is really a way to give users a conveniently packaged Airflow using standard container approach, so occasionally there are some changes in the building process or in the entrypoint of the image that require slight adaptation of how it is used or built.

The Changelog below describes the changes introduced in each version of the docker images released by the Airflow team.

:note: The Changelog below concerns only the convenience production images released at Airflow DockerHub <https://hub.docker.com/r/apache/airflow>_ . The images that are released there are usually built using the Dockerfile released together with Airflow. However, you are free to take latest released Dockerfile from Airflow and use it to build an image for any Airflow version from the Airflow 2 line. There is no guarantee that it will work, but if it does, then you can use latest features from that image to build images for previous Airflow versions.

Airflow 3.1.4


In Airflow 3.1.4, the images are build without removing of .pyc and .pyo files when Python is built.
This increases the size of the image slightly (<0.5%), but improves performance of Python in the container
because Python does not need to recompile the files on the first run but more importantly, if you use
``exec`` to run Health Checks, removed .pyc files caused a small but ever growing memory leak in the Unix
kernel connected to negative ``dentries`` created when .pyc files were attempted to be compiled and failed.
This over time could lead to out-of-memory issues on the host running the container.

More information about dentries can be found in this article &lt;https://lwn.net/Articles/814535/&gt;_.

Airflow 3.1.0

... (truncated)

Commits
  • 83ff6ec Update RELEASE_NOTES.rst for rc2
  • caa0571 [v3-1-test] Fix JWT token generation with unset issuer/audience config (#6127...
  • d82bb10 Update RELEASE_NOTES.rst
  • d24ec9a Update Airflow Version to 3.1.7
  • 08a5859 [v3-1-test] Fix callback files losing priority during queue resort (#61232) (...
  • 3b41866 dag_processing: initialize versioned bundles for callbacks (#52040) (#60734) ...
  • c34d2c3 [v3-1-test] Add 404 handling for non-existent Dag (#61131) (#61225)
  • dd1a865 Fix import errors not showing on UI (#61163) (#61213)
  • 52b7aea [v3-1-test] Explicitly set table ordering (#60609) (#61216)
  • 5a2b240 [v3-1-test] Add guardrail to handle DAG deserialization errors in scheduler (...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [apache-airflow](https://github.com/apache/airflow) from 2.6.3 to 3.1.7.
- [Release notes](https://github.com/apache/airflow/releases)
- [Changelog](https://github.com/apache/airflow/blob/main/docker-stack-docs/changelog.rst)
- [Commits](apache/airflow@2.6.3...3.1.7)

---
updated-dependencies:
- dependency-name: apache-airflow
  dependency-version: 3.1.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants