Joe Li
01c84a3bf1
fix(embedded-e2e): pass dashboard ID as string to guest token API
...
The Marshmallow ResourceSchema uses fields.String(required=True) for
the resource id, which rejects numeric values. The previous refactor
removed the String() wrapper around dashboardId, causing the guest
token request to fail validation silently and the embedded dashboard
to never authenticate or render.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-16 08:56:55 -07:00
Joe Li
701eea222a
fix(embedded-e2e): add CI SDK build step, align with conventions, improve test assertions
...
- Add build-embedded-sdk to bashlib.sh and wire into both Playwright CI
workflows (tests were silently skipping because the SDK bundle was
never built)
- Move getDashboardIdBySlug to dashboard.ts as getDashboardBySlug using
rison.encode(), extract shared getDashboardByFilter helper
- Convert getIframeLocator() to getter (get iframe) per POM convention
- Add setupEmbeddedPage() and createAdminContext() helpers to reduce
test setup duplication
- Strengthen hideTitle test with actual isTitleVisible() assertion and
baseline check in first test
- Rename misleading "native filters" test to "charts render inside
embedded iframe"
- Remove broken cross-origin waitForResponse(), rely on not.toBeVisible
- Fix EmbeddedConfig.dashboard_id type (string -> number), add JSDoc
@param/@returns tags, remove unused APIResponse import
- Fix getStatus() null coalescing, destructure {page, browser} in test
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-16 08:56:55 -07:00
sadpandajoe
3536adf340
fix: resolve prettier and oxlint lint errors in embedded E2E tests
...
Fix arrow-body-style violations (oxlint) by using implicit return
in arrow functions. Fix prettier formatting in EmbeddedPage.ts.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-16 08:56:55 -07:00
sadpandajoe
98e89e6e5d
fix: address CI failures in embedded E2E tests
...
- Run tests serially (test.describe.configure({ mode: 'serial' }))
to prevent parallel workers from conflicting on port 9000
- Replace ++ operator with += 1 to satisfy oxlint no-plusplus rule
- Skip all embedded tests if SDK bundle is not built, with clear
message pointing to the build command
- Apply prettier formatting to match project style
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-16 08:56:55 -07:00
sadpandajoe
2e3ae7a061
feat: add embedded dashboard E2E tests to Playwright CI
...
Add end-to-end tests for the embedded dashboard flow, validating the
complete path from external app through the @superset-ui/embedded-sdk
to dashboard rendering in an iframe with guest token authentication.
New test infrastructure:
- Minimal static HTML test app served by Node.js http server in fixture
- EmbeddedPage page object for iframe interaction
- API helpers for embedded config and guest token management
- chromium-embedded Playwright project with dedicated test matching
Tests cover:
- Dashboard rendering in embedded iframe via SDK
- UI config options (hideTitle, hideTab, hideChartControls)
- Native filter functionality in embedded mode
- allowed_domains referrer validation (403 for unauthorized origins)
- Guest token authentication and data access
Config changes:
- Enable EMBEDDED_SUPERSET feature flag in test config
- Add CORS config for embedded test app origin (localhost:9000)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-16 08:56:55 -07:00
Mehmet Salih Yavuz
7c76fd3d81
fix(SelectFilter): auto clear search input ( #39157 )
2026-04-16 18:54:34 +03:00
Luiz Otavio
0b419a07f5
fix: add comments to SQL clause validation ( #39167 )
2026-04-16 09:19:39 -03:00
JUST.in DO IT
0b51e9cd5e
fix(sqllab): format_sql to apply db dialect by database_id ( #39393 )
2026-04-16 08:27:51 -03:00
Amin Ghadersohi
e7b9fb277e
fix(mcp): always push fresh app context per tool call to prevent g.user race ( #39385 )
2026-04-15 20:48:21 -04:00
Amin Ghadersohi
838ee870d0
fix(mcp): update instructions to use correct request wrapper and identifier params ( #39392 )
2026-04-15 20:17:07 -04:00
dependabot[bot]
84af6c9f29
chore(deps-dev): bump @docusaurus/tsconfig from 3.9.2 to 3.10.0 in /docs ( #39189 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 15:28:40 -07:00
dependabot[bot]
05227e8a80
chore(deps): bump caniuse-lite from 1.0.30001786 to 1.0.30001788 in /docs ( #39376 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 15:12:46 -07:00
dependabot[bot]
76a209663d
chore(deps-dev): bump baseline-browser-mapping from 2.10.13 to 2.10.16 in /superset-frontend ( #39150 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:56:40 -07:00
dependabot[bot]
61c45e3dd8
chore(deps-dev): bump @docusaurus/module-type-aliases from 3.9.2 to 3.10.0 in /docs ( #39194 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:53:37 -07:00
dependabot[bot]
e11a50bedf
chore(deps): bump @docusaurus/faster from 3.9.2 to 3.10.0 in /docs ( #39195 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:53:05 -07:00
dependabot[bot]
f4a6ea0fde
chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 ( #39267 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:52:48 -07:00
dependabot[bot]
e542e9f840
chore(deps): bump actions/cache from 5.0.4 to 5.0.5 ( #39368 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:52:32 -07:00
dependabot[bot]
e0dcb2908d
chore(deps): bump swagger-ui-react from 5.32.1 to 5.32.4 in /docs ( #39377 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:51:42 -07:00
innovark
eaccb2e471
fix(EmptyState): prevent SVG cropping in empty state images ( #37287 )
...
Co-authored-by: Joe Li <joe@preset.io >
2026-04-15 14:49:18 -07:00
Laurent Ouattara
c1a1f2e7e7
docs: add Hifadih Business & Technology to In the Wild ( #38824 )
2026-04-15 14:48:58 -07:00
Robert A
45d5501aa7
fix(documentation): FAQ grammar for SQL query wording ( #38923 )
2026-04-15 14:48:41 -07:00
dependabot[bot]
388596e4fe
chore(deps): bump baseline-browser-mapping from 2.10.13 to 2.10.16 in /docs ( #39148 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 14:48:25 -07:00
Grégoire Gailly
b11d4f3ef0
fix(i18n): typo in fr language ( #36982 )
...
Co-authored-by: Sam Firke <sfirke@users.noreply.github.com >
2026-04-15 16:20:01 -04:00
Michael S. Molina
998b9e387b
fix(ListView): empty state not filling available width ( #39387 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-15 16:32:12 -03:00
Maxime Beauchemin
b3e88db87e
fix(table): use column label instead of SQL expression for orderby in downloads ( #39332 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-15 11:20:54 -07:00
Abdul Rehman
8471e82342
fix(css-templates): add missing height to CSS editor in CssTemplateModal ( #39221 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-15 15:01:27 -03:00
Richard Fogaca Nienkotter
c3a0f2749b
fix(dashboard): apply dynamic groupby display controls to scoped charts ( #39356 )
2026-04-15 14:57:29 -03:00
Maxime Beauchemin
c2d96e0dce
fix(table): fix cross-filter not clearing on second click in Interactive Table ( #39253 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-15 10:30:36 -07:00
Abdul Rehman
44e77fdf2b
fix(explore): dispatch onChange immediately on NumberControl stepper arrow clicks ( #39220 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-15 10:15:37 -07:00
Gabriel Torres Ruiz
18d6feb499
feat(mcp): add create_virtual_dataset tool to save SQL queries as datasets ( #39279 )
2026-04-15 13:04:32 -03:00
dependabot[bot]
0d91f5e982
chore(deps): bump markdown-to-jsx from 9.7.13 to 9.7.15 in /superset-frontend ( #39217 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 22:29:01 +07:00
dependabot[bot]
5661fc9128
chore(deps): bump anthropics/claude-code-action from 1.0.93 to 1.0.96 + temporarily stop Dependabot PR for claude-code-action due to high release frequency but low usage( #39360 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-04-15 22:26:44 +07:00
dependabot[bot]
a6156676c8
chore(deps): bump fuse.js from 7.1.0 to 7.3.0 in /superset-frontend ( #39146 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 22:25:17 +07:00
dependabot[bot]
b2bd2329bc
chore(deps-dev): bump wait-on from 9.0.4 to 9.0.5 in /superset-frontend ( #39322 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 22:24:09 +07:00
Amin Ghadersohi
724f1484b9
chore(mcp): update CLAUDE.md to reflect current codebase patterns ( #39348 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-15 11:11:21 -04:00
Beto Dealmeida
84f7b4a973
fix: do_ping takes a connection, not engine ( #39013 )
2026-04-15 11:10:24 -04:00
Michael S. Molina
ddcb9be9a7
fix(sqllab): show schema refresh icon only on hover ( #39367 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-15 11:37:33 -03:00
dependabot[bot]
8d9b5bd479
chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs ( #39352 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 21:32:26 +07:00
dependabot[bot]
4b88fc57b4
chore(deps-dev): bump prettier from 3.8.2 to 3.8.3 in /superset-websocket ( #39358 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-15 21:31:56 +07:00
Hugh A. Miles II
b76080e291
feat(security): add granular export controls - Phase 2 + 3 ( #38581 )
...
Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com >
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
Co-authored-by: Beto Dealmeida <roberto@dealmeida.net >
Co-authored-by: Daniel Vaz Gaspar <danielvazgaspar@gmail.com >
2026-04-15 10:24:59 -04:00
Alexandru Soare
411f769896
feat(filters): Adding empty state for filter modal ( #38909 )
2026-04-15 15:59:11 +03:00
Alexandru Soare
ffcc6e8b63
fix(MCP): fix MCP logs ( #39159 )
2026-04-15 15:57:04 +03:00
Luiz Otavio
86575e129b
fix(native-filters): prevent infinite recursion in filter scope tree traversal ( #39355 )
2026-04-15 08:16:12 -03:00
Joe Li
3e25f02da9
test(sqllab): migrate Cypress E2E tests to Playwright ( #39071 )
2026-04-14 10:31:37 -07:00
dependabot[bot]
002d8ad1e4
chore(deps-dev): bump @types/node from 25.5.0 to 25.6.0 in /superset-frontend ( #39265 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 23:18:15 +07:00
dependabot[bot]
6287a07912
chore(deps): bump anthropics/claude-code-action from 1.0.89 to 1.0.93 ( #39318 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 23:14:11 +07:00
dependabot[bot]
fa97d0357f
chore(deps-dev): bump globals from 17.4.0 to 17.5.0 in /superset-websocket ( #39310 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 23:02:05 +07:00
dependabot[bot]
f836c3eccd
chore(deps-dev): bump typescript-eslint from 8.58.0 to 8.58.2 in /superset-websocket ( #39337 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 22:59:44 +07:00
JUST.in DO IT
499e27ea54
fix(native-filter): infinite filter loading by deps ( #39175 )
2026-04-14 09:06:36 -03:00
Alexandru Soare
c2a35e2eea
fix(popup): Dropdown popup width doesn't match input width when tags collapse in oneLine mode ( #39136 )
2026-04-14 11:09:26 +03:00