(airflow) branch main updated: Require moto 5.2.2 or newer for the Amazon provider tests (#74224)

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new 48f6b517397 Require moto 5.2.2 or newer for the Amazon provider tests (#74224)
48f6b517397 is described below

commit 48f6b5173979ca595d49eaeeadbdfd9ec1722089
Author: Jarek Potiuk <ja...@potiuk.com>
AuthorDate: Mon Oct 5 18:57:03 2026 +0200

    Require moto 5.2.2 or newer for the Amazon provider tests (#74224)
    
    Older moto loads its bundled EC2 data through ../ resource paths, which Python builds carrying the CVE-2026-3479 pkgutil.get_data patch (Docker Hardened Images among them) reject, so every EC2-backed test failed in the lowest-dependency run.
    
    Generated-by: Claude Opus 5
---
 providers/amazon/pyproject.toml | 2 +-
 uv.lock                         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/providers/amazon/pyproject.toml b/providers/amazon/pyproject.toml
index 310290f1633..186a1eb528b 100644
--- a/providers/amazon/pyproject.toml
+++ b/providers/amazon/pyproject.toml
@@ -190,7 +190,7 @@ dev = [
     "apache-airflow-providers-amazon[aiobotocore]",
     "apache-airflow-providers-postgres",
     "aws_xray_sdk>=2.12.0",
-    "moto[cloudformation,glue]>=5.1.2",
+    "moto[cloudformation,glue]>=5.2.2",
     "mypy-boto3-appflow>=1.37.0",
     "mypy-boto3-rds>=1.34.90",
     "mypy-boto3-redshift-data>=1.34.0",
diff --git a/uv.lock b/uv.lock
index ba1face9cb7..484e7e66ef8 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3335,7 +3335,7 @@ dev = [
     { name = "apache-airflow-providers-ssh", editable = "providers/ssh" },
     { name = "apache-airflow-task-sdk", editable = "task-sdk" },
     { name = "aws-xray-sdk", specifier = ">=2.12.0" },
-    { name = "moto", extras = ["cloudformation", "glue"], specifier = ">=5.1.2" },
+    { name = "moto", extras = ["cloudformation", "glue"], specifier = ">=5.2.2" },
     { name = "mypy-boto3-appflow", specifier = ">=1.37.0" },
     { name = "mypy-boto3-rds", specifier = ">=1.34.90" },
     { name = "mypy-boto3-redshift-data", specifier = ">=1.34.0" },