[main] Upgrade important CI environment by github-actions[bot] · Pull Request #66580 · apache/airflow

github-actions · 2026-05-08T06:47:24Z

This PR upgrades important dependencies of the CI environment.

potiuk · 2026-05-08T09:40:32Z

This auto-bump picked Alpine's daily-edge tag 20260127 over the 3.23 release. Root cause is in scripts/ci/prek/upgrade_important_versions.py::get_latest_image_version — it used packaging.version.Version() parse-success as the "is this a release tag?" predicate, but PEP 440 happily parses Version("20260127") as a valid single-component version that sorts above Version("3.23"). So when Alpine's daily edge tag appeared in the Docker Hub last_updated-ordered tag list, the bumper selected it as "latest".

Fix in #66588: pre-filter date-shaped tags via regex (v?\d{8}(\.\d+)?), plus a sanity guard rejecting any parsed Version with major >= 10000, plus edge added to the floating-tag skiplist. Once that lands, the next auto-bump run produces alpine:3.23.5 instead of the daily date stamp.

This PR's alpine:20260127 line should revert back to alpine:3.23 (or 3.23.5, whichever is current) once #66588 is in. Easiest path is to close this and let the next scheduled bumper run produce a clean replacement, but updating the alpine line in place works too.

Drafted-by: Claude Opus 4.7 (1M context); reviewed by @potiuk before posting

) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in #66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants.

… bumper (apache#66588) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in apache#66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants. (cherry picked from commit aeb692f) Co-authored-by: Jarek Potiuk <jarek@potiuk.com>

potiuk · 2026-05-08T16:08:01Z

closing to redo it.

potiuk · 2026-05-08T16:19:43Z

recreated #66600 after fixing the alpine bump

… bumper (apache#66588) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in apache#66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants. (cherry picked from commit aeb692f) Co-authored-by: Jarek Potiuk <jarek@potiuk.com>

…che#66588) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in apache#66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants.

… bumper (#66588) (#66599) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in #66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants. (cherry picked from commit aeb692f) Co-authored-by: Jarek Potiuk <jarek@potiuk.com>

…che#66588) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in apache#66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants.

… bumper (#66588) (#66599) The CI image bumper picked alpine's daily-edge tag 20260127 over the 3.23 release in #66580 -- and the same logic would auto-pin any other Docker Hub image to its date-stamped daily build under the right circumstances. Root cause: packaging.version.Version("20260127") parses as a valid single-component PEP 440 version and sorts higher than 3.23, so the bumper's "latest version" selection picked the daily. Pre-filter the tag list against a date-shaped regex (v?\d{8}(\.\d+)?) before parsing as a Version. Belt-and-braces: also reject parsed Version objects whose major component is implausibly large (>= 10000), catching any date-shaped value the regex somehow misses. Add `edge` to the existing floating-tag skiplist while we're here. Tests cover the alpine real-tag mix (release + date + edge), busybox style (mixed dotted releases + bare-major aliases), v-prefixed date tags, and date-with-revision-suffix variants. (cherry picked from commit aeb692f) Co-authored-by: Jarek Potiuk <jarek@potiuk.com>

[main] CI: Upgrade important CI environment

52ffd63

boring-cyborg Bot added area:dev-tools area:kubernetes-tests area:providers backport-to-v3-2-test provider:cncf-kubernetes Kubernetes (k8s) provider related issues labels May 8, 2026

amoghrajesh marked this pull request as ready for review May 8, 2026 07:56

amoghrajesh requested review from amoghrajesh, ashb, bugraoz93, choo121600, ephraimbuddy, gopidesupavan, hussein-awala, jason810496, jedcunningham, jscheffl, potiuk and vatsrahul1001 as code owners May 8, 2026 07:56

amoghrajesh reviewed May 8, 2026

View reviewed changes

Comment thread dev/breeze/src/airflow_breeze/commands/kubernetes_commands.py

potiuk mentioned this pull request May 8, 2026

Skip date-shaped tags in upgrade_important_versions image bumper #66588

Merged

1 task

github-actions Bot mentioned this pull request May 8, 2026

[v3-2-test] Skip date-shaped tags in upgrade_important_versions image bumper (#66588) #66599

Merged

potiuk closed this May 8, 2026

potiuk mentioned this pull request May 8, 2026

[main] CI: Upgrade important CI environment #66600

Merged

1 task

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[main] Upgrade important CI environment#66580

[main] Upgrade important CI environment#66580
github-actions[bot] wants to merge 1 commit into
mainfrom
ci-upgrade-main

github-actions Bot commented May 8, 2026

Uh oh!

Uh oh!

potiuk commented May 8, 2026

Uh oh!

potiuk commented May 8, 2026

Uh oh!

potiuk commented May 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

github-actions Bot commented May 8, 2026

Uh oh!

Uh oh!

potiuk commented May 8, 2026

Uh oh!

potiuk commented May 8, 2026

Uh oh!

potiuk commented May 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants