João Pedro Alves Barbosa
02ffb52f4a
fix(table): improve conditional formatting text contrast ( #38705 )
2026-03-22 18:59:15 -03:00
dependabot[bot]
361afff798
chore(deps-dev): bump copy-webpack-plugin from 13.0.1 to 14.0.0 in /superset-frontend ( #38504 )
2026-03-22 23:49:45 +07:00
dependabot[bot]
2a6b0215f0
chore(deps): bump simple-zstd from 1.4.2 to 2.1.0 in /superset-frontend ( #38662 )
2026-03-22 23:49:00 +07:00
dependabot[bot]
c1c296233f
chore(deps-dev): bump terser-webpack-plugin from 5.3.17 to 5.4.0 in /superset-frontend ( #38669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-22 11:23:47 +07:00
dependabot[bot]
e05fdd8acd
chore(deps): bump mapbox-gl from 3.19.0 to 3.20.0 in /superset-frontend ( #38670 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
2026-03-22 10:58:08 +07:00
Đỗ Trọng Hải
83823911b5
feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions ( #38782 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-21 21:27:30 +07:00
Đỗ Trọng Hải
7004369c68
fix(sec): remove compromised Trivy actions ( #38780 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-21 12:24:24 +07:00
dependabot[bot]
f5d7ce0f86
chore(deps-dev): bump flatted from 3.4.1 to 3.4.2 in /superset-frontend ( #38771 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
2026-03-21 11:44:13 +07:00
dependabot[bot]
32eb8c8263
chore(deps): bump flatted from 3.3.3 to 3.4.2 in /docs ( #38772 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-21 09:27:03 +07:00
Amin Ghadersohi
44c2c765ae
fix(mcp): convert adhoc filters to QueryObject format before query compilation ( #38774 )
2026-03-20 20:43:09 +01:00
Amin Ghadersohi
0d5721910e
fix(mcp): normalize call_tool proxy arguments to prevent encoding TypeError ( #38775 )
2026-03-20 20:42:40 +01:00
dependabot[bot]
28d67d59cd
chore(deps-dev): bump flatted from 3.2.2 to 3.4.2 in /superset-frontend/cypress-base ( #38761 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 10:32:21 -07:00
Kamil Gabryjelski
1d72480c17
fix(mcp): fix detached Slice instance error in chart/dashboard serialization ( #38767 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-20 18:23:51 +01:00
dependabot[bot]
1af5da6aad
chore(deps): bump baseline-browser-mapping from 2.10.7 to 2.10.9 in /docs ( #38756 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 10:12:39 -07:00
dependabot[bot]
ea1c6ee30f
chore(deps): bump geostyler-openlayers-parser from 5.4.0 to 5.4.1 in /superset-frontend ( #38755 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 10:12:07 -07:00
dependabot[bot]
97ea479cdc
chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 in /superset-websocket ( #38752 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 10:11:41 -07:00
Enzo Martellucci
e088979fbe
fix(reports): validate nativeFilters on report create/update and deactivate on dashboard filter deletion ( #38715 )
2026-03-20 17:20:02 +01:00
Kamil Gabryjelski
5e5c05362c
fix(mcp): use correct permission class for save_sql_query tool ( #38764 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-20 17:15:19 +01:00
Amin Ghadersohi
c2a21915ff
fix(mcp): fix dashboard slug null and execute_sql encoding error ( #38710 )
2026-03-20 14:41:54 +01:00
Enzo Martellucci
cbb2b2f3c2
feat(themes): add JSON formatting to theme modal editor ( #38739 )
2026-03-20 13:48:00 +01:00
Alexandru Soare
82a74c88aa
fix(button): Theming configurations for button elements is not consistent ( #38604 )
2026-03-20 12:37:04 +02:00
Levis Mbote
6b9dd23e3a
fix(timeseries-table): enable proper column sorting in timeseries-table chart ( #38579 )
2026-03-19 12:01:40 -07:00
Levis Mbote
b754f2d173
fix(theme): persist local theme id so "Local" tag remains after navigation ( #38527 )
2026-03-19 12:01:24 -07:00
Levis Mbote
ee233d16d6
fix(dashboard): correct tab underline width for newly added dashboard tabs. ( #38524 )
2026-03-19 12:01:08 -07:00
Levis Mbote
65f13f773e
fix(theme): ensure colorLink follows colorPrimary when not explicitly set ( #38517 )
2026-03-19 12:00:41 -07:00
Shaitan
d4646d43a7
docs(security): update vulnerability reporting policy and admin trust boundary ( #38653 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-19 10:57:57 -07:00
Alexandru Soare
6465450b64
fix(firebolt): Firebolt SQL entered with EXCLUDE is rewritten to EXCEPT ( #38742 )
2026-03-19 10:21:50 -07:00
dependabot[bot]
01aa4d3281
chore(deps): bump match-sorter from 6.3.4 to 8.2.0 in /superset-frontend ( #36470 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-03-19 23:28:20 +07:00
Kamil Gabryjelski
211f29b723
fix(mcp): Chart schema followups - DRY extraction, template fix, alias and test gaps ( #38746 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-19 16:50:42 +01:00
Đỗ Trọng Hải
d6bfc98a61
feat(ci): use zstd for faster saving and loading superset-node-ci image ( #38645 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-19 22:43:16 +07:00
dependabot[bot]
5457c2da67
chore(deps): bump dawidd6/action-download-artifact from 17 to 19 ( #38735 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 22:42:39 +07:00
Kamil Gabryjelski
14b1b456e1
fix: Add aliases and groupby list to chart schemas ( #38740 )
2026-03-19 16:15:58 +01:00
Luiz Otavio
972e15e601
fix(sql): remove WHERE 1 = 1 when temporal filter has "No filter" selected ( #38704 )
2026-03-19 08:29:53 -03:00
Joe Li
03de7e1ec6
fix(dashboard): use inline theme data to prevent 403 for non-admin users ( #38384 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-18 16:17:03 -07:00
dependabot[bot]
3edf75123a
chore(deps): bump swagger-ui-react from 5.32.0 to 5.32.1 in /docs ( #38708 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 10:12:47 -07:00
Michael S. Molina
fd1c423826
fix(chart): prevent chart list from failing when a datasource lacks explore_url ( #38721 )
2026-03-18 10:23:57 -03:00
Kamil Gabryjelski
a314e5b35e
fix: Row limit support for chart mcp tools ( #38717 )
2026-03-18 13:40:47 +01:00
Amin Ghadersohi
e02ca8871d
fix(mcp): expose individual tool parameters when MCP_PARSE_REQUEST_ENABLED=False ( #38714 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-18 11:38:22 +01:00
dependabot[bot]
834d2abe70
chore(deps): bump antd from 6.3.2 to 6.3.3 in /docs ( #38686 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 16:01:02 -07:00
Evan Rusackas
91986fff02
fix(tests): restore 100% TypeScript coverage for core packages ( #38682 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-03-17 15:28:51 -03:00
João Pedro Alves Barbosa
05b9970aa6
fix(map-box): prevent clusters from being smaller than individual points ( #38458 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-17 15:08:05 -03:00
Michael S. Molina
6f301707f9
fix: Simplify extension folder name ( #38690 )
2026-03-17 14:00:19 -03:00
mcdogg17
5865176f36
fix(dashboard): overload issue in dashboard export to excel ( #29418 )
...
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-17 09:29:32 -07:00
dependabot[bot]
461037f645
chore(deps-dev): bump typescript-eslint from 8.56.1 to 8.57.1 in /docs ( #38684 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 21:54:27 +07:00
dependabot[bot]
c980f39aab
chore(deps): bump caniuse-lite from 1.0.30001778 to 1.0.30001780 in /docs ( #38688 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 21:51:39 +07:00
Beto Dealmeida
a854fa60a2
feat: apply RLS conservatively ( #38683 )
2026-03-17 10:20:09 -04:00
Amin Ghadersohi
1c8224f4c6
feat(mcp): Add tool annotations for MCP directory compliance ( #38641 )
2026-03-16 19:09:25 -07:00
Đỗ Trọng Hải
ca403dc45d
fix(ci): allow docs testing to run despite absence of db diagnostics data ( #38655 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-17 08:01:43 +07:00
João Pedro Alves Barbosa
96705c156a
fix(map-box): make opacity, lon, lat, and zoom controls functional ( #38374 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
2026-03-16 21:55:49 -03:00
endimonan
7909095ff3
feat(native-filters): add configurable LIKE/ILIKE operators to Select filter ( #38470 )
...
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Richard Fogaca Nienkotter <63572350+richardfogaca@users.noreply.github.com >
2026-03-16 21:11:53 -03:00