PrefectHQ
prefect
Blog
Docs
Changelog
Blog
Docs
Changelog
Overview
Branches
Benchmarks
Runs
Performance History
Latest Results
Fix CANCEL_NEW Late cancellation using stale concurrency slots Refresh the deployment concurrency limit before enforcing CANCEL_NEW on Scheduled → Late transitions. Server sessions use expire_on_commit=False and slot updates use synchronize_session=False, so the identity map can report a stale active_slots count and allow excess runs to become Late when worker or work-pool limits prevent PENDING pickup. closes #16984
anasdorbani:fix/cancel-new-late-runs-16984
3 hours ago
Harden RemoteFileSystem._resolve_path raw containment Use the decoded path only for traversal detection. Require the raw candidate URL path to be contained under the raw configured base path before accepting it. This rejects prefix spoofs such as pre%66ix and prefix%2Fchild while preserving safe percent encodings, literal //, /./, and backslashes as object keys. Co-authored-by: Alex S. <alex.s@prefect.io> Co-Authored-By: alex.s <ajstreed1@gmail.com>
devin/remote-filesystem-resolve-path
6 hours ago
Type fix in listener Signed-off-by: merobi-hub <merobi@gmail.com>
merobi-hub:add-openlineage
20 hours ago
Linter fixes Signed-off-by: merobi-hub <merobi@gmail.com>
merobi-hub:add-openlineage
21 hours ago
Rm test_version Signed-off-by: merobi-hub <merobi@gmail.com>
merobi-hub:add-openlineage
21 hours ago
Match slug-less schedules on stable fields when preserving active The previous match keyed on the full serialized schedule, which includes fields Prefect regenerates on each deploy: an interval schedule's anchor_date and the DTSTART injected into rrule strings. A redeploy of an unchanged `Interval(3600)` therefore failed to match and reactivated a paused schedule. Key on the recurrence definition with those regenerated fields excluded instead.
apoorva-01:fix/19302-preserve-disabled-schedule-on-redeploy
22 hours ago
Harden RemoteFileSystem._resolve_path containment and add regression tests - Reject absolute paths with dot-segment traversal (literal or encoded %2e variants) - Treat backslashes as separators for SMB traversal detection - Strip control characters that urlsplit removes - Rebuild accepted absolute URLs from the configured scheme/netloc - Preserve percent-encoded object keys in returned URLs Co-authored-by: Alex S. <alex.s@prefect.io> Co-Authored-By: alex.s <ajstreed1@gmail.com>
devin/remote-filesystem-resolve-path
1 day ago
Fix RemoteFileSystem absolute path resolution and sibling prefix containment Co-authored-by: Alex S. <alex.s@prefect.io> Co-Authored-By: alex.s <ajstreed1@gmail.com>
devin/remote-filesystem-resolve-path
1 day ago
Latest Branches
CodSpeed Performance Gauge
0%
Fix CANCEL_NEW allowing Late runs when concurrency slots appear free
#22480
3 hours ago
f375c01
anasdorbani:fix/cancel-new-late-runs-16984
CodSpeed Performance Gauge
0%
Harden RemoteFileSystem path resolution containment and rebuild absolute URLs
#22476
6 hours ago
b2264a5
devin/remote-filesystem-resolve-path
CodSpeed Performance Gauge
0%
Add OpenLineage integration
#22475
20 hours ago
d505c52
merobi-hub:add-openlineage
© 2026 CodSpeed Technology
Home
Terms
Privacy
Docs