PrefectHQ/prefect - CodSpeed

prefect

Blog Docs Changelog

Performance History

Latest Results

feat: Use uvicorn[standard] to get faster asyncio loop implementation

Leletir:feat/add-uvicorn-standard

2 hours ago

fix(tests): raise asyncpg connection_timeout in unit test mode (#21614) Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: API User <requestor@prefecthq.invalid> Co-authored-by: bot_apk <apk@cognition.ai>

main

8 hours ago

fix(tests): prevent aiosqlite teardown race in legacy events/out test (#21619) Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: bot_apk <apk@cognition.ai>

main

8 hours ago

Fix DNS rebinding TOCTOU bypass in `validate_restricted_url` (#21591) Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: Alexander Streed <alex.s@prefect.io> Co-authored-by: alex.s <ajstreed1@gmail.com>

main

8 hours ago

custom_headers Authorization takes precedence over PREFECT_API_KEY in check_server_version

vyagubov:custom_headers_overtakes

9 hours ago

custom_headers Authorization takes precedence over PREFECT_API_KEY in check_server_version

vyagubov:custom_headers_overtakes

11 hours ago

Run SSRF DNS lookup off the event loop and share retry timeout budget Addresses Codex P2 feedback on #21591: - _SSRFProtectedAsyncBackend.connect_tcp now runs the synchronous getaddrinfo in a worker thread via anyio.to_thread.run_sync so DNS resolution does not block the event loop. - Both backends now derive a shared deadline from the caller's timeout and pass the remaining budget to each per-IP attempt, so connect time stays bounded by the caller's timeout instead of scaling with the number of resolved addresses. Co-authored-by: Alexander Streed <alex.s@prefect.io> Co-Authored-By: alex.s <ajstreed1@gmail.com>

devin1/oss-7874-fix-dns-rebinding-toctou-bypass-in-validate_restricted_url

12 hours ago

Add defensive try/except in PrefectWrappedFuture.add_done_callback (#21615) If a done callback raises inside `call_with_self`, the exception propagates into `concurrent.futures.Future._invoke_callbacks` which silently catches and logs it via the stdlib logger. This makes errors invisible to Prefect's logging and can leave `_final_state` unset, causing flow runs to hang as zombies. Wrap `fn(self)` in `call_with_self` with a try/except that logs via Prefect's logger, ensuring callback exceptions are always visible. Closes #21615 Testing: - test_add_done_callback_logs_exception_from_callback: registers a callback that raises RuntimeError, asserts the exception is logged via prefect.futures (not silently swallowed by stdlib). Verified FAILS without the fix (exception goes to concurrent.futures logger) and PASSES after. - test_add_done_callback_invokes_normally_on_success: verifies the happy path is unaffected. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

saschwartz:fix/21615-defensive-callback-wrapper

12 hours ago

Latest Branches

0%

feat: Use uvicorn[standard] to get faster asyncio loop implementation#21636

3 hours ago

a14d1d0

Leletir:feat/add-uvicorn-standard

0%

Don't overwrite custom_headers Authorization with PREFECT_API_KEY in check_server_version#21621

12 hours ago

6a4a1fe

vyagubov:custom_headers_overtakes

-3%

Fix DNS rebinding TOCTOU bypass in `validate_restricted_url`#21591

12 hours ago

e0a9ff2

devin1/oss-7874-fix-dns-rebinding-toctou-bypass-in-validate_restricted_url

© 2026 CodSpeed Technology

Home Terms Privacy Docs