Claude Code
8bb3082ffd
test(datasets): strengthen #25839 guard to verify downstream SQL is rendered
...
Per @codeant-ai's review: the previous assertion only verified that
process_template was called with the raw SQL. A regression that renders
Jinja for sqlglot parsing but then passes the original raw SQL to
get_columns_description would still produce the user-visible bug while
slipping past the test. Now also asserts get_columns_description received
the rendered SQL string.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-18 16:14:34 -05:00
Claude Code
6e84a2762d
test(datasets): regression test for Jinja not rendered on sync columns ( #25839 )
...
TDD-style validation of #25839 : ensures get_virtual_table_metadata calls the
template processor with the raw SQL before passing the result to sqlglot, so
that a virtual dataset containing {{ from_dttm }} or other Jinja tokens
doesn't produce an "Invalid SQL" error when the user clicks SYNC COLUMNS.
Closes #25839
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-18 08:19:51 -07:00
dependabot[bot]
6e5dfa0dd4
chore(deps): bump baseline-browser-mapping from 2.10.29 to 2.10.30 in /docs ( #40211 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 22:14:27 +07:00
SkinnyPigeon
70419e9d8f
feat: Allow specific mcp tools to be disabled ( #39835 )
2026-05-18 07:22:02 -07:00
Evan Rusackas
34281f54a6
test(prophet): pin yhat_lower can be negative for negative series ( #21734 ) ( #40141 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-18 07:21:04 -07:00
Evan Rusackas
53d5c41a72
test(security): regression test for session cookie after logout ( #24713 ) ( #40201 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-18 07:20:51 -07:00
Evan Rusackas
453f49ce33
test(api): regression test for Admin empty dashboard/chart list ( #25890 ) ( #40202 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-18 07:20:37 -07:00
Mafi
b66c104fde
fix(sqllab): execute prequeries on streaming connection to fix PostgreSQL CSV export ( #40194 )
...
Co-authored-by: Matt Fitzgerald <matt.fitzgerald@preset.io >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-18 09:43:06 -04:00
dependabot[bot]
61b77fa35d
chore(deps-dev): bump ip-address from 10.1.0 to 10.2.0 in /superset-frontend ( #40199 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
2026-05-18 06:29:05 -07:00
dependabot[bot]
0da0767780
chore(deps-dev): bump eslint from 10.3.0 to 10.4.0 in /superset-websocket ( #40208 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:28:43 -07:00
dependabot[bot]
e2ff2d5d41
chore(deps): bump reselect from 5.1.1 to 5.2.0 in /docs ( #40209 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:28:25 -07:00
dependabot[bot]
6a6be4c385
chore(deps): bump antd from 6.4.2 to 6.4.3 in /docs ( #40210 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:28:00 -07:00
dependabot[bot]
cf831388d8
chore(deps): bump caniuse-lite from 1.0.30001792 to 1.0.30001793 in /docs ( #40212 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:27:36 -07:00
dependabot[bot]
684a66aee6
chore(deps): update zod requirement from ^4.4.1 to ^4.4.3 in /superset-frontend/plugins/plugin-chart-echarts ( #40215 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:27:09 -07:00
dependabot[bot]
80a200820c
chore(deps): bump react-map-gl from 8.1.0 to 8.1.1 in /superset-frontend ( #40217 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:26:50 -07:00
dependabot[bot]
f47300102c
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 ( #40218 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 06:26:20 -07:00
Alejandro Solares
dd523c1a7b
fix(deps): patch fast-xml-parser CVE-2026-33036 and CVE-2026-33349 ( #40118 )
2026-05-18 08:30:17 +01:00
dependabot[bot]
02a8196a6d
chore(deps): update dompurify requirement from ^3.4.1 to ^3.4.2 in /superset-frontend/packages/superset-ui-core ( #39808 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
2026-05-17 20:16:45 -07:00
dependabot[bot]
4e13512ed8
chore(deps-dev): update jest requirement from ^30.3.0 to ^30.4.2 in /superset-frontend/plugins/plugin-chart-handlebars ( #40015 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-17 20:16:14 -07:00
dependabot[bot]
268dadbb5b
chore(deps-dev): update jest requirement from ^30.3.0 to ^30.4.2 in /superset-frontend/plugins/plugin-chart-pivot-table ( #40018 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-17 20:15:58 -07:00
dependabot[bot]
427e7e53cd
chore(deps-dev): update jest requirement from ^30.3.0 to ^30.4.2 in /superset-frontend/packages/generator-superset ( #40019 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-17 20:15:44 -07:00
dependabot[bot]
78f54b68ac
chore(deps): update dompurify requirement from ^3.4.1 to ^3.4.3 in /superset-frontend/plugins/legacy-preset-chart-nvd3 ( #40106 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
2026-05-17 20:15:07 -07:00
dependabot[bot]
6c4c3dc71c
chore(deps): bump serialize-javascript and terser-webpack-plugin in /superset-frontend/cypress-base ( #40174 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 20:13:36 -07:00
dependabot[bot]
26925af9ed
chore(deps): bump minimatch from 3.1.3 to 3.1.5 in /superset-frontend/cypress-base ( #40198 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 19:59:44 -07:00
dependabot[bot]
fdb62d8f35
chore(deps): bump yeoman-generator from 8.1.2 to 8.2.2 in /superset-frontend ( #40154 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
2026-05-17 19:59:29 -07:00
Evan Rusackas
3a9c54a672
fix(date_parser): suppress noisy parsedatetime DEBUG logs ( #33365 ) ( #40144 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-17 19:58:08 -07:00
Evan Rusackas
e6755d508d
fix(rls): align view permission name with REST API canonical name ( #33744 ) ( #40145 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-17 19:57:57 -07:00
dependabot[bot]
b09ef7a406
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /superset-embedded-sdk ( #40176 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:27:28 -07:00
dependabot[bot]
9eecc5a2a6
chore(deps): bump axios from 1.15.0 to 1.16.1 in /docs ( #40177 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:26:44 -07:00
dependabot[bot]
d308649a65
chore(deps-dev): bump @types/node from 25.7.0 to 25.8.0 in /superset-frontend ( #40157 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:25:08 -07:00
dependabot[bot]
dd4e2e2e44
chore(deps-dev): update sqlalchemy-exasol requirement from <3.0,>=2.4.0 to >=2.4.0,<8.0 ( #40182 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:24:53 -07:00
dependabot[bot]
6165a2531f
chore(deps): bump fast-uri from 3.0.6 to 3.1.2 in /superset-frontend ( #40175 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:24:24 -07:00
dependabot[bot]
9439d4db09
chore(deps-dev): update clickhouse-connect requirement from <1.0,>=0.13.0 to >=0.13.0,<2.0 ( #40184 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:24:10 -07:00
dependabot[bot]
6b425ab559
chore(deps-dev): bump hdbcli from 2.4.162 to 2.28.20 ( #40185 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:23:48 -07:00
dependabot[bot]
4ded665495
chore(deps): bump flask-migrate from 3.1.0 to 4.1.0 ( #40187 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:23:23 -07:00
dependabot[bot]
37638e750d
chore(deps): bump greenlet from 3.1.1 to 3.5.0 ( #40188 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:23:06 -07:00
Evan Rusackas
8a86ab7319
chore(docs): rename default docs plugin to user_docs for consistent versioned dir naming ( #40171 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-15 22:26:43 -07:00
Elizabeth Thompson
8d2b655c22
fix(reports): narrow spinner checks to viewport and tighten exception handling ( #39895 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-15 13:35:07 -07:00
Abdul Rehman
29b94ced71
fix(i18n): correct Czech translation variables for SQL Lab query message ( #40166 )
...
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
2026-05-15 14:06:25 -04:00
Beto Dealmeida
736a51c13f
fix: OAuth2 exception should be 403 ( #40074 )
2026-05-15 14:53:02 -03:00
dependabot[bot]
34c28f7b76
chore(deps): bump zod from 4.4.1 to 4.4.3 in /superset-frontend ( #40155 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:35:59 -07:00
dependabot[bot]
62c86abcd1
chore(deps): bump react-syntax-highlighter from 16.1.0 to 16.1.1 in /superset-frontend ( #40152 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:35:45 -07:00
dependabot[bot]
caa357e0d2
chore(deps): bump @ant-design/icons from 6.2.2 to 6.2.3 in /superset-frontend ( #40112 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
2026-05-15 10:35:33 -07:00
dependabot[bot]
cc21683118
chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /superset-frontend ( #40103 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:35:21 -07:00
dependabot[bot]
114d88468b
chore(deps): bump react-map-gl from 8.1.0 to 8.1.1 in /superset-frontend ( #39821 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Li <joe@preset.io >
Co-authored-by: Evan Rusackas <evan@preset.io >
2026-05-15 10:35:06 -07:00
dependabot[bot]
48c0bea906
chore(deps): bump d3-cloud from 1.2.8 to 1.2.9 in /superset-frontend ( #39699 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-15 10:34:51 -07:00
dependabot[bot]
a46925d431
chore(deps-dev): bump @types/node from 25.7.0 to 25.8.0 in /superset-websocket ( #40148 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:33:49 -07:00
dependabot[bot]
0df9cc986a
chore(deps): bump immer from 11.1.7 to 11.1.8 in /superset-frontend ( #40158 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:33:23 -07:00
dependabot[bot]
ade901ed04
chore(deps): bump react-arborist from 3.5.0 to 3.6.1 in /superset-frontend ( #40159 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 10:33:07 -07:00
Richard Fogaca Nienkotter
1e2d0b5f5b
fix(mcp): defer chart preview command imports ( #40164 )
2026-05-15 12:15:33 -03:00