apache / apache/airflow

Upgrading docker images debian from version 12(bookworm) to 13(trixie).

Open
#71,494 0 comments 2 reactions 0 assignees View on GitHub
area:production-image kind:feature needs-triage security
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 9h
Merged PRs (30d)
472

Description

### Description

Bookworm regular support ended 11 Jul 2026; Airflow’s own policy is to switch ~6 months before that — so this is overdue by policy, even though Bookworm LTS runs to 2028.
Trixie has been stable since Aug 2025 (~1 year).

### Use case/motivation

I noticed 3 critical vulnerabilities related to the unbound package: CVE-2026-42960, CVE-2026-33278, CVE-2026-50252 that for bookworm have no upgrade. Would be much easier to jump forward with the version instead.

### Related issues

_No response_

### Are you willing to submit a PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by locating the Debian 12/bookworm references in the repository's Docker image definitions and checking the related image build or CI entry points; done means the images use Debian 13/trixie and the builds and relevant checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
debian, docker
Domain
devops, infrastructure
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.