|
6c2fef29cb
|
feat(snowflake): Add support for OAuth 2.0 authentication (#36856)
Co-authored-by: Evan Rusackas <evan@preset.io>
Co-authored-by: Evan Rusackas <evan@rusackas.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Joe Li <joe@preset.io>
|
2026-08-24 21:22:14 -07:00 |
|
|
Evan RusackasandSuperset Dev
|
bd7b739212
|
chore: remove obsolete pandas/SQLAlchemy version compat shim (#43497)
Co-authored-by: Superset Dev <dev@superset.apache.org>
|
2026-08-24 20:11:52 -07:00 |
|
|
Durgaprasad M LandEvan Rusackas
|
107204a1fc
|
fix(sqllab): allow SQL Lab query owners to create charts without all_datasource_access (#42479)
Co-authored-by: Evan Rusackas <evan@rusackas.com>
|
2026-08-24 16:51:57 -07:00 |
|
|
Joe Li
|
ca3d7670b7
|
fix(ci): restore scheduled CI checks (#43266)
|
2026-08-24 12:31:50 -07:00 |
|
|
Joe LiandClaude
|
7dbf71a379
|
fix(query-object): reject malformed ad-hoc metrics (#43353)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-08-24 12:12:25 -07:00 |
|
|
Joe LiandClaude Sonnet 5
|
24b95f9ca7
|
fix(gsheets): correctly format Date-column filter literals (#43355)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-24 12:12:04 -07:00 |
|
|
Joe Li
|
31f06c0ee6
|
fix(dataset): correct Hours Offset filter bounds and grain-truncation order (#43173)
|
2026-08-24 11:47:16 -07:00 |
|
|
|
6ab21b381a
|
fix(mysql): resolve wire-protocol column types and mutate rows from immutable results (#42821)
Co-authored-by: Jean Massucatto <massucattoj@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-08-24 11:45:15 -07:00 |
|
|
|
c980b3a361
|
fix(mcp): tighten auth and request validation edge cases (#43388)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-24 10:58:59 -07:00 |
|
|
Evan Rusackas
|
f3142e7b15
|
fix(tags): fix broken import in daos/tag.py (#43466)
|
2026-08-24 10:15:08 -07:00 |
|
|
|
3f10d8b1cc
|
fix(versioning): suppress automatic chart normalization changes (#43350)
Co-authored-by: Mike Bridge <michael.bridge@ext.preset.io>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-24 09:09:20 -07:00 |
|
|
|
7f1b41444c
|
fix: add missing access checks to semantic-layer and theme endpoints (#43389)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-24 08:52:45 -07:00 |
|
|
|
8a32324184
|
fix: add missing ownership checks to tag, report-log, and dataset-schema endpoints (#43390)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-24 08:44:22 -07:00 |
|
|
Enzo Martellucci
|
c3ed8b312d
|
fix(security): surface extra_editors in dashboard/chart lists (#43392)
|
2026-08-24 11:49:29 +02:00 |
|
|
Elizabeth Thompson
|
9f505eb0cb
|
fix(examples): replace deprecated timeseries_limit_metric with series_limit_metric (#43422)
|
2026-08-22 15:02:20 -07:00 |
|
|
Joe LiandClaude Sonnet 5
|
f2610e9dca
|
fix(sqllab): default PostgreSQL port to 5432 in the dynamic connection form (#43351)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-21 15:59:33 -07:00 |
|
|
Aurimas Navardauskas
|
5812c0eab5
|
fix(mcp): fail closed when MCP_AUTH_FACTORY raises (#43329)
|
2026-08-21 15:43:51 -07:00 |
|
|
Mike BridgeandClaude Fable 5
|
5f3e34908c
|
fix(charts): surface blocking alerts/reports when archiving a chart (#43402)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-21 19:33:32 -03:00 |
|
|
Evan RusackasandSuperset Dev
|
9781254363
|
fix(export): escape formula-triggering values consistently and bound post-processing inputs (#43396)
Co-authored-by: Superset Dev <dev@superset.apache.org>
|
2026-08-21 12:37:33 -07:00 |
|
|
|
65893113fe
|
fix(import): tighten ownership and validation checks across asset importers (#43393)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-21 12:35:33 -07:00 |
|
|
|
04017f3956
|
fix(sqllab): re-validate access against rendered SQL and tighten cache/permalink scoping (#43394)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-21 12:35:06 -07:00 |
|
|
|
2b6044b624
|
fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-21 12:34:37 -07:00 |
|
|
Alexandru Soare
|
a05a099987
|
fix(embedded): block custom SQL injection in guest user chart payloads (#43111)
|
2026-08-21 17:05:40 +03:00 |
|
|
Evan RusackasandClaude Code
|
05842a6350
|
feat(metrics): add MEDIAN/STDDEV_SAMP/VAR_SAMP as system-wide aggregates (#42895)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-08-21 04:15:17 -07:00 |
|
|
Amin Ghadersohi
|
18a36d04c7
|
fix(mcp): preserve user-authored result values (#43202)
|
2026-08-20 18:29:39 -04:00 |
|
|
Joe Li
|
7441ce90ae
|
fix(charts): align grain-less time comparisons safely (#43315)
|
2026-08-20 14:55:01 -07:00 |
|
|
Amin Ghadersohi
|
42ba2a4433
|
fix(reports): humanize day-of-month + day-of-week crontabs as OR (#43307)
|
2026-08-20 16:46:08 -04:00 |
|
|
madhushreeagandmadhushree agarwal
|
271564cb0d
|
feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)
Co-authored-by: madhushree agarwal <madhushree_agarwal@apple.com>
|
2026-08-20 13:15:41 -07:00 |
|
|
JUST.in DO ITandClaude Sonnet 5
|
bcfb4346f6
|
fix(mcp): honor use_cache and cache_timeout in get_chart_data (#43349)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-20 13:01:41 -07:00 |
|
|
Hans Yu
|
1ca5e61f54
|
chore: Unset future flag in engines and sessions. (#43273)
|
2026-08-20 10:58:37 -07:00 |
|
|
|
c0884c0f0c
|
fix(explore): keep x-axis label when overriding Time Column with time comparison (#42875)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Joe Li <joe@preset.io>
|
2026-08-20 10:52:22 -07:00 |
|
|
|
e7dccd44a7
|
fix(reports): prevent blank/partial report PDFs from virtualized charts (#43348)
Co-authored-by: Matt Fitzgerald <matt.fitzgerald@preset.io>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
|
2026-08-20 09:10:30 -04:00 |
|
|
|
f9cedf84e2
|
fix: drop post-processing options the operation no longer accepts (#42927)
Signed-off-by: Arya Ketan <aryaketan@sharechat.co>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Evan Rusackas <evan@preset.io>
|
2026-08-19 18:15:15 -07:00 |
|
|
Sumit KumarandClaude Opus 4.8
|
1569915096
|
feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)
Signed-off-by: thedeceptio <thedeceptio@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-19 10:56:49 -07:00 |
|
|
BexultanandBexultan Mustafin
|
fde0ba26d1
|
fix(mcp): validate virtual dataset metadata and surface errors (#43129)
Co-authored-by: Bexultan Mustafin <bexultan.mustafin@ffins.kz>
|
2026-08-19 10:50:37 -07:00 |
|
|
David Dallakyan
|
5ce52e531d
|
fix(clickhouse): add PT1S time grain (#43217)
|
2026-08-18 15:49:18 -07:00 |
|
|
Endi Monan
|
f994602096
|
fix(dashboard): align list OpenAPI schema (#43256)
|
2026-08-18 10:22:50 -07:00 |
|
|
Amin GhadersohiandClaude Fable 5
|
086b4af65d
|
feat(mcp): per-resource token scopes with user-permission intersection (#42297)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-18 13:11:27 -04:00 |
|
|
|
fd063d17bf
|
fix(security): harden account password-change and session-invalidation handling (#42934)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Joe Li <joe@preset.io>
|
2026-08-18 17:40:08 +01:00 |
|
|
Joe LiandClaude Opus 4.8
|
2d1daac11a
|
fix(explore): samples endpoint now honors requested row limit (#43148)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-18 09:28:04 -07:00 |
|
|
|
13eb47a1da
|
fix(api): improved request handling and embedded dashboard scoping (#42930)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Superset Dev <dev@superset.apache.org>
|
2026-08-17 23:50:25 -07:00 |
|
|
Elizabeth ThompsonandClaude Opus 4.8
|
98136d547c
|
fix(reports): fail closed on alert screenshot capture instead of delivering a blank (#43031)
Signed-off-by: Elizabeth Thompson <eschutho@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-18 00:03:15 -04:00 |
|
|
Elizabeth ThompsonandClaude Opus 4.8
|
e2070d79dc
|
fix(reports): wait for ECharts paint before capturing report screenshots (#43077)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-18 00:02:36 -04:00 |
|
|
Beto Dealmeida
|
2f8875aaef
|
feat(semantic layers): optional metadata for metrics/dimensions (#43269)
|
2026-08-17 17:34:17 -07:00 |
|
|
Elizabeth Thompson
|
6e270df4a2
|
fix(sql-lab): catch TemplateError in StreamingSqlResultExportCommand.validate (#43226)
|
2026-08-17 15:02:11 -07:00 |
|
|
Amin Ghadersohi
|
aaf9eba161
|
fix(db_engine_specs): skip malformed third-party dialect entry points (#43110)
Signed-off-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
|
2026-08-17 14:10:06 -07:00 |
|
|
Mehmet Salih Yavuz
|
cfd40bdd0d
|
fix(dashboard): derive filter scope on read instead of serving a stale cache (#43252)
|
2026-08-17 19:23:19 +03:00 |
|
|
|
4684851336
|
fix(import): isolate per-tag import in a SAVEPOINT to avoid poisoned session (#42912) (#42920)
Co-authored-by: Claude Code <noreply@anthropic.com>
Co-authored-by: Evan Rusackas <evan@preset.io>
|
2026-08-14 21:56:43 -07:00 |
|
|
|
e7139a7ac2
|
fix(models): enforce one OAuth2 token per user+database (#42897)
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-14 21:50:56 -07:00 |
|
|
|
21ae918656
|
fix(mcp): validate chart queries before persistence (#43128)
Co-authored-by: Bexultan Mustafin <bexultan.mustafin@ffins.kz>
Co-authored-by: Joe Li <joe@preset.io>
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
|
2026-08-14 17:48:19 -07:00 |
|