Reject blank subprocess coordinator artifact roots

An empty string normalizes to the current directory, so it bypassed the empty-roots check and scanned the worker's working directory.

Author: jason810496

task-sdk/src/airflow/sdk/coordinators/_bundle_metadata.py

@@ -113,13 +113,13 @@ def convert_configured_roots(
     """Normalize configured roots while rejecting explicitly empty values."""
     if isinstance(value, _UnsetArtifactRoots):
         return []
-    roots = convert_roots(value)
-    if not roots:
+    values = [value] if isinstance(value, (str, os.PathLike)) else (value or [])
+    if not values or any(not os.fspath(v).strip() for v in values):
         raise ValueError(
-            "Artifact roots must contain at least one path when provided; "
+            "Artifact roots must contain at least one path when provided, and each path must be non-empty; "
             "omit the option to use the task's Dag bundle."
         )
-    return roots
+    return convert_roots(value)
 
 
 def validate_schema_version(instance, _, value) -> str:

task-sdk/tests/task_sdk/coordinators/executable/test_coordinator.py

@@ -375,9 +375,13 @@ def test_executables_root_optional_defaults_to_empty(self):
         assert coordinator.executables_root == []
         assert coordinator.dag_bundle_name is None
 
-    @pytest.mark.parametrize("executables_root", [None, []], ids=["none", "empty-list"])
+    @pytest.mark.parametrize(
+        "executables_root",
+        [None, [], "", "  ", [""]],
+        ids=["none", "empty-list", "empty-str", "blank-str", "list-of-empty-str"],
+    )
     def test_explicit_empty_executables_root_raises(self, executables_root):
-        with pytest.raises(ValueError, match="must contain at least one path when provided"):
+        with pytest.raises(ValueError, match="and each path must be non-empty"):
             ExecutableCoordinator(executables_root=executables_root)
 
     def test_root_and_dag_bundle_name_are_mutually_exclusive(self, tmp_path):

task-sdk/tests/task_sdk/coordinators/java/test_coordinator.py

@@ -244,9 +244,13 @@ def test_jars_root_optional_defaults_to_empty(self):
         assert coordinator.dag_bundle_name is None
         assert coordinator.main_class == ""
 
-    @pytest.mark.parametrize("jars_root", [None, []], ids=["none", "empty-list"])
+    @pytest.mark.parametrize(
+        "jars_root",
+        [None, [], "", "  ", [""]],
+        ids=["none", "empty-list", "empty-str", "blank-str", "list-of-empty-str"],
+    )
     def test_explicit_empty_jars_root_raises(self, jars_root):
-        with pytest.raises(ValueError, match="must contain at least one path when provided"):
+        with pytest.raises(ValueError, match="and each path must be non-empty"):
             JavaCoordinator(jars_root=jars_root)
 
     def test_explicit_root_does_not_require_main_class(self, tmp_path):

task-sdk/tests/task_sdk/coordinators/node/test_coordinator.py

@@ -85,9 +85,13 @@ def test_bundles_root_optional_defaults_to_empty(self):
         assert coordinator.bundles_root == []
         assert coordinator.dag_bundle_name is None
 
-    @pytest.mark.parametrize("bundles_root", [None, []], ids=["none", "empty-list"])
+    @pytest.mark.parametrize(
+        "bundles_root",
+        [None, [], "", "  ", [""]],
+        ids=["none", "empty-list", "empty-str", "blank-str", "list-of-empty-str"],
+    )
     def test_explicit_empty_bundles_root_raises(self, bundles_root):
-        with pytest.raises(ValueError, match="must contain at least one path when provided"):
+        with pytest.raises(ValueError, match="and each path must be non-empty"):
             NodeCoordinator(bundles_root=bundles_root)
 
     def test_root_and_dag_bundle_name_are_mutually_exclusive(self):