Bigflow

Latest version: v1.11.1

Safety actively analyzes 723607 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 4

1.7.1

Changed

* Bigflow CLI commands won't fail on additional unknown parameters. This allows to pass additional parameters to BigFlow Jobs.

1.7.0

Changed

* Bumped dependencies of main libraries (e.g. Apache Beam to version 2.45 or BigQuery to version 3.6.0). It enabled compatibility with MacBooks with M1 processor.
* Requires Python version = 3.8

1.6.0

Fixed

* Enabled vault endpoint TLS certificate verification by default for `bf build` and `bf deploy` commands. This fixes the MITM attack vulnerability. Kudos to Konstantin Weddige for reporting.

Breaking changes

* Default vault endpoint TLS certificate verification for `bf build` and `bf deploy` may fail in some environments. Use `-vev`/`--vault-endpoint-verify` option to disable or provide path to custom trusted certificates or CA certificates. Disabling makes execution vulnerable for MITM attacks and is discouraged - do it only when justified and in trusted environments. See [https://requests.readthedocs.io/en/latest/user/advanced/#ssl-cert-verification](https://requests.readthedocs.io/en/latest/user/advanced/#ssl-cert-verification) for details.

1.5.4

Not secure
Changed

* Added two more parameters in KubernetesPodOperator required since Composer 2.1.0

1.5.3

Not secure
Changed

* MarkupSafe bumped to >2.1.0 (avoiding the broken 2.1.0 version)

1.5.2

Not secure
Changed

* Jinja version bumped to >=3<4

Fixed

* Fixing the DAG builder issue introduced in 1.5.1 – now it produces DAGs compatible with (airflow 1.x + composer 1.x) or (airflow 2.x + composer 2.x)

Page 2 of 4

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.