March 2026 monthly summary for apache/airflow focusing on AWS STS web identity credential retrieval reliability improvements. Key changes include ensuring botocore config is applied when using assume_role_with_web_identity, aligning with existing assume_role and assume_role_with_saml paths, and wrapping the client_creator to merge connection config into STS client creation to respect proxies and other settings.

February 2026 monthly summary focused on delivering security and secret-management enhancements across Airflow repositories, with notable work on Vault JWT/OIDC authentication integration and Kubernetes Secrets backend. The work delivered strong business value by enabling token-less identity federation, simplifying secret management via Kubernetes, and improving security posture through explicit validation and robust tests. Maintained backward compatibility while modernizing auth workflows and secret resolution.