Evan Rusackas
068a709c14
fix(config): expose build details (git SHA/build number) to admins only ( #41301 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-26 12:08:04 -07:00
Evan Rusackas
4b9b8187b3
fix(config): make Swagger UI opt-in (off by default) ( #41300 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-25 10:34:28 -07:00
Evan Rusackas
e0f3f93cd4
fix(mcp): require MCP_JWT_AUDIENCE when MCP JWT auth is enabled ( #41292 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-06-24 16:53:36 -07:00
Evan Rusackas
0fd244b5c6
fix(security): reject unknown fields on guest-token RLS rules ( #41217 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-24 16:16:43 -07:00
Michael S. Molina
d76b896c9c
chore: Updates CHANGELOG.md and UPDATING.md with 6.1.0 ( #41249 )
2026-06-22 13:53:48 -03:00
ksnikiforov
c218dc418b
fix(dashboard): fixed first/last aggregations in pivot tables ( #33275 )
...
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Enzo Martellucci <52219496+EnxDev@users.noreply.github.com >
2026-06-18 10:49:12 +02:00
Amin Ghadersohi
eebe1a1a5b
fix(dashboards): remove thumbnail_url from list API to reduce cache cost ( #38567 )
2026-06-17 09:35:21 -06:00
Evan Rusackas
379435b7eb
feat(ssh_tunnel): add opt-in server host key verification ( #40673 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-15 12:17:14 -07:00
Evan Rusackas
9d2f625e55
feat(encrypt): selectable encryption engine + AES-GCM re-encryption migrator ( #40654 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-15 08:10:08 -07:00
Evan Rusackas
9f81565625
feat(uploads): add optional max file size for data uploads ( #40860 )
2026-06-14 19:46:48 +07:00
Evan Rusackas
d120b1c250
feat(security): enforce password complexity policy (min length + common-password blocklist) ( #40670 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-13 16:31:23 -07:00
Shaitan
5fb13f102a
fix(network): validate target hostname in outbound requests ( #39301 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: Arpit Jain <3242828+arpitjain099@users.noreply.github.com >
Co-authored-by: Mafi <matt.fitzgerald@gmail.com >
Co-authored-by: Matt Fitzgerald <matt.fitzgerald@preset.io >
Co-authored-by: Richard Fogaca Nienkotter <63572350+richardfogaca@users.noreply.github.com >
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sadpandajoe <jcli38@gmail.com >
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com >
Co-authored-by: Michael S. Molina <70410625+michael-s-molina@users.noreply.github.com >
Co-authored-by: sha174n <pedro.sousa@preset.io >
2026-06-13 20:26:58 +01:00
Evan Rusackas
9938ee273f
feat: terminate active sessions when an account is disabled ( #40695 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-11 19:37:13 -07:00
Richard Fogaca Nienkotter
046b1b61b3
fix(maps): preserve OSM styles and configurable renderer defaults ( #40804 )
2026-06-10 22:26:00 -03:00
Evan Rusackas
5a0e3f15ca
feat(embedded): add guest token revocation support ( #40671 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-10 09:17:30 -07:00
Evan Rusackas
837f41986d
fix: reject default guest/async JWT secrets at startup ( #40649 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-08 16:53:37 -07:00
Evan Rusackas
6b0d747939
fix: cache warmup using WebDriver for reliable authentication ( #38449 )
...
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-05 16:36:30 -07:00
innovark
108e40cbb6
feat(duration-format): replace pretty-ms with native Intl.DurationFormat for localized duration formatting ( #39330 )
2026-06-05 10:33:17 -07:00
jesperct
8119204857
fix(dashboard): sort Dynamic Group By display values alphabetically ( #40220 )
2026-06-05 10:32:54 -07:00
Evan Rusackas
0d1b702ce8
feat(extensions): static supply-chain controls — denylist + version policy ( #40668 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-04 12:29:03 -07:00
Evan Rusackas
fa41769a08
fix(embedded): enforce configured allowed domains for postMessage origin ( #40629 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-02 22:58:30 -07:00
Oleg Ovcharuk
17d1a45bc9
feat(ydb): switch to native YDB sqlglot dialect ( #40170 )
2026-06-02 17:13:41 -04:00
jesperct
a2eda11a81
fix(dataset): validate catalog against allow_multi_catalog on import ( #40376 )
2026-06-01 09:24:28 -07:00
Arpit Jain
39ad6b200f
docs(update): fix typos in UPDATING.md ( #40068 )
2026-05-12 23:40:22 +07:00
Beto Dealmeida
cb53745d43
feat: semantic layer extension ( #37815 )
2026-05-05 12:07:46 -04:00
Hugh A. Miles II
b76080e291
feat(security): add granular export controls - Phase 2 + 3 ( #38581 )
...
Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com >
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
Co-authored-by: Beto Dealmeida <roberto@dealmeida.net >
Co-authored-by: Daniel Vaz Gaspar <danielvazgaspar@gmail.com >
2026-04-15 10:24:59 -04:00
RACZ Andras
b1474aaa60
docs: Fix misleading links in UPDATING.md ( #38947 )
2026-03-31 22:09:31 +07:00
João Pedro Alves Barbosa
96705c156a
fix(map-box): make opacity, lon, lat, and zoom controls functional ( #38374 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
2026-03-16 21:55:49 -03:00
Michael S. Molina
19f949276c
refactor(config): SIGNAL_CACHE_CONFIG → DISTRIBUTED_COORDINATION_CONFIG ( #38395 )
2026-03-04 09:40:21 -08:00
Joe Spadola
bb6ee9e722
fix(clickhouse): remove _mutate_label workaround and bump clickhouse-connect to >=0.13.0 ( #38280 )
2026-02-26 16:12:54 -08:00
Amin Ghadersohi
4dfece9ee5
feat(mcp): add event_logger instrumentation to MCP tools ( #37859 )
2026-02-12 16:50:20 +01:00
Ville Brofeldt
59dd2fa385
feat: add global task framework ( #36368 )
2026-02-09 10:45:56 -08:00
Vitor Avila
32ee160c75
chore: Properly untrack WebSocket config file for docker ( #37624 )
2026-02-03 11:48:08 -03:00
Gabriel Torres Ruiz
760227d630
fix(theme): migrate APP_NAME to brandAppName theme token with backward compatibility ( #37370 )
...
Co-authored-by: Rafael Benitez <rebenitez1802@gmail.com >
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Beto Dealmeida <roberto@dealmeida.net >
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
2026-01-22 14:35:55 -08:00
Evan Rusackas
dee063a4c5
feat(examples): Modernize example data loading with Parquet and YAML configs ( #36538 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-01-21 12:42:15 -08:00
Joe Li
fb6f3fbb4d
chore: update files for release 6.0.0 ( #36745 )
2025-12-18 21:19:12 -08:00
Daniel Vaz Gaspar
bb22eb1ca8
feat: add option for hash algorithms ( #35621 )
...
Co-authored-by: Ville Brofeldt <33317356+villebro@users.noreply.github.com >
2025-12-09 16:59:07 +00:00
Gabriel Torres Ruiz
3940354120
feat(theming): add per-theme custom font URL support ( #36317 )
2025-12-08 16:46:01 -08:00
Amin Ghadersohi
66afdfd119
docs(mcp): add comprehensive architecture, security, and production deployment documentation ( #36017 )
2025-11-19 16:41:56 +01:00
Akshat Sinha
bae2c90bae
docs: correct spelling typos in project codebase ( #35935 )
2025-11-03 12:09:58 -05:00
Daniel Vaz Gaspar
a9fb853e3e
fix: Bump FAB to 5.X ( #33055 )
...
Co-authored-by: Joe Li <joe@preset.io >
2025-09-12 09:21:37 +01:00
Mehmet Salih Yavuz
7a20a65a4d
feat(embedded): Change function signature of setupExtensions ( #35062 )
...
Co-authored-by: Michael S. Molina <70410625+michael-s-molina@users.noreply.github.com >
2025-09-10 13:06:00 +03:00
Joe Li
836540e8c9
fix(tests): Mock MessageChannel to prevent Jest hanging from rc-overflow ( #34871 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-08-27 22:50:08 -07:00
Vitor Avila
471d9fe737
fix: Add dataset ID to file name on exports ( #34782 )
2025-08-25 14:54:27 -03:00
Geido
3c17ff8445
chore: Refactor Menu.Item and cleanup console errors ( #34536 )
2025-08-12 16:57:23 +03:00
Kamil Gabryjelski
57d0e78d40
feat: Tiled screenshots in Playwright reports ( #34561 )
2025-08-12 08:09:01 +02:00
Vitor Avila
49689eec6c
feat: Enable drilling in embedded ( #34319 )
2025-08-05 02:23:00 -03:00
sha174n
7f44992c4b
fix: enhance disallowed SQL functions list for improved security ( #33084 )
2025-07-24 16:36:32 -07:00
Ahmed Habeeb
43775e9373
fix(sqllab_export): manually encode CSV output to support utf-8-sig ( #34235 )
2025-07-23 18:44:56 -07:00
Maxime Beauchemin
2c81eb6c39
feat(docker): do not include chromium (headless browser) by default in Dockerfile ( #34258 )
2025-07-22 13:12:55 -07:00