This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
ReleasePort's take
Light signalThe Helm chart for Apache Airflow has been updated to version 1.22.0, raising the minimum required Helm client to 3.19.0 and introducing several new features and fixes.
Why it matters: Minimum Helm version is now 3.19.0; deployments using older Helm clients will fail to render or upgrade the chart.
Summary
AI summaryUpdates Bug Fixes, New Features, and Doc only changes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds optional OpenTelemetry (OTel) service to Airflow Helm Chart Adds optional OpenTelemetry (OTel) service to Airflow Helm Chart Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Feature | Low |
Adds `serviceAccountTokenVolume` to cleanup cron job Adds `serviceAccountTokenVolume` to cleanup cron job Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Feature | Low |
Adds `requirePersistence` option to worker logGroomerSidecar Adds `requirePersistence` option to worker logGroomerSidecar Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Feature | Low |
Adds checksum for API server config in deployment Adds checksum for API server config in deployment Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Dependency | Medium |
Minimum Helm version updated to 3.19.0 Minimum Helm version updated to 3.19.0 Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Dependency | Medium |
Default Airflow image updated to 3.2.2 Default Airflow image updated to 3.2.2 Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Helm chart executor label to support executor aliases Fixes Helm chart executor label to support executor aliases Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes triggerer KEDA database connection rendering Fixes triggerer KEDA database connection rendering Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Celery worker liveness probe hostname lookup Fixes Celery worker liveness probe hostname lookup Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Go template error comparing slice to nil using `eq` Fixes Go template error comparing slice to nil using `eq` Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Kubernetes worker service account values Fixes Kubernetes worker service account values Source: llm_adapter@2026-06-14 Confidence: high |
— |
| Bugfix | Low |
Fixes launcher RBAC for executor class paths Fixes launcher RBAC for executor class paths Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Fixes task log access with NetworkPolicies for Airflow 2 and 3 Fixes task log access with NetworkPolicies for Airflow 2 and 3 Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Adds missing `tpl` rendering for ServiceAccount annotations Adds missing `tpl` rendering for ServiceAccount annotations Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Fixes go-template `if` statements for log groomer retention values Fixes go-template `if` statements for log groomer retention values Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Fixes database cleanup lifecycle hooks Fixes database cleanup lifecycle hooks Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Fixes cleanup pod lifecycle hooks not being applied Fixes cleanup pod lifecycle hooks not being applied Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
| Bugfix | Low |
Fixes deprecation warning Fixes deprecation warning Source: granite4.1:30b@2026-06-14-audit Confidence: low |
— |
Full changelog
Significant Changes
Minimum Helm version was updated to 3.19.0 (#66970)
Default Airflow image is updated to 3.2.2 (#67681)
The default Airflow image that is used with the Chart is now 3.2.2, previously it was 3.2.1.
Added support for configuring enableServiceLinks (#67447)
The default will become false in Chart 2.0. If you rely on these environment variables,
explicitly set enableServiceLinks: true, or migrate your code to use DNS-based service lookups.
New Features
- Add optional OTel service to the Airflow Helm Chart (#64902)
- Add
serviceAccountTokenVolumeto cleanup cron (#67446) - Add
requirePersistenceoption to workerlogGroomerSidecar(#65884)
Improvements
- Add checksum for api-server config in API server deployment (#66468)
Bug Fixes
- Fix Helm chart executor label to support executor aliases (#67762)
- Fix triggerer KEDA database connection rendering (#67538)
- Fix Celery worker liveness probe hostname lookup (#67471)
- Fix Go template error comparing slice to nil using
eq(#64032) - Fix Kubernetes worker service account values (#66598)
- Add binding for
workers.kubernetesand condition workers ServiceAccount (#66730) - Fix launcher RBAC for executor class paths (#66208)
- Fix task log access with NetworkPolicies for Airflow 2 and 3 (#65754)
- Add missing
tplrendering for ServiceAccount annotations (#66095) - Fix go-template
ifstatements for log groomer retention values (#66012) - Fix database cleanup lifecycle hooks (#65881)
- Fix cleanup pod lifecycle hooks not being applied (#65764)
- Fix deprecation warning (#66238)
Doc only changes
- Expand Helm Chart upgrade tasks in the Airflow 3 migration guide (#66118)
Misc
- Change job/pod role bindings rendering and refactor related tests (#66626)
- Standardize on
Dagcapitalization in chart wording (#66114)
Breaking Changes
- Minimum Helm version updated to 3.19.0
- `enableServiceLinks` default will become false in Chart 2.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Apache Airflow
Platform to programmatically author, schedule, and monitor workflows.
Related context
Related tools
Earlier breaking changes
Beta — feedback welcome: [email protected]