NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #1383 most downloaded on PyPI
Programmatically author, schedule and monitor data pipelines
Last release 17 days ago
17 Sep 2026
Ships fairly regularly
a new release about every 2 weeks
Nearly every release is documented
notes for 60 of the last 60 stable releases
4 versions withdrawn
withdrawn after publishing
9 years old
300 releases · first in 2017
Fix resolution of deprecated imports in airflow.utils.helpers
📦 PyPI: https://pypi.org/project/apache-airflow/3.3.2/
📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.3.2/
🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.3.2/release_notes.html
🐳 Docker Image: "docker pull apache/airflow:3.3.2"
🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.3.2
The four routes that name a backfill in their path -- GET /backfills/{backfill_id}
and the pause, unpause and cancel routes -- resolved the Dag they authorize
against from the dag_id supplied on the request whenever the path's id matched no row.
An unknown id and a backfill on a Dag the caller cannot see therefore answered differently,
which enumerates backfill ids across Dags.
The backfill named in the path is now the only thing those routes authorize against.
Behaviour changes:
404Backfill not found) -- the same response an unknown id gets -- instead of the403 returned before. A caller who can read the Dag still gets 403 for a writebackfill_id in the path is never authorized against a dag_id in the request bodyGET /backfills, POST /backfills and POST /backfills/dry_runBackfill not found.pause, unpause and cancel routes previously answeredCould not find backfill with id {backfill_id}. Clients matching on detailget_user() is written to prefer an explicit bearer token, then OAuth2, then the
session cookie, but that precedence was unreachable whenever a cookie was present.
JWTRefreshMiddleware runs
first, resolves a user from the _token cookie alone and stamps it on
request.state, and get_user() returned that cached user before looking at either
explicit credential. The effective order on every core-API route was cookie over bearer.
A request carrying both a session cookie and an explicit credential therefore executed,
and was recorded in the audit log, as the cookie's principal rather than the identity the
client presented. The cached user is now honoured only when the request carries no
explicit credential.
Behaviour changes:
_token cookie and an Authorization: Bearer headeris now resolved as the bearer token's principal, where it was previously resolved as the
cookie's. The same applies to a cookie combined with an OAuth2 token.
401/403 evenwhen a valid ``_token`` cookie accompanies it. Previously the cookie silently took over
and the request succeeded as the cookie's principal; the failure is now loud.
the token-refresh behaviour of ``JWTRefreshMiddleware`` unchanged.
service account's bearer token while a user session cookie was present, and expected the
user's identity to apply -- will now act as the bearer token's principal. Remove the
header, or the cookie, to select the intended identity explicitly. (#72225)
dag_run join (#72944)airflow db clean never purging the callback table (#72899)DAG subclasses or aliased-module imports (#72898)DeadlockImminentError when a connection is resolved inside an async task (#72895)XCom values that already parse as JSON during the bytea-to-JSONB migration (#72886)airflow.utils.helpers (#72868)LIMIT 1 to avoid scanning large tables (#72842)airflow info --file-io uploading an empty report (#72832)partition_key behind the 2026-06-30 Execution API version (#72827)DagRun fields (#72812)is_authorized_hitl_task (Human-in-the-loop) hook runs (#72807)td_format rendering of negative durations (#72798)airflow jobs check --allow-multiple with --limit 0 (#72744)XCom existence lookups with LIMIT 1 to avoid full scans (#72702)KeyError for removed-task task instances (#72620)hierarchical_alphabetical sort order breaking the graph and grid (#72618)@task-decorated callable errors when extra positional arguments are passed (#72616)airflow db migrate failing under the PyMySQL driver when a schema migration drops unique constraints (#72613)airflow providers get --full mutating cached provider metadata (#72601)airflow connections test returning a success exit code on failure (#72583)airflow standalone leaking components when one fails to start (#72568)DAG.cli() crashing on dags pause and dags unpause (#72565)limit search param in the task overview duration chart (#72357)AIRFLOW_TEST_MODE from airflow tasks test without --env-vars (#72320)with block (#71956)Variable.set rewriting the team_name of existing variables (#71904)/assets/events to the Dags the caller may read (#71785)dag_discovery_safe_mode is False (#71714)FORWARDED_ALLOW_IPS when the API server runs under gunicorn (#71708)airflow config lint staying silent on conditional removal rules (#71651)clearTaskInstances returning HTTP 500 instead of 422 on an invalid body (#71559)airflow dags list (#71481)_team_name missing from DagRun passed to some listener calls (#71262)SerializedVariableInterval for deadline alerts (#72244)FlexibleForm (#71573)BaseDeadlineReference and deadline_reference to the SDK public interface (#71208)create_async_metadata_engine example to the docs (#72804)dag.test() for testing custom operators in the docs (#71587)One column per quarter.
Apache Airflow 3.3.2rc1
Apache Airflow 3.3.2rc1
Fix npm vulnerabilities in the simple auth manager
📦 PyPI: https://pypi.org/project/apache-airflow/3.3.1/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.3.1/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.3.1/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.3.1" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.3.1
pandas 3 exposes its public classes from the pandas namespace, so a DataFrame is qualified as
pandas.DataFrame instead of pandas.core.frame.DataFrame. XComs record that name alongside the
serialized value, so the name written into the metadata database depends on the pandas version of the
component that pushed the value. Airflow registers both names, and a DataFrame written by either
pandas version can be read by either -- no configuration change is needed, and existing XComs stay
readable.
What you should do:
Roll this Airflow version out to every component before pandas 3 reaches any of them -- workers in particular. A component that predates this change cannot read a DataFrame XCom written under pandas 3, and fails the pull with:
.. code-block:: text
ImportError: pandas.DataFrame was not found in allow list for deserialization imports.
To allow it, add it to allowed_deserialization_classes in the configuration
The message points at configuration, but the allow list is not the cause and changing it does not help. The rows are not corrupt: they become readable again as soon as the reader is upgraded.
Treat a downgrade as a one-way door for those XComs. Rolling back to an Airflow version without this change strands any DataFrame XCom written while on pandas 3, with the same error, until you roll forward again.
Review Dags that inspect the dtypes of a pulled DataFrame. The pandas version of the reader
determines what a pulled DataFrame looks like, not the version that wrote it. Under pandas 3, a
column of strings comes back as str rather than object, and its missing values
come back as nan rather than None. Values are unchanged, but downstream code that branches
on dtype == "object", checks cells with is None, or compares against a reference frame with
DataFrame.equals() can behave differently after the upgrade.
The 0082_3_1_0_make_bundle_name_not_nullable migration assigned every legacy row
bundle_name='dags-folder', so triggering a DagRun raised Requested bundle 'dags-folder' is not configured. on any deployment that uses a bundle other than the default dags-folder.
DagFileProcessorManager now runs a one-shot, best-effort backfill at startup that routes each
affected Dag to the correct bundle based on its file path; unmatched Dags self-heal on the next
successful parse (or run airflow dags reserialize to force it immediately).
Configuration options are registered as sensitive under their base section, so until now only the
base spelling of an option was masked. A team scoped override -- set in a [<team>=<section>]
config file section, or through an AIRFLOW__<TEAM>___<SECTION>__<KEY> environment variable --
was not recognized as the same option and was returned in full.
Sensitivity is now decided after resolving the team scoped spelling back to the base option, so a team scoped value is masked exactly as the base value already was.
Behaviour changes:
AirflowConfigParser.as_dict(display_sensitive=False), GET /config,
GET /config/section/{section}/option/{option} and airflow config list now return
< hidden > for a team scoped value of an option registered as sensitive. Deployments that
read a team's real value through any of these will now receive the mask; use
display_sensitive=True where a real value is required and appropriate._cmd and _secret entries are replaced with < hidden > in place, rather
than being resolved into their value and removed as they are in a base section. Resolving them
is not supported for a team, so the command string or secret path is no longer shown either.display_sensitive=True continues to return real
values.TriggerDagRunOperator gets a 404 (#71083)deadline_reference decorator's no-parentheses form (#70966)bundle_name during upgrade from 2.x to 3.x (#70662)airflow partitions clear (#69547)json_logs is enabled (#70669)none_failed_min_one_success tasks in mapped task groups (#70318)on_failure_callback for heartbeat-timed-out retries (#69824)TaskFailedEvent, instead of always failing terminally (#71163)TaskInstance mark-success downstream default (#70143)update --option/--ignore-option never matching options (#70757)TypeError in airflow db shell when the database name is missing (#70752)-o commands so structured output stays machine-readable (#70747)Variable values stored as JSON lists (#71069)Variable/Connection updates (#71043)KubernetesPodOperator (#70756)structlog>=26.1.0 and croniter>=6.2.2 to fix memory leaks (#70749)dag and note missing from Dag-run state-change listener events (#70245)email_on_failure/email_on_retry task alerts silently ignoring a custom [email] email_backend and always routing through SmtpNotifier; an email_backend that cannot be imported now errors loudly instead of silently falling back to SMTP (#70129)Trigger Again showing empty config for the selected run (#70288)FanOutMapper and wait policies from airflow.partition_mappers (#69513)task.execute OpenTelemetry span around task execution (#69359)run_type tag to the dagrun.duration.failed metric (#70731)he) translations (#70566)ar) translations (#70510)pl) translation (#70507)el) translations (#70471)ResumableJobMixin an abstract base class (subclasses must implement its methods) (#70810)?) and clean up the graph/grid view (#69978)ResumableJobMixin (#70792)jwt_secret/_secret and LocalFilesystemBackend config support (#70730)logging_config_class contract and document REMOTE_TASK_LOG (#70592)AssetAlias usage (#71087)AssetPartitionDagRun provisional-run docstring (#70104)CronDataIntervalTimetable and DeltaDataIntervalTimetable (#70434)FanOutMapper docs (#69511)dev/README.md (#70107)fr) UI translations to 100% coverage (#70387)nl) translations (#70004)zh-CN) UI translations (#70417, #70418, #70419)zh-TW) translation gaps (#70195, #70379, #69707)ko) translations and backport from main (#70807, #70832)Nothing published for this version
Nothing published for this version
airflow.logging_config.load_logging_config is deprecated (it now emits DeprecationWarning and delegates to new private helpers), and configure_logging…
📦 PyPI: https://pypi.org/project/apache-airflow/3.3.0/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.3.0/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.3.0/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.3.0" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.3.0
## Significant Changes
### Asset Partitioning (#64571, #65447, #66030, #66848, #67184, #67475, #67716, #68978)
Building on the asset partitioning introduced in 3.2.0, Airflow 3.3.0 substantially expands how a single upstream asset event fans out to partitioned downstream Dag runs. New partition mappers — RollupMapper (many-to-one), FanOutMapper (one-to-many), and FixedKeyMapper + SegmentWindow (categorical rollup) — compose with time windows (day/week/month/quarter/year) and a wait_policy (WaitForAll or MinimumCount(n)) to control when partitioned runs fire. Windows can fan out forward or backward in time, and total fan-out per upstream event is bounded by the new [scheduler] partition_mapper_max_downstream_keys config (configurable per mapper). Airflow 3.3.0 also adds the PartitionedAtRuntime timetable, which lets a Dag declare that its partition key(s) are assigned when the run starts rather than mapped from an upstream event.
For detailed usage instructions, see /authoring-and-scheduling/assets.
### Task and Asset State Store (#65759, #66073, #66160, #66463, #66586, #66859, #67041, #67292, #67319)
Airflow 3.3.0 introduces a first-class state store for tasks and assets (AIP-103). Tasks can persist arbitrary key-value state that survives across retries and runs via a new task_state_store accessor, and assets can carry their own state via asset_state_store — both available from the Task SDK. State is kept in the metadata database by default, or in a custom worker-side backend ([workers] state_store_backend), supports per-key retention with periodic garbage collection and an optional clear_on_success, and is fully manageable through the Core API and Execution API.
For detailed usage instructions, see /core-concepts/task-and-asset-state-store.
### Pluggable Retry Policies (#65474)
Task retry behaviour is now pluggable (AIP-105). In addition to a fixed retries count, you can attach a custom retry policy that decides whether and when a task is retried, enabling strategies such as retrying only on specific exceptions or backing off based on custom logic.
For detailed usage instructions, see concepts:retry-policies.
### Language Task SDK (Java and Go) (#65958, #67161, #67635, #67699)
Airflow 3.3.0 adds a Coordinator layer (AIP-108) that lets individual task implementations be written in non-Python languages while the Dag and its scheduling stay in Python. A task is declared in the Dag with @task.stub(queue=...); the worker routes it to a configured coordinator (JavaCoordinator for JVM languages, ExecutableCoordinator for self-contained native binaries such as Go) that runs the task in a language runtime and proxies Variables, Connections, and XComs back through the Execution API.
Warning
The Coordinator layer and the Java/Go SDKs are experimental in 3.3.0 and may change in future versions based on user feedback.
For detailed usage instructions, see /authoring-and-scheduling/language-sdks/index.
### Dag bundle version on clear, rerun, and backfill (#63884)
The new rerun_with_latest_version setting controls whether a cleared, rerun, or backfilled Dag run uses the latest bundle version or the original version from the initial run. The default is resolved by precedence: an explicit request parameter/CLI flag, then the Dag-level rerun_with_latest_version, then [core] rerun_with_latest_version, and finally False for clear/rerun and True for backfills (preserving historical behaviour). Airflow 2.x always reran with the latest code; 3.x introduced bundle versioning defaulting to the original version, and this setting gives users control.
See /administration-and-deployment/dag-bundles for full details.
### Provider example Dags as dedicated bundles (#66161)
Example Dags shipped by provider distributions are now discovered via ProvidersManager and registered as their own Dag bundles — one per provider, named apache-airflow-providers-<distribution>-example-dags (or <distribution>-example-dags for third-party providers). The [core] load_examples option still gates whether they are registered. REST API clients that filtered bundle_name by "dags-folder" for provider-shipped example Dags must update to the new per-provider bundle names; Dag identifiers are unchanged.
### Remote logging resolution decoupled from airflow.logging_config (#67056)
Remote task log handler resolution is now owned by the shared airflow_shared.logging.factory module and applies a single, well-defined precedence:
a user-defined [logging] logging_config_class exporting REMOTE_TASK_LOG / DEFAULT_REMOTE_CONN_ID (existing custom configs keep working);
ProvidersManager scheme dispatch — the scheme of [logging] remote_base_log_folder selects a provider RemoteLogIO class, instantiated via a no-argument from_config() classmethod;
a transitional legacy fallback reading airflow_local_settings.py (to be removed in Airflow 4.0).
airflow.logging_config.load_logging_config is deprecated (it now emits DeprecationWarning and delegates to new private helpers), and configure_logging no longer eagerly resolves the remote handler — resolution is lazy on first use. Providers that registered a remote-logging: block but do not implement from_config are skipped with a warning and fall through to the legacy path.
Migration: replace direct calls to airflow.logging_config.load_logging_config() with the new helpers, and have provider remote-log handler classes implement a no-argument from_config classmethod that reads airflow.providers.common.compat.sdk.conf.
### OpenTelemetry timer metrics now use Histogram (#64207)
OpenTelemetry timer and timing metrics are now recorded as Histograms instead of Gauges, preserving count, sum, and bucket distribution across recordings.
### Dag-processing "seconds ago" metric is now tagged (#62487)
dag_processing.last_run.seconds_ago.{dag_file} is now a legacy metric. The new dag_processing.last_run.seconds_ago is emitted with file_path, bundle_name and file_name tags (file_path + bundle_name uniquely identify the Dag file). The legacy metric is still emitted by default and can be disabled via [metrics] legacy_names_on.
### New Deadlines page under Browse (#67586)
A new Deadlines page is available under the Browse menu, accessible to any role that already has can_read and menu_access on Dag Runs.
## New Features
Add partition clear support to the REST API matching the CLI, with a clearPartitions endpoint and partition_key/partition_date window selectors on clearDagRuns (#68702)
Add [core] mp_start_method and [core] mp_forkserver_preload configuration options (which can be overridden per [scheduler]/[triggerer]/[dag_processor]) to control the multiprocessing start method (#68875)
Add a durable toggle to ResumableJobMixin to opt out of resumable execution (#68623)
Add a @result decorator to mark a TaskFlow task as the Dag's result task (#64563)
Add [triggerer] shared_stream_cohort_grace_period to reduce missed events on triggerer restart (#68888)
Propagate partition_date from producer Dag runs to consumers of partitioned assets (#67285)
Make the task and asset state store accessible from triggers via AssetStateStoreAccessors (#67839)
Add OpenTelemetry head sampling support (#68591)
Add async XCom accessors for async tasks (#68299)
Add an async aget_hook method to BaseHook for async tasks (#68506)
Allow custom partition Window subclasses via a plugin registry (#68717)
Support an extra field for the Coordinator (#68694)
Apply rerun_with_latest_version to TriggerDagRunOperator reruns (#67273)
Scope the XCom Execution API to teams in multi-team mode (#68850)
Enforce pool team ownership in the scheduling loop (#68649)
UI: Add team name to the asset graph view (#68457)
Populate partition_date for partitioned Dag runs whose composite asset key has a single time-based dimension (#68442)
UI: Add a column to the asset store table linking to the task instance that wrote it (#68395)
UI: Add a custom expiration datetime picker for the task store modal (#68394)
UI: Add additional task instance attributes to the task instance details section (#68378)
UI: Add a Details tab to the mapped task instance view (#68340)
UI: Add bulk marking of Dag runs as success or failed from multi-select (#68278)
Add --team-name support to the pool CLI commands (#68110)
UI: Add a full-screen toggle to the code viewer (#68044)
Add API endpoint support for consumer team asset filtering (#68034)
UI: Add bulk clear selection for task instances (#68029)
Add awaiting_input task state for Human-in-the-Loop, running off the triggerer (#68028)
Add bulk API to mark Dag runs as success or failed (#67948)
Record writer info for every asset store write for better cross-linkage (#67902)
Register XCom output_type classes from a worker-side Dag walk (#67875)
Add FixedKeyMapper and SegmentWindow for categorical asset-partition rollup (#67716)
Add a bulk POST /dags/{dag_id}/clearDagRuns API endpoint (#67709)
Return Pydantic model instances through XCom for structured output (#67644)
Add the ability to apply a note when clearing a Dag run or task instances (#67639)
Add consumer_teams to AssetAccessControl in the Task SDK (#67625)
Populate trigger team_name at creation time for multi-team support (#67605)
UI: Add bulk Clear on the Dag Runs list page (#67564)
Add multi-team query filtering to triggerer trigger assignment (#67517)
Add forward fan-out support via the forward kwarg on Window (AIP-76) (#67475)
Add patch task state API and expires_at support in the set API (AIP-103) (#67319)
Add a team_name column to the trigger table for multi-team triggerer support (#67305)
UI: Add asset and task store views (#67292)
Add a --team-name CLI argument to the triggerer for multi-team (#67254)
Add an allow_global option to asset access control (#67251)
Add mTLS and private CA support to the API client and server (#67214)
Add Markdown documentation support for TaskGroups (#67207)
Add a per-mapper max_fan_out override for partition fan-out cap (#67184)
Add timezone support to the SDK temporal partition mappers (#67164)
Add ResumableJobMixin with SparkSubmitOperator for surviving worker failures (#67118)
Add bulk delete for Dag runs (#67095)
Add a nav_top_level option for plugin nav items (#67084)
Add Core API endpoints for task state and asset state (AIP-103) (#67041)
Replace allow_producer_teams with access_control on Asset (#66954)
Add worker-side custom state backend support (AIP-103) (#66859)
Let partitioned Dag runs fire on a partial upstream window with wait_policy (#66848)
Consume task-emitted partition keys on asset events (AIP-76) (#66782)
Add per-task state key retention from operators (AIP-103) (#66699)
Add a callback_execution_timeout config for deadline callbacks (#66609)
Add a clear_on_success config to wipe task state on success (AIP-103) (#66586)
Add a partitions clear CLI command to reset DagRun partition fields (#66520)
Make CORS allow_credentials configurable (#66503)
Add periodic task state garbage collection and retention support (AIP-103) (#66463)
Add URI sanitizers and asset factories for new schemes (#66426)
Add a teams sync CLI command (#66418)
Add remote log upload support for callback subprocesses (#66379)
Add by-name/by-uri asset state routes and AssetUriRef support (AIP-103) (#66336)
UI: Add support for rendering multi-type params (#66278)
Filter Dags by teams when registering asset changes (#66168)
Wire up Task SDK communication and context access for task/asset state (AIP-103) (#66160)
UI: Add marking a task group as success or failed (#66146)
Add Execution API endpoints for task and asset states (AIP-103) (#66073)
Add FanOutMapper for one-to-many partition fan-out (#66030)
Add Variable.keys() to list variable keys by prefix in the Task SDK (#66022)
Add an airflow dags clear command for partition-range reprocessing (#66004)
Add a memray_detailed_tracing option for deeper memory profiling (#65996)
UI: Add support for different graph directions in the asset graph view (#65948)
UI: Add a Clear All Mapped Tasks button (#65813)
Add allow_producer_teams to the Asset SDK class (#65790)
UI: Show expected duration based on historical average in Dag Run details (#65722)
Add team name to the task context (#65617)
Add an on_kill() hook to BaseTrigger to handle user actions on triggers (#65590)
Allow accessing a Dag's members via [] (#65586)
Add pluggable retry policies for Airflow tasks (AIP-105) (#65474)
Add support for format="Duration" in params (#65469)
UI: Add pagination to the grid view (#65388)
Add partition_key to the task context (#65359)
Make the blocked-thread warning threshold configurable (#65009)
Add name fields to SDK deadline alerts (#64926)
Add dynamic interval resolution support via Variables for deadline alerts (#64751)
Add an is_backfillable property to Dag API responses (#64644)
Return dag-specified results in the dag run wait API (#64577)
Hold a Dag run until all upstream partitions arrive (AIP-76) (#64571)
Add a way to mark a return-value XCom as the dag result (#64522)
Allow accessing a TaskGroup's members via [] (#64430)
UI: Redo the Gantt chart (#64335)
UI: Add task-level filters to the Dag graph tab (#64271)
UI: Add bulk Clear, Mark Success/Fail, and delete for multiple task instances (#64141)
Check that multi-team is enabled when a team name is provided to the API (#63994)
Add a DagRunType for operators (#63733)
UI: Add search functionality to the task log viewer (#63467)
Add patching of task group instances in the API (#62812)
Add deadlines API endpoints (#62583)
Add async connection testing via workers for security isolation (#62343)
Add run_after to TriggerDagRunOperator (#62259)
UI: Display deadlines on the Dag Run and Overview tabs (#62195)
Re-enable the start_from_trigger feature with template-field rendering (#55068)
Backfill partitioned Dags by partition-date range (#67537)
Add a producer-side acknowledgement channel to shared-stream triggers (#67523)
UI: Add partition_date to the Dag run detail page (#68977)
Expose the upstream partition_key on triggering_asset_events and dag_run.consumed_asset_events (AIP-76) (#69120)
Allow get/set/delete/clear of AssetStateStoreAccessor to run on the triggerer (#68966)
## Bug Fixes
Fix KubernetesExecutor scheduler crash caused by a pod_override that cannot be pickled when running in-cluster (#68831)
UI: Fix dashboard alert clamping and collapse controls (#68893)
Stabilize mapped-task XCom result ordering in the Dag run wait endpoint by ordering on task_id/map_index (#68550)
Only log task state cleanup when a worker state store backend is configured (#68878)
Fix in-process Execution API loop stopped while transport still in use (#68865)
Fix task state store custom expiry datetime missing timezone on save (#68823)
Do not leak threads from InProcessExecutionAPI (#68840)
Fix partitioned backfill widening a sub-day window to the whole day (#68718)
UI: Fix inconsistent padding between Dag Runs and Task Instances list views (#68689)
Skip asset-change registration for tasks with no outlets (#68687)
Percent-encode API client path params for keys with slashes (#68667)
Fix bulk create+overwrite silently resetting unset fields on pools and connections (#68645)
Fix triggerer crash when a trigger subclass does not call super().__init__() (#68636)
Fix Task SDK swallowing errors when Variable.set() or Variable.delete() fails (#68542)
Populate partition_date when manually triggering partitioned Dags (#68458)
Improve warning visibility for invalid JSON when editing variables (#68268)
Fix the triggerer log server port configuration key (#67785)
Enforce ti:self scope on /execution/task-reschedules/{ti}/start_date (#67628)
UI: Fix misleading Calendar "Total Runs" coloring behavior (#67595)
Fix Stats not being initialized in the API server lifespan (#68514)
Fix BackfillDagRun.partition_key type annotation (#68432)
Fix backward compatibility for DagRunInfo partition fields (#68342)
Fix airflow db clean failing on foreign-key-referenced dag_version rows (#68339)
Fix 500 error when listing event logs with a NULL timestamp (#68338)
Fix MySQL downgrade from 3.3.0 for the deadline_alert.interval JSON conversion (#68337)
Fix older and custom secrets backends breaking on Airflow 3.2 (#68302)
Fix secrets backend connection errors being silently swallowed at DEBUG level (#68301)
UI: Fix the instance name title shown on non-Dag pages (#68288)
Fix scheduler not populating partition_date for temporal asset partitions (#68266)
UI: Fix wrong language being auto-detected from browser preferences (#68258)
Honor retry_policy on non-deferrable TriggerDagRunOperator wait failures (#68254)
Fix scheduler crash loop when the last task instance predates Dag versioning (#68253)
Fix team consumer asset filtering (#68242)
UI: Fix sluggish multi-selection behavior in tables (#68229)
UI: Fix mapped task instance links for tasks without a start date (#68194)
Fix setup/teardown auto-inclusion when clearing or marking tasks (#68193)
UI: Remove redundant columns from the XCom panel on the task instance page (#68188)
UI: Fix Gantt tooltip showing the wrong start date on queued/scheduled segments (#68176)
Fix Java SDK coordinator rejecting IPv4-mapped IPv6 connections (#68169)
Fix Java SDK tasks being rejected by the coordinator connection-ownership check (#68147)
UI: Fix language key for the Dag bundle filter (#68131)
Fix DagFileProcessorManager silent hang on database lock contention (#68118)
Mask all connection extra and variable values in the API audit log (#68049)
Fix spurious "Failed to detach context" error on Execution API disconnects (#68039)
UI: Fix Dag code highlighting for triple-quoted and escaped-brace f-strings (#68026)
Fix cursor encoding for column-form sort parameters in the REST API (#67973)
Fix SimpleAuthManager not preserving the deep-link next URL on first login (#67965)
Guard the task stats emission to prevent errors (#67955)
UI: Fix task instance state badge staying stale after a Mark-as action (#67950)
Register nested Pydantic models for XCom deserialization (#67932)
Fix example_asset_store consumer crash (#67922)
Raise InvalidJwtError in JWTValidator.avalidated_claims() when the key ID does not match (#67909)
Fix Kubernetes executor pod_override being stringified without the cncf provider (#67895)
UI: Prevent duplicate task instance summary stream refreshes after mutations (#67892)
Reject negative default_retention_days in the Task SDK and core API routes (#67890)
Fix none_failed_min_one_success trigger rule checks (#67873)
Remove trigger kwargs from the REST API response (#67868)
UI: Fix long parameter names overflowing the Trigger Dag modal (#67859)
Fix misleading log message in the task runner clear-on-success block (#67836)
Fix scheduler crash when logging orphaned task resets (#67822)
UI: Fix dashboard pool summary showing incorrect deferred slot usage (#67818)
Fix trigger datetime deserialization (#67795)
UI: Fix Graph layout for TaskGroup tasks wired to external nodes (#67720)
Fix airflow dags clear clearing the wrong day for non-UTC partitioned timetables (#67717)
Fix per-index evaluation of ONE_FAILED in mapped task groups (#67684)
UI: Fix dialog dismissal for the Chakra upgrade (#67674)
UI: Hide dashboard metric percentages when a state count is capped (#67664)
Apply per-file authorization to the dag-source endpoint (#67662)
Fix airflow dags next-execution --table crash when no next run exists (#67642)
UI: Fix the time picker omitting seconds (#67636)
Filter scheduling-dependencies graph edges by readable-Dag access (#67627)
Mask per-key secrets-backend-kwarg overrides on the Config API (#67622)
Fix GET /auth/login missing a 400 response in the OpenAPI spec (#67571)
Fix GET /pools incorrectly documenting a 404 response in the OpenAPI spec (#67570)
Add a compatibility layer for import errors caused by AirflowSecretsBackendAccessDenied (#67560)
UI: Fix rendering of None child state (#67552)
Fix sort order for mapped task instances (#67551)
Fix import errors total-entries count with multiple Dags per file (#67550)
UI: Prefer active over queued state for collapsed groups (#67543)
Fix callback state not updating from executor events due to a UUID type mismatch (#67542)
Reject wildcard origin in CORS config instead of toggling credentials (#67502)
Guard the finally-block logger in the HTTP access log middleware (#67501)
Strip CR/LF from user-supplied logical date before logging (#67500)
Redact secret-looking query parameters in the HTTP access log (#67498)
UI: Fix Calendar view to respect the user-selected timezone (#67497)
Escape LIKE wildcards in non-search filter parameters (#67496)
Fix missing redaction of secret values in variable JSON (#67495)
Fix bulk CREATE+OVERWRITE team-context authorization bypass (#67493)
UI: Return 400 instead of 500 from structure_data on a malformed asset expression (#67489)
Fix SimpleAuthManager redirect to the next URL after login (#67483)
Return 400 instead of 500 from materialize_asset on invalid input (#67445)
UI: Restore the Monaco find widget in the Dag Code view (#67391)
UI: Fix an HTTPException import that turned a 400 into a 500 in the dags endpoint (#67363)
Restore fail_fast handling when reschedule exceeds the MySQL TIMESTAMP limit (#67353)
Fix the Triggered Dag button not being visible during queued/running state (#67327)
Fix variables import with structured falsy values (#67060)
Avoid logging Execution API bearer credentials (#67059)
Sanitize Dag processor metric file names (#67029)
Return a 422 when the database rejects an API payload (#66888)
Prevent AlreadyRunningBackfill error caused by an invalid date range request (#66874)
Restrict owner-link and extra-link href values to safe schemes (http, https, mailto, relative) (#66741)
Add a session parameter to the BaseStateBackend interface to fix custom backends (#66708)
Allow deadline callbacks within the same Dag module (#66702)
UI: Fix relative React plugin bundle URLs in dev mode (#66618)
Validate Dag trigger conf as a JSON object or null (#66617)
Require a trust sentinel for state.user injection in get_user() (#66562)
Use hmac.compare_digest for SimpleAuthManager password comparison (CWE-208) (#66556)
Set SameSite=Lax on the SimpleAuthManager all-admins login cookie (#66502)
Reserve /auth and /pluginsv2 from plugin URL prefixes (#66501)
Use a cryptographically secure RNG for SimpleAuthManager passwords (#66500)
Fix Triggerer runner_health_check_threshold log formatting (#66486)
Fix Dag processor callback cleanup for versioned bundle files (#66484)
Default AIRFLOW_UID to 50000 in the airflow-init chown lines (#66481)
Strip CR/LF from MySQL URL query values before forwarding to my.cnf (#66325)
Fix CronMixin not resolving cron presets before validation (#66102)
Fix AirflowSDKConfigParser missing the mask_secrets method (#66077)
Fix resolve_xcom_backend to rely on the config schema default (#65938)
Fix a missing import cast error in the dag_run API route (#65748)
Mask Dag processor connection and variable responses (#65704)
UI: Show import error for deactivated Dags (#65687)
Forward MySQL SSL params from sql_alchemy_conn to airflow db shell (#65575)
Disable SQLite FK checks in the 0111 migration downgrade (#65545)
Handle Variable values that cannot be decrypted gracefully in the stable REST API (#65452)
Retry TriggerDagRunOperator when the triggered DagRun fails (#65390)
Fix task run exceptions never being caught by Sentry (#65161)
Fix the bulk task instance authorization error message rendering (#64719)
Fix trigger template rendering failure when operator template_fields differ from trigger attributes (#64715)
Fix task_defer with non-JSON next_kwargs in TaskInstance (#64714)
Add the error as context["exception"] in InProcessTestSupervisor (#64568)
Fix NPM security alerts in the simple auth manager (#64309)
Fix Dag run trigger to surface errors instead of swallowing them (#64130)
Fix Task SDK Connection extras built from a URI constructor (#64120)
Add insert/update-on-conflict for rendered task instance fields (#63874)
Fix timeout_with_traceback crashes on Windows and non-main threads (#63664)
UI: Wrap long lines in the rendered templates view (#63492)
Block path traversal via ".." in dag_id and run_id (#63296)
Fix the scheduler health check command in docker-compose.yaml (#62280)
Fix unmapped task deadlock when upstream tasks are removed (#62034)
Forward termination signals from the supervisor to the task subprocess (#61627)
Check destination team permission when using bulk APIs for connections, variables, and pools (#68573)
Fix the execution API /health check failing on the empty-path route (#68578)
Fix Dag run partition key filter breaking on composite keys containing | (#68459)
Fix the partition clear date range for non-UTC partitioned timetables (#68460)
Validate that partition keys are non-empty and within the column length (#68443)
Fix the scheduler serving stale Dag code after an in-place serialized Dag version update (#68558)
Determine the latest Dag version by version number to avoid collisions when timestamps tie (#68389)
Fix new runs and reruns executing an outdated bundle version when the Dag serialization is unchanged (#68336)
Fix remote logging from the task supervisor (#68370)
Upload task logs even when the final state update fails (#67935)
Escape URLs in the Task SDK client when looking up Dag operations (#68129)
Fix task scheduling when multi-team is enabled (#68634)
Fix secret values not being masked in rendered templates when keys use dot or dash separators (#68624)
Fix jwt_audience for the public API being read from two different config sections (#67494)
Fix duplicate deadline-miss callbacks firing from multiple HA scheduler replicas (#64737)
Fix scheduler crash on non-ASCII Dag names when OpenTelemetry metrics are enabled (#68023)
Fix Dag processor crash on non-ASCII names in OpenTelemetry gauge and timer metrics (#68284)
Report duplicate plugin names as import errors instead of silently ignoring them (#66649)
Require edit permission for async connection tests that update an existing connection (#68127)
Restore the deprecated [core] execution_api_server_url mapping to [workers] execution_api_server_url (#63949)
Fix dag.test() not re-syncing sibling Dags across repeated calls (#66205)
UI: Invalidate per-attempt task instance caches after actions so logs and details are not stale (#67212)
Fix task runner failure on a duplicate task instance success-state update (#63355)
Fix a race condition on the order_by parameter when listing Dag runs via the REST API (#68948)
Exclude non-successful Dag runs from the DeadlineReference.AVERAGE_RUNTIME deadline calculation so failed runs no longer skew the computed deadline (#68949)
Allow InProcessExecutionAPI to start without api_auth.jwt_secret configured (#68982)
Make airflow dags test wait for Human-in-the-loop input instead of looping indefinitely on parked HITL tasks (#69104)
Fix the Java coordinator rejecting macOS dual-stack loopback connections (#68973)
Fix an asset-event ingestion crash for Dags using FixedKeyMapper (#69326)
UI: Fix the details panel header overlapping the tabs (#69318)
Fix new Dag versions being created when a task's retry_policy was serialized (#69315)
Fix retry-policy overrides not being persisted to task-instance history (#69241)
Fix deadline callback data not being persisted (#69259)
## Miscellaneous
Propagate the resolved task log level and [logging] namespace_levels to language SDK runtimes (#68712)
Forward run-identity attributes (dag_id, run_id, run_type) to the trace sampler so a custom head sampler can differentiate by run kind (#68592)
Remove all_map_indices from task_state_store.clear() in the task context (#68880)
Optimize the dag processor by caching bundle-to-team name lookups (#68730)
Rename the misleading last_automated_run param to reference_run (#68714)
Add a team_name tag to the remaining multi-team metrics (#68601)
Add a team_name tag to dag processor metrics for multi-team deployments (#68599)
Add a team_name tag to asset metrics for multi-team deployments (#68367)
UI: Persist dashboard alert collapse state and clamp long alerts (#68329)
Optimize bulk variable deletion to avoid N+1 queries (#68508)
UI: Unify the Dag Code tab toolbar styling with the Logs toolbar (#68449)
Optimize bulk Dag run authorization to avoid N+1 team-name queries (#68286)
Improve airflow dags command to use bulk clear (#68280)
Add the task_state_store table to the airflow db clean mechanism (#68218)
Add metrics and traces to ResumableJobMixin for crash recovery (#68213)
Improve ResumableJobMixin crash-recovery observability with better logging (#68206)
Pass DagRun to task_instance_mutation_hook for run-aware task mutation (#68198)
Add team_name to multi-team metrics (#68108)
Reduce redundant Dag team lookups in authorization checks (#68020)
Enhance ResumableJobMixin.get_job_status with context for better job status tracking (#68009)
Propagate OpenTelemetry trace headers from the client to Execution API server-side spans (#67904)
Widen the type hint for the DagRun.get_task_instances / fetch_task_instances state parameter (#67880)
UI: Use the bulk clear Dag runs endpoint for bulk Dag run clear (#67846)
Add a default parameter to the task and asset state get() method (#67842)
Make core API routes for task and asset states interact only with the database (#67835)
Optimize Dag processor file-queue deduplication from O(N^2) to O(N) (#67750)
Add allow_consumer_teams and allow_global_consumers columns to TaskOutletAssetReference (#67730)
Speed up the Dags list and dashboard queries on large DagRun tables (#67721)
Make partition_key provenance-only and inherit it onto asset events (#67718)
Speed up Dag serialization by skipping a redundant asset roundtrip (#67702)
Cache BaseOperator.__init__ signature in operator serialization (#67701)
Optimize TaskGroup.topological_sort for reverse-declared Dags (#67688)
Update serialization for producer-side asset access control (#67658)
Allow outlets to be added and accessed in AssetStateAccessor (#67619)
Unify task/asset state storage between the Core API and Execution API (#67547)
Decorate custom state references with an envelope for UI clarity (#67530)
Simplify authoring of task and asset states by allowing JSON types (#67418)
Replace Sphinx Redoc with Swagger for the API docs (#67390)
Emit OpenTelemetry spans around listener hook calls (#67347)
UI: Update verbiage for lower-priority backfill runs (#67338)
Fix N+1 query in the bulk task instance delete endpoint (#67304)
Speed up TaskGroup.topological_sort with an int-indexed projected sweep (#67288)
UI: Use react-query native error state for bulk action hooks (#67284)
Wrap executor.heartbeat() in a timer to localize scheduler loop slowdowns (#66808)
Emit dagrun.first_task_start_delay separately from scheduling delay (#66807)
Share one poll loop across sibling event triggers (#66584)
UI: Upgrade icons, spacing, and default component themes (#66569)
Warn when SimpleAuthManager runs in a production-shaped deployment (#66563)
Migrate Stackdriver logging config to the RemoteLogIO pattern (#66513)
Add a BundleVersion dataclass and version_data persistence to DagVersion (#66491)
Avoid lazy-loading timetable fields for latest DagRuns (#66488)
Move allow_producer_teams to DagScheduleAssetReference (#66487)
Pass user teams to the create_asset_event endpoint (#66367)
Load USFederalHolidayCalendar lazily to reduce memory usage when loading examples (#66303)
Propagate task OpenTelemetry trace context through IPC into Execution API requests (#66151)
Surface worker Dag parse duration in the task log (#66138)
Skip deserializing trigger_kwargs when loading serialized Dags (#66002)
Honor AUTH_ROLE_PUBLIC in the FastAPI API server (#65685)
Add extended sysinfo for the Edge worker (#65472)
Clarify logs when a Dag is being processed in the Dag processor (#65196)
Add indexes on task_instance.dag_version_id and dag_run.created_dag_version_id (#64818)
Improve creation of RuntimeTaskInstance in TriggerRunner for start_for_trigger functionality (#64298)
Mark the Triggerer supervisor as a server context so it can read metastore connections (#64022)
Load hook metadata from YAML without importing the hook class (#63826)
Add detailed task spans (#63568)
Downgrade logging on query JSON parsing and add a JSON load condition (#62044)
UI: Add a Deadlines section with a time-range selector to the Dashboard page (#68038)
UI: Add a modal for editing notes with Markdown support (#68362)
UI: Improve the Human-In-The-Loop form UX (#68397)
Add a team_name tag to executor metrics for multi-team deployments (#68593)
Make task and asset state store row size limits configurable (#68133)
UI: Add notification UX for Human-In-The-Loop actions (#68346)
Allow synchronous deadline callbacks (SyncCallback) to access Connections and Variables (#65269)
Add a team_name tag to deadline metrics for multi-team deployments (#68589)
Add a team_name tag to scheduler metrics for multi-team deployments (#68594)
Defer the Cadwyn import so FastAPI/Starlette stay off the Task SDK worker path, reducing per-worker memory (#69029)
## Doc Only Changes
Complete the Taiwanese Mandarin (zh-TW) translation (#68870)
Add missing Korean (ko) translations (#68600)
Close German (de) translation gaps (#68356)
Add a segment fan-out example to the asset partition example Dag (#68722)
Fix runtime-partition example Dags using unreachable schedules (#68719)
Add an example Dag for the task state store with mapped tasks (#68670)
Fix the gap in the Taiwanese Mandarin (zh-TW) translation (#68668)
Add wait-policy examples to the asset partition example Dag (#68658)
Add a contributing guide for language SDKs (#68330)
Add sdk.TIRunContext documentation for the Go SDK (#68319)
Add a Go Task SDK authoring guide to the docs (#68223)
Update supported-versions doc to mark 2.11.2 as EOL (#68212)
Add documentation for ResumableJobMixin and resumable tasks (#68136)
Add CLI examples for team-scoped pools (#68111)
Add docs for multi-team triggerer support (#67608)
Clarify trigger rule behavior for the removed upstream state (#67452)
Fix outdated image links in dags.rst (#67357)
Add an example and docs for runtime asset partitioning (AIP-76) (#67307)
Add documentation for the Task and Asset Store (AIP-103) (#67299)
Add a dynamic task mapping no-op example (#67022)
Add documentation about adding access_control to the Asset object (#66949)
Add a how-to for Dag-level retry via on_failure_callback (#66277)
Fix documentation after PR 62645 (#65843)
Add documentation for team-based asset event filtering (#65690)
Document on_kill()/cleanup() for triggers (#65671)
Explain xcom_pull behaviour without task_ids in the docs (#65406)
Improve standalone authentication documentation for Airflow 3.x (#65330)
Clarify manual Dag run data interval semantics in Airflow 3 (#64740)
Document and test xcom_pull run_id usage for triggered Dag runs (#63030)
Update params in the backfill documentation (#61821)
Document the apache-airflow-mypy package in the core docs (#68561)
Fix typos and formatting in the Fundamentals documentation (#68524)
Complete the Hindi (hi) UI translation (#68574)
Fill the Taiwanese Mandarin (zh-TW) UI translation gap (#68563)
Document that Dag bundle kwargs should reference a Connection rather than inline credentials (#69105)
Add example plugins and expand the asset-partitions documentation (#69017)
Java SDK docs: JUL setup, pinning java_executable, and a config-reload note (#69020)
Correct the example config for the coordinators (#68940)
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
📦 PyPI: https://pypi.org/project/apache-airflow/3.2.2/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.2.2/ 🛠 Release Notes: https://airflow.
📦 PyPI: https://pypi.org/project/apache-airflow/3.2.2/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.2.2/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.2.2/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.2.2" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.2.2
## Significant Changes
The SMTP STARTTLS upgrade performed by airflow.utils.email.send_email now validates the SMTP server's certificate against the system's trusted CA bundle by default. Previously the starttls() call was made without an SSL context, so any certificate was accepted. Deployments that intentionally point Airflow at an SMTP server with a self-signed or otherwise non-validating certificate and need to preserve the previous behaviour must set email.ssl_context = "none" in airflow.cfg. The "default" value (now also the default when the option is unset) uses ssl.create_default_context. Previously this option applied only to the SMTP_SSL path; it now applies to the STARTTLS path as well. (#65346)
In #64963, the Airflow UI switched from full-match *_pattern REST API query parameters to the new index-friendly *_prefix_pattern parameters on list endpoints. This is a behavioral change for search-as-you-type filters in the UI: matches are prefix-based (LIKE 'term%' via a range scan) instead of substring-based (ILIKE '%term%'), which means the database can use B-tree indexes and search stays fast on large deployments. The REST API itself keeps both forms: existing *_pattern parameters still behave exactly as before. In #66015, a per-search-bar "Match anywhere" toggle was added so users who relied on the previous substring behavior can opt back into it from the UI. Each search input and each text filter pill now has a small regex-icon toggle next to the value; flipping it on switches that input from *_prefix_pattern to *_pattern. (#66015)
Fix triggerer race condition and deadlock that caused deferred tasks to stall indefinitely
Triggers that call synchronous SDK methods (e.g. get_task_states used by safe_to_cancel in several Google provider operators) could crash the triggerer's internal subprocess. The triggerer would then continue to heartbeat normally — appearing healthy to the scheduler — while silently processing zero triggers, causing every deferred task to time out. This was first reported in issue #64620; a partial fix shipped in Airflow 3.2.1 (#64882) but introduced a new deadlock with the same visible symptom under load.
Both issues are fixed by replacing the lock-based serialization with response multiplexing: each request now carries a unique ID and the response is routed back to the correct caller, so concurrent requests from trigger threads no longer contend or deadlock regardless of how many triggers are running or what SDK methods they call.
New: triggerer subprocess watchdog
Even with the race fixed, a trigger that blocks the event loop (e.g. by calling time.sleep() or performing blocking I/O directly in async def run()) would previously leave the triggerer appearing healthy indefinitely.
A new [triggerer] runner_health_check_threshold config option (default: 30 seconds) adds a watchdog: if the triggerer subprocess goes silent for longer than the threshold, the parent process stops updating the heartbeat so the scheduler can detect the hang and reassign triggers rather than waiting for them to individually time out. Set the option to 0 to disable the watchdog. (#66412)
Tighten [core] allowed_deserialization_classes_regexp to require full-string matches
Patterns in [core] allowed_deserialization_classes_regexp are now matched against the entire classname using re.fullmatch() instead of re.match(). Previously a pattern such as airflow\.models\.Variable admitted not only the intended class but also names that started with it (e.g. airflow.models.Variable_Malicious), because re.match only anchors at the start of the string.
The default value of this option is empty, so out-of-the-box deployments are unaffected. Deployments that configured this option with patterns relying on prefix-match semantics — for example airflow\.models\. to mean "any class under airflow.models" — must add .* to the pattern (airflow\.models\..*) to retain the previous behaviour. (#66499)
Custom deadline reference classes must now be registered via the new deadline_references attribute on AirflowPlugin, matching the existing pattern for custom timetables and custom partition mappers. To use a custom DeadlineReference subclass, register it in a plugin's deadline_references list. Custom references that are not registered will raise DeadlineReferenceNotRegistered at deserialization. (#66737)
## Bug Fixes
Fix Callback.handle_event triggerer crash when OpenTelemetry metrics receive dict typed tag values (#67527) (#67529)
UI: Rewrite modulepreload hrefs to the api-server static path (#67548) (#67556)
Correctly pre-allocate external_executor_id with multiple executors on PostgreSQL (#67388) (#67458)
Return raw import-error stacktrace when a Dag file has no registered Dag (#67465) (#67478)
UI: Fix Expand/Collapse All on XComs and Audit Log JSON cells (#67316) (#67361)
UI: Load Monaco workers via a same-origin Blob shim (#67352) (#67469)
UI: Show DAG name in browser tab title (#67169) (#67399)
Require starlette>=1.0.1 for Host-header parsing fix and cadwyn>=6.1.1 for compatibility (#67326) (#67460)
Revoke JWT on /auth/logout regardless of auth manager logout URL (#67289) (#67362)
Fix deadlock in ti_update_state caused by FOR UPDATE locking dag_run (#67246) (#67264)
UI: Stop polling getLatestRunInfo on paused Dags with no active runs (#67249) (#67256)
Fail closed when supervisor IPC fails on a non-success terminal state (#66573) (#67183)
Refuse secrets-backend fallback on Execution-API authorization deny (#66575) (#67173)
Harden _collect_teams_to_check and requires_access_backfill against malformed request bodies (#66504) (#67182)
Don't crash supervisor IPC loop on transient network errors (#66572) (#67177)
Default-deny auth at the API and UI router level (#66505) (#67171)
Apply per-Dag audit log permission to event log detail endpoint (#67112) (#67159)
Fix ValueError when supervisor force-closes stuck sockets after timeout (#67115) (#67162)
Redact rendered template fields while still structured to preserve nested-key masking on truncation (#65906) (#67117)
Fix migration 0080 to migrate existing deadline rows on upgrade and downgrade (#66016) (#67129)
Fix XCom PATCH/POST to store native values instead of json.dumps output (#64220) (#67116)
Fix max_active_runs lost during Dag serialization when value equals schema default (#65310) (#67097)
Fix N+1 query pattern in bulk pool delete endpoint (#66222) (#67108)
Optimize DB performance of datetime range filters in API queries (#66696) (#67102)
Fix serialize_template_field handling callable value in dict (#63871) (#67092)
Fix scheduler to ignore stale executor success after defer reschedule (#66431) (#67089)
Fix ArgNotSet repr to use stable string instead of memory address (#65222) (#66897)
Fix scheduler MySQL task instance index hint (#66785) (#67087)
UI: Preserve Grid limit and filters when redirecting after manual Dag trigger (#66717) (#66867)
Apply reserved-key check to XCom update payload (#65915) (#66913)
Fix log server path extraction to use removeprefix (#66749) (#66772)
Fix macOS SIGSEGV in task execution by using fork + exec (#64874) (#66872)
Fix Dag auto-pause ordering to use run_after (#65207) (#66863)
Fix Dag version inflation caused by unmatched serialized result of task using re-serialized command (#61077) (#66861)
Fix pod_override serialization in Dag details and executor path (#65407) (#66898)
Fix async engine missing pool_recycle and pool_pre_ping configuration (#65276) (#66866)
UI: Make Dag detail page scrollable on mobile viewports (#65899) (#66975)
Fix DagVersion when clearing tasks with run on latest version (#65835) (#66901)
Fix millisecond floating point duration bug (#66560) (#66915)
UI: Fix "Mark state as..." buttons grayed out when task or DagRun already in target state (#66198) (#66919)
Fix memory leak in LocalExecutor caused by unreleased file descriptor locks (#65121) (#66887)
Fix external DB manager upgrades with existing tables (#66674) (#66882)
UI: Improve DagCalendarTab background color retrieval and loading overlay handling (#64189) (#66860)
UI: Handle Dags state filter overflow on mobile (#66812) (#66847)
UI: Fix Edit Connection dialog missing lazyMount causing JSON editor infinite loading (#65969) (#66828)
UI: Fix ConnectionForm crashing when connection has invalid extra JSON (#66593) (#66831)
Handle PermissionError in init_log_folder for mounted filesystems (#63878) (#66733)
Fix scheduler crash by catching StaleDataError in verify_integrity (#64503) (#66727)
Fix triggerer file handle leak when remote log upload fails (#66675) (#66684)
Fix /tmp file leak when API server streams large task logs (#66450) (#66667)
Fix XCom prior-dates lookup for duplicate run_id across Dags (#65227) (#66646)
Fix HITL (Human-In-The-Loop) /required_actions listing to show mapped task instances (#66433) (#66482)
Fix scheduler callback bundle_version when versioning disabled (#66485) (#66518)
UI: Hide Next Run timestamp for paused Dags (#66552) (#66568)
Fix task run context crash when DagRun state is expired (#66339) (#66347)
Fix incorrect type warning from OTel spans (#66559) (#66567)
Fix backfill to populate partition_date on partitioned backfill runs (#65998) (#66409)
Fix remote_task_handler_kwargs passing handler params to RemoteLogIO (#65957) (#66440)
Fix i18n translation files served stale after Airflow upgrade due to browser cache (#65720) (#66422)
UI: Fix manual copy from Rendered Templates tab adding extra blank lines (#66221) (#66366)
Fix slow and incomplete trigger cleanup in scheduler (#66210) (#66381)
UI: Distinguish upstream_failed from failed in normal vision (#66324) (#66365)
UI: Fix SearchBar input rewind (#66284) (#66359)
Don't re-emit logical_date when previous data_interval is zero-length (#66132) (#66263)
Fix variable access in triggerer for deferrable operators (#63387) (#66239)
Fix missing autoincrement sequence on callback_request downgrade (#65230) (#66189)
Restore pre/post execute log grouping in task logs (regression in 3.2.x) (#66037) (#66049)
Preload source_aliases in process_executor_events (#65422) (#66191)
Fix dagRuns API to honor start_date_gte filter correctly (#66045) (#66098)
Fix asset-triggered Dags failing to schedule when their triggers were unassigned in the DB (#65792) (#66043)
UI: Preserve config changes when re-triggering a Dag from the UI (#65749) (#66044)
Fix scheduler UniqueViolation crash on downgrade from 3.2.0 to 3.1.x (#65688) (#66003)
Run task cleanup hooks (on_failure_callback, listeners) when the supervisor IPC call fails on a terminal-state report (#65714) (#65946)
Fix triggers with double-encoded payloads failing to deserialize (#64823) (#65584)
UI: Fix log fetch crash when ti.hostname is empty (#64285) (#65583)
Fix backfill marked complete before Dag runs are created (#62561) (#65889)
UI: Fix date time input year field unmodifiable (#63885) (#65890)
UI: Fix pools slot input behavior (#63900) (#65891)
Fix TypeError crashes on /users/list and /roles/list in FAB UI caused by concurrent API schema requests (#63986) (#65892)
UI: Fix toaster behavior (#64142) (#65893)
Fix FAB DB manager discovery in migration-only contexts (#64145) (#65894)
UI: Fix PoolBar links using wrong query params for task instances filtering (#64182) (#65896)
Fix memory growth from pathlib sys.intern in long-running processes (#65706) (#65855)
Pre-assign external_executor_id at queuing time to prevent duplicate execution on scheduler crash (#65594) (#65711)
Handle supervisor remote log upload failures gracefully (#65308) (#65318)
Fix ti.start_date showing deferral-resume time instead of original start time (#63247) (#65491)
Fix task CLI map_index bounds validation (#64133) (#65479)
UI: Fix mapped task XCom navigation from Grid (#65192) (#65322)
Fix connection schema field not saved for providers without field behaviour (#65263) (#65267)
Fix bulk task instance update for mapped TIs and auth error rendering (#65874)
Fix bulk task instance RBAC bypass (#64288) (#65846)
Update is_url_safe to reject URLs with /// (#65557) (#65737)
UI: Improve Graph view performance (#65031) (#65537)
Fix backfill params not overriding existing Dag run conf (#64939) (#65599)
Fix run_id_pattern pipe OR operator dropping single-term edge cases (#65190) (#65565)
Filter external dependency nodes by readable Dags in structure_data endpoint (#65342) (#65534)
Respect Dag processor config option to show parsing logs on stdout (#65528) (#65541)
Add per-Dag authorization to partitioned_dag_runs endpoints (#65344) (#65538)
UI: Register trigger and sensor graph node types (#65167) (#65321)
Ensure DB migrations run in a single connection (#65231) (#65368)
Fix PATCH /dags pagination bug and document wildcard dag_id_pattern (#65309)
Set JWT refresh cookie Secure flag when request is HTTPS (#65348) (#65363)
Refuse to follow log symlinks that resolve outside the base log folder (#65325) (#65345)
Enforce per-file import-error authorization using relative_fileloc and bundle (#65329) (#65343)
UI: Invalidate task instances list query after clearing task instance (#63923) (#65304)
Recover stuck TIs when direct terminal-state API call fails (#66574) (#67204)
## Miscellaneous
UI: Use local Monaco editor module instead of CDN (#66647) (#67199)
Use a distinct redact message for import errors with no registered Dag (#66923) (#67176)
Surface remote-log upload failures via structured warnings (#66571) (#67172)
UI: Filter task instances by rendered map index (#66008) (#67163)
Move Task Identity line into Pre Execution block in logs (#67036) (#67134)
Apply requires_access_event_log to GET /eventLogs list endpoint (#67185) (#67211)
UI: Preserve proxy URL on login redirect (#66690) (#67091)
Keep Named*Logger.name working across structlog releases (#66875) (#67088)
Two-token mechanism for task execution to prevent token expiration while tasks wait in executor queues (#60108) (#66989)
Validate task identity token claims with a typed schema (#63604) (#66988)
Mark Dags stale when their bundle is removed from config (#66948) (#66985)
UI: Allow pasting full datetime strings into date picker inputs (#66251) (#66958)
Validate Dag run conf in backfill dry-run (#66196) (#66935)
Improve post-task logs to show exception in failure (#66735) (#66920)
UI: Show Dag run duration in grid tooltip (#65787) (#66900)
UI: Add Dag run ID to grid bar tooltip and task instance tooltip (#65626) (#66871)
UI: Change queued Dag runs color to gray in Calendar (#66623) (#66870)
Add configurable LRU+TTL caching for API server Dag retrieval (#60804) (#66862)
UI: Use link styling for Dag tags (#66750) (#66855)
UI: Add hover feedback to Checkbox (#66714) (#66826)
Check sensitive key names before applying recursion-depth cutoff in secrets masker (#65912) (#66748)
Adjust log message header for expandable sources (#66570) (#66653)
Allow triggerer to support memray memory profiling (#65994) (#66643)
Show task ID attributes (ti_id, task_id, etc.) once, not on every log line (#66036) (#66421)
Propagate triggering user to child Dag runs via TriggerDagRunOperator (#65747) (#66378)
UI: Add isExpanded prop on JSON expand/collapse buttons (#66340) (#66364)
Pass try_number to extra links API (#65661) (#66171)
UI: Serve grid TI summaries from shared cached DagBag (#65775) (#65966)
Add cursor-based pagination for get_dag_runs endpoint (#65604) (#65746)
Support ordering XCom entries in the REST API and UI (#65418) (#65600)
UI: Add cursor-based pagination for task instances list (#64953) (#65542)
Include task instance UUID in scheduler, Dag processor, triggerer, and worker logs (#65458) (#65476)
Enable SQLAlchemy connection pool settings for file-based SQLite (#64888) (#65411)
Add cursor-based pagination for get_task_instances endpoint (#64845) (#65405)
UI: Rework Monaco editor theme to match Chakra UI palette (#64748) (#65228)
UI: Add Dag runs filters for Consuming Asset (#63624) (#65306)
UI: Improve grid and ti_summaries and grid runs queries (#64034) (#67014)
UI: Enable queue up new tasks (#63484) (#66869)
Expose queueing/scheduled time in the Gantt chart (#63372) (#65016)
Export from_timestamp from Task SDK timezone module (#67321) (#67331)
## Doc-only Changes
Refresh JWT authentication and security model docs with mermaid diagrams (#67435) (#67466)
Fix misleading typo in plugins_manager docs (#67101) (#67114)
Document supported deployment platforms in security docs (#66931) (#67017)
Warn against world-accessible Kerberos ccache default in docs (#66557) (#67085)
Update French (fr) UI translations to 100% coverage (#67241)
Close Catalan translation gap (#67011)
Close German translation gaps (2026-05-12) (#66830)
Close Korean translation gaps (May 13) (#66873)
Add missing Polish translations for new UI keys (#66823)
Update health endpoint in security docs (#66701) (#66739)
Add self-diagnosis guide for Dag version inflation in FAQ (#66697) (#66738)
Add Chakra UI license to airflow-core (#66703) (#66740)
Document effects of create_cron_data_intervals (#66458)
Clarify Task Execution API coverage in Dag-author-isolation chapter (#66194) (#66322)
Complete zh-TW translations (#66401)
Align Dag capitalization from "DAG" to "Dag" in core_api (#66211) (#66304)
Word changed from "DAG" to "Dag" in airflow-core/src/airflow/api (#66200) (#66214)
Change Hebrew wording for "Asset Triggered" (#64177) (#65895)
Update Dag Runs document under Core Concept to be consistent with BashOperator document (#64129) (#65850)
Nothing published for this version
Nothing published for this version
Nothing published for this version
📦 PyPI: https://pypi.org/project/apache-airflow/3.2.1/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.2.1/ 🛠 Release Notes: https://airflow.
📦 PyPI: https://pypi.org/project/apache-airflow/3.2.1/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.2.1/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.2.1/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.2.1" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.2.1
/dags endpoint, as it now requires additional permissions (DagAccessEntity.RUN, DagAccessEntity.HITL_DETAIL, and DagAccessEntity.TASK_INSTANCE). This change was made because the endpoint returns aggregated data from these multiple entities. Please update your custom user roles to include read access for DAG Runs, Task Instances, and HITL Details if those users should still have access to the /dags endpoint. (#64822){} to restore OSS defaults. The tokens field is now optional in the theme configuration. (#64552)DEFAULT_LOGGING_CONFIG to use right kwargs (#65412) (#65424)dispose_orm() not disposing async engine on shutdown (#65274) (#65284)get_team_name_dep creating wasted async sessions when multi_team=False (#65275) (#65282)disable_sqlite_fkeys to migration 0108 (#65288) (#65290)UPDATE to avoid row lock in the common case (#65029) (#65137)dropdowns in connection forms (#65007) (#65085) (#65138)SearchBar value not syncing with defaultValue changes (#65054) (#65140)$AIRFLOW_CONFIG env (#64936) (#65200)Session staying opened between yields (#65179) (#65195)Session leak from StreamingResponse API endpoints (#65162) (#65193)_token cookie exists from older Airflow instance (#64955) (#65177)@task decorator to validate operator arg types at decoration time (#65041) (#65050)is_alive default to None in jobs list CLI (#65065) (#65091)dag_id in get_task_instance (#64957) (#64968) (#65067)debounce on clear to prevent stale search value (#64893) (#64907)CommsDecoder (#64894) (#64946)UPDATEs inside disable_sqlite_fkeys in migration 0097 (#64876) (#64940)TI exists in TIH (#61631) (#64693)SerializedDagModel (#64322) (#64738)TypeError in GET /dags/{dag_id}/tasks when order_by field has None values (#64384) (#64587)DagRun (#64752) (#64853)connections import returning non-zero exit code on failure (#64416) (#64449)target and add rel attributes (#64542) (#64772)DagVersionSelect options not filtered by selected DagRun (#64736) (#64771)start_date in example DAGs to avoid timezone conversion overflow (#63882) (#64758)AirflowPlugin not re-exported, causing mypy errors in plugins (#65132) (#65163)apache-airflow-providers-fab minimum version to prevent connexion import error on Python 3.13 (#65523) (#65524)TriggerCommsDecoder sync req-res cycle (#64882) (#65285)write_to_os support for writing task logs to OpenSearch (#64364) (#65201)airflow_local_settings.py (#64764) (#65003)Nothing published for this version
Nothing published for this version
Nothing published for this version
FileLoadStat will no longer produce paths beginning with / with the meaning of "relative to the dags folder". This is a breaking change for any custom…
📦 PyPI: https://pypi.org/project/apache-airflow/3.2.0/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.2.0/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.2.0/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.2.0" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.2.0
## Significant Changes
### Asset Partitioning
The headline feature of Airflow 3.2.0 is asset partitioning — a major evolution of data-aware scheduling. Instead of triggering Dags based on an entire asset, you can now schedule downstream processing based on specific partitions of data. Only the relevant slice of data triggers downstream work, making pipeline orchestration far more efficient and precise.
This matters when working with partitioned data lakes — date-partitioned S3 paths, Hive table partitions, BigQuery table partitions, or any other partitioned data store. Previously, any update to an asset triggered all downstream Dags regardless of which partition changed. Now only the right work gets triggered at the right time.
For detailed usage instructions, see /authoring-and-scheduling/assets.
### Multi-Team Deployments
Airflow 3.2 introduces multi-team support, allowing organizations to run multiple isolated teams within a single Airflow deployment. Each team can have its own Dags, connections, variables, pools, and executors— enabling true resource and permission isolation without requiring separate Airflow instances per team.
This is particularly valuable for platform teams that serve multiple data engineering or data science teams from shared infrastructure, while maintaining strong boundaries between teams' resources and access.
For detailed usage instructions, see /core-concepts/multi-team.
Warning
Multi-Team Deployments are experimental in 3.2.0 and may change in future versions based on user feedback.
### Synchronous callback support for Deadline Alerts
Deadline Alerts now support synchronous callbacks via SyncCallback in addition to the existing asynchronous AsyncCallback. Synchronous callbacks are executed by the executor (rather than the triggerer), and can optionally target a specific executor via the executor parameter.
A Dag can also define multiple Deadline Alerts by passing a list to the deadline parameter, and each alert can use either callback type.
Warning
Deadline Alerts are experimental in 3.2.0 and may change in future versions based on user feedback. Synchronous deadline callbacks (SyncCallback) do not currently support Connections stored in the Airflow metadata database.
For detailed usage instructions, see /howto/deadline-alerts.
### UI Enhancements & Performance
Grid View Virtualization: The Grid view now uses virtualization -- only visible rows are rendered to the DOM. This dramatically improves performance when viewing Dags with large numbers of task runs, reducing render time and memory usage for complex Dags. (#60241)
XCom Management in the UI: You can now add, edit, and delete XCom values directly from the Airflow UI. This makes it much easier to debug and manage XCom state during development and day-to-day operations without needing CLI commands. (#58921)
HITL Detail History: The Human-in-the-Loop approval interface now includes a full history view, letting operators and reviewers see the complete audit trail of approvals and rejections for any task. (#56760, #55952)
Gantt Chart Improvements:
All task tries displayed: Gantt chart now shows every attempt, not just the latest
Task display names in Gantt: task_display_name shown for better readability (#61438)
ISO dates in Gantt: Cross-browser consistent date format (#61250)
Fixed null datetime crash: Gantt chart no longer crashes on tasks with null datetime fields
### New --only-idle flag for the scheduler CLI
The airflow scheduler command has a new --only-idle flag that only counts runs when the scheduler is idle. This helps users run the scheduler once and process all triggered Dags and queued tasks. It requires and complements the --num-runs flag so one can set a small value instead of guessing how many iterations the scheduler needs.
### Replace per-run TI summary requests with a single NDJSON stream
The grid, graph, gantt, and task-detail views now fetch task-instance summaries through a single streaming HTTP request (GET /ui/grid/ti_summaries/{dag_id}?run_ids=...) instead of one request per run. The server emits one JSON line per run as soon as that run's task instances are ready, so columns appear progressively rather than all at once.
What changed:
GET /ui/grid/ti_summaries/{dag_id}?run_ids=... is now the sole endpoint for TI summaries, returning an application/x-ndjson stream where each line is a serialized GridTISummaries object for one run.
The old single-run endpoint GET /ui/grid/ti_summaries/{dag_id}/{run_id} has been removed.
The serialized Dag structure is loaded once and shared across all runs that share the same dag_version_id, avoiding redundant deserialization.
All UI views (grid, graph, gantt, task instance, mapped task instance, group task instance) use the stream endpoint, passing one or more run_ids.
### Structured JSON logging for all API server output
The new json_logs option under the [logging] section makes Airflow produce all its output as newline-delimited JSON (structured logs) instead of human-readable formatted logs. This covers the API server (gunicorn/uvicorn), including access logs, warnings, and unhandled exceptions.
Not all components support this yet — notably airflow celery worker but any non-JSON output when json_logs is enabled will be treated as a bug. (#63365)
### Remove legacy OTel Trace metaclass and shared tracer wrappers
The interfaces and functions located in airflow.traces were internal code that provided a standard way to manage spans in internal Airflow code. They were not intended as user-facing code and were never documented. They are no longer needed so we remove them in 3.2. (#63452)
### Move task-level exception imports into the Task SDK
Airflow now sources task-facing exceptions (AirflowSkipException, TaskDeferred, etc.) from airflow.sdk.exceptions. airflow.exceptions still exposes the same exceptions, but they are proxies that emit DeprecatedImportWarning so Dag authors can migrate before the shim is removed.
What changed:
Runtime code now consistently raises the SDK versions of task-level exceptions.
The Task SDK redefines these classes so workers no longer depend on airflow-core at runtime.
airflow.providers.common.compat.sdk centralizes compatibility imports for providers.
Behaviour changes:
Sensors and other helpers that validate user input now raise ValueError (instead of AirflowException) when poke_interval/ timeout arguments are invalid.
Importing deprecated exception names from airflow.exceptions logs a warning directing users to the SDK import path.
Exceptions now provided by ``airflow.sdk.exceptions``:
AirflowException and AirflowNotFoundException
AirflowRescheduleException and AirflowSensorTimeout
AirflowSkipException, AirflowFailException, AirflowTaskTimeout, AirflowTaskTerminated
TaskDeferred, TaskDeferralTimeout, TaskDeferralError
DagRunTriggerException and DownstreamTasksSkipped
AirflowDagCycleException and AirflowInactiveAssetInInletOrOutletException
ParamValidationError, DuplicateTaskIdFound, TaskAlreadyInTaskGroup, TaskNotFound, XComNotFound
AirflowOptionalProviderFeatureException
Backward compatibility:
Existing Dags/operators that still import from airflow.exceptions continue to work, though they log warnings.
Providers can rely on airflow.providers.common.compat.sdk to keep one import path that works across supported Airflow versions.
Migration:
Update custom operators, sensors, and extensions to import exception classes from airflow.sdk.exceptions (or from the provider compat shim).
Adjust custom validation code to expect ValueError for invalid sensor arguments if it previously caught AirflowException.
### Support numeric multiplier values for retry_exponential_backoff parameter
The retry_exponential_backoff parameter now accepts numeric values to specify custom exponential backoff multipliers for task retries. Previously, this parameter only accepted boolean values (True or False), with True using a hardcoded multiplier of 2.0.
New behavior:
Numeric values (e.g., 2.0, 3.5) directly specify the exponential backoff multiplier
retry_exponential_backoff=2.0 doubles the delay between each retry attempt
retry_exponential_backoff=0 or False disables exponential backoff (uses fixed retry_delay)
Backwards compatibility:
Existing Dags using boolean values continue to work:
retry_exponential_backoff=True → converted to 2.0 (maintains original behavior)
retry_exponential_backoff=False → converted to 0.0 (no exponential backoff)
API changes:
The REST API schema for retry_exponential_backoff has changed from type: boolean to type: number. API clients must use numeric values (boolean values will be rejected).
Migration:
While boolean values in Python Dags are automatically converted for backwards compatibility, we recommend updating to explicit numeric values for clarity:
Change retry_exponential_backoff=True → retry_exponential_backoff=2.0
Change retry_exponential_backoff=False → retry_exponential_backoff=0
### Move serialization/deserialization (serde) logic into Task SDK
Airflow now sources serde logic from airflow.sdk.serde instead of airflow.serialization.serde. Serializer modules have moved from airflow.serialization.serializers.* to airflow.sdk.serde.serializers.*. The old import paths still work but emit DeprecatedImportWarning to guide migration. The backward compatibility layer will be removed in Airflow 4.
What changed:
Serialization/deserialization code moved from airflow-core to task-sdk package
Serializer modules moved from airflow.serialization.serializers.* to airflow.sdk.serde.serializers.*
New serializers should be added to airflow.sdk.serde.serializers.* namespace
Code interface changes:
Import serializers from airflow.sdk.serde.serializers.* instead of airflow.serialization.serializers.*
Import serialization functions from airflow.sdk.serde instead of airflow.serialization.serde
Backward compatibility:
Existing serializers importing from airflow.serialization.serializers.* continue to work with deprecation warnings
All existing serializers (builtin, datetime, pandas, numpy, etc.) are available at the new location
Migration:
For existing custom serializers: Update imports to use airflow.sdk.serde.serializers.*
For new serializers: Add them to airflow.sdk.serde.serializers.* namespace (e.g., create task-sdk/src/airflow/sdk/serde/serializers/your_serializer.py)
### Methods removed from PriorityWeightStrategy
On (experimental) class PriorityWeightStrategy, functions serialize() and deserialize() were never used anywhere, and have been removed. They should not be relied on in user code. (#59780)
### Methods removed from TaskInstance
On class TaskInstance, functions run(), render_templates(), get_template_context(), and private members related to them have been removed. The class has been considered internal since 3.0, and should not be relied on in user code. (#59780, #59835)
### Modify the information returned by DagBag
New behavior:
DagBag now uses Path.relative_to for consistent cross-platform behavior.
FileLoadStat now has two additional nullable fields: bundle_path and bundle_name.
Backward compatibility:
FileLoadStat will no longer produce paths beginning with / with the meaning of "relative to the dags folder". This is a breaking change for any custom code that performs string-based path manipulations relying on this behavior. Users are advised to update such code to use pathlib.Path. (#59785)
### Remove --conn-id option from airflow connections list
The redundant --conn-id option has been removed from the airflow connections list CLI command. Use airflow connections get instead. (#59855)
### Add operator-level render_template_as_native_obj override
Operators can now override the Dag-level render_template_as_native_obj setting, enabling fine-grained control over whether templates are rendered as native Python types or strings on a per-task basis. Set render_template_as_native_obj=True or False on any operator to override the Dag setting, or leave as None (default) to inherit from the Dag.
### Add gunicorn support for API server with zero-downtime worker recycling
The API server now supports gunicorn as an alternative server with rolling worker restarts to prevent memory accumulation in long-running processes.
Key Benefits:
Rolling worker restarts: New workers spawn and pass health checks before old workers are killed, ensuring zero downtime during worker recycling.
Memory sharing: Gunicorn uses preload + fork, so workers share memory via copy-on-write. This significantly reduces total memory usage compared to uvicorn's multiprocess mode where each worker loads everything independently.
Correct FIFO signal handling: Gunicorn's SIGTTOU kills the oldest worker (FIFO), not the newest (LIFO), which is correct for rolling restarts.
Configuration:
[api]
# Use gunicorn instead of uvicorn
server_type = gunicorn
# Enable rolling worker restarts every 12 hours
worker_refresh_interval = 43200
# Restart workers one at a time
worker_refresh_batch_size = 1Or via environment variables:
export AIRFLOW__API__SERVER_TYPE=gunicorn
export AIRFLOW__API__WORKER_REFRESH_INTERVAL=43200Requirements:
Install the gunicorn extra: pip install 'apache-airflow-core[gunicorn]'
Note on uvicorn (default):
The default uvicorn mode does not support rolling worker restarts because:
With workers=1, there is no master process to send signals to
uvicorn's SIGTTOU kills the newest worker (LIFO), defeating rolling restart purposes
Each uvicorn worker loads everything independently with no memory sharing
If you need worker recycling or memory-efficient multi-worker deployment, use gunicorn. (#60921)
### Improved performance of rendered task instance fields cleanup for Dags with many mapped tasks (~42x faster)
The config max_num_rendered_ti_fields_per_task is renamed to num_dag_runs_to_retain_rendered_fields (old name still works with deprecation warning).
Retention is now based on the N most recent dag runs rather than N most recent task executions, which may result in fewer records retained for conditional/sparse tasks. (#60951)
### AuthManager Backfill permissions are now handled by the requires_access_dag on the DagAccessEntity.Run
is_authorized_backfill of the BaseAuthManager interface has been removed. Core will no longer call this method and their provider counterpart implementation will be marked as deprecated. Permissions for backfill operations are now checked against the DagAccessEntity.Run permission using the existing requires_access_dag decorator. In other words, if a user has permission to run a Dag, they can perform backfill operations on it.
Please update your security policies to ensure that users who need to perform backfill operations have the appropriate DagAccessEntity.Run permissions. (Users having the Backfill permissions without having the DagRun ones will no longer be able to perform backfill operations without any update)
### Python 3.14 support added
Airflow 3.2.0 adds support for Python 3.14. (#63787)
### Reduce API server memory by eliminating SerializedDAG loads on task start
The API server no longer loads the full SerializedDAG when starting tasks, significantly reducing memory usage. (#60803)
### Remove MySQL client from container images
MySQL client support has been removed from official Airflow container images. MySQL users building on official images must install the client themselves. (#57146)
### Add support for async callables in PythonOperator
The PythonOperator parameter python_callable now also supports async callables in Airflow 3.2, allowing users to run async def functions without manually managing an event loop. (#60268)
### Make start_date optional for @continuous schedule
The schedule="@continuous" parameter now works without requiring a start_date, and any Dags with this schedule will begin running immediately when unpaused. (#61405)
## New Features
Add FIPS support by making Python LTO configurable via PYTHON_LTO build argument (#58337)
Add support for task queue-based Trigger assignment to specific Triggerer hosts via the new --queues CLI option for the trigger command (#59239)
Add --show-values and --hide-sensitive flags to CLI connections list and variables list to hide sensitive values by default (#62344)
Add support for setting individual secrets backend kwargs via AIRFLOW__SECRETS__BACKEND_KWARG__<KEY> environment variables (#63312)
Add only_new parameter to Dag clear to only clear newly added task instances (#59764)
Add log_timestamp_format config option for customizing component log timestamps (#63321)
Add --action-on-existing-key option to pools import and connections import CLI commands (#62702)
Add back --use-migration-files flag for airflow db init (#62234)
Add AllowedKeyMapper for partition key validation in asset partitioning (#61931)
Add ChainMapper for chaining multiple partition mappers (#64094)
Add cryptographic signature verification for Python source packages in Docker builds (#63345)
Add Human-in-the-Loop (HITL) Review system for AgenticOperator (#63081)
Add @task.stub decorator to allow tasks in other languages to be defined in Dags (#56055)
Add support for creating connections using URI in SDK (#62211)
Add note support to TriggerDagRunOperator (#60810)
Add allowed_run_types to whitelist specific Dag run types (#61833)
Add OR operator support in API search parameters (#60008)
Add API filtering for Dags by timetable type (#58852)
Add wildcard support for dag_id and dag_run_id in bulk task instance endpoint (#57441)
Add operator_name_pattern, pool_pattern, queue_pattern as task instance search filters (#57571)
Add update_mask support for bulk PATCH APIs (#54597)
Add asset event emission listener event (#61718)
Add source parameter to Param (#58615)
Add lazy filtering for inlet events by time range, ordering, and limit (#54891)
Add ability to get previous TaskInstance on RuntimeTaskInstance (#59712)
Add required context messages to all DagRun state change notifications (#56272)
Add max_trigger_to_select_per_loop config for Triggerer HA setup (#58803)
Add uvicorn_logging_level config option to control API server access logs (#56062)
Add correlation-id support to Execution API for request tracing (#57458)
Add executor.running_dags gauge metric to expose count of running Dags (#52815)
Add submodules support to GitDagBundle (#59911)
Add HTTP URL authentication support to GitHook for Dag bundles (#58194)
Add stream method to RemoteIO for ObjectStorage (#54813)
Add CLI hot-reload support via --dev flag (#57741)
Add auth list-envs command to list CLI environments and auth status (#61426)
Add Dag bundles to airflow info command output (#59124)
Add new arguments to db_clean to explicitly include or exclude Dags (#56663)
UI: Add Jobs page to the Airflow UI (#61512)
UI: Add version change indicators for Dag and bundle versions in Grid view (#53216)
UI: Add segmented state bar for collapsed task groups and mapped tasks (#61854)
UI: Add date range filter for Dag executions (#60772)
UI: Add "Select Recent Configurations" to trigger form, restoring Airflow 2 functionality (#56406)
UI: Add copy button to logs (#61185)
UI: Add filename display to Dag Code tab for easier file identification (#60759)
UI: Add Dag run state filter to grid view options (#55898)
UI: Add task upstream/downstream filter to Graph and Grid views (#57237)
UI: Add filters to Task Instances tab (#56920)
UI: Add display of active Dag runs count in header with auto-refresh (#58332)
UI: Add Dag ID pattern search to Dag Runs and Task Instances pages (#55691)
UI: Add delete button for Dag runs in more options menu (#55696)
UI: Add depth filter to TaskStreamFilter (#60549)
UI: Add theme config support (#58411)
UI: Add support for globalCss in custom themes (#61161)
UI: Add display of logged-in user in settings button (#58981)
UI: Add tooltip for explaining task filter traversal (#61401)
UI: Add self-service JWT token generation for API and CLI access (#63195)
UI: Add bulk operations for edge workers page (#64033)
UI: Add real-time concurrency control for edge workers (#63142)
UI: Add run_after date filter on Dag runs page (#62797)
UI: Add bundle version filter on Dag runs page (#62810)
UI: Add icon support for theme customization (#62172)
UI: Add Monaco editor for all JSON editing fields (#62708)
UI: Add run type legend tooltip to grid view (#62946)
UI: Allow customizing gray, black, and white color tokens in AIRFLOW__API__THEME in addition to brand (#64232)
## Bug Fixes
Fix sensitive configuration values not being masked in public config APIs; treat the deprecated non-sensitive-only value as True (#59880)
Fix InvalidStatsNameException for pool names with invalid characters by auto-normalizing them when emitting metrics (#59938)
Fix JWT tokens appearing in task logs by excluding the token field from workload object representations (#62964)
Fix security iframe navigation when AIRFLOW__API__BASE_URL basename is configured (#63141)
Fix grid view URL for dynamic task groups producing 404 by not appending /mapped to group URLs (#63205)
Fix ti_skip_downstream overwriting RUNNING tasks to SKIPPED in HA deployments (#63266)
Fix duplicate task execution when running multiple schedulers (#60330)
Fix callback starvation across Dag bundles (#63795)
Fix @task decorator failing for tasks that return falsy values like 0 or empty string (#63788)
Fix LatestOnlyOperator not working when direct upstream of a dynamically mapped task (#62287)
Fix inconsistent XCom return type in mapped task groups with dynamic mapping (#59104)
Fix task group lookup using wrong Dag version for historical runs, causing 404 errors in grid view (#63360)
Fix import errors when updating Dags in other bundles (#63615)
Fix DagRun span emission crash when context_carrier is None (#64087)
Fix false error logs for partitioned timetables when next_dagrun fields are None (#63962)
Fix timetable serialization error when decoding relativedelta (#61671)
Fix task_instance_mutation_hook receiving run_id=None during TaskInstance creation (#63049)
Fix scheduler crash on None dag_version access (#62225)
Fix MetastoreBackend.expunge_all() corrupting shared session state (#63080)
Fix triggerer logger file descriptor closed prematurely when trigger is removed (#62103)
Fix airflowignore negation pattern handling for directory-only patterns (#62860)
Fix false warnings for TYPE_CHECKING-only forward references in TaskFlow decorators (#63053)
Fix structlog JSON serialization crash on non-serializable objects (#62656)
Fix backward compatibility for deadline alert serialization (#63701)
Fix queued_tasks type mismatch in hybrid executors (CeleryKubernetesExecutor, LocalKubernetesExecutor) (#63744)
Fix Celery tasks not being registered at worker startup (#63110)
Fix asset partition detection incorrectly identifying Dags as partitioned (#62864)
Fix pathlib.Path objects incorrectly resolved by Jinja templater in Task SDK (#63306)
Fix state mismatch in Kubernetes executor after pod completion (#63061)
Fix make_partial_model for API Pydantic models (#63716)
Fix WTForms validator compatibility in connection form (#63823)
Fix _execution_api_server_url() ignoring configured value and falling back to edge config (#63192)
Fix DetachedInstanceError for airflow tasks render command (#63916)
Fix scheduler isolating per-dag-run failures to prevent a single DagRun crashing all scheduling (#62893)
Fix task argument order in @task definition causing Dag parsing errors (#62174)
Fix limit parameter not sent in execute_list server requests (#63048)
Fix circular import from airflow.configuration causing ImportError on Python 3.14 (#63787)
Fix map_index range validation in CLI commands (#62626)
Fix nullable ORM fields by restoring correct defaults and dropping unreleased corrective migration (#63899)
Fix race condition in auth manager initialization on concurrent requests (#62431)
Fix FabAuthManager race condition on startup with multiple workers (#62737)
Fix FabAuthManager race condition when workers concurrently create permissions, roles, and resources (#63842)
Fix JWTValidator not handling GUESS algorithm with JWKS (#63115)
Fix FabAuthManager first idle MySQL disconnect in token auth (#62919)
Fix JWTBearerTIPathDep import errors in Human-In-The-Loop routes (#63277)
Fix 403 from roles endpoint despite admin rights in FAB provider (#64097)
Fix task log filters not working in full-screen mode (#62747)
Fix duplicate log reads when resuming from log_pos (#63531)
Fix 404 errors from worker log server for historical retry attempts now handled gracefully (#62475)
Fix Elasticsearch/OpenSearch logging exception details missing in task log tab (#63739)
Fix task-level audit logs missing success/running events (#61932)
Fix null dag_run_conf causing serialization error in BackfillResponse (#63259)
Fix CLI asset materialization using wrong Dag run type (#63815)
Fix migration 0094 performance: use SQL instead of Python deserialization (#63628)
Fix migration reliability: replace savepoints with per-Dag transactions (#63591)
Fix slow downgrade performance by adding index to deadline.callback_id (#63612)
Fix MySQL reserved keyword interval causing query failures in deadline_alert (#63494)
Fix MySQL serialize_dag query failure during deadline migration (#63804)
Fix SQLite downgrade failures caused by FK constraints during batch table recreation (#63437)
Fix migration 0096 downgrade failing when team table has existing rows (#63449)
Fix missing warning about hardcoded 24h visibility_timeout that kills long-running Celery tasks (#62869)
Fix scheduler memory issue by removing eager loading of all task instances (#60956)
Fix MySQL sort buffer overflow in deadline alert migration (#61806)
Fix failing to manually trigger a Dag with CronPartitionedTimetable (#62441)
Fix race condition in AssetModel when updating asset partition DagRun — adds mutex lock (#59183)
Fix FAB auth_manager load_user causing PendingRollbackError (#61943)
Fix N+1 query: add joinedload for asset in dags_needing_dagruns() (#60957)
Fix Dag Processor health check threshold matching SchedulerJob/TriggererJob pattern (#58704)
Fix NotMapped exception when clearing task instances with downstream/upstream (#58922)
Fix missing asset events for partitioned DagRun (#61433)
Fix missing partition_key filter in PALK when creating DagRun (#61831)
Fix Dag params API contract broken by earlier change (#56831)
Fix OAuth session race condition causing false 401 errors during login (#61287)
Fix ObjectStoragePath to exclude conn_id from storage options passed to fsspec (#62701)
Fix unable to import list value for Variable (#61508)
Fix plugin registration returning early on duplicate names (#60498)
Fix circular import when using XComObjectStorageBackend (#55805)
Fix deadline alert hashing bug (#61702)
Fix task SDK to read default_email_on_failure/default_email_on_retry from config (#59912)
Fix Celery worker crash on macOS due to non-serializable local function (#62655)
Fix Redis import race condition in Celery executor (#61362)
Fix incorrect state query parameter for task instances in Dashboard (#59086)
Fix TaskInstance.get_dagrun returning None in task_instance_mutation_hook (#60726)
Fix Simple Auth Manager login showing cryptic error on failed authentication (#64303)
Fix dag_display_name property bypass for DagStats query (#64256)
Fix TaskAlreadyRunningError not raised when starting an already-running task instance (#60855)
Fix Teardown tasks not waiting for all in-scope tasks to complete (#64181)
Fix enable_swagger_ui config not respected in API server (#64376)
Fix: add check for xcom permission when result is specified for DagRun wait endpoint (#64415)
Fix conf.has_option not respects default provider metadata (#64209)
Fix teardown scope causing unnecessary database writes during task scheduling (#64558)
Fix live task log output not visible in stdout when using Elasticsearch log forwarding (#64067)
Fix TaskInstance crash when refreshing task weight for non-serialized operators (#64557)
Fix Variables secrets backend conflict check exiting early when multiple backends are configured (#64062)
UI: Fix Dag run accessor key on clear task instance page (#64072)
UI: Fix searchable dropdown not working for Dag params enum fields (#63895)
UI: Fix newline rendering in Dag warning alert (#63588)
UI: Fix XCom edit modal value not repopulating on reopen (#62798)
UI: Fix task duration tooltip not displaying correctly (#63639)
UI: Fix elapsed time not showing for running tasks (#63619)
UI: Fix RenderedJsonField collapse behavior (#63831)
UI: Fix RenderedJsonField not displaying in table cells (#63245)
UI: Fix full-screen log dropdown z-index after Chakra upgrade (#63816)
UI: Fix asset materialization run type display (#63819)
UI: Fix pools with unlimited (-1) slots not rendering correctly (#62831)
UI: Fix DurationChart labels and disable animation flicker during auto-refresh (#62835)
UI: Fix 403 error not shown when unauthorized user re-parses Dag (#61560)
UI: Fix logical date filter on /dagruns page not working (#62848)
UI: Fix inflated total_received count in partitioned Dag runs view (#62786)
UI: Fix edge executor navigation when behind reverse proxy with subpath (#63777)
UI: Fix queries not invalidated on Dag run add/delete (#64269)
UI: Fix RenderedJsonField flickering when collapsed (#64261)
UI: Fix Docs menu REST API link visibility when API docs are disabled (#64359)
UI: Fix TISummaries not refreshing when gridRuns are invalidated (#64113)
UI: Fix guard against null/undefined dates in Gantt chart to prevent RangeError (#64031)
UI: Block polling requests to endpoints that returned 403 Forbidden (#64333)
UI: Fix Gantt view still visible when time range is outside DagRun window (#64179)
UI: Fix Human-in-the-Loop (HITL) operator options not displaying when exactly 4 choices are configured (#64453)
## Miscellaneous
Deprecate api.page_size config in favor of api.fallback_page_limit (#61067)
Improve Dag callback relevancy by passing a context-relevant task instance based on the Dag's final state instead of an arbitrary lexicographical selection (#61274)
Optimize get_dag_runs API endpoint performance (#63940)
Improve historical metrics endpoint performance (#63526)
Add TTL cache with single-flight deduplication to Keycloak filter_authorized_dag_ids (#63184)
Reduce Celery worker memory usage with gc.freeze (#62212)
Eliminate duplicate JOINs in get_task_instances endpoint (#62910)
Replace large IN clause in asset queries with CTE and JOIN for better SQL performance (#62114)
Add row lock to prevent race conditions during asset-triggered DagRun creation (#60773)
Add ConnectionResponse serializer safeguard to prevent accidental sensitive field exposure (#63883)
Add missing dag_id filter on DagRun task instances API query (#62750)
Add missing HTTP timeout to FAB JWKS fetching (#63058)
Add additional permission check in asset materialization endpoint (#63338)
Filter backfills list by readable Dags (authorization enforcement) (#63003)
Hide SQL statements in exception details when expose_stacktrace is disabled (#63028)
Use default max depth to redact Variable values in API responses (#63480)
Validate update_mask fields in PATCH API endpoints against Pydantic models (#62657)
Align key/id path validation for variables and connections in Execution API (#63897)
Add order_by parameter to GET /permissions endpoint for pagination consistency (#63418)
Implement truncation logic for rendered template values (#61878)
Add BaseXcom to airflow.sdk public exports (#63116)
Make TaskSDK conf respect default config from provider metadata (#62696)
Add OTel trace import shim via airflow.sdk.observability.trace (#63554)
Improve 3.2.0 deadline migration performance (#63920)
Improve 3.2.0 downgrade migration for external_executor_id on PostgreSQL (#63625)
Skip backfilling old DagRun.created_at during migration for faster upgrades (#63825)
Add INFO-level logging to asset scheduling path (#63958)
Improve log file template for ExecuteCallback by including dag_id and run_id (#62616)
Improve Dag processor timeout logging clarity (#62328)
Deprecate get_connection_form_widgets and get_ui_field_behaviour hook methods (#63711)
Add missing deprecation warnings for [workers] config section (#63659)
Expose TaskInstance API for external task management (#61568)
Remove deprecated airflow.datasets, airflow.timetables.datasets, and airflow.utils.dag_parsing_context modules (#62927)
Remove PyOpenSSL from core dependencies (#63869)
Optimize fail-fast check to avoid loading SerializedDAG (#56694)
Improve performance of task queue processing by switching from pop(0) to popleft() (#61376)
Optimize K8s API usage for watching pod events, fixing hanging communication (#59080)
Remove N+1 database queries for team names (#61471)
Improve XCom value handling in extra links API (#61641)
Remove .git folder from versions in GitDagBundle to reduce storage size (#57069)
Deprecate subprocess exec utils from airflow.utils.process_utils (#57193)
Improve error handling in edge worker on 405 responses (#60425)
Improve deferrable KubernetesPodOperator handling of deleted pods between polls (#56976)
Improve event log entries when a pod fails for K8s executor (#60800)
Refactor XCom API to use shared serialization constants (#64148)
Improve temporal mapper to be timezone aware for asset partitioning (#62709)
Improve dag version inflation checker logic and fix false-positive detection (#61345)
Rename ToXXXMapper to StartOfXXXMapper in partition-mapper for clarity (#64160)
Run DB check only for core components in prod entrypoint (#63413)
Fix partitioned asset events incorrectly triggering non-partition-aware Dags (#63848)
Improve partitioned DagRun sorting by partition_date (#62866)
Allow gray, black, and white color tokens in AIRFLOW__API__THEME config (#64232)
Add parent task spans and nest worker/trigger spans for improved observability (#63839)
UI: Enhance code view to support search and diff (#55467)
UI: Improve UX for adding custom DeadlineReferences (#57222)
UI: Enhance FilterBar with DateRangeFilter for compact UI (#56173)
UI: Move deadline alerts into their own table for UI integration (#58248)
UI: Persist tag filter selection in Dag grid view (#63273)
UI: Show HITL review tab only for review-enabled task instances (#63477)
UI: Updated button styles for adding Connections, Variables, and Pools (#62607)
UI: Add clear permission toast for 403 errors on user actions (#61588)
## Doc Only Changes
Add documentation marking pre/post-execute task hooks as GA (no longer experimental) (#59656)
Add RedisTaskHandler configuration example (#63898)
Add documentation explaining difference between deferred vs async operators (#63500)
Add auth manager section in multi-team documentation (#63208)
Add documentation about shared libraries in _shared folders (#63468)
Clarify plugin folder module registration in modules_management docs (#63634)
Clarify max_active_tasks Dag parameter documentation (#63217)
Clarify HLL in extraction precedence docs (#63723)
Clarify Ubuntu/Debian venv requirement in quick start guide (#63244)
Fix Git connection docs to match actual GitHook parameters (#63265)
Mention Python 3.14 support in docs (#63950)
Add Dag documentation for example_bash_decorator (#62948)
Add Russian translation for UI (#63450)
Add Hungarian translation (#62925)
Complete Traditional Chinese translations (#62652)
Add asset partition documentation (#63262)
Add guide for dag version inflation and its checker (#64100)
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Fix minimatch ReDoS vulnerabilities via pnpm overrides
:package: PyPI: https://pypi.org/project/apache-airflow/3.1.8/ :books: Docs: https://airflow.apache.org/docs/apache-airflow/3.1.8/ :hammer_and_wrench: Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.8/release_notes.html :whale: Docker Image: "docker pull apache/airflow:3.1.8" :busstop: Constraints: https://github.com/apache/airflow/tree/constraints-3.1.8
DagAccessEntity.Run (#61456)is_authorized_backfill of the BaseAuthManager interface has been removed. Core will no longer call this method and their
provider counterpart implementation will be marked as deprecated.
Permissions for backfill operations are now checked against the DagAccessEntity.Run permission using the existing
requires_access_dag decorator. In other words, if a user has permission to run a DAG, they can perform backfill operations on it.
Please update your security policies to ensure that users who need to perform backfill operations have the appropriate DagAccessEntity.Run permissions. (Users
having the Backfill permissions without having the DagRun ones will no longer be able to perform backfill operations without any update)
Elasticsearch is now fully compatible with remote logging along side with apache-airflow-providers-elasticsearch>=6.5.0. Please review elasticsearch provider release notes for more information https://airflow.apache.org/docs/apache-airflow-providers-elasticsearch/6.5.0/changelog.html (#62121) (#62940)
disable_sqlite_fkeys in revision 509b94a1042d (#63256) (#63272)useAssetServiceGetDagAssetQueuedEvents to get the correct number of ADRQs (#62868) (#62902)dag_processing.total_parse_time metric (#62128) (#62764)timer.duration unit labels in logs (#61824) (#62757)dag_bundle.signed_url_template from varchar(200) to text (#61041) (#62568)PYTHONASYNCIODEBUG=1 is set (#61281) (#61933)pendulum.date.Date values (#61176) (#61717)access_key and connection_string not being masked in logs (#61580) (#61582)minimatch ReDoS vulnerabilities via pnpm overrides (#62805)elk.portConstraints for LR orientation in graph view (#62144) (#62187)run_after alias to XComResponse for backward compatibility (#61443) (#61672)Nothing published for this version
Nothing published for this version
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.7/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.7/ 🛠 Release Notes: https://airflow.
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.7/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.7/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.7/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.7" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.7
No significant changes.
TriggerDagRunOperator deferring when wait_for_completion=False (#60052)gc.freeze (#60505) (#60845)externalLogUrl (#60412) (#60479)buttongroups (#60298) (#60337)viewport height (#59660) (#60286)is_default_pool in Pool model (#61084) (#61128)Taiwaness Mandarin (#61126), Catalan (#61093), German (#61097), Polish (#61099),
Arabic (#60635 #60782, (#60635) (#60782)), Spanish (#60775 #60785, (#60775) (#60785)),
Hebrew (#60633 #60686, (#60633) (#60686))Nothing published for this version
Nothing published for this version
Fix deprecated_options entry for dag_file_processor_timeout
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.6/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.6/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.6/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.6" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.6
is_authorized_hitl_task() method now available in auth managers(#59399).This method is now available in auth managers to check whether a user is authorized to approve a HITL task
proxy and proxies added to DEFAULT_SENSITIVE_FIELDS (#59688)proxy and proxies have been added to DEFAULT_SENSITIVE_FIELDS in secrets_masker to treat proxy configurations as sensitive by default
deprecated_options entry for dag_file_processor_timeout (#59181) (#60162)ApprovalOperator with SimpleAuthManager when all_admins=True (#59399) (#60116)ti_failure metrics for tasks (#59731) (#59964)TaskInstanceHistory on scheduler TI resets (#59639) (#59752)proxy and proxies as sensitive fields in DEFAULT_SENSITIVE_FIELDS (#59688) (#59792)[webserver] base_url (#59659) (#59781)DagRunContext (#59714) (#59732)Content-Type to request headers in Task SDK calls when missing (#59676) (#59687)_read_from_logs_server when status_code is 403 (#59489) (#59504)run_on_latest_version defaulting to False instead of True (#59304) (#59328).airflowignore negation not working in subfolders (#58740) (#59305)DagRun.queued_at not updating when clearing (#59066) (#59177)0.3.0 (#59538)permalink icon (#58763)get_template_context (#59023) (#59036)Nothing published for this version
…runs (#58773) Mask secrets properly when using deprecated import path (#58726) Preserve Asset.extra when using AssetAlias (#58712) Fix timeout_after i…
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.5/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.5/ 📚 Task SDK Docs: https://airflow.apache.org/docs/task-sdk/1.1.5/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.5/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.5" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.5
No significant changes.
Handle invalid token in JWTRefreshMiddleware (#56904)
Fix inconsistent Dag hashes when template fields contain unordered dicts (#59091) (#59175)
Fix assets used only as inlets being incorrectly orphaned (#58986)
Fix exception when logging stdout with a custom %-format string (#58963)
Fix backfill max_active_runs race condition with concurrent schedulers (#58935)
Fix LocalExecutor memory spike by applying gc.freeze (#58934)
Fix string to datetime pydantic conversion (#58916)
Fix deadlines being incorrectly pruned for DAG runs with the same run_id (#58910)
Fix handling of pre-AIP-39 DAG runs (#58773)
Mask secrets properly when using deprecated import path (#58726)
Preserve Asset.extra when using AssetAlias (#58712)
Fix timeout_after in run_trigger method of TriggerRunner (#58703)
Fix connection retrieval from secrets backend without conn_type (#58664)
Fix task retry logic to respect retries for all exit codes (#58478)
Respect default_args in DAG when set to a "falsy" value (#58396)
Fix airflow config list output for multi-line values (#58378)
Fix TriggerDagRunOperator stuck in deferred state with reset_dag_run=True (#58333)
Fix HITLTrigger params serialization (#58297)
Fix atomicity issue in SerializedDagModel.write_dag preventing orphaned DAG versions (#58281)
Mask kwargs when illegal arguments are passed (#58283)
Fix supervisor communications not reconnecting when using dag.test() (#58266)
Fix supervisor communications and logs not reconnecting in task subprocesses (#58263)
Make pool description optional when patching pools (#58169)
Fix check_files.py script after source tarball was renamed (#58192)
Fix db cleanup logging behavior and docstrings (#58523)
Fix Asset URI normalization for user info without password (#58485)
UI: Fix object rendering in Human-in-the-Loop (HITL) interface (#58611)
UI: Fix "Consuming Tasks" section not in asset header (#58060)
UI: Fix timezone string parsing to use dayjs correctly (#57880)
UI: Ensure task instance endDate is not null (#58435)
UI: Fix trigger parameter field showing as dict when param.value is null (#58899)
UI: Remove unnecessary refresh state consumption for DAG header (#58692)
UI: Fix mobile responsiveness of Dashboard sections (#58853)
UI: Fix incorrect backfill duration calculation in Grid view (#58816)
UI: Redact secrets in rendered templates to not expose them in UI (#58772)
UI: Add fallback value of 1 for number of DAG runs in Grid view (#58735)
UI: Update refresh token flow (#58649)
UI: Fix 404 handling with fallback route for invalid URLs (#58629)
UI: Fix excessive database queries in UI grid endpoint by adding query count guard (#57977, #58632)
UI: Fix DAG documentation markdown display issue (#58627)
UI: Fix duration chart duration format (#58564)
UI: Fix TaskGroup nodes not being properly highlighted when selected in Graph view (#58559)
UI: Fix tag filter with special characters (#58558)
UI: Fix group task instance tab memory leak (#58557)
UI: Fix popup automatically closing when DAG run completes (#58538)
UI: Fix operator extra links not appearing on failed tasks (#58508)
UI: Fix TypeError in parseStreamingLogContent for non-string data (#58399)
UI: Fix Dag tag order (#58904)
Do not remove .pyc and .pyo files after building Python (#58947)
Improve cross-distribution dependency management (#58472)
Bump glob from 10.4.5 to 10.5.0 in simple auth manager UI (#58463)
Bump glob in React core UI (#58461)
Fix Chinese (Traditional) translations for trigger-related terminology (#58989) Close translation gaps in German (#58971) Add missing Polish translations (#58939) Clarify that Connection extra JSON masking is keyword-dependent (#58587) Add migration guide for Airflow 2 users accessing database in tasks (#57479) Update UIAlert import path and usage for v3 (#58891) Add clarifying documentation for TaskGroup parameters (#58880) Enhance asset extra field documentation (#58830) Update mask_secret documentation to use the latest import path (#58534) Improve disable_bundle_versioning configuration documentation (#58405) Fix documentation for installing from sources (#58373) Fix broken link on installing-from-sources page (#58324) Add missing DAG run table translations (#58572)
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.3/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.3/ 🛠 Release Notes: https://airflow.
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.3/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.3/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.3/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.3" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.3
Previously, hooks used in API server contexts (plugins, middlewares, log handlers) would fail with an ImportError
for SUPERVISOR_COMMS, because SUPERVISOR_COMMS only exists in task runner child processes.
This has been fixed by implementing automatic context detection with three separate secrets backend chains:
Context Detection:
SUPERVISOR_COMMS presence_AIRFLOW_PROCESS_CONTEXT=server environment variableBackend Chains:
EnvironmentVariablesBackend → ExecutionAPISecretsBackend (routes to Execution API via SUPERVISOR_COMMS)EnvironmentVariablesBackend → MetastoreBackend (direct database access)EnvironmentVariablesBackend only (+ external backends from config like AWS Secrets Manager, Vault)The fallback chain is crucial for supervisor processes (worker-side, before task runner starts) which need to access
external secrets for remote logging setup but should not use MetastoreBackend (to maintain worker isolation).
Architecture Benefits:
MetastoreBackend, maintaining strict isolationImpact:
GCSHook, S3Hook now work correctly in log handlers and pluginsSee: #56120 <https://github.com/apache/airflow/issues/56120>, #56583 <https://github.com/apache/airflow/issues/56583>, #51816 <https://github.com/apache/airflow/issues/51816>__
The /api/v2/dagReports endpoint has been removed because it loaded user DAG files directly in the API server process,
violating Airflow's security architecture. This endpoint was not used in the UI and had no known consumers.
Use the airflow dags report CLI command instead for DAG loading reports.
healthcheck timeout not respecting worker-timeout CLI option (#57731) (#57854)Nothing published for this version
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.2/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.2/ 🛠 Release Notes: https://airflow.
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.2/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.2/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.2/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.1.2" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.2
No significant changes.
DagProcessorManager for bundle initialization (#57459)triggering_user_name context variable (#56193)ObjectStoragePath (#57156)default_args (#57397)XCom viewer and standardize task instance columns (#57447)retryhttp to tenacity library (#56762)Content-Type header to Task SDK API requests (#57386)task_display_name alias in event log API responses (#57609)instance_name in UI docs (#57523)Nothing published for this version
Nothing published for this version
Add back deprecation warning for sla_miss_callback
📦 PyPI: https://pypi.org/project/apache-airflow/3.1.1/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.1.1/ 🛠️ Release Notes: https://airflow.apache.org/docs/apache-airflow/3.1.1/release_notes.html 🪶 Sources: https://airflow.apache.org/docs/apache-airflow/3.1.1/installation/installing-from-sources.html 🐳 Docker Image: "docker pull apache/airflow:3.1.1" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.1.1
dag_run.conf during upgrades from earlier versions (#56729)retry_delay is None (#56236)generate_run_id not called for manual triggers (#56699)KeyError when accessing retry_delay on MappedOperator without explicit value (#56605)task-sdk connection error handling to match airflow-core behavior (#56653)get_ti_count and get_task_states access in callback requests (#56860)Connection or Variable access in Server context (#56602).airflowignore order precedence (#56832)--dag_run_conf in airflow dags backfill CLI (#56599)'root' causes blue screen on hover (#56926)Day-of-Month and Day-of-Week conflicts (#56255)SerializedDagModel query optimization (#56938)url_prefix (#55262)max_retry_delay to MappedOperator model (#56951)@asset decorator when fetching the asset (#56611)DISTINCT for dag_version_id lookup (#56565)PodGenerator for deserialization (#56733)action_on_existence (#56672)CreateAssetEventsBody to Pydantic v2 ConfigDict (#56772)active_runs_limit check (#56922)is_favorite to UI dags list (#56341)executor, hostname, and queue columns to TaskInstances page (#55922)XComs page (#56285)ndjson (#56480)sla_miss_callback (#56127)natsort dependency to airflow-core (#56582)babel dependency in Task SDK (#56592)dagReports API endpoint (#56621)triggering_asset_event retrieval documentation in DAGs (#56957)Full Changelog: https://github.com/apache/airflow/compare/3.1.0...3.1.1
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →