From afabfbbdeb18a6aed8629917094b9ae4cc9ab4fb Mon Sep 17 00:00:00 2001 From: Mrassimo Date: Sat, 11 Jul 2026 11:19:16 +1000 Subject: [PATCH 1/3] Fix apache-airflow CVEs: upgrade to Airflow 3.2.2 --- requirements-dev.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index efd77b3..b515cd3 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -101,8 +101,8 @@ setuptools>=65.0.0,<75.0.0 twine>=4.0.0,<5.2.0 # Orchestration -apache-airflow>=2.7.0,<2.10.0 -apache-airflow-providers-docker>=3.5.0,<3.14.0 +apache-airflow>=3.2.2,<3.3.0 +apache-airflow-providers-docker>=4.5.0,<4.6.0 # API Development & Testing httpx>=0.23.0,<0.28.0 From 01f6f6816821858eff6c1602f359b505e3284e25 Mon Sep 17 00:00:00 2001 From: Mrassimo Date: Sat, 11 Jul 2026 11:21:57 +1000 Subject: [PATCH 2/3] Bump apache-airflow to 2.11.1 (latest 2.x) to patch CVE-2024-56373 and CVE-2025-68675 --- requirements-dev.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index b515cd3..ab24d45 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -101,8 +101,8 @@ setuptools>=65.0.0,<75.0.0 twine>=4.0.0,<5.2.0 # Orchestration -apache-airflow>=3.2.2,<3.3.0 -apache-airflow-providers-docker>=4.5.0,<4.6.0 +apache-airflow>=2.11.1,<3.0.0 +apache-airflow-providers-docker>=3.9.0,<4.0.0 # API Development & Testing httpx>=0.23.0,<0.28.0 From 8b9a498e861a290196c916bc53c79619115f4569 Mon Sep 17 00:00:00 2001 From: Mrassimo Date: Sat, 11 Jul 2026 11:21:59 +1000 Subject: [PATCH 3/3] Align pyproject airflow pin with 2.11.1 security floor --- pyproject.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 0881b36..fee9e6a 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -59,8 +59,8 @@ dev = [ "memory-profiler>=0.60.0", "psutil>=5.9.0", "scipy>=1.9.0", - "apache-airflow>=2.7.0", - "apache-airflow-providers-docker>=3.5.0", + "apache-airflow>=2.11.1,<3.0.0", + "apache-airflow-providers-docker>=3.9.0,<4.0.0", ] docs = [ "sphinx>=4.0.0",