Amin Ghadersohi
694c8c895e
chore(mcp): restore out-of-scope files to master state
...
Earlier style commits reformatted 24 unrelated files with a newer local
ruff than the pinned 0.9.7, removed the PT004 ignore from
pyproject.toml, and the initial branch commit accidentally deleted
tests/unit_tests/utils/test_split.py. None of these belong to the chart
plugin registry change; restore them to master to keep the PR scoped.
2026-06-26 15:55:39 +00:00
Amin Ghadersohi
680bf4387c
style: ruff-format auto-format fix
2026-06-26 15:55:39 +00:00
SkinnyPigeon
0d43c2c12c
feat(reports): trigger alerts ( #41336 )
2026-06-25 22:01:39 -07:00
Evan Rusackas
4b9b8187b3
fix(config): make Swagger UI opt-in (off by default) ( #41300 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-25 10:34:28 -07:00
Shlummie
a57b5f6078
fix(deckgl): show dashboard filter badges for multi-layer charts ( #40003 )
...
Co-authored-by: Evan Rusackas <evan@rusackas.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-24 02:14:25 -07:00
Eddy
1b8c6d109d
feat: added deterministic field generation to dashboard export ( #36339 )
...
Co-authored-by: Evan <evan@preset.io >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-24 01:41:44 -07:00
Abdul Rehman
c2fb94cedf
perf(filters): cache column-values endpoint to skip DB on repeat requests ( #40839 )
2026-06-23 23:41:26 -07:00
Evan Rusackas
b4dfeef2fd
fix(reports): add network timeouts so schedules can't hang forever ( #41250 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-23 18:01:03 -07:00
peng weikang
18fea37e84
fix(SavedQueries): allow other admin users see "saved queries" ( #20604 ) ( #21769 )
2026-06-23 12:14:48 -07:00
Ville Brofeldt
b061b5d317
chore: fix lint on untouched files ( #41333 )
2026-06-23 11:29:19 -07:00
Evan Rusackas
1d3daf2ac8
fix(security): return generic error and log internally in RoleRestAPI.get_list ( #41295 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-23 11:24:26 -07:00
Hans Yu
c49391ab08
refactor: update Connection.execute() to use queries with text() ( #40277 )
2026-06-22 15:36:15 -07:00
Abdul Rehman
cb1694575c
fix(dataset-api): disambiguate get_or_create by schema ( #40494 )
2026-06-22 09:45:02 -07:00
Grégoire Gailly
cc9c20fcb6
feat(dashboard): Edit dashboard description from ui (and api) and show tooltip on dashboard list view ( #36071 )
2026-06-19 08:49:14 -07:00
Amin Ghadersohi
eebe1a1a5b
fix(dashboards): remove thumbnail_url from list API to reduce cache cost ( #38567 )
2026-06-17 09:35:21 -06:00
Joao Amaral
750518cf6f
fix(celery): check app context before session removal in teardown ( #37574 )
...
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
Co-authored-by: Daniel Vaz Gaspar <danielvazgaspar@gmail.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com >
2026-06-17 10:44:27 -03:00
Xie Yanbo
a27ec1923e
chore(export): Added ability to export chart YAML files with Unicode characters, fix #20331 ( #28008 )
...
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 07:55:19 +01:00
Amin Ghadersohi
c1b5d05f83
fix(bigquery): set default dataset from schema in adjust_engine_params ( #40776 )
2026-06-15 18:37:06 -04:00
Evan Rusackas
9d2f625e55
feat(encrypt): selectable encryption engine + AES-GCM re-encryption migrator ( #40654 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-15 08:10:08 -07:00
Cezar
df0668eda5
feat(api): return uuid in POST response for dataset, chart, and dashboard ( #37806 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-13 16:53:08 -07:00
Evan Rusackas
d120b1c250
feat(security): enforce password complexity policy (min length + common-password blocklist) ( #40670 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-13 16:31:23 -07:00
Yuvraj Singh Chauhan
3c6239363b
fix(db): preserve percent encoding in database passwords ( #36783 )
...
Co-authored-by: Evan <evan@preset.io >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-13 13:52:00 -07:00
Shaitan
a41869ec7d
fix(dashboard): build example-export sample data through the dataset query path ( #40976 )
...
Co-authored-by: sha174n <pedro.sousa@preset.io >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-13 19:01:35 +01:00
Evan Rusackas
b05fe4857e
fix(chart): require chart access for query_context-only updates ( #40648 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-13 04:16:29 -07:00
Evan Rusackas
9938ee273f
feat: terminate active sessions when an account is disabled ( #40695 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-11 19:37:13 -07:00
Evan Rusackas
6c5ad1e912
fix(sqllab): apply SQL controls (RLS/DML/disallowed) to cost estimation ( #40662 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-11 05:33:42 -07:00
Richard Fogaca Nienkotter
046b1b61b3
fix(maps): preserve OSM styles and configurable renderer defaults ( #40804 )
2026-06-10 22:26:00 -03:00
Evan Rusackas
00e3682aaf
fix(dashboard): URL-encode native_filters in permalink redirect ( #40660 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 11:37:08 -07:00
Evan Rusackas
a0cf798409
fix(embedded): add Sec-Fetch-Dest defense-in-depth check on the embedded view ( #40667 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 11:08:08 -07:00
Evan Rusackas
065578e48a
fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs ( #40655 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 10:29:46 -07:00
Evan Rusackas
bf9ad4d2ba
fix: set charset via content_type to avoid malformed Content-Type headers ( #40658 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 10:17:44 -07:00
Evan Rusackas
507cf93687
test(dashboard): API-created dashboards should link charts from position_json ( #32966 ) ( #40816 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-08 10:51:25 -07:00
Evan Rusackas
b85a2cdab1
fix: ODPS (MaxCompute) data source table preview failed ( #38174 )
...
Co-authored-by: zhutong6688 <zhutong66@163.com >
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-06-05 17:57:44 -07:00
Evan Rusackas
6b0d747939
fix: cache warmup using WebDriver for reliable authentication ( #38449 )
...
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-05 16:36:30 -07:00
Evan Rusackas
1623ceda73
fix(result_set): preserve JSON/JSONB data as objects instead of strings ( #38172 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-05 11:41:40 -07:00
Shaitan
41572dbf9d
fix(chart): restrict owner lookup to users with write access ( #39304 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 23:00:31 +01:00
Amin Ghadersohi
001834470b
fix(mcp): escape LIKE wildcards in MCP list tool search filters ( #40682 )
2026-06-03 13:30:05 -04:00
Shaitan
b8a2f925ee
fix(views): enforce per-chart access check in legacy form_data endpoint ( #40497 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-03 12:56:03 +01:00
Shaitan
77c2bed5f7
fix(dashboards): narrow datasets payload to callers with read access ( #40396 )
...
Co-authored-by: Claude Sonnet 4 <noreply@anthropic.com >
2026-06-03 12:55:57 +01:00
Shaitan
3191b0fdcd
fix: apply dashboard access check in related_objects endpoints ( #40333 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 12:55:38 +01:00
Shaitan
f7f50a7977
fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format ( #40245 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 12:55:25 +01:00
Shaitan
725f5ed2a9
fix(api): enforce per-object ownership validation in chart, dataset, and report commands ( #39303 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-03 12:55:15 +01:00
Evan Rusackas
fa41769a08
fix(embedded): enforce configured allowed domains for postMessage origin ( #40629 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-02 22:58:30 -07:00
Shaitan
6eaee211aa
fix(sqllab): require dataset match for raw query access ( #40409 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-02 21:50:27 +01:00
Mehmet Salih Yavuz
e2ed989639
fix(reports): skip permalink when dashboard state has no anchor or filters ( #40530 )
2026-06-02 11:37:30 +03:00
Joe Li
a33fcb0edd
feat: add embedded dashboard E2E tests to Playwright CI ( #39300 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-06-01 09:42:08 -07:00
Shaitan
afc4f3c9b3
fix(database): extend URI blocklist to cover duckdb dialect ( #40402 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-30 13:26:38 -07:00
Mike Bridge
7e088792b9
test(model): roll back uncommitted ds_col mutations in timestamp-expression tests ( #40451 )
...
Co-authored-by: Mike Bridge <michael.bridge@ext.preset.io >
2026-05-26 21:17:08 -03:00
Evan Rusackas
b23c65e04f
test(charts): regression for last-modified sort order ( #27500 ) ( #40231 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-20 11:43:19 -07:00
Shaitan
69adecd6a3
fix(reports): enforce server-side recipient on chart/dashboard report subscriptions ( #38847 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 10:36:42 -07:00