@@ -378,6 +378,8 @@ def write_version(filename: str = str(AIRFLOW_SOURCES_ROOT / "airflow" / "git_ve
378
378
]
379
379
composer_additional = [
380
380
"aiodebug" ,
381
+ # aiohttp and pygments in lower versions contain security vulnerabilities.
382
+ "aiohttp>=3.8.5" ,
381
383
# TODO: Internal bug - Remove after the issue is fixed in community
382
384
# https://github.com/apache/airflow/issues/35434
383
385
"connexion<=2.14.2" ,
@@ -386,13 +388,15 @@ def write_version(filename: str = str(AIRFLOW_SOURCES_ROOT / "airflow" / "git_ve
386
388
"dbt-bigquery" ,
387
389
"dbt-core" ,
388
390
"firebase-admin" ,
391
+ # TODO: remove once https://github.com/apache/airflow/issues/36897 is closed
392
+ "Flask-Session<0.6.0" ,
389
393
# Due to security vulnerability Flower version >= 2.0.0 required.
390
394
"flower>=2.0.0" ,
391
395
"gcsfs" ,
392
396
"google-apitools" ,
393
397
"google-cloud-aiplatform" ,
394
398
"google-cloud-asset" ,
395
- # remove once https://github.com/apache/airflow/issues/39541 is resolved
399
+ # TODO: remove once https://github.com/apache/airflow/issues/39541 is resolved
396
400
"google-cloud-bigquery<3.21.0,>=3.0.1" ,
397
401
"google-cloud-datacatalog-lineage-producer-client" ,
398
402
"google-cloud-datastore" ,
@@ -405,18 +409,16 @@ def write_version(filename: str = str(AIRFLOW_SOURCES_ROOT / "airflow" / "git_ve
405
409
"pip==23.2.1" ,
406
410
"pyOpenSSL" ,
407
411
"pipdeptree" ,
412
+ "pygments>2.15.0" ,
413
+ # TODO: remove once https://github.com/apache/airflow/issues/37156 closed
414
+ "pytest<8.0.0" ,
415
+ # TODO: remove once new version of Docker is released (https://github.com/docker/docker-py/pull/3257)
416
+ "requests>=2.24.0,<3.0.0,!=2.32.*" ,
408
417
"sqllineage" ,
409
418
"sqlparse" ,
410
419
"tensorflow" ,
411
420
# Versions < 2.2.3 contain security vulnerabilities.
412
421
"werkzeug>=2.2.3" ,
413
- # aiohttp and pygments in lower versions contain security vulnerabilities.
414
- "aiohttp>=3.8.5" ,
415
- "pygments>2.15.0" ,
416
- # remove once https://github.com/apache/airflow/issues/36897 is closed
417
- "Flask-Session<0.6.0" ,
418
- # TODO: Remove once https://github.com/apache/airflow/issues/37156 closed
419
- "pytest<8.0.0" ,
420
422
]
421
423
composer = (
422
424
PROVIDER_DEPENDENCIES ["mysql" ][DEPS ]
0 commit comments