apache-airflow-providers-fab

Changelog¶

3.7.1¶

Release Date: 2026-06-26

Note

The get_cli_user method added to the FAB auth manager in 3.7.0 has been removed together with the revert of the airflowctl CLI client integration in Airflow core. If you relied on airflowctl CLI authentication through the FAB auth manager, provide an API token via the AIRFLOW_CLI_TOKEN environment variable instead.

Misc¶

Revert airflowctl dependency from airflow-core (#68856)

3.7.0¶

Release Date: 2026-06-22

Features¶

Implement 'get_cli_user' in the FAB auth manager so airflowctl CLI commands can authenticate (#68175)
Add Browse > Deadlines menu item for compatibility with Airflow 3.3.0 (#67586)

Bug Fixes¶

Fix fab deserialize user session leak (#68100)
Import ldap.filter in security_manager override (#68226)
Add defensive validation for LDAP search filter configuration (#67630)

Doc-only¶

Update FAB auth manager Flask config wording for Airflow 3 (#68162)
Fix removed webserver command in FAB SSO guide for Airflow 3 (#68166)

3.6.5¶

Release Date: 2026-06-07

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 5 updates (#67733)
Remove further findings from positional session check (#67712)
Replace Sphinx Redoc with Swagger API Docs (#67390)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#67512)
Add prek hook to enforce HTTPException is imported from fastapi (#67367)
Remove exclusion of yanked version dependencies from providers (#66857)
Bump eslint (via audit fix) (#67220)

Doc-only¶

Auto-sync provider README.rst Requirements with pyproject.toml (#67669)

3.6.4¶

Release Date: 2026-05-23

Bug Fixes¶

Fix provider DB upgrades with existing tables (#66883)
Clean up FK associations before deleting role (#65375) (#66686)
Fix session cookie serialization when using securecookie backend (#66565)
Fix escape special characters in LDAP authentication filter (#66417)

Misc¶

Bump flask-appbuilder to 5.2.1 and mirror new auth event hooks (#66841)
Bump terser-webpack-plugin (#66834)
Pin pyjwt>=2.11.0 in FAB provider and stabilise JWT tests under PyJWT 2.12 (#66840)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#66742)
Bump stylelint (#66528)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#66429)
Bump stylelint (#67148)

3.6.3¶

Release Date: 2026-05-11

Bug Fixes¶

Fix NPM security vulnerabilities in fab provider (#66031)
Fix FAB password hashing to respect FAB_PASSWORD_HASH_METHOD config (#65735)
Fix fab mysql migration error caused by pre defiend fk name in orm create (#65831)
Fix '/auth/token' 500 when FAB auth manager is recreated (#65710)
Honor AUTH_ROLE_PUBLIC in FastAPI API server (#65685)

3.6.2¶

Release Date: 2026-04-26

Bug Fixes¶

Fix SQLite migration 02ca36b0235b to use naming_convention for batch_alter_table (#65540)
Invalidate cached user permissions after LDAP role sync to prevent intermittent 403 errors (#64539)
Lazily initialize flask_app in FastAPI routes (#64908)
Fix duplicate Date headers in Flask WSGI responses (#64726)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 3 updates (#65567)
Bump stylelint (#65380)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#65234)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#65145)
Bump eslint (#65681)

3.6.1¶

Release Date: 2026-04-12

Bug Fixes¶

Add authlib as optional oauth extra in fab provider (#64457)
Prevent AppBuilder re-initialization race in FastAPI login (#64151) (#64418)

Misc¶

Remove dependabot alarms in fab provider npm dependencies (#64789)
Add 4-day cooldown for pnpm dependency resolution (#64337)
Fix dependabot alarms in FAB provider (#64369)
Fix NPM security issues in FAB provider (#64308)
chore(deps-dev): bump eslint (#64171)

3.6.0¶

Release Date: 2026-03-28

Features¶

Add order_by parameter to GET /permissions for pagination consistency (#63418)

Bug Fixes¶

Fix 403 from roles endpoint despite admin rights (#64097)
Fix dependabot alarms for Flatted in Fab (#63956)
Fix race condition in FabAuthManager when workers concurrently create permissions, roles, and resources (#63842)
Pass role name string to delete_role instead of Role object (#63337)
Recover from first idle MySQL disconnect in token auth (#62919)

Misc¶

Add Python 3.14 Support (#63520)
Fix mypy errors in kubernetes, fab, google, and amazon providers (#63947)
Remove various upper version bounds in the FAB provider (#63868)
Bump webpack-cli (#63892)
Add marshmallow to fab provider dependencies (#63896)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#63743)
Re-introducing '--use-migration-files' and fix inconsistences between ORM/migration files (#62234)
Fix dependabot warning regarding flatten lib - providers (#63586)
Bump eslint (#63361)
Bump babel-loader (#63283)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#64111)
UpdateConfImports (#64165)

Doc-only¶

Generate ERD diagrams at doc build time instead of committing them (#63402)

3.5.0¶

Release Date: 2026-03-13

Features¶

Replace connexion with FastAPI for FAB provider (#62664)

Bug Fixes¶

Add missing HTTP timeout to FAB JWKS fetching (#63058)
Fix race condition in auth manager initialization (#62431)
Fix/FabAuthManager race condition on startup with multiple workers (#62737)
Scope session token in cookie to base_url (#62771)

Misc¶

Remove dependency limitations related to FAB's py3.13 incompatibility (#62924)

3.4.0¶

Release Date: 2026-03-02

Features¶

Auto-discover DB managers from provider.yaml (#62308)
Feature/enable dynamic build of fab UI assets (#61959)
feat(fab): Add configurable role key for Azure OAuth groups (#61585)

Bug Fixes¶

providers-fab: Handle database errors in cleanup_session_middleware Session.remove() (#62336)
Fix 500 Error in FAB API Users endpoint by allowing naive datetimes i… (#62327)
fix(providers/fab): restore OAuth callback route exposure (#62151)
fix: fab deserialize issue (#62153)
Fix FAB auth_manager load_user causing PendingRollbackError and Inter… (#61943)
fix(api): unify get_permissions pagination with other list endpoints (#61726)

Misc¶

chore(deps-dev): bump eslint (#62418)
Remove unused dependencies from FAB provider (#62382)
Bump css-loader (#62235)
fab: centralize FastAPI auth manager routing (#61647)
Change FAB asset compilation from yarn to pnpm (#61958)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#62039)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#61779)

3.3.0¶

Release Date: 2026-02-14

Features¶

Support string update_mask in FABAuthManagerRoles.patch_role (#61507)

Bug Fixes¶

Add session cleanup middleware to FAB FastAPI app (#61480)
Prevent 500 error when JWT user is missing in FabAuthManager (#61517)
Add session rollback in FAB find_user to clear invalid transactions (#61374)
Use correct PUT permission for /roles/{name} endpoint (#61462)
Fix OAuth session race condition causing false 401 errors during login (#61287)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 3 updates (#61500)
Deprecate 'is_authorized_backfill' in FAB auth manager (#61402)
Upgrade fastapi and conform openapi schema changes (#61476)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#61404)
Migrate Flask based role_and_permission_endpoint APIs to Fastapi (#60977)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#61134)

Doc-only¶

Remove duplicate task failure permission entry (#61215)

3.2.0¶

Release Date: 2026-02-02

Features¶

Cache user object fetched per request in FAB auth manager for improved performance. (#60274)

Bug Fixes¶

(bugfix): Add dark theme support for FAB Security pages (#60908)
fix(fab): Align ORM column sizes with migration definitions (#60869)

Misc¶

Migrate Flask based user APIs to Fastapi (#60973)
Improve typing in Fab (#61001)
Bump lodash from 4.17.21 to 4.17.23 in /providers/fab/src/airflow/providers/fab/www (#60911)
Bump mini-css-extract-plugin from 2.9.4 to 2.10.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#60831)
Remove non-logic redundant selection and query in FAB (#60807)
Bump the fab-ui-package-updates group across 1 directory with 5 updates (#60791)
Migrate FAB POST /users to FastAPI (#60523)

Doc-only¶

Add Azure AD OAuth webserver authentication example with role mapping (#60756)

3.1.2¶

Release Date: 2026-01-17

Bug Fixes¶

Fab Auth Manager add xcom missing perms (#60315)
Fix typos in CLI commands (#60227)
Hide Groups field from User edit form in FAB Auth Manager (#60019)
Fix user creation in FAB fails when no role specified (#60015)

Misc¶

Change starlette import to fastapi (#60382)
New year means updated Copyright notices (#60344)
rename names of data models related to roles for consistency across requests and responses (#60312)
Introduce a "cli" section in provider metadata (#59805)
Move over plugins_manager to a shared library (#59956)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#59717)
Make FAB AirflowAppBuilder use scoped_session (#59953)
Upgrade SQLAlchemy (SQLA) to 2.0 (#59218)

Doc-only¶

Clarify note re: webserver_config.py deprecation (#59529)
#59475 (docs): added few clarification docs for OAuth Authentication type (#60109)

3.1.1¶

Release Date: 2026-01-02

Misc¶

Remove global from plugins_manager (#59851)
Replace imports from airflow.security.permissions module in fab provider due to future deprecation of the module. (#59755)
Split SerializedBaseOperator from serde logic (#59627)
Adaptions for custom auth manager example in documentation (#59355)
Pnpm upgrade to 10.x and prevent script execution (#59466)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#59242)

Doc-only¶

Add hints for claim validation to auth manager documentation (#59320)
Fix release process issues after going through 2025-12-09 release (#59261)

3.1.0¶

Release Date: 2025-12-13

Features¶

Create 'create_token' method in FAB auth manager (#59245)

Bug Fixes¶

Permit 'airflow db migrate -r' with an empty database (#59205)

Misc¶

Add backcompat for exceptions in providers (#58727)
Remove global statement from Fab provider (#59018)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#58954)
Bump minimum prek version to 0.2.0 (#58952)
Use 'HTTP_422_UNPROCESSABLE_CONTENT' instead of 'HTTP_422_UNPROCESSABLE_ENTITY' (#58828)

Doc-only¶

docs: adjust misleading docs (#59228)

3.0.3¶

Release Date: 2025-11-30

Misc¶

Bump stylelint from 16.25.0 to 16.26.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#58678)
Remove deprecation warning in Fab provider (#58686)
Fix mypy errors in providers (#58644)
Bump webpack from 5.102.1 to 5.103.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#58634)
Upgrade js-yaml to 4.1.1 in FAB (#58501)
Migrate FAB PATCH /roles/{name} to FastAPI (#58023)

3.0.2¶

Release Date: 2025-11-17

Bug Fixes¶

Fix duplicated SQLAlchemy sessions caused transactions fail to close (#58196)
Fix logout in Fab and Keycloak auth managers (#57992)
Fix double redirection while authenticating in Fab auth manager (#57993)
Fix remote user authentication in Fab auth manager (#57775)
Fix Fab auth manager with 'securecookie' as session backend (#57578)

Misc¶

Convert all airflow distributions to be compliant with ASF requirements (#58138)
Migrate FAB GET /roles/{name} to FastAPI (#58009)
Migrate FAB DELETE /roles to FastAPI (#57780)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#57760)
Migrate FAB GET /roles to FastAPI (#57411)
Synchronize boto3 and sqlalchemy dependency lower-binds (#57385)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#57160)
Migrate FAB POST /roles to FastAPI (#57199)
Upgrade 'flask-appbuilder' to 5.0.1 (#57170)
refactor: migrate models to use mapped_column for SQLAlchemy 2.0 compatibility (#56827)

Doc-only¶

Fixing some typos and spelling errors (#57186)

3.0.1¶

Release Date: 2025-10-26

Bug Fixes¶

Update authentication to handle JWT token in backend (#56633)
Add Werkzeug version check (#56398)

Misc¶

SQLA2/FAB: fix some type hints (#56928)
FAB: reuse ORM type hints from common-compat (#56903)
Bump eslint from 9.37.0 to 9.38.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#56847)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#56436)

3.0.0¶

Release Date: 2025-10-06

Breaking changes¶

Migrated to Flask-appbuilder 5 which removed the authentication type AUTH_OID. Using the authentication type AUTH_OID in fab provider is no longer possible. Applications using AUTH_TYPE = AUTH_OID must migrate to AUTH_OAUTH.

Upgrade flask-appbuilder to version 5 (#50960)

Features¶

Support nested groups resolution for LDAP authentication in Fab auth manager

Bug Fixes¶

Add 'if_not_exists=True' to FAB migration (#56100)
Add if_not_exists to index creation in migrations (#56328)

2.4.4¶

Release Date: 2025-09-28

Bug Fixes¶

Override 'get_authorized_connections', 'get_authorized_pools' and 'get_authorized_variables' in Fab auth manager (#55682)

Misc¶

Bump eslint from 9.35.0 to 9.36.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#55895)
Move DagBag to airflow/dag_processing (#55139)

Doc-only¶

Add SSO integration guide for Apache Airflow (#55281)
Remove useless Airflow version compatibility checks (#55852)

2.4.3¶

Release Date: 2025-09-22

Bug Fixes¶

Fix: Clean up FAB permissions when deleting DAGs (#54528)

Misc¶

Bump stylelint from 16.23.1 to 16.24.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#55382)
Remove SDK dependency from SerializedDAG (#55538)
Set flask_limiter>3,<4,!=3.13 (#55592)
Bump the fab-ui-package-updates group across 1 directory with 3 updates (#55302)

2.4.2¶

Release Date: 2025-09-09

Bug Fixes¶

Remove query obj from providers fab (#53953)
fix: Add cookies options into FAB provider.yaml (#54995)
To fix Fab auth manager returns get_id of integer type where str is expected (#54384)
Potential fix for code scanning alert no. 519: Clear-text logging of sensitive information (#54742)
Create FAB's user/role tables on migration, not only on initdb (#54227)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 8 updates (#54517)
Move DagBag to SDK and make it return SDK DAG objects (#53918)
Update 'is_authorized_dag' method in 'FabAuthManager' (#54926)

Doc-only¶

Make term Dag consistent in providers docs (#55101)
Fix Airflow 2 reference in README/index of providers (#55240)

2.4.1¶

Release Date: 2025-08-17

Bug Fixes¶

Fix 'get_authorized_dag_ids' in 'FabAuthManager' (#54276)
Allow downgrading to 2.11 from 3.x (#54371)

2.4.0¶

Release Date: 2025-08-11

Features¶

Create HITL specific permission for core-API (#54043)

Bug Fixes¶

fix: Add FAB configs for cookie security (#53542)
Fig 'Config' menu item missing in 'FabAuthManager' (#53944)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 3 updates (#53941)
Add UI for human in the loop operators (#53035)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#53503)

2.3.1¶

Release Date: 2025-08-02

Bug Fixes¶

Remove 'MENU' from 'ResourceMethod' in auth manager (#52731)

Misc¶

Fix FAB provider in unreachable code (#53436)
Add Python 3.13 support for Airflow. (#46891)
Cleanup mypy ignore for fab provider in init_jinja_globals (#53328)
Remove type ignore across codebase after mypy upgrade (#53243)
Remove upper-binding for "python-requires" (#52980)
Remove unused batch methods from auth manager (#52883)
Temporarily switch to use >=,< pattern instead of '~=' (#52967)
Bump the fab-ui-package-updates group across 1 directory with 7 updates (#52807)

Doc-only¶

Remove extra slash from endpoint URL (#53755)
Fix spelling of GitHub brand name (#53735)
Clarify FAB auth provider versioning and webserver_config.py deprecation for Airflow 3.x (#53606)

2.3.0¶

Release Date: 2025-07-06

Features¶

[AIP-68] Support pluginv2 views (#52582)

Bug Fixes¶

Set prefix to generate correctly the FAB Auth Manager API ref (#52329)
Fix airflow pin for fab provider (#52351)
Sanitize Username (#52419)

Misc¶

Drop support for Python 3.9 (#52072)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#52108)

Doc-only¶

Enable LDAP users to generate an Airflow token with 'FabAuthManager' (#52295)

2.2.1¶

Release Date: 2025-06-24

Bug Fixes¶

Fix: allow users with specific DAG permissions to access DAGs when no specific DAG is requested (#51462)
Fix fab asset compilation hashing script (#51446)
Fix default setting for hash algorithm for FAB password hash (#51858)

Misc¶

Add back security api in FAB auth manager (#51578)
Bump @babel/eslint-parser from 7.27.1 to 7.27.5 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#51375)

Doc-only¶

Fix docstring in 'FabAuthManager' (#51892)

2.2.0¶

Release Date: 2025-06-07

Features¶

Add 'airflow db-manager' CLI for managing external databases (#50657)
Add support for unknown OIDC providers (#50921)
Move enable_swagger_ui config to api (#50896)
Move secret_key config to api section (#50839)
Move webserver config to fab provider (#50774)
Move webserver config options to api (#50693)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 4 updates (#51312)
Remove unused entries from 'DagAccessEntity' (#51174)
Bump moment-timezone from 0.5.48 to 0.6.0 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#51087)
Bump webpack from 5.99.8 to 5.99.9 in /providers/fab/src/airflow/providers/fab/www in the fab-ui-package-updates group across 1 directory (#50847)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#50783)
Change v1 to v2 in generated OpenAPI schema files (#50705)

2.1.0¶

Release Date: 2025-05-18

Features¶

Add back ProxyFix Middleware for flask app builder (#49942)
Move access_denied_message webserver config to fab (#50208)
Move webserver expose_hostname config to fab (#50269)

Misc¶

Bump the fab-ui-package-updates group across 1 directory with 4 updates (#50312)
Bump the fab-ui-package-updates group across 1 directory with 4 updates (#50035)
Upgrade 'flask-appbuilder' to 4.6.3 in FAB provider (#50513)

Doc-only¶

docs: Update oauth keycloak example with new security manager (#50284)
docs: conditionally render section‐move links in sections‐and‐options include (#50582)

2.0.2¶

Release Date: 2025-04-29

Bug Fixes¶

Add read config permission to viewer role in 'FabAuthManager' (#49581)
Fix infinite redirect in FAB AuthManager caused by mistakenly setting token cookie as secure (#49724)

Misc¶

Remove some lingering subdag references (#49663)
Bump stylelint (#49638)
Bump the fab-ui-package-updates group across 1 directory with 2 updates (#49511)
Remove old dynamic attr accessing re dag resource in FAB provider (#49669)

Doc-only¶

Adding flask app configuration docs to FAB provider (#49492)
Add note in FAB migration doc (#49423)

2.0.1¶

Release Date: 2025-04-19

Bug Fixes¶

Fix fab auth manager login (#49292)

Misc¶

Bump eslint-config-prettier (#49077)
remove superfluous else block (#49199)
Change default page_size from 100 to 50 (#49243)
Make sure all openapi schemes have distinct names (#49290)
Remove 'STATE_COLORS' from Airflow Local Setting (#49228)
AIP-38: remove 'default_ui_timezone' (#49176)
Remove FAB entry from 'NOTICE' (#49063)
refactor: remove 'navbar_logo_text_color' (#49161)

2.0.0¶

Release Date: 2025-04-14

Breaking changes¶

Warning

The new version of the Fab provider is only compatible with Airflow 3. It is impossible to use apache-airflow-providers-fab >= 2.0 with Airflow 2.X. If you use Airflow 2.X, please use apache-airflow-providers-fab 1.X.

Warning

All deprecated classes, parameters and features have been removed from the Fab provider package. The following breaking changes were introduced:

Removed is_authorized_dataset method from FabAuthManager. Use is_authorized_asset instead
Removed the authentication type AUTH_OID
Removed get_readable_dags method from the security manager override
Removed get_editable_dags method from the security manager override
Removed get_accessible_dags method from the security manager override
Removed get_accessible_dag_ids method from the security manager override
Removed prefixed_dag_id method from the security manager override
Removed init_role method from the security manager override
Prepare FAB provider to set next version as major version (#43939)
Remove deprecations from fab provider (#44198)
Rename 'get_permitted_dag_ids' and 'filter_permitted_dag_ids' to 'get_authorized_dag_ids' and 'filter_authorized_dag_ids' (#47640)
Set simple auth manager as default (#47691)

Features¶

Set up JWT token authentication in Fast APIs (#42634)
AIP-79 Support Airflow 2.x plugins in fast api. Embed a minimal version of the Flask application in fastapi application (#44464)
AIP 84 - Add auth for asset alias (#47241)
AIP-81 | AIP-84 | Include Token Generation Endpoints in FAB (#47043)
AIP-84 Add Auth for DAG Versioning (#47553)
AIP-84 Add Auth for backfill (#47482)

Misc¶

Expose security views in Flask application in FAB provider (#46203)
Fix and simplify 'get_permitted_dag_ids' in auth manager (#47458)
Get rid of google-re2 as dependency (#47493)
Introduce 'filter_authorized_menu_items' to filter menu items based on permissions (#47681)
Remove links to x/twitter.com (#47801)

1.5.3¶

Release Date: 2025-02-08

Bug Fixes¶

[providers-fab/v1-5] Use different default algorithms for different werkzeug versions (#46384) (#46392)

Misc¶

[providers-fab/v1-5] Upgrade to FAB 4.5.3 (#45874) (#45918)

1.5.2¶

Release Date: 2025-01-03

Misc¶

Correctly import isabs from os.path (#45178)
Invalidate user session on password reset (#45139)

1.5.1¶

Release Date: 2024-11-18

Bug Fixes¶

fab_auth_manager: allow get_user method to return the user authenticated via Kerberos (#43662)

1.5.0¶

Release Date: 2024-11-05

Features¶

feat(providers/fab): Use asset in common provider (#43112)

Bug Fixes¶

fix revoke Dag stale permission on airflow < 2.10 (#42844)
fix(providers/fab): alias is_authorized_dataset to is_authorized_asset (#43469)
fix: Change CustomSecurityManager method name (#43034)

Misc¶

Upgrade Flask-AppBuilder to 4.5.2 (#43309)
Upgrade Flask-AppBuilder to 4.5.1 (#43251)
Move user and roles schemas to fab provider (#42869)
Move the session auth backend to FAB auth manager (#42878)
Add logging to the migration commands (#43516)
DOC fix documentation error in 'apache-airflow-providers-fab/access-control.rst' (#43495)
Rename dataset as asset in UI (#43073)

1.4.1¶

Release Date: 2024-10-14

Misc¶

Update Rest API tests to no longer rely on FAB auth manager. Move tests specific to FAB permissions to FAB provider (#42523)
Rename dataset related python variable names to asset (#41348)
Simplify expression for get_permitted_dag_ids query (#42484)

1.4.0¶

Release Date: 2024-09-24

Features¶

Add FAB migration commands (#41804)
Separate FAB migration from Core Airflow migration (#41437)

Misc¶

Deprecated kerberos auth removed (#41693)
Deprecated configuration removed (#42129)
Move 'is_active' user property to FAB auth manager (#42042)
Move 'register_views' to auth manager interface (#41777)
Revert "Provider fab auth manager deprecated methods removed (#41720)" (#41960)
Provider fab auth manager deprecated methods removed (#41720)
Make kerberos an optional and devel dependency for impala and fab (#41616)

1.3.0¶

Release Date: 2024-08-22

Features¶

Feature: Allow set Dag Run resource into Dag Level permission (#40703)

Misc¶

Remove deprecated SubDags (#41390)

1.2.2¶

Release Date: 2024-07-31

Bug Fixes¶

Bug fix: sync perm command not able to use custom security manager (#41020)
Bump version checked by FAB provider on logout CSRF protection to 2.10.0 (#40784)

Misc¶

AIP-44 make database isolation mode work in Breeze (#40894)

1.2.1¶

Release Date: 2024-07-12

Bug Fixes¶

Add backward compatibility to CSRF protection of '/logout' method (#40479)

1.2.0¶

Release Date: 2024-06-27

Features¶

Add CSRF protection to "/logout" (#40145)

Misc¶

implement per-provider tests with lowest-direct dependency resolution (#39946)
Upgrade to FAB 4.5.0 (#39851)
fix: sqa deprecations for airflow providers (#39293)
Add '[webserver]update_fab_perms' to deprecated configs (#40317)

1.1.1¶

Release Date: 2024-05-30

Misc¶

Faster 'airflow_version' imports (#39552)
Simplify 'airflow_version' imports (#39497)
Simplify action name retrieval in FAB auth manager (#39358)
Add 'jmespath' as an explicit dependency (#39350)

1.1.0¶

Release Date: 2024-05-06

Note

This release of provider is only available for Airflow 2.7+ as explained in the Apache Airflow providers support policy.

Bug Fixes¶

Remove plugins permissions from Viewer role (#39254)
Update 'is_authorized_custom_view' from auth manager to handle custom actions (#39167)

Misc¶

Bump minimum Airflow version in providers to Airflow 2.7.0 (#39240)

1.0.4¶

Release Date: 2024-04-21

Bug Fixes¶

Remove button for reset my password when we have reset password (#38957)

1.0.3¶

Release Date: 2024-04-13

Bug Fixes¶

Rename 'allowed_filter_attrs' to 'allowed_sort_attrs' (#38626)
Fix azure authentication when no email is set (#38872)

1.0.2¶

Release Date: 2024-04-03

First stable release for the provider

1.0.0 (YANKED)¶

Initial version of the provider (beta).