Bump apache-airflow from 1.10.9 to 2.5.2

[dependabot]

Bumps apache-airflow from 1.10.9 to 2.5.2.

Release notes

Sourced from apache-airflow's releases.

Apache Airflow 2.5.2

Significant Changes

The date-time fields passed as API parameters or Params should be RFC3339-compliant (#29395)

In case of API calls, it was possible that "+" passed as part of the date-time fields were not URL-encoded, and such date-time fields could pass validation. Such date-time parameters should now be URL-encoded (as %2B).

In case of parameters, we still allow IS8601-compliant date-time (so for example it is possible that ' ' was used instead of T separating date from time and no timezone was specified) but we raise deprecation warning.

Default for [webserver] expose_hostname changed to False (#29547)

The default for [webserver] expose_hostname has been set to False, instead of True. This means administrators must opt-in to expose webserver hostnames to end users.

Bug Fixes

• Fix validation of date-time field in API and Parameter schemas (#29395)
• Fix grid logs for large logs (#29390)
• Fix on_failure_callback when task receives a SIGTERM (#29743)
• Update min version of python-daemon to fix containerd file limits (#29916)
• POST /dagRuns API should 404 if dag not active (#29860)
• DAG list sorting lost when switching page (#29756)
• Fix Scheduler crash when clear a previous run of a normal task that is now a mapped task (#29645)
• Convert moment with timezone to UTC instead of raising an exception (#29606)
• Fix clear dag run openapi spec responses by adding additional return type (#29600)
• Don't display empty rendered attrs in Task Instance Details page (#29545)
• Remove section check from get-value command (#29541)
• Do not show version/node in UI traceback for unauthenticated user (#29501)
• Make prev_logical_date variable offset-aware (#29454)
• Fix nested fields rendering in mapped operators (#29451)
• Datasets, next_run_datasets, remove unnecessary timestamp filter (#29441)
• Edgemodifier refactoring w/ labels in TaskGroup edge case (#29410)
• Fix Rest API update user output (#29409)
• Ensure Serialized DAG is deleted (#29407)
• Persist DAG and task doc values in TaskFlow API if explicitly set (#29399)
• Redirect to the origin page with all the params (#29212)
• Fixing Task Duration view in case of manual DAG runs only (#22015) (#29195)
• Remove poke method to fall back to parent implementation (#29146)
• PR: Introduced fix to run tasks on Windows systems (#29107)
• Fix warning in migrations about old config. (#29092)
• Emit dagrun failed duration when timeout (#29076)
• Handling error on cluster policy itself (#29056)
• Fix kerberos authentication for the REST API. (#29054)
• Fix leak sensitive field via V1EnvVar on exception (#29016)
• Sanitize url_for arguments before they are passed (#29039)
• Fix dag run trigger with a note. (#29228)
• Write action log to DB when DAG run is triggered via API (#28998)
• Resolve all variables in pickled XCom iterator (#28982)

... (truncated)

Changelog

Sourced from apache-airflow's changelog.

Airflow 2.5.2 (2023-03-15)

Significant Changes ^^^^^^^^^^^^^^^^^^^

The date-time fields passed as API parameters or Params should be RFC3339-compliant (#29395) """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""

In case of API calls, it was possible that "+" passed as part of the date-time fields were not URL-encoded, and such date-time fields could pass validation. Such date-time parameters should now be URL-encoded (as %2B).

In case of parameters, we still allow IS8601-compliant date-time (so for example it is possible that ' ' was used instead of T separating date from time and no timezone was specified) but we raise deprecation warning.

Default for [webserver] expose_hostname changed to False (#29547) """""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""

The default for [webserver] expose_hostname has been set to False, instead of True. This means administrators must opt-in to expose webserver hostnames to end users.

Bug Fixes ^^^^^^^^^

• Fix validation of date-time field in API and Parameter schemas (#29395)
• Fix grid logs for large logs (#29390)
• Fix on_failure_callback when task receives a SIGTERM (#29743)
• Update min version of python-daemon to fix containerd file limits (#29916)
• POST /dagRuns API should 404 if dag not active (#29860)
• DAG list sorting lost when switching page (#29756)
• Fix Scheduler crash when clear a previous run of a normal task that is now a mapped task (#29645)
• Convert moment with timezone to UTC instead of raising an exception (#29606)
• Fix clear dag run openapi spec responses by adding additional return type (#29600)
• Don't display empty rendered attrs in Task Instance Details page (#29545)
• Remove section check from get-value command (#29541)
• Do not show version/node in UI traceback for unauthenticated user (#29501)
• Make prev_logical_date variable offset-aware (#29454)
• Fix nested fields rendering in mapped operators (#29451)
• Datasets, next_run_datasets, remove unnecessary timestamp filter (#29441)
• Edgemodifier refactoring w/ labels in TaskGroup edge case (#29410)
• Fix Rest API update user output (#29409)
• Ensure Serialized DAG is deleted (#29407)
• Persist DAG and task doc values in TaskFlow API if explicitly set (#29399)
• Redirect to the origin page with all the params (#29212)
• Fixing Task Duration view in case of manual DAG runs only (#22015) (#29195)
• Remove poke method to fall back to parent implementation (#29146)
• PR: Introduced fix to run tasks on Windows systems (#29107)
• Fix warning in migrations about old config. (#29092)
• Emit dagrun failed duration when timeout (#29076)
• Handling error on cluster policy itself (#29056)
• Fix kerberos authentication for the REST API. (#29054)

... (truncated)

Commits

• a89335f fixup! Add Changelog for 2.5.2
• 2c09bc8 Also limit importlib on Python 3.9 (#30069)
• 6fede98 Installing non-editable airflow for constraint generation (#30050)
• 321d602 Fix CI
• 89b3f24 Fix bugs introduced when moving the code of issue generation to breeze (#28683)
• e3bfd44 Make options output of breeze command consistent and complete (#29097)
• 0915a10 Add release flag to Breeze generate-issue-content (#28952)
• 620e6e7 Return error when group is not defined in breeze configuration (#29997)
• 8d6efad Add release commands to release management command config (#29995)
• f0fd4b7 Add Changelog for 2.5.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #25.

[dependabot]

Superseded by #25.