Skip to main content
Subscribe to Astro Runtime release notes to receive updates via RSS, email, or Slack.
This page lists the 15 most recent Astro Runtime releases across all versions, newest first. A new patch for an older version appears here as soon as it is released. For release notes grouped by version, including older releases, see Astro Runtime release notes.
​
October 23, 2026
  • Airflow version: 2.11.2
  • Python versions: 3.10 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/astronomer/astro-runtime:13.12.2

​
Additional improvements

  • New virtual environments created with python -m venv now get the image’s pip and setuptools
  • Upgrade virtualenv to 21.14.13, so PythonVirtualenvOperator environments get pip 26.2.2
  • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise

​
Security fixes

​
October 23, 2026
  • Airflow version: 3.3.2
  • Python versions: 3.12 - 3.14 (default: 3.14)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.3-11

​
Additional improvements

  • New virtual environments created with python -m venv now get pip 26.2.2
  • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise

​
Security fixes

​
October 23, 2026
  • Airflow version: 3.2.2
  • Python versions: 3.12 - 3.14 (default: 3.13)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.2-13

​
Additional improvements

  • New virtual environments created with python -m venv now get pip 26.2.2
  • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise

​
Security fixes

​
October 23, 2026
  • Airflow version: 3.1.8
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.1-24

​
Additional improvements

  • New virtual environments created with python -m venv now get pip 26.2.2 and, on Python 3.11, a patched setuptools
  • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise

​
Security fixes

​
October 23, 2026
  • Airflow version: 3.0.6
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.0-21

​
Additional improvements

  • New virtual environments created with python -m venv now get pip 26.2.2 and, on Python 3.11, a patched setuptools
  • Upgrade protobuf to 5.29.6, required by an OpenTelemetry fix
  • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise

​
Security fixes

​
October 21, 2026
  • Airflow version: 3.2.2
  • Python versions: 3.12 - 3.14 (default: 3.13)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.2-12

​
Additional improvements

​
Security fixes

​
October 21, 2026
  • Airflow version: 3.1.8
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.1-23

​
Additional improvements

​
Security fixes

​
October 21, 2026
  • Airflow version: 3.0.6
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.0-20

​
Additional improvements

​
Security fixes

​
October 20, 2026
  • Airflow version: 2.11.2
  • Python versions: 3.10 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/astronomer/astro-runtime:13.12.1

​
Additional improvements

  • Distrust the emSign ECC Root CA - G3 and Comodo AAA Services root CA certificates, which chain to compromised eMudhra intermediate certificates

​
Security fixes

​
October 20, 2026
  • Airflow version: 3.3.2
  • Python versions: 3.12 - 3.14 (default: 3.14)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.3-10

​
Additional improvements

​
Security fixes

​
October 19, 2026
  • Airflow version: 3.0.6
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.0-19

​
Additional improvements

  • Upgrade to Airflow 3.0.6+astro.11, which includes:
    • Require Dag edit permission to delete asset queued events (#71736)
    • Scope /assets/events to the Dags the caller may read (#71741)
    • Fix backfill Dag runs being permanently starved from scheduling (#72730)
    • Improve 404 handling by adding a fallback route for invalid URLs (#58546)
  • Upgrade astronomer-kubernetes-executor to 10.22.0+astro.1
  • Raise the botocore logger to INFO
  • Upgraded the minor and patch versions of some open-source provider packages. See Astro Runtime 3.0-19 provider packages.

​
Security fixes

​
October 16, 2026
  • Airflow version: 3.1.8
  • Python versions: 3.11 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.1-22

​
Additional improvements

  • Upgrade to Airflow 3.1.8+astro.9, which includes:
    • Mark Dags stale when their bundle is removed from config (#66948)
    • Require Dag edit permission to delete asset queued events (#71736)
    • Resolve the caller from the explicit credential, not the session cookie (#72225)
    • Scope /assets/events to the Dags the caller may read (#71741)
    • Fix backfill Dag runs being permanently starved from scheduling (#72730)
    • Fix duplicate task execution when running multiple schedulers (HA) (#60330)
    • Fix the scheduler firing on_failure_callback for heartbeat-timed-out retries (#66767)
  • Upgrade astronomer-kubernetes-executor to 10.22.0+astro.1
  • Raise the botocore logger to INFO
  • Upgraded the minor and patch versions of some open-source provider packages. See Astro Runtime 3.1-22 provider packages.

​
Security fixes

​
October 13, 2026
  • Airflow version: 2.11.2
  • Python versions: 3.10 - 3.12 (default: 3.12)
  • Runtime image: astrocrpublic.azurecr.io/astronomer/astro-runtime:13.12.0

​
Additional improvements

  • Upgrade to Airflow 2.11.2+astro.8 which includes:
    • Fix DAG named “DAGs” colliding with the global DAGs permission resource #69106
  • Upgrade apache-airflow-providers-cncf-kubernetes to 10.22.0
  • Update astronomer-kubernetes-executor to 10.22.0+astro.1
  • Raise the botocore logger to INFO
  • Upgraded the minor and patch versions of several open-source provider packages.

​
Security fixes

​
October 08, 2026
  • Airflow version: 3.3.2
  • Python versions: 3.12 - 3.14 (default: 3.14)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.3-9

​
Additional improvements

  • Upgrade to Airflow 3.3.2+astro.2, which includes:
    • Fix backfill DagRuns being permanently starved from scheduling (#72730)
    • Fix Dag callbacks dropped when bundle versioning is disabled (#72930)
  • Upgraded the minor and patch versions of some open-source provider packages. See Astro Runtime 3.3-9 provider packages.

​
Security fixes

​
October 08, 2026
  • Airflow version: 3.2.2
  • Python versions: 3.12 - 3.14 (default: 3.13)
  • Runtime image: astrocrpublic.azurecr.io/runtime:3.2-11

​
Additional improvements

  • Upgrade to Airflow 3.2.2+astro.7, which includes:
    • Revoke every credential presented to the Core API logout endpoint (#72649, #72933)
    • Scope /assets/events to the Dags the caller may read (#71741, #71785)
    • Require Dag edit to delete asset queued events (#71736, #71828)
    • Resolve the caller from the explicit credential, not the session cookie (#72225, #72723)
    • Fix backfill DagRuns being permanently starved from scheduling (#72730)
  • Upgraded the minor and patch versions of some open-source provider packages. See Astro Runtime 3.2-11 provider packages.

​
Security fixes