feat(AIR303): add rules for names moved to fab provider

crates/ruff_linter/resources/test/fixtures/airflow/AIR303.py

@@ -0,0 +1,15 @@
+from airflow.api.auth.backend import basic_auth, kerberos_auth
+from airflow.api.auth.backend.basic_auth import auth_current_user
+from airflow.auth.managers.fab.api.auth.backend import (
+    kerberos_auth as backend_kerberos_auth,
+)
+from airflow.auth.managers.fab.fab_auth_manager import FabAuthManager
+from airflow.auth.managers.fab.security_manager import override as fab_override
+from airflow.www.security import FabAirflowSecurityManagerOverride
+
+basic_auth, kerberos_auth
+auth_current_user
+backend_kerberos_auth
+FabAuthManager
+fab_override
+FabAirflowSecurityManagerOverride

crates/ruff_linter/src/checkers/ast/analyze/expression.rs

@@ -223,6 +223,9 @@ pub(crate) fn expression(expr: &Expr, checker: &mut Checker) {
                     if checker.enabled(Rule::Airflow3Removal) {
                         airflow::rules::removed_in_3(checker, expr);
                     }
+                    if checker.enabled(Rule::Airflow3MovedToProvider) {
+                        airflow::rules::moved_to_provider_in_3(checker, expr);
+                    }
 
                     // Ex) List[...]
                     if checker.any_enabled(&[

crates/ruff_linter/src/codes.rs

@@ -1044,6 +1044,7 @@ pub fn code_to_rule(linter: Linter, code: &str) -> Option<(RuleGroup, Rule)> {
         (Airflow, "001") => (RuleGroup::Stable, rules::airflow::rules::AirflowVariableNameTaskIdMismatch),
         (Airflow, "301") => (RuleGroup::Preview, rules::airflow::rules::AirflowDagNoScheduleArgument),
         (Airflow, "302") => (RuleGroup::Preview, rules::airflow::rules::Airflow3Removal),
+        (Airflow, "303") => (RuleGroup::Preview, rules::airflow::rules::Airflow3MovedToProvider),
 
         // perflint
         (Perflint, "101") => (RuleGroup::Stable, rules::perflint::rules::UnnecessaryListCast),

crates/ruff_linter/src/rules/airflow/mod.rs

@@ -16,6 +16,7 @@ mod tests {
     #[test_case(Rule::AirflowDagNoScheduleArgument, Path::new("AIR301.py"))]
     #[test_case(Rule::Airflow3Removal, Path::new("AIR302_args.py"))]
     #[test_case(Rule::Airflow3Removal, Path::new("AIR302_names.py"))]
+    #[test_case(Rule::Airflow3MovedToProvider, Path::new("AIR303.py"))]
     fn rules(rule_code: Rule, path: &Path) -> Result<()> {
         let snapshot = format!("{}_{}", rule_code.noqa_code(), path.to_string_lossy());
         let diagnostics = test_path(

crates/ruff_linter/src/rules/airflow/rules/mod.rs

@@ -1,7 +1,9 @@
 pub(crate) use dag_schedule_argument::*;
+pub(crate) use moved_to_provider_in_3::*;
 pub(crate) use removal_in_3::*;
 pub(crate) use task_variable_name::*;
 
 mod dag_schedule_argument;
+mod moved_to_provider_in_3;
 mod removal_in_3;
 mod task_variable_name;

crates/ruff_linter/src/rules/airflow/rules/moved_to_provider_in_3.rs

@@ -0,0 +1,141 @@
+use ruff_diagnostics::{Diagnostic, Violation};
+use ruff_macros::{derive_message_formats, ViolationMetadata};
+use ruff_python_ast::{Expr, ExprAttribute};
+use ruff_python_semantic::Modules;
+use ruff_text_size::Ranged;
+
+use crate::checkers::ast::Checker;
+
+#[derive(Debug, Eq, PartialEq)]
+enum Replacement {
+    Message(String, String, String),
+}
+
+/// ## What it does
+/// Checks for uses of Airflow functions and values that have been moved to it providers.
+/// (e.g., apache-airflow-providers-fab)
+///
+/// ## Why is this bad?
+/// Airflow 3.0 moved various deprecated functions, members, and other
+/// values to its providers. The user needs to install the corresponding provider and replace
+/// the original usage with the one in the provider
+///
+/// ## Example
+/// ```python
+/// from airflow.auth.managers.fab.fab_auth_manage import FabAuthManager
+/// ```
+///
+/// Use instead:
+/// ```python
+/// from airflow.providers.fab.auth_manager.fab_auth_manage import FabAuthManager
+/// ```
+#[derive(ViolationMetadata)]
+pub(crate) struct Airflow3MovedToProvider {
+    deprecated: String,
+    replacement: Replacement,
+}
+
+impl Violation for Airflow3MovedToProvider {
+    #[derive_message_formats]
+    fn message(&self) -> String {
+        let Airflow3MovedToProvider {
+            deprecated,
+            replacement,
+        } = self;
+        match replacement {
+            Replacement::Message(name, provider_name, provider_version) => {
+                format!("`{deprecated}` is moved into `{provider_name}` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-{provider_name}=={provider_version}` and use `{name}` instead.")
+            }
+        }
+    }
+}
+
+fn moved_to_provider(checker: &mut Checker, expr: &Expr, ranged: impl Ranged) {
+    let result =
+        checker
+            .semantic()
+            .resolve_qualified_name(expr)
+            .and_then(|qualname| match qualname.segments() {
+                // apache-airflow-providers-fab
+                ["airflow", "www", "security", "FabAirflowSecurityManagerOverride"] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.providers.fab.auth_manager.security_manager.override.FabAirflowSecurityManagerOverride".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+                ["airflow", "api", "auth", "backend", "basic_auth", ..] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.providers.fab.auth_manager.api.auth.backend.basic_auth".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+
+                ["airflow", "api","auth","backend","kerberos_auth", ..] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.executors.`airflow.providers.fab.auth_manager.api.auth.backend.kerberos_auth".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+
+                ["airflow", "auth", "managers", "fab", "api", "auth", "backend", "kerberos_auth", ..] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.providers.fab.auth_manager.api.auth.backend.kerberos_auth".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+
+                ["airflow","auth","managers","fab","fab_auth_manager", "FabAuthManager", ..] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.providers.fab.auth_manager.security_manager.FabAuthManager".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+
+                ["airflow","auth","managers","fab","security_manager","override"] => Some((
+                    qualname.to_string(),
+                    Replacement::Message(
+                        "airflow.providers.fab.auth_manager.security_manager.override".to_string(),
+                        "fab".to_string(),
+                        "1.0.0".to_string()
+                    ),
+                )),
+
+
+                _ => None,
+            });
+    if let Some((deprecated, replacement)) = result {
+        checker.diagnostics.push(Diagnostic::new(
+            Airflow3MovedToProvider {
+                deprecated,
+                replacement,
+            },
+            ranged.range(),
+        ));
+    }
+}
+
+/// AIR303
+pub(crate) fn moved_to_provider_in_3(checker: &mut Checker, expr: &Expr) {
+    if !checker.semantic().seen_module(Modules::AIRFLOW) {
+        return;
+    }
+
+    match expr {
+        Expr::Attribute(ExprAttribute { attr: ranged, .. }) => {
+            moved_to_provider(checker, expr, ranged);
+        }
+        ranged @ Expr::Name(_) => moved_to_provider(checker, expr, ranged),
+        _ => {}
+    }
+}

crates/ruff_linter/src/rules/airflow/snapshots/ruff_linter__rules__airflow__tests__AIR303_AIR303.py.snap

@@ -0,0 +1,76 @@
+---
+source: crates/ruff_linter/src/rules/airflow/mod.rs
+snapshot_kind: text
+---
+AIR303.py:10:1: AIR303 `airflow.api.auth.backend.basic_auth` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.api.auth.backend.basic_auth` instead.
+   |
+ 8 | from airflow.www.security import FabAirflowSecurityManagerOverride
+ 9 | 
+10 | basic_auth, kerberos_auth
+   | ^^^^^^^^^^ AIR303
+11 | auth_current_user
+12 | backend_kerberos_auth
+   |
+
+AIR303.py:10:13: AIR303 `airflow.api.auth.backend.kerberos_auth` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.executors.`airflow.providers.fab.auth_manager.api.auth.backend.kerberos_auth` instead.
+   |
+ 8 | from airflow.www.security import FabAirflowSecurityManagerOverride
+ 9 | 
+10 | basic_auth, kerberos_auth
+   |             ^^^^^^^^^^^^^ AIR303
+11 | auth_current_user
+12 | backend_kerberos_auth
+   |
+
+AIR303.py:11:1: AIR303 `airflow.api.auth.backend.basic_auth.auth_current_user` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.api.auth.backend.basic_auth` instead.
+   |
+10 | basic_auth, kerberos_auth
+11 | auth_current_user
+   | ^^^^^^^^^^^^^^^^^ AIR303
+12 | backend_kerberos_auth
+13 | FabAuthManager
+   |
+
+AIR303.py:12:1: AIR303 `airflow.auth.managers.fab.api.auth.backend.kerberos_auth` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.api.auth.backend.kerberos_auth` instead.
+   |
+10 | basic_auth, kerberos_auth
+11 | auth_current_user
+12 | backend_kerberos_auth
+   | ^^^^^^^^^^^^^^^^^^^^^ AIR303
+13 | FabAuthManager
+14 | fab_override
+   |
+
+AIR303.py:13:1: AIR303 `airflow.auth.managers.fab.fab_auth_manager.FabAuthManager` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.security_manager.FabAuthManager` instead.
+   |
+11 | auth_current_user
+12 | backend_kerberos_auth
+13 | FabAuthManager
+   | ^^^^^^^^^^^^^^ AIR303
+14 | fab_override
+15 | FabAirflowSecurityManagerOverride
+   |
+
+AIR303.py:14:1: AIR303 `airflow.auth.managers.fab.security_manager.override` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.security_manager.override` instead.
+   |
+12 | backend_kerberos_auth
+13 | FabAuthManager
+14 | fab_override
+   | ^^^^^^^^^^^^ AIR303
+15 | FabAirflowSecurityManagerOverride
+   |
+
+AIR303.py:15:1: AIR303 `airflow.www.security.FabAirflowSecurityManagerOverride` is moved into `fab` provider in Airflow 3.0;
+                        Install `apache-airflow-provider-fab==1.0.0` and use `airflow.providers.fab.auth_manager.security_manager.override.FabAirflowSecurityManagerOverride` instead.
+   |
+13 | FabAuthManager
+14 | fab_override
+15 | FabAirflowSecurityManagerOverride
+   | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ AIR303
+   |