Superset Dev and Claude Sonnet 5
176257e42a
fix(semantic_layers): check access before returning a layer's configuration
...
Add SemanticLayer.raise_for_access(), mirroring the existing
SemanticView.raise_for_access(), and call it from the layer GET, runtime
schema, and views endpoints before returning or exercising a layer's
decrypted configuration. Previously these endpoints resolved the layer by
UUID with no per-object permission check.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-21 00:38:48 -07:00
Amin Ghadersohi
18a36d04c7
fix(mcp): preserve user-authored result values ( #43202 )
2026-08-20 18:29:39 -04:00
Joe Li
7441ce90ae
fix(charts): align grain-less time comparisons safely ( #43315 )
2026-08-20 14:55:01 -07:00
Amin Ghadersohi
42ba2a4433
fix(reports): humanize day-of-month + day-of-week crontabs as OR ( #43307 )
2026-08-20 16:46:08 -04:00
madhushreeag and madhushree agarwal
271564cb0d
feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point ( #43337 )
...
Co-authored-by: madhushree agarwal <madhushree_agarwal@apple.com >
2026-08-20 13:15:41 -07:00
JUST.in DO IT and Claude Sonnet 5
bcfb4346f6
fix(mcp): honor use_cache and cache_timeout in get_chart_data ( #43349 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-20 13:01:41 -07:00
Hans Yu
1ca5e61f54
chore: Unset future flag in engines and sessions. ( #43273 )
2026-08-20 10:58:37 -07:00
c0884c0f0c
fix(explore): keep x-axis label when overriding Time Column with time comparison ( #42875 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-20 10:52:22 -07:00
e7dccd44a7
fix(reports): prevent blank/partial report PDFs from virtualized charts ( #43348 )
...
Co-authored-by: Matt Fitzgerald <matt.fitzgerald@preset.io >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
2026-08-20 09:10:30 -04:00
f9cedf84e2
fix: drop post-processing options the operation no longer accepts ( #42927 )
...
Signed-off-by: Arya Ketan <aryaketan@sharechat.co >
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
2026-08-19 18:15:15 -07:00
Sumit Kumar and Claude Opus 4.8
1569915096
feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) ( #41279 )
...
Signed-off-by: thedeceptio <thedeceptio@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-19 10:56:49 -07:00
Bexultan and Bexultan Mustafin
fde0ba26d1
fix(mcp): validate virtual dataset metadata and surface errors ( #43129 )
...
Co-authored-by: Bexultan Mustafin <bexultan.mustafin@ffins.kz >
2026-08-19 10:50:37 -07:00
David Dallakyan
5ce52e531d
fix(clickhouse): add PT1S time grain ( #43217 )
2026-08-18 15:49:18 -07:00
Endi Monan
f994602096
fix(dashboard): align list OpenAPI schema ( #43256 )
2026-08-18 10:22:50 -07:00
Amin Ghadersohi and Claude Fable 5
086b4af65d
feat(mcp): per-resource token scopes with user-permission intersection ( #42297 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-08-18 13:11:27 -04:00
fd063d17bf
fix(security): harden account password-change and session-invalidation handling ( #42934 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-18 17:40:08 +01:00
Joe Li and Claude Opus 4.8
2d1daac11a
fix(explore): samples endpoint now honors requested row limit ( #43148 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-18 09:28:04 -07:00
13eb47a1da
fix(api): improved request handling and embedded dashboard scoping ( #42930 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Superset Dev <dev@superset.apache.org >
2026-08-17 23:50:25 -07:00
Elizabeth Thompson and Claude Opus 4.8
98136d547c
fix(reports): fail closed on alert screenshot capture instead of delivering a blank ( #43031 )
...
Signed-off-by: Elizabeth Thompson <eschutho@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-18 00:03:15 -04:00
Elizabeth Thompson and Claude Opus 4.8
e2070d79dc
fix(reports): wait for ECharts paint before capturing report screenshots ( #43077 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-18 00:02:36 -04:00
Beto Dealmeida
2f8875aaef
feat(semantic layers): optional metadata for metrics/dimensions ( #43269 )
2026-08-17 17:34:17 -07:00
Elizabeth Thompson
6e270df4a2
fix(sql-lab): catch TemplateError in StreamingSqlResultExportCommand.validate ( #43226 )
2026-08-17 15:02:11 -07:00
Amin Ghadersohi
aaf9eba161
fix(db_engine_specs): skip malformed third-party dialect entry points ( #43110 )
...
Signed-off-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
2026-08-17 14:10:06 -07:00
Mehmet Salih Yavuz
cfd40bdd0d
fix(dashboard): derive filter scope on read instead of serving a stale cache ( #43252 )
2026-08-17 19:23:19 +03:00
4684851336
fix(import): isolate per-tag import in a SAVEPOINT to avoid poisoned session ( #42912 ) ( #42920 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
2026-08-14 21:56:43 -07:00
e7139a7ac2
fix(models): enforce one OAuth2 token per user+database ( #42897 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-14 21:50:56 -07:00
21ae918656
fix(mcp): validate chart queries before persistence ( #43128 )
...
Co-authored-by: Bexultan Mustafin <bexultan.mustafin@ffins.kz >
Co-authored-by: Joe Li <joe@preset.io >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
2026-08-14 17:48:19 -07:00
Elizabeth Thompson and Claude Opus 4.8
2eedc609a8
fix(sql_lab): return 400 not 500 when raise_for_access hits malformed Jinja in results.py ( #43145 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-14 15:02:47 -07:00
JUST.in DO IT
f4587218dd
fix(mcp): populate user_id in MCP audit logs ( #42767 )
2026-08-14 16:28:01 -04:00
Amin Ghadersohi
8967e6c2d3
fix(mcp): accept changed_on_delta_humanized as order_column in list tools ( #42571 )
2026-08-14 16:11:46 -04:00
Amin Ghadersohi
81e431cd50
fix(mcp): return all chart query results ( #42824 )
2026-08-14 16:10:26 -04:00
Amin Ghadersohi
edfb009e1c
fix(mcp): expose query context to Jinja macros ( #42822 )
2026-08-14 16:10:03 -04:00
Amin Ghadersohi
e808fcbcad
fix(mcp): bind all generated charts to dashboard time filters ( #42490 )
2026-08-14 16:07:50 -04:00
1e65d93a83
fix(sql): handle ORDER BY in embedded MSSQL queries ( #43127 )
...
Co-authored-by: Bexultan Mustafin <bexultan.mustafin@ffins.kz >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
2026-08-14 14:07:10 -04:00
Gabriel Torres Ruiz
856599027a
fix(mcp): harden the embedded-guest chart data-read path
2026-08-14 14:55:11 -03:00
537f0fd2db
fix(sqllab): use dialect-specific quote chars for autocomplete identifiers ( #41492 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 14:04:38 -07:00
3fb58900b9
chore(duckdb): remove cursor.description workaround, no longer reproducible ( #43101 )
...
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 13:16:16 -07:00
a63483b9b1
fix(sql): rebase Dremio dialect on sqlglot's native dialect ( #43099 )
...
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 13:16:06 -07:00
3c7633f935
fix(encrypt): stop naive padding from truncating secrets ending in '*' ( #43074 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 13:15:37 -07:00
Evan Rusackas and Claude Code
f7a2f0ec50
feat(table): allow choosing Sum or Average for the "Show summary" totals row ( #43027 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-08-13 13:15:23 -07:00
Amin Ghadersohi
117b92a517
fix(mcp): expose table column formatting ( #42658 )
2026-08-13 15:21:44 -04:00
ec136f6d8d
fix(charts): decode CSV bytes payload before feeding pandas StringIO ( #32370 ) ( #42735 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 11:06:09 -07:00
d0658bacc8
fix(mcp): give concurrent tool calls isolated db sessions ( #42629 )
...
Co-authored-by: goingforstudying-ctrl <goingforstudying-ctrl@users.noreply.github.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Joe Li <joe@preset.io >
2026-08-13 11:05:40 -07:00
ʈᵃᵢ
b8ca729f9f
fix(sql): only force a LIMIT onto query expressions ( #43097 )
2026-08-13 10:43:45 -07:00
Amin Ghadersohi
762fdccfde
fix(oauth2): log database token failures ( #42644 )
2026-08-13 12:54:55 -04:00
Amin Ghadersohi and Claude
5554b892ff
fix(mcp): preserve table chart state during updates ( #42655 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-08-13 12:54:05 -04:00
Evan Rusackas and Claude Opus 4.8
59361581cd
fix(embedded): restore chart rendering for guest dashboards ( #43095 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-13 05:38:57 -07:00
endimonan
685f26b1bf
fix(cache): warm native dashboard filter defaults ( #43073 )
2026-08-12 22:30:48 -07:00
bc1a8e0858
refactor(tags): align ExportTagsCommand with ExportModelsCommand ( #42339 )
...
Co-authored-by: Prathamesh Hukkeri <prathamesh04@users.noreply.github.com >
Co-authored-by: rusackas <evan@rusackas.com >
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
2026-08-12 21:44:53 -07:00
Evan Rusackas and Claude Opus 4.8
0915a39bcb
fix(dataset): improve dataset, report, and expression validation ( #42929 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-08-12 20:13:45 -07:00
