Hugh A Miles II
6f40ebc357
docs(dashboard): add local verification rig for Excel export
...
Adds a compose overlay (MinIO as S3 stand-in + Mailpit as SMTP catcher,
with auto bucket creation) and a runbook so reviewers can verify the
async Excel export end-to-end locally: UI button -> Celery worker ->
S3 upload -> emailed pre-signed link -> downloadable .xlsx.
Runs under a distinct compose project name with conflicting host port
bindings reset, so it coexists with other local superset stacks.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 20:58:11 -04:00
Hugh A. Miles II
d4ac5fed84
Merge branch 'master' into hughhhh/dashboard-export-spec-review
2026-07-01 20:34:32 -04:00
Alejandro Solares
d1f7dd9c67
fix(deps): override fast-uri to 3.1.3 to fix CVE-2026-13676 ( #41631 )
...
Signed-off-by: Alejandro Solares <219859296+ASolarers-Rodriguez@users.noreply.github.com >
2026-07-01 17:28:45 -07:00
Evan Rusackas
c718f717cb
feat(i18n): backfill Spanish (es) translations (AI-generated, needs review) ( #41609 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 17:25:13 -07:00
innovark
b3197c9b5e
fix(table-chart): fix "Search by" control visibility and improve table controls layout ( #36073 )
...
Co-authored-by: SBIN2010 <Sbin2010@mail.ru >
2026-07-01 17:22:36 -07:00
Mike Bridge
af0a55a4f3
feat(dashboards): soft-delete and restore ( #40128 )
...
Co-authored-by: Mike Bridge <michael.bridge@ext.preset.io >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-07-01 17:20:44 -07:00
Hugh A Miles II
5f7f6adb53
fix(dashboard): register Excel export task in docker dev CeleryConfig
...
The docker dev config overrides CELERY_CONFIG with its own imports tuple,
which was missing superset.tasks.export_dashboard_excel — exactly the
silent-failure mode documented in UPDATING.md: the endpoint returns 202
but the worker never registers the task, so exports never run in the
standard docker-compose dev environment.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 20:03:01 -04:00
Hugh A Miles II
e3a7bf776e
Merge remote-tracking branch 'origin/master' into hughhhh/dashboard-export-spec-review
...
# Conflicts:
# UPDATING.md
# superset-frontend/src/pages/SavedQueryList/SavedQueryList.test.tsx
2026-07-01 19:30:19 -04:00
Evan Rusackas
8be255de40
chore(i18n): harden backfill_po — full language-name map + resilient batch translation ( #41644 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 16:28:19 -07:00
dependabot[bot]
f2e322c3c0
chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 in /superset-frontend ( #41638 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 16:25:50 -07:00
Jean Massucatto
e58ce1cf39
fix(dashboard): pre-filter time grain for display controls ( #40000 )
...
Co-authored-by: Joe Li <joe@preset.io >
2026-07-01 16:10:52 -07:00
Mike Bridge
393adc4535
refactor(db): composite PK on M2M association tables ( #39859 )
...
Co-authored-by: Mike Bridge <michael.bridge@ext.preset.io >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-07-01 13:07:15 -07:00
Amin Ghadersohi
e0a3b1c10c
fix(mcp): document select_columns valid fields and URL scheme for preview tools ( #41595 )
2026-07-01 15:58:12 -04:00
Evan Rusackas
6c57919647
chore(codeowners): update maintainer assignments ( #41634 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-07-01 12:25:13 -07:00
Joe Li
bed1034c2f
refactor(frontend): centralize subdirectory URL prefixing behind nav helpers ( #39925 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: Evan <evan@preset.io >
2026-07-01 11:20:13 -07:00
Mehmet Salih Yavuz
b7d5de8e52
fix(sqllab): truncate long tab names in the overflow ("...") dropdown ( #41585 )
2026-07-01 20:52:27 +03:00
Đỗ Trọng Hải
7d7c3ce723
feat(ci): install helm-docs directly instead of using whole brew setup ( #41629 )
2026-07-02 00:35:43 +07:00
Evan Rusackas
692f81d945
feat(i18n): backfill Finnish (fi) translations (AI-generated, needs review) ( #41613 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 10:27:28 -07:00
Evan Rusackas
eeacd9b6dd
feat(i18n): backfill Latvian (lv) translations (AI-generated, needs review) ( #41612 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 10:27:07 -07:00
Evan Rusackas
b3c709b3d5
feat(i18n): backfill German (de) translations (AI-generated, needs review) ( #41608 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 10:24:20 -07:00
Nitish Agarwal
792d677634
fix(reports): respect CSV_EXPORT sep and decimal config in email reports ( #38616 )
2026-07-01 10:23:48 -07:00
Evan Rusackas
2d2a72b721
fix(sqllab): show non-ASCII text in array/JSON columns instead of \uXXXX escapes ( #41533 )
...
Co-authored-by: Vladislav Korenkov <73882772+Quatters@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 10:22:11 -07:00
Evan Rusackas
55b2da75f6
fix(echarts): allow forcing categorical x-axis for temporal columns ( #41221 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-07-01 10:21:59 -07:00
Amin Ghadersohi
7f4cac63c9
fix(mcp): escape LIKE wildcards in find_users to prevent user enumeration ( #41593 )
2026-07-01 13:01:46 -04:00
Amin Ghadersohi
da4cae1657
chore(deps): bump fastmcp from >=3.2.4 to >=3.4.2 ( #41592 )
2026-07-01 12:42:25 -04:00
Mehmet Salih Yavuz
438d4d569f
test(sqllab): repair broken TablePreview and SavedQueryList jest tests ( #41628 )
2026-07-01 19:34:48 +03:00
Hugh A Miles II
3602619e98
fix(dashboard): address Excel export review feedback
...
Addresses PR #41133 review comments:
- Blank/stringify non-finite and out-of-range Decimal cells instead of
crashing xlsxwriter (shared _coerce_float_cell helper).
- Detect formula-injection prefixes behind leading whitespace via
_quote_if_formula (lstrip before checking).
- Correct the module docstring to scope the constant-memory guarantee to
the writer side (source rows may be materialized upstream).
- Append a "[Truncated: ...]" notice row when a sheet exceeds Excel's
per-sheet row cap so dropped rows are visible.
- Note AWS S3's 7-day pre-signed URL cap on EXCEL_EXPORT_LINK_TTL_SECONDS.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 12:22:41 -04:00
Hugh A Miles II
216cf65086
chore: resolve UPDATING.md conflict and sync staged work with master
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 12:22:34 -04:00
Ale
6d2b94ceb8
fix(currency): derive default symbol position from locale when unset ( #40931 )
...
Co-authored-by: kleostouraiti <212892934+kleostouraiti@users.noreply.github.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-01 09:12:18 -07:00
Shaitan
2da2db6c7c
feat(sql): schema-qualified table denylist + information_schema/lo_* defaults ( #41120 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-01 16:57:45 +01:00
Shaitan
3651020014
fix(sql): cap parser input length via SQL_MAX_PARSE_LENGTH config ( #40499 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: sha174n <pedro.sousa@preset.io >
Co-authored-by: Evan Rusackas <evan@preset.io >
2026-07-01 16:32:12 +01:00
Mike Bridge
b9e3f0aa1e
feat(soft-delete): gate soft delete behind a temporary SOFT_DELETE release toggle ( #41166 )
...
Co-authored-by: Mike Bridge <michael.bridge@ext.preset.io >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-01 08:09:52 -07:00
dependabot[bot]
16e1f41cef
chore(deps): bump swagger-ui-react from 5.32.7 to 5.32.8 in /docs ( #41614 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 21:27:37 +07:00
Raphael Prudencio
7cc7e9f6e3
fix(async-query): prevent JWT InvalidSubjectError for guest users ( #37862 )
...
Co-authored-by: bito-code-review[bot] <188872107+bito-code-review[bot]@users.noreply.github.com>
2026-06-30 23:42:41 -07:00
Imamatdin
3e88b487b3
fix(point-cluster-map): guard invalid point radii ( #40393 )
...
Co-authored-by: Imamatdin <201577118+Imamatdin@users.noreply.github.com >
2026-06-30 22:48:43 -07:00
Evan Rusackas
ce9b9b0513
feat(i18n): add Japanese (ja) translations (AI-generated, needs review) ( #41466 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
Co-authored-by: Joe Li <joe@preset.io >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: aikawa-ohno <aikawa-ohno@users.noreply.github.com >
2026-06-30 17:33:27 -07:00
Evan Rusackas
35194fe4d5
fix(i18n): key translation-regression check on per-msgid transitions ( #41596 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-30 16:54:39 -07:00
Evan Rusackas
2a1f632daa
fix(dashboard): surface size, limit, and config key in oversized dashboard error ( #41532 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-30 16:10:01 -07:00
Amin Ghadersohi
fd9c84be43
feat(mcp): add get_dashboard_datasets tool ( #40961 )
2026-06-30 18:27:09 -04:00
Amin Ghadersohi
2bd9ab4c59
feat(mcp): add remove_chart_from_dashboard tool ( #40958 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-30 18:16:08 -04:00
Amin Ghadersohi
bf88c62814
feat(mcp): add manage_native_filters tool ( #40960 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-30 17:07:49 -04:00
dependabot[bot]
1e130feb80
chore(deps): bump marshmallow-union from 0.1.15 to 0.1.15.post1 ( #41539 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Joe Li <joe@preset.io >
2026-06-30 13:54:45 -07:00
dependabot[bot]
fd86eec889
chore(deps): bump echarts from 5.6.0 to 6.1.0 in /superset-frontend ( #40264 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 13:54:11 -07:00
Evan Rusackas
a8f43890b1
chore(superset-ui-core): forward-compat fixes for TypeScript 6.0 (Phase B) ( #39535 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-30 13:52:14 -07:00
Evan Rusackas
4bf203ee70
chore(config): default SMTP_SSL_SERVER_AUTH to True ( #40647 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-30 13:50:38 -07:00
Jean Massucatto
805c12ef74
fix(dashboard): prevent double-click on create dashboard from creating duplicates ( #40833 )
2026-06-30 11:47:40 -07:00
Elizabeth Thompson
e15dc5735f
fix(reports): pre-commit tab permalinks before state machine transaction ( #41096 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-30 11:02:08 -07:00
Evan Rusackas
42a5f64256
chore(ci): silence zizmor adhoc-packages note for supersetbot install ( #41546 )
2026-07-01 00:43:32 +07:00
Amin Ghadersohi
c60d8bb656
feat(mcp): add tags + typed metadata fields to update_dashboard ( #40957 )
2026-06-30 10:36:31 -07:00
Amin Ghadersohi
c11fa206ce
feat(mcp): add duplicate_dashboard tool ( #40959 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-30 10:36:19 -07:00