Re: CVE-2022-38170: Apache Airflow: Overly permissive umask for deamons

And shoutout to Drew Hubl for noticing the "deamon" typo 🤦‍♂️. I've already fixed it so it'll be correct when the CVE is published.

[VOTE] Release Airflow 2.4.0 from 2.4.0rc1

Hey fellow Airflowers, I have cut Airflow 2.4.0rc1. This email is calling a vote on the release, which will last at least 72 hours, from Thursday, September 15, 2022 at 8:00 pm UTC until Sunday, September 18, 2021 at 8:00 pm UTC, and until 3 binding +1 votes have been received. https://www.timean

Re: [VOTE] Release Airflow 2.4.0 from 2.4.0rc1

Of course, I meant the vote will last until Sunday, September 18, *2022* (not 2021) at 8:00 pm UTC. Sorry about that!

Re: [DISCUSS] string normalization in black

I'd be in favor of turning it on. I tend to prefer double quotes, but I'd rather have it on and have single quotes. If we do get enough support for this, I'd like to wait until we are closer to 2.5 to reduce conflicts when cherry-picking for 2.4.x's.

Re: [VOTE] September 2022 PR of the Month

My write-in is ExternalPythonOperator: https://github.com/apache/airflow/pull/25780

Re: [VOTE] September 2022 PR of the Month

Tough month, a lot of good choices!

[VOTE] Release Airflow 2.4.1 from 2.4.1rc1

Hey fellow Airflowers, I have cut Airflow 2.4.1rc1. This email is calling a vote on the release, which will last at least 72 hours, from Tuesday, September 27, 2022 at 7:15 pm UTC until Friday, September 30, 2022 at 7:15 pm UTC, and until 3 binding +1 votes have been received. https://www.timeand

Re: [VOTE] Airflow Providers prepared on September 28, 2022

+1 (binding) Checked signatures, checksums, and licences.

Re: [VOTE] Release Airflow 2.4.1 from 2.4.1rc1

Kind bump, I need 1 more vote on this release.

[RESULT][VOTE] Release Airflow 2.4.1 from 2.4.1rc1

Hello, Apache Airflow 2.4.1 (based on RC1) has been accepted. 4 "+1" binding votes received: - Jed Cunningham - Ephraim Anierobi - Daniel Standish - Ash Berlin-Taylor 1 "+1" non-binding votes received: - Josh Fell Vote thread:https://lists.apache.org/thread/p3t3blytbktx

[ANNOUNCE] Apache Airflow 2.4.1 Released

Dear Airflow community, I'm happy to announce that Airflow 2.4.1 was just released. The released sources and packages can be downloaded via https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-sources.html Other installation methods are described in https://airflow.

Re: [VOTE] Airflow Providers prepared on October 04, 2022

+1 (binding) Checked signatures, checksums, and licences.

[VOTE] Release Apache Airflow Helm Chart 1.7.0 based on 1.7.0rc1

rtifact based on ASF Guidelines. $ helm gpg verify airflow-1.7.0.tgz gpg: Signature made Mon Oct 10 09:42:51 2022 CDT gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cu

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.7.0 based on 1.7.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.7.0 based on 1.7.0rc1 is now closed. The vote PASSED with 3 binding "+1", 2 non-binding "+1" and 0 "-1" votes: "+1" Binding votes: - Jed Cunningham - Ash Berlin-Taylor -

[ANNOUNCE] Apache Airflow Helm Chart version 1.7.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.7.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.7.0/installing-helm-chart-from-sources.html

Re: [DISCUSSION][Helm Chart] webserver_config.py in non-webserver pods

Hey Jules, You could also likely just add an empty webserver conf file to your image so the various components don't try and generate it. Or, just add your complete webserver conf into the image - it doesn't have to come from the chart. Another good place for these type of conversations is in #he

Re: [VOTE] Release Airflow 2.4.3 from 2.4.3rc1

+1 (binding) Checked signatures, checksums, licences, and ran it via the helm chart with some simple DAGs.

Re: CVE-2022-45402: Apache Airflow: Open redirect during login

The severity of this is moderate.

Re: [DISCUSS] Allow shorter voting periods for subsequent RCs

+1 to shorter follow up RCs and +1 to a minimum of 24 hours on those follow ups (at the discretion of the release manager).

Re: [VOTE] Airflow Providers prepared on December 1st, 2022 (RC1)

+1 (binding) Checked signatures, checksums, licences

Re: [VOTE] Release Airflow 2.5.0 from 2.5.0rc3

+1 (binding) Checked signatures, checksums, licences, and ran it via the helm chart with some simple DAGs.

Re: [VOTE] Airflow Providers prepared on December 14, 2022 (RC1)

+1 (binding) Checked signatures, checksums, licences. Thanks for doing this release Elad 🎉

Re: [PROPOSAL] (slightly) change approach to default config values

+1, also been on my radar. Thanks Jarek.

Re: [PROPOSAL] Switching our CI runners to K8S controller open-sourced for Apache Arrow

I'll help. I've been wanting to get more familiar with our runners, so helping with their successor is the perfect opportunity. I don't have a strongly held opinion on the move to the new controller, but it seems reasonable at a high level.

Re: [VOTE] Airflow Providers prepared on January 02, 2023 - RC2

+1 (binding) Checked signatures, checksums, licences

Re: [VOTE] AIP-52 Automatic setup and teardown tasks

+1 (binding)

Re: [VOTE] Release Airflow 2.5.1 from 2.5.1rc2

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs.

Re: [VOTE] Release Airflow Python Client 2.5.0 based on 2.5.0rc1

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Airflow Providers prepared on January 23, 2023

+1 (binding) Checked signatures, checksums, licences.

[VOTE] Release Apache Airflow Helm Chart 1.8.0 based on 1.8.0rc1

. $ helm gpg verify airflow-1.8.0.tgz gpg: Signature made Tue Jan 31 12:53:25 2023 MST gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ultim

Re: [VOTE] Release Airflow Python Client 2.5.1 from 2.5.1rc1

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Release Airflow Go Client 2.5.0 from 2.5.0rc1

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Release Apache Airflow Helm Chart 1.8.0 based on 1.8.0rc1

Thanks for the participation Jules. None of those are regressions from the latest release so they will end up in the next release instead of blocking this one. In general if we cut new RCs for every non-regression bug we'd spin our wheels a lot (less of an issue for the helm chart than core Airflo

Re: [VOTE] Release Apache Airflow Helm Chart 1.8.0 based on 1.8.0rc1

Jules, is your vote still a -1? I just want to accurately reflect it when this vote closes 👍 >

Re: [VOTE] Release Apache Airflow Helm Chart 1.8.0 based on 1.8.0rc1

+1 (binding) I just noticed the original email doesn't cast my +1 explicitly, oops!

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.8.0 based on 1.8.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.8.0 based on 1.8.0rc1 is now closed. The vote PASSED with 4 binding "+1" and 1 "-1" non-binding votes: "+1" Binding votes: - Jed Cunningham - Ephraim Anierobi - Elad Kalif - Jarek

[ANNOUNCE] Apache Airflow Helm Chart version 1.8.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.8.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.8.0/installing-helm-chart-from-sources.html

Re: [VOTE] Airflow Providers prepared on February 08, 2023

+1 (binding) Checked signatures, checksums, licences. I love to see the community casting non-binding votes. Thanks for the participation folks!

Re: [VOTE] AIP-53 OpenLineage in Airflow

+1 binding

Re: [URGENT] Remove old versions of Airflow docs (<1.10.14) as stop-gap measure for doc builds

I came up with a stopgap that'll allow us to retain those old versions until we can work out the S3 archive. GitHub runners come with some stuff we don't actually use, so a little pre-cleanup and we've gained roughly 10Gb of extra disk 👍 https://github.com/apache/airflow-site/pull/741 If that loo

Re: [URGENT] Remove old versions of Airflow docs (<1.10.14) as stop-gap measure for doc builds

Here it is: https://github.com/apache/airflow-site/pull/742

Re: [VOTE] February PR of the Month

+1 to #27758

Re: Apache Airflow Newsletter | February 2023

Thanks for putting this together John. I'd just like to mention to readers here that the old Airflow docs were only taken down for about 9 hours. They are back!

Re: [VOTE] Airflow Providers prepared on March 03, 2023

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Release Airflow 2.5.2 from 2.5.2rc1

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs.

Re: [VOTE] Release Airflow 2.5.2 from 2.5.2rc2

+1 (binding) Checked signatures, checksums, licences.

Re: [DISCUSS] AIP-52 updates - setup / teardown tasks

I've been working closely with Daniel on AIP-52 for a while now, but I'll still share my thoughts here. I'm also in favor of only supporting explicit relationships. In my opinion, even if multiple setup/teardown per scope never materialize, explicit relationships are still a better choice due to

Re: [VOTE] March PR of the Month

Another for 29413.

[VOTE] Release Apache Airflow Helm Chart 1.9.0 based on 1.9.0rc1

. $ helm gpg verify airflow-1.9.0.tgz gpg: Signature made Tue Apr 11 09:41:29 2023 MDT gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ulti

Re: [VOTE] Airflow Providers prepared on April 09, 2023

+1 (binding) Checked signatures, checksums, licences.

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.9.0 based on 1.9.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.9.0 based on 1.9.0rc1 is now closed. The vote PASSED with 3 binding "+1", 2 non-binding "+1" and 0 "-1" votes: "+1" Binding votes: - Jed Cunningham - Ephraim Anierobi - Jarek Po

[ANNOUNCE] Apache Airflow Helm Chart version 1.9.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.9.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.9.0/installing-helm-chart-from-sources.html

Re: [VOTE] Airflow Providers prepared on April 21, 2023

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Airflow Providers prepared on April 25, 2023

+1 (binding) Checked signatures, checksums, licences.

Re: [VOTE] Release Airflow 2.6.0 from 2.6.0rc4

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs

Re: [VOTE] Release Airflow 2.6.0 from 2.6.0rc5

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs

Re: [VOTE] Airflow Providers prepared on May 19, 2023

+1 (binding) Checked signatures, checksums, licences.

Re: AIP-56 Extensible user management

Overall I'm happy with the proposal. One thing that concerns me though is moving the FAB auth manager into a separate provider. That auth manager will need to be able to hook into the db migration tooling, and we don't expose that to providers or plugins today. So if we do want to move it, we have

Re: [VOTE] Release Airflow 2.6.2 from 2.6.2rc2

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs

Re: AIP-56 Extensible user management

r management logic would still be > "packaged" in the auth manager, and then when everything is implemented and > done we can decide whether moving this FAB auth manager to a separate > provider is feasible/a good idea. > > What do you think? > > On 2023-06-12, 11:18

[VOTE] Release Apache Airflow Helm Chart 1.10.0 based on 1.10.0rc1

delines. $ helm gpg verify airflow-1.10.0.tgz gpg: Signature made Fri Jun 23 09:26:49 2023 EDT gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ulti

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.10.0 based on 1.10.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.10.0 based on 1.10.0rc1 is now closed. The vote PASSED with 3 binding "+1", 4 non-binding "+1" and 0 "-1" votes: "+1" Binding votes: - Jed Cunningham - Jarek Potiuk - Elad Kalif

[ANNOUNCE] Apache Airflow Helm Chart version 1.10.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.10.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.10.0/installing-helm-chart-from-sources.ht

Re: [VOTE] Release Airflow 2.6.3 from 2.6.3rc1

+1 (binding) Checked signatures, checksums, licences, and compared code to the tag. Used it with the helm chart with a few different config.

Re: [VOTE] Airflow Providers prepared on July 09, 2023

+1 (binding) Checked signatures, checksums, licences.

Re: [DISCUSS] Contributing "core" options by providers configuration ?

I don't necessarily mind providers adding options to existing sections, but I can see the appeal and simplicity of enforcing it at the section level. Either way, I think in the case of multiple, it should fail loudly, not just warn.

Re: [VOTE] Make (soon coming) dask provider preinstalled

-1 binding (btw Vincent, your vote is binding in this vote 🎉) On Fri, Jul 21, 2023 at 7:52 AM Beck, Vincent wrote: > -1 (non-binding) > > On 2023-07-21, 5:46 AM, "Michał Modras" LID> wrote: > > > CAUTION: This email originated from outside of the organizat

[DISCUSS] Should we pre-install celery/k8s providers?

Hello everyone, After thinking through whether the dask provider should be pre-installed or not, it got me thinking about whether we should even be pre-installing the celery and k8s providers. Core Airflow so far hasn't had the dependencies required to make those executors functional either - user

Re: Allowing providers to load the respective default connections

I'm not sure I like sync over upgrade, personally. Everything else discussed sounds good though.

Re: Allowing providers to load the respective default connections

I like migrate as well.

Re: [VOTE] The daskexecutor, cncf.provider, celery providers in 2.7.0. as regular not-preinstalled providers

I'm also in favor of option a.

Re: [VOTE] Release Airflow 2.7.0 from 2.7.0rc2

+1 (binding) Checked signatures, checksums, licences, compared sources. Used it with the helm chart with a few different configs

Re: [VOTE] Drop MsSQL as supported backend

+1 binding

Re: [VOTE] August 2023 PR of the Month

My vote is for a batch of PRs, not just a single one (which would have been impossible to review if they were all combined) - the refactoring work @eumiro has been doing recently. He's done 69 this month already! https://github.com/apache/airflow/pulls?q=is%3Apr+author%3Aeumiro+merged%3A2023-08-01

Re: [DISCUSS] Preventing users from misusing _PIP_ADDITIONAL_REQUIREMENTS ?

I also don't like the 10 minute thing. I'd rather we remove it, or display a message like we do sequential executor (we can only do so much, this is as visible as we can make it really), I think in that order?

Re: [DISCUSS] move from semver to a more "rolling" release cycle for core

Shubham touched on it a bit, but I want to bring providers into the fold a bit as well. I don't think there is enough focus on provider versions. Us maintainers of Airflow have greatly benefited from being able to have breaking provider changes, but I always get the impression the average user just

[VOTE] Release Apache Airflow Helm Chart 1.11.0 based on 1.11.0rc1

nes. gpg: Signature made Wed Sep 27 17:24:14 2023 MDT gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ultim

Re: [VOTE] Release Apache Airflow Helm Chart 1.11.0 based on 1.11.0rc1

A bug was found in rc1 that'll necessitate an rc2. I'm canceling this vote and will create 1.11.0rc2 soon.

[VOTE] Release Apache Airflow Helm Chart 1.11.0 based on 1.11.0rc2

delines. $ helm gpg verify airflow-1.11.0.tgz gpg: Signature made Sat Sep 30 11:45:11 2023 MDT gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ulti

Re: [VOTE] Release Apache Airflow Helm Chart 1.11.0 based on 1.11.0rc2

> the `Chart.yaml` file which does not have a license Quirk of helm ultimately. The source tarball does have the license, just the convenience package tarball is missing it - helm processes the file and removes the comment when it packages the chart. It's been this way forever unfortunately. Howe

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.11.0 based on 1.11.0rc2

Hello all, The vote to release Apache Airflow Helm Chart version 1.11.0 based on 1.11.0rc2 is now closed. The vote PASSED with 3 binding "+1", 2 non-binding "+1" and 0 "-1" votes: "+1" Binding votes: - Jed Cunningham - Hussein Awala - Daniel Stan

[ANNOUNCE] Apache Airflow Helm Chart version 1.11.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.11.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.11.0/installing-helm-chart-from-sources.ht

Re: [VOTE] Release Airflow 2.7.2 from 2.7.2rc1

+1 (binding) Checked signatures, checksums, licences, compared sources. Used it with the helm chart with a few different configs

Re: [VOTE] Airflow Providers prepared on October 13, 2023

1 (binding) Checked signatures, checksums, licences

Re: [VOTE] Add providers for Pinecone, OpenAI & Cohere to enable first-class LLMOps

+1 (binding)

Re: [VOTE] Add Multiple PR's of the Month to the Airflow Newsletter

Just to clarify, I didn't mean we should highlight multiple PRs every month. In that month none of @eumiro's PRs were individually enough to be highlighted but in bulk they were. That was an unusual situation though. I think we should be flexible with it. I'm not opposed to having multiple per mon

Re: [VOTE] October 2023 PR of the Month

The new OpenSearch provider gets my vote - 34705.

Re: [VOTE] October 2023 PR of the Month

I'm slightly embarrassed I forgot about 34729, but yeah changing my vote to that as well. Now (at least so far) it's unanimous :)

Re: [VOTE] Release Airflow 2.8.1 from 2.8.1rc1

+1 (binding) Checked signatures, checksums, licences. Used it with the helm chart with a few different configs

Re: [VOTE] Airflow Providers prepared on January 22, 2024

+1 (binding) checked binary reproduction, licences, signatures, and checksums. On my system the binary reproduction check for the source tarball did fail, but I spot verified the tarball contents are correct. I'm still investigating, but no reason to hold the release for this.

Re: [VOTE] "Require conversation resolution" setting in PRs as permanent solution

-0.5

Re: [DISCUSS] Rename channels on slack

Sounds good to me. We already have much more niche channels than best practices would be. Worst case no one uses it and we can purge it down the road, no harm no foul. One thing we should consider is not renaming development, but starting with a fresh channel for contributing. There are nearly 14k

Re: [DISCUSS] Rename channels on slack

That's not what I'm proposing. I should have been more verbose before, sorry. Let me rephrase. Don't rename #development. Leave it where it is, restrict posting to admins only. Create a new, fresh #contributing where everyone is still welcome. One of us admins will post in #development with links

[VOTE] Release Apache Airflow Helm Chart 1.12.0 based on 1.12.0rc1

delines. $ helm gpg verify airflow-1.12.0.tgz gpg: Signature made Thu Feb 8 12:21:08 2024 MST gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ulti

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.12.0 based on 1.12.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.12.0 based on 1.12.0rc1 is now closed. The vote PASSED with 3 binding "+1" votes: "+1" Binding votes: - Jed Cunningham - Jarek Potiuk - Hussein Awala Vote thread: https://lis

[ANNOUNCE] Apache Airflow Helm Chart version 1.12.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.12.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.12.0/installing-helm-chart-from-sources.ht

Re: [VOTE] January 2024 PR of the Month

I'm down for #37101 too, but we might consider including #37016 as well. The former is just a simpler interface for the latter.

[VOTE] Release Apache Airflow Helm Chart 1.13.0 based on 1.13.0rc1

delines. $ helm gpg verify airflow-1.13.0.tgz gpg: Signature made Fri Mar 1 21:16:51 2024 MST gpg:using RSA key E1A1E984F55B8F280BD9CBA20BB7163892A2E48E gpg:issuer "jedcunning...@apache.org" gpg: Good signature from "Jed Cunningham " [ulti

[RESULT][VOTE] Release Apache Airflow Helm Chart 1.13.0 based on 1.13.0rc1

Hello all, The vote to release Apache Airflow Helm Chart version 1.13.0 based on 1.13.0rc1 is now closed. The vote PASSED with 3 binding "+1", 2 non-binding "+1" and 0 "-1" votes: "+1" Binding votes: - Jed Cunningham - Jarek Potiuk - Ephraim Anie

[ANNOUNCE] Apache Airflow Helm Chart version 1.13.0 Released

Dear Airflow community, I am pleased to announce that we have released Apache Airflow Helm chart 1.13.0 🎉 🎊 The source release, as well as the "binary" Helm Chart release, are available: 📦 Official Sources: https://airflow.apache.org/docs/helm-chart/1.13.0/installing-helm-chart-from-sources.ht

  1   2   3   4   >