The deprecated import path 'airflow.sdk.execution_time.secrets_masker' was redirecting mask_secret() to a single-process implementation that only masked secrets in the task subprocess. This caused secrets to not be masked in logs because the supervisor process (which writes logs) did not receive masking instructions through this message: https://github.com/apache/airflow/blob/main/task-sdk/src/airflow/sdk/log.py#L244-L250

Users importing mask_secret from the old path would see their secrets appear unmasked in task logs despite calling mask_secret() successfully.

The compatibility shim now redirects mask_secret to the supervisor aware implementation in airflow.sdk.log that properly masks secrets in both the task and supervisor processes.

Testing

DAG used:

import sys
from time import sleep

from airflow.sdk import DAG, Variable
from airflow.providers.standard.operators.python import PythonOperator
from airflow.exceptions import AirflowTaskTimeout

from airflow.sdk.execution_time.secrets_masker import mask_secret

mask_secret("username")


def py_callable():
    print("Hello World!")
    print("This is an username: username")
    print(f"This is in dict form: {{'key': 'username'}}")
    print(f"This is in list form: {[1, 2, 3, 'username']}")


with DAG(
    dag_id="testing_secrets_masker",
    schedule=None,
    catchup=False,
    tags=["hello", "world"],
) as dag:
    my_task = PythonOperator(
        task_id="say_hello",
        python_callable=py_callable,
    )

Before the change:

After the change:

I also fixed the deprecation warning which was not being emitted.

^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in airflow-core/newsfragments.