chore: resolve lint issues

Signed-off-by: hainenber <dotronghai96@gmail.com>

.github/dependabot.yml

@@ -9,9 +9,13 @@ updates:
 
   - package-ecosystem: "npm"
     ignore:
-      # not until React >= 18.0.0
+      # TODO: remove below entries until React >= 18.0.0
       - dependency-name: "storybook"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
       - dependency-name: "@storybook*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "eslint-plugin-storybook"
+      - dependency-name: "react-error-boundary"
       # remark-gfm v4+ requires react-markdown v9+, which needs React 18
       - dependency-name: "remark-gfm"
       - dependency-name: "react-markdown"
@@ -23,6 +27,14 @@ updates:
       # See https://github.com/apache/superset/pull/37384#issuecomment-3793991389
       # TODO: remove the plugin once Lodash usage has been migrated to a more readily tree-shakeable alternative
       - dependency-name: "@swc/plugin-transform-imports"
+    groups:
+      storybook:
+        applies-to: version-updates
+        patterns:
+          - "@storybook*"
+          - "storybook"
+        update-types:
+          - "patch"
     directory: "/superset-frontend/"
     schedule:
       interval: "daily"
@@ -53,6 +65,22 @@ updates:
 
   - package-ecosystem: "npm"
     directory: "/docs/"
+    ignore:
+      # TODO: remove below entries until React >= 18.0.0 in superset-frontend
+      - dependency-name: "storybook"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "@storybook*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "eslint-plugin-storybook"
+      - dependency-name: "react-error-boundary"
+    groups:
+      storybook:
+        applies-to: version-updates
+        patterns:
+          - "@storybook*"
+          - "storybook"
+        update-types:
+          - "patch"
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
@@ -89,16 +117,6 @@ updates:
     open-pull-requests-limit: 5
     versioning-strategy: increase
 
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-histogram/"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
   - package-ecosystem: "npm"
     directory: "/superset-frontend/plugins/legacy-plugin-chart-partition/"
     schedule:
@@ -199,16 +217,6 @@ updates:
     open-pull-requests-limit: 5
     versioning-strategy: increase
 
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-sankey/"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
   - package-ecosystem: "npm"
     directory: "/superset-frontend/plugins/legacy-preset-chart-nvd3/"
     schedule:
@@ -229,16 +237,6 @@ updates:
     open-pull-requests-limit: 5
     versioning-strategy: increase
 
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-event-flow/"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
   - package-ecosystem: "npm"
     directory: "/superset-frontend/plugins/legacy-plugin-chart-paired-t-test/"
     schedule:
@@ -249,16 +247,6 @@ updates:
     open-pull-requests-limit: 5
     versioning-strategy: increase
 
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-sankey-loop/"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
   - package-ecosystem: "npm"
     directory: "/superset-frontend/plugins/plugin-chart-echarts/"
     schedule:
@@ -270,7 +258,7 @@ updates:
     versioning-strategy: increase
 
   - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/preset-chart-xy/"
+    directory: "/superset-frontend/plugins/plugin-chart-ag-grid-table/"
     schedule:
       interval: "daily"
     labels:
@@ -280,7 +268,7 @@ updates:
     versioning-strategy: increase
 
   - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-heatmap/"
+    directory: "/superset-frontend/plugins/plugin-chart-cartodiagram/"
     schedule:
       interval: "daily"
     labels:
@@ -299,16 +287,6 @@ updates:
     open-pull-requests-limit: 5
     versioning-strategy: increase
 
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/plugins/legacy-plugin-chart-sunburst/"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
   - package-ecosystem: "npm"
     directory: "/superset-frontend/plugins/plugin-chart-handlebars/"
     schedule:
@@ -345,16 +323,7 @@ updates:
       # not until React >= 18.0.0
       - dependency-name: "react-markdown"
       - dependency-name: "remark-gfm"
-    schedule:
-      interval: "daily"
-    labels:
-      - npm
-      - dependabot
-    open-pull-requests-limit: 5
-    versioning-strategy: increase
-
-  - package-ecosystem: "npm"
-    directory: "/superset-frontend/packages/superset-ui-demo/"
+      - dependency-name: "react-error-boundary"
     schedule:
       interval: "daily"
     labels:

.github/workflows/bashlib.sh

@@ -304,26 +304,3 @@ monitor_memory() {
     sleep 2
   done
 }
-
-cypress-run-applitools() {
-  cd "$GITHUB_WORKSPACE/superset-frontend/cypress-base"
-
-  local flasklog="${HOME}/flask.log"
-  local port=8081
-  local cypress="./node_modules/.bin/cypress run"
-  local browser=${CYPRESS_BROWSER:-chrome}
-
-  export CYPRESS_BASE_URL="http://localhost:${port}"
-
-  nohup flask run --no-debugger -p $port >"$flasklog" 2>&1 </dev/null &
-  local flaskProcessId=$!
-
-  $cypress --spec "cypress/applitools/**/*" --browser "$browser" --headless
-
-  say "::group::Flask log for default run"
-  cat "$flasklog"
-  say "::endgroup::"
-
-  # make sure the program exits
-  kill $flaskProcessId
-}

.github/workflows/dependency-review.yml

@@ -39,13 +39,9 @@ jobs:
           # pkg:npm/store2@2.14.2
           #   adding an exception for an ambigious license on store2, which has been resolved in
           #   the latest version. It's MIT: https://github.com/nbubna/store/blob/master/LICENSE-MIT
-          # pkg:npm/applitools/*
-          #   adding exception for all applitools modules (eyes-cypress and its dependencies),
-          #   which has an explicit OSS license approved by ASF
-          #   license: https://applitools.com/legal/open-source-terms-of-use/
           # pkg:npm/node-forge@1.3.1
           #   selecting BSD-3-Clause licensing terms for node-forge to ensure compatibility with Apache
-          allow-dependencies-licenses: pkg:npm/store2@2.14.2, pkg:npm/applitools/core, pkg:npm/applitools/core-base, pkg:npm/applitools/css-tree, pkg:npm/applitools/ec-client, pkg:npm/applitools/eg-socks5-proxy-server, pkg:npm/applitools/eyes, pkg:npm/applitools/eyes-cypress, pkg:npm/applitools/nml-client, pkg:npm/applitools/tunnel-client, pkg:npm/applitools/utils, pkg:npm/node-forge@1.3.1, pkg:npm/rgbcolor, pkg:npm/jszip@3.10.1
+          allow-dependencies-licenses: pkg:npm/store2@2.14.2, pkg:npm/node-forge@1.3.1, pkg:npm/rgbcolor, pkg:npm/jszip@3.10.1
 
   python-dependency-liccheck:
     # NOTE: Configuration for liccheck lives in our pyproject.yml.

.github/workflows/docker.yml

@@ -104,7 +104,7 @@ jobs:
       # Scan for vulnerabilities in built container image after pushes to mainline branch.
       - name: Run Trivy container image vulnerabity scan
         if: github.event_name == 'push' && github.ref == 'refs/heads/master' && (steps.check.outputs.python || steps.check.outputs.frontend || steps.check.outputs.docker) && matrix.build_preset == 'lean'
-        uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+        uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
         with:
           image-ref: ${{ env.IMAGE_TAG }}
           format: 'sarif'

.github/workflows/prefer-typescript.yml

@@ -1,70 +0,0 @@
-name: Prefer TypeScript
-
-on:
-  push:
-    branches:
-      - "master"
-      - "[0-9].[0-9]*"
-    paths:
-      - "superset-frontend/src/**"
-  pull_request:
-    types: [synchronize, opened, reopened, ready_for_review]
-    paths:
-      - "superset-frontend/src/**"
-
-# cancel previous workflow jobs for PRs
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
-  cancel-in-progress: true
-
-jobs:
-  prefer_typescript:
-    if: github.ref == 'ref/heads/master' && github.event_name == 'pull_request'
-    name: Prefer TypeScript
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: read
-      pull-requests: write
-    steps:
-      - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} )"
-        uses: actions/checkout@v6
-        with:
-          persist-credentials: false
-          submodules: recursive
-      - name: Get changed files
-        id: changed
-        uses: ./.github/actions/file-changes-action
-        with:
-          githubToken: ${{ github.token }}
-
-      - name: Determine if a .js or .jsx file was added
-        id: check
-        run: |
-          js_files_added() {
-            jq -r '
-              map(
-                select(
-                  endswith(".js") or endswith(".jsx")
-                )
-              ) | join("\n")
-            ' ${HOME}/files_added.json
-          }
-          echo "js_files_added=$(js_files_added)" >> $GITHUB_OUTPUT
-
-      - if: steps.check.outputs.js_files_added
-        name: Add Comment to PR
-        uses: ./.github/actions/comment-on-pr
-        continue-on-error: true
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        with:
-          msg: |
-            ### WARNING: Prefer TypeScript
-
-            Looks like your PR contains new `.js` or `.jsx` files:
-
-            ```
-            ${{steps.check.outputs.js_files_added}}
-            ```
-
-            As decided in [SIP-36](https://github.com/apache/superset/issues/9101), all new frontend code should be written in TypeScript. Please convert above files to TypeScript then re-request review.

.github/workflows/superset-app-cli.yml

@@ -23,7 +23,7 @@ jobs:
       SUPERSET__SQLALCHEMY_DATABASE_URI: postgresql+psycopg2://superset:superset@127.0.0.1:15432/superset
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset

.github/workflows/superset-applitool-cypress.yml

@@ -1,91 +0,0 @@
-name: Applitools Cypress
-
-on:
-  schedule:
-    - cron: "0 1 * * *"
-
-jobs:
-  config:
-    runs-on: ubuntu-24.04
-    outputs:
-      has-secrets: ${{ steps.check.outputs.has-secrets }}
-    steps:
-      - name: "Check for secrets"
-        id: check
-        shell: bash
-        run: |
-          if [ -n "${{ (secrets.APPLITOOLS_API_KEY != '' && secrets.APPLITOOLS_API_KEY != '') || '' }}" ]; then
-            echo "has-secrets=1" >> "$GITHUB_OUTPUT"
-          fi
-
-  cypress-applitools:
-    needs: config
-    if: needs.config.outputs.has-secrets
-    runs-on: ubuntu-24.04
-    strategy:
-      fail-fast: false
-      matrix:
-        browser: ["chrome"]
-    env:
-      SUPERSET_ENV: development
-      SUPERSET_CONFIG: tests.integration_tests.superset_test_config
-      SUPERSET__SQLALCHEMY_DATABASE_URI: postgresql+psycopg2://superset:superset@127.0.0.1:15432/superset
-      PYTHONPATH: ${{ github.workspace }}
-      REDIS_PORT: 16379
-      GITHUB_TOKEN: ${{ github.token }}
-      APPLITOOLS_APP_NAME: Superset
-      APPLITOOLS_API_KEY: ${{ secrets.APPLITOOLS_API_KEY }}
-      APPLITOOLS_BATCH_ID: ${{ github.sha }}
-      APPLITOOLS_BATCH_NAME: Superset Cypress
-    services:
-      postgres:
-        image: postgres:16-alpine
-        env:
-          POSTGRES_USER: superset
-          POSTGRES_PASSWORD: superset
-        ports:
-          - 15432:5432
-      redis:
-        image: redis:7-alpine
-        ports:
-          - 16379:6379
-    steps:
-      - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} )"
-        uses: actions/checkout@v6
-        with:
-          persist-credentials: false
-          submodules: recursive
-          ref: master
-      - name: Setup Python
-        uses: ./.github/actions/setup-backend/
-      - name: Import test data
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: testdata
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version-file: './superset-frontend/.nvmrc'
-      - name: Install npm dependencies
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: npm-install
-      - name: Build javascript packages
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: build-instrumented-assets
-      - name: Setup Postgres
-        if: steps.check.outcome == 'failure'
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: setup-postgres
-      - name: Install cypress
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: cypress-install
-      - name: Run Cypress
-        uses: ./.github/actions/cached-dependencies
-        env:
-          CYPRESS_BROWSER: ${{ matrix.browser }}
-        with:
-          run: cypress-run-applitools

.github/workflows/superset-applitools-storybook.yml

@@ -1,52 +0,0 @@
-name: Applitools Storybook
-
-on:
-  schedule:
-    - cron: "0 0 * * *"
-
-env:
-  APPLITOOLS_APP_NAME: Superset
-  APPLITOOLS_API_KEY: ${{ secrets.APPLITOOLS_API_KEY }}
-  APPLITOOLS_BATCH_ID: ${{ github.sha }}
-  APPLITOOLS_BATCH_NAME: Superset Storybook
-
-jobs:
-  config:
-    runs-on: ubuntu-24.04
-    outputs:
-      has-secrets: ${{ steps.check.outputs.has-secrets }}
-    steps:
-      - name: "Check for secrets"
-        id: check
-        shell: bash
-        run: |
-          if [ -n "${{ (secrets.APPLITOOLS_API_KEY != '' && secrets.APPLITOOLS_API_KEY != '') || '' }}" ]; then
-            echo "has-secrets=1" >> "$GITHUB_OUTPUT"
-          fi
-
-  cron:
-    needs: config
-    if: needs.config.outputs.has-secrets
-    runs-on: ubuntu-24.04
-    steps:
-      - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} )"
-        uses: actions/checkout@v6
-        with:
-          persist-credentials: false
-          submodules: recursive
-          ref: master
-      - name: Set up Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version-file: './superset-frontend/.nvmrc'
-      - name: Install eyes-storybook dependencies
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: eyes-storybook-dependencies
-      - name: Install NPM dependencies
-        uses: ./.github/actions/cached-dependencies
-        with:
-          run: npm-install
-      - name: Run Applitools Eyes-Storybook
-        working-directory: ./superset-frontend
-        run: npx eyes-storybook -u https://superset-storybook.netlify.app/

.github/workflows/superset-docs-deploy.yml

@@ -68,7 +68,7 @@ jobs:
           yarn install --check-cache
       - name: Download database diagnostics (if triggered by integration tests)
         if: github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success'
-        uses: dawidd6/action-download-artifact@v14
+        uses: dawidd6/action-download-artifact@v15
         continue-on-error: true
         with:
           workflow: superset-python-integrationtest.yml
@@ -77,7 +77,7 @@ jobs:
           path: docs/src/data/
       - name: Try to download latest diagnostics (for push/dispatch triggers)
         if: github.event_name != 'workflow_run'
-        uses: dawidd6/action-download-artifact@v14
+        uses: dawidd6/action-download-artifact@v15
         continue-on-error: true
         with:
           workflow: superset-python-integrationtest.yml

.github/workflows/superset-docs-verify.yml

@@ -111,7 +111,7 @@ jobs:
         run: |
           yarn install --check-cache
       - name: Download database diagnostics from integration tests
-        uses: dawidd6/action-download-artifact@v14
+        uses: dawidd6/action-download-artifact@v15
         with:
           workflow: superset-python-integrationtest.yml
           run_id: ${{ github.event.workflow_run.id }}

.github/workflows/superset-e2e.yml

@@ -54,7 +54,7 @@ jobs:
       USE_DASHBOARD: ${{ github.event.inputs.use_dashboard == 'true' || 'false' }}
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset
@@ -171,7 +171,7 @@ jobs:
       GITHUB_TOKEN: ${{ github.token }}
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset

.github/workflows/superset-frontend.yml

@@ -163,11 +163,6 @@ jobs:
           docker run --rm $TAG bash -c \
           "npm run plugins:build"
 
-      - name: Build Plugins Storybook
-        run: |
-          docker run --rm $TAG bash -c \
-          "npm run plugins:build-storybook"
-
   test-storybook:
     needs: frontend-build
     if: needs.frontend-build.outputs.should-run == 'true'

.github/workflows/superset-playwright.yml

@@ -45,7 +45,7 @@ jobs:
       GITHUB_TOKEN: ${{ github.token }}
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset

.github/workflows/superset-python-integrationtest.yml

@@ -115,7 +115,7 @@ jobs:
       SUPERSET__SQLALCHEMY_DATABASE_URI: postgresql+psycopg2://superset:superset@127.0.0.1:15432/superset
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset

.github/workflows/superset-python-presto-hive.yml

@@ -25,7 +25,7 @@ jobs:
       SUPERSET__SQLALCHEMY_EXAMPLES_URI: presto://localhost:15433/memory/default
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset
@@ -94,7 +94,7 @@ jobs:
       UPLOAD_FOLDER: /tmp/.superset/uploads/
     services:
       postgres:
-        image: postgres:16-alpine
+        image: postgres:17-alpine
         env:
           POSTGRES_USER: superset
           POSTGRES_PASSWORD: superset

UPDATING.md

@@ -24,6 +24,64 @@ assists people when migrating to a new version.
 
 ## Next
 
+### MCP Tool Observability
+
+MCP (Model Context Protocol) tools now include enhanced observability instrumentation for monitoring and debugging:
+
+**Two-layer instrumentation:**
+1. **Middleware layer** (`LoggingMiddleware`): Automatically logs all MCP tool calls with `duration_ms` and `success` status in the audit log (Action Log UI, logs table)
+2. **Sub-operation tracking**: All 19 MCP tools include granular `event_logger.log_context()` blocks for tracking individual operations like validation, database writes, and query execution
+
+**Action naming convention:**
+- Tool-level logs: `mcp_tool_call` (via middleware)
+- Sub-operation logs: `mcp.{tool_name}.{operation}` (e.g., `mcp.generate_chart.validation`, `mcp.execute_sql.query_execution`)
+
+**Querying MCP logs:**
+```sql
+-- Top slowest MCP operations
+SELECT action, COUNT(*) as calls, AVG(duration_ms) as avg_ms
+FROM logs
+WHERE action LIKE 'mcp.%'
+GROUP BY action
+ORDER BY avg_ms DESC
+LIMIT 20;
+
+-- MCP tool success rate
+SELECT
+    json_extract(curated_payload, '$.tool') as tool,
+    COUNT(*) as total_calls,
+    SUM(CASE WHEN json_extract(curated_payload, '$.success') = 'true' THEN 1 ELSE 0 END) as successful,
+    ROUND(100.0 * SUM(CASE WHEN json_extract(curated_payload, '$.success') = 'true' THEN 1 ELSE 0 END) / COUNT(*), 2) as success_rate
+FROM logs
+WHERE action = 'mcp_tool_call'
+GROUP BY tool
+ORDER BY total_calls DESC;
+```
+
+**Security note:** Sensitive parameters (passwords, API keys, tokens) are automatically redacted in logs as `[REDACTED]`.
+
+### Signal Cache Backend
+
+A new `SIGNAL_CACHE_CONFIG` configuration provides a unified Redis-based backend for real-time coordination features in Superset. This backend enables:
+
+- **Pub/sub messaging** for real-time event notifications between workers
+- **Atomic distributed locking** using Redis SET NX EX (more performant than database-backed locks)
+- **Event-based coordination** for background task management
+
+The signal cache is used by the Global Task Framework (GTF) for abort notifications and task completion signaling, and will eventually replace `GLOBAL_ASYNC_QUERIES_CACHE_BACKEND` as the standard signaling backend. Configuring this is recommended for Redis enabled production deployments.
+
+Example configuration in `superset_config.py`:
+```python
+SIGNAL_CACHE_CONFIG = {
+    "CACHE_TYPE": "RedisCache",
+    "CACHE_KEY_PREFIX": "signal_",
+    "CACHE_REDIS_URL": "redis://localhost:6379/1",
+    "CACHE_DEFAULT_TIMEOUT": 300,
+}
+```
+
+See `superset/config.py` for complete configuration options.
+
 ### WebSocket config for GAQ with Docker
 
 [35896](https://github.com/apache/superset/pull/35896) and [37624](https://github.com/apache/superset/pull/37624) updated documentation on how to run and configure Superset with Docker. Specifically for the WebSocket configuration, a new `docker/superset-websocket/config.example.json` was added to the repo, so that users could copy it to create a `docker/superset-websocket/config.json` file. The existing `docker/superset-websocket/config.json` was removed and git-ignored, so if you're using GAQ / WebSocket make sure to:

docker-compose-image-tag.yml

@@ -45,7 +45,7 @@ services:
         required: true
       - path: docker/.env-local # optional override
         required: false
-    image: postgres:16
+    image: postgres:17
     container_name: superset_db
     restart: unless-stopped
     volumes:

docker-compose-light.yml

@@ -85,7 +85,7 @@ services:
         required: true
       - path: docker/.env-local # optional override
         required: false
-    image: postgres:16
+    image: postgres:17
     restart: unless-stopped
     volumes:
       - db_home_light:/var/lib/postgresql/data

docker-compose-non-dev.yml

@@ -49,7 +49,7 @@ services:
         required: true
       - path: docker/.env-local # optional override
         required: false
-    image: postgres:16
+    image: postgres:17
     container_name: superset_db
     restart: unless-stopped
     volumes:

docker-compose.yml

@@ -76,7 +76,7 @@ services:
         required: true
       - path: docker/.env-local # optional override
         required: false
-    image: postgres:16
+    image: postgres:17
     restart: unless-stopped
     ports:
       - "127.0.0.1:${DATABASE_PORT:-5432}:5432"

docs/.nvmrc

@@ -1 +1 @@
-v20.18.3
+v20.20.0

docs/developer_portal/contributing/development-setup.md

@@ -788,7 +788,7 @@ pytest ./link_to_test.py
 
 ### Frontend Testing
 
-We use [Jest](https://jestjs.io/) and [Enzyme](https://airbnb.io/enzyme/) to test TypeScript/JavaScript. Tests can be run with:
+We use [Jest](https://jestjs.io/) and [React Testing Library](https://testing-library.com/docs/react-testing-library/intro/) to test TypeScript. Tests can be run with:
 
 ```bash
 cd superset-frontend

docs/developer_portal/contributing/howtos.md

@@ -100,7 +100,7 @@ npm link superset-plugin-chart-hello-world
 ```
 
 7. **Import and register in Superset**:
-Edit `superset-frontend/src/visualizations/presets/MainPreset.js` to include your plugin.
+Edit `superset-frontend/src/visualizations/presets/MainPreset.ts` to include your plugin.
 
 ## Testing
 

docs/developer_portal/extensions/contribution-types.md

@@ -38,12 +38,14 @@ Extensions can add new views or panels to the host application, such as custom S
 "frontend": {
   "contributions": {
     "views": {
-      "sqllab.panels": [
-        {
-          "id": "my_extension.main",
-          "name": "My Panel Name"
-        }
-      ]
+      "sqllab": {
+        "panels": [
+          {
+            "id": "my_extension.main",
+            "name": "My Panel Name"
+          }
+        ]
+      }
     }
   }
 }
@@ -76,25 +78,27 @@ Extensions can contribute new menu items or context menus to the host applicatio
 "frontend": {
   "contributions": {
     "menus": {
-      "sqllab.editor": {
-        "primary": [
-          {
-            "view": "builtin.editor",
-            "command": "my_extension.copy_query"
-          }
-        ],
-        "secondary": [
-          {
-            "view": "builtin.editor",
-            "command": "my_extension.prettify"
-          }
-        ],
-        "context": [
-          {
-            "view": "builtin.editor",
-            "command": "my_extension.clear"
-          }
-        ]
+      "sqllab": {
+        "editor": {
+          "primary": [
+            {
+              "view": "builtin.editor",
+              "command": "my_extension.copy_query"
+            }
+          ],
+          "secondary": [
+            {
+              "view": "builtin.editor",
+              "command": "my_extension.prettify"
+            }
+          ],
+          "context": [
+            {
+              "view": "builtin.editor",
+              "command": "my_extension.clear"
+            }
+          ]
+        }
       }
     }
   }

docs/developer_portal/extensions/development.md

@@ -92,12 +92,14 @@ The `extension.json` file contains all metadata necessary for the host applicati
   "frontend": {
     "contributions": {
       "views": {
-        "sqllab.panels": [
-          {
-            "id": "dataset_references.main",
-            "name": "Dataset references"
-          }
-        ]
+        "sqllab": {
+          "panels": [
+            {
+              "id": "dataset_references.main",
+              "name": "Dataset references"
+            }
+          ]
+        }
       }
     },
     "moduleFederation": {
@@ -134,9 +136,9 @@ export const onDidChangeActivePanel: Event<Panel>;
 
 export const onDidChangeTabTitle: Event<string>;
 
-export const onDidQueryRun: Event<Editor>;
+export const onDidQueryRun: Event<QueryContext>;
 
-export const onDidQueryStop: Event<Editor>;
+export const onDidQueryStop: Event<QueryContext>;
 ```
 
 The following code demonstrates more examples of the existing frontend APIs:
@@ -150,16 +152,16 @@ export function activate(context) {
   const panelDisposable = core.registerView('my_extension.panel', <MyPanel><Button/></MyPanel>);
 
   // Register a custom command
-  const commandDisposable = commands.registerCommand('my_extension.copy_query', {
-    title: 'Copy Query',
-    execute: () => {
+  const commandDisposable = commands.registerCommand(
+    'my_extension.copy_query',
+    () => {
       // Command logic here
     },
-  });
+  );
 
   // Listen for query run events in SQL Lab
-  const eventDisposable = sqlLab.onDidQueryRun(editor => {
-    // Handle query execution event
+  const eventDisposable = sqlLab.onDidQueryRun(queryContext => {
+    console.log('Query started on database:', queryContext.tab.databaseId);
   });
 
   // Access a CSRF token for secure API requests

docs/developer_portal/extensions/extension-points/sqllab.md

@@ -24,7 +24,7 @@ under the License.
 
 # SQL Lab Extension Points
 
-SQL Lab provides 5 extension points where extensions can contribute custom UI components. Each area serves a specific purpose and can be customized to add new functionality.
+SQL Lab provides 4 extension points where extensions can contribute custom UI components. Each area serves a specific purpose and supports different types of customizations. These areas will evolve over time as new features are added to SQL Lab.
 
 ## Layout Overview
 
@@ -41,42 +41,44 @@ SQL Lab provides 5 extension points where extensions can contribute custom UI co
 │          │                                         │             │
 │          │                                         │             │
 │          │                                         │             │
-├──────────┴─────────────────────────────────────────┴─────────────┤
-│                          Status Bar                              │
-└──────────────────────────────────────────────────────────────────┘
+└──────────┴─────────────────────────────────────────┴─────────────┘
 ```
 
-| Extension Point   | ID                    | Description                                                |
-| ----------------- | --------------------- | ---------------------------------------------------------- |
-| **Left Sidebar**  | `sqllab.leftSidebar`  | Navigation and browsing (database explorer, saved queries) |
-| **Editor**        | `sqllab.editor`       | SQL query editor workspace                                 |
-| **Right Sidebar** | `sqllab.rightSidebar` | Contextual tools (AI assistants, query analysis)           |
-| **Panels**        | `sqllab.panels`       | Results and related views (visualizations, data profiling) |
-| **Status Bar**    | `sqllab.statusBar`    | Connection status and query metrics                        |
+| Extension Point   | ID                    | Views | Menus | Description                                    |
+| ----------------- | --------------------- | ----- | ----- | ---------------------------------------------- |
+| **Left Sidebar**  | `sqllab.leftSidebar`  | —     | ✓     | Menu actions for the database explorer         |
+| **Editor**        | `sqllab.editor`       | ✓\*   | ✓     | Custom editors + toolbar actions               |
+| **Right Sidebar** | `sqllab.rightSidebar` | ✓     | —     | Custom panels (AI assistants, query analysis)  |
+| **Panels**        | `sqllab.panels`       | ✓     | ✓     | Custom tabs + toolbar actions (data profiling) |
 
-## Area Customizations
+\*Editor views are contributed via [Editor Contributions](./editors), not standard view contributions.
 
-Each extension point area supports three types of action customizations:
+## Customization Types
+
+### Views
+
+Extensions can add custom views (React components) to **Right Sidebar** and **Panels**. Views appear as new panels or tabs in their respective areas.
+
+### Menus
+
+Extensions can add toolbar actions to **Left Sidebar**, **Editor**, and **Panels**. Menu contributions support:
 
 ```
 ┌───────────────────────────────────────────────────────────────┐
-│  Area Title                         [Button] [Button]   [•••] │
+│  [Button] [Button]   [•••]                                    │
 ├───────────────────────────────────────────────────────────────┤
-│                                                               │
-│                                                               │
 │                          Area Content                         │
-│                                                               │
-│                  (right-click for context menu)               │
-│                                                               │
-│                                                               │
 └───────────────────────────────────────────────────────────────┘
 ```
 
-| Action Type           | Location          | Use Case                                              |
-| --------------------- | ----------------- | ----------------------------------------------------- |
-| **Primary Actions**   | Top-right buttons | Frequently used actions (e.g., run, refresh, add new) |
-| **Secondary Actions** | 3-dot menu (•••)  | Less common actions (e.g., export, settings)          |
-| **Context Actions**   | Right-click menu  | Context-sensitive actions on content                  |
+| Action Type           | Location         | Use Case                                              |
+| --------------------- | ---------------- | ----------------------------------------------------- |
+| **Primary Actions**   | Toolbar buttons  | Frequently used actions (e.g., run, refresh, add new) |
+| **Secondary Actions** | 3-dot menu (•••) | Less common actions (e.g., export, settings)          |
+
+### Custom Editors
+
+Extensions can replace the default SQL editor with custom implementations (Monaco, CodeMirror, etc.). See [Editor Contributions](./editors) for details.
 
 ## Examples
 
@@ -91,12 +93,14 @@ This example adds a "Data Profiler" panel to SQL Lab:
   "frontend": {
     "contributions": {
       "views": {
-        "sqllab.panels": [
-          {
-            "id": "data_profiler.main",
-            "name": "Data Profiler"
-          }
-        ]
+        "sqllab": {
+          "panels": [
+            {
+              "id": "data_profiler.main",
+              "name": "Data Profiler"
+            }
+          ]
+        }
       }
     }
   }
@@ -140,25 +144,27 @@ This example adds primary, secondary, and context actions to the editor:
         }
       ],
       "menus": {
-        "sqllab.editor": {
-          "primary": [
-            {
-              "view": "builtin.editor",
-              "command": "query_tools.format"
-            }
-          ],
-          "secondary": [
-            {
-              "view": "builtin.editor",
-              "command": "query_tools.explain"
-            }
-          ],
-          "context": [
-            {
-              "view": "builtin.editor",
-              "command": "query_tools.copy_as_cte"
-            }
-          ]
+        "sqllab": {
+          "editor": {
+            "primary": [
+              {
+                "view": "builtin.editor",
+                "command": "query_tools.format"
+              }
+            ],
+            "secondary": [
+              {
+                "view": "builtin.editor",
+                "command": "query_tools.explain"
+              }
+            ],
+            "context": [
+              {
+                "view": "builtin.editor",
+                "command": "query_tools.copy_as_cte"
+              }
+            ]
+          }
         }
       }
     }
@@ -171,32 +177,38 @@ import { commands, sqlLab } from '@apache-superset/core';
 
 export function activate(context) {
   // Register the commands declared in extension.json
-  const formatCommand = commands.registerCommand('query_tools.format', {
-    execute: () => {
+  const formatCommand = commands.registerCommand(
+    'query_tools.format',
+    async () => {
       const tab = sqlLab.getCurrentTab();
-      if (tab?.editor) {
+      if (tab) {
+        const editor = await tab.getEditor();
         // Format the SQL query
       }
     },
-  });
+  );
 
-  const explainCommand = commands.registerCommand('query_tools.explain', {
-    execute: () => {
+  const explainCommand = commands.registerCommand(
+    'query_tools.explain',
+    async () => {
       const tab = sqlLab.getCurrentTab();
-      if (tab?.editor) {
+      if (tab) {
+        const editor = await tab.getEditor();
         // Show query explanation
       }
     },
-  });
+  );
 
-  const copyAsCteCommand = commands.registerCommand('query_tools.copy_as_cte', {
-    execute: () => {
+  const copyAsCteCommand = commands.registerCommand(
+    'query_tools.copy_as_cte',
+    async () => {
       const tab = sqlLab.getCurrentTab();
-      if (tab?.editor) {
+      if (tab) {
+        const editor = await tab.getEditor();
         // Copy selected text as CTE
       }
     },
-  });
+  );
 
   context.subscriptions.push(formatCommand, explainCommand, copyAsCteCommand);
 }

docs/developer_portal/extensions/overview.md

@@ -51,4 +51,5 @@ Extensions can provide:
 - **[Deployment](./deployment)** - Packaging and deploying extensions
 - **[MCP Integration](./mcp)** - Adding AI agent capabilities using extensions
 - **[Security](./security)** - Security considerations and best practices
+- **[Tasks](./tasks)** - Framework for creating and managing long running tasks
 - **[Community Extensions](./registry)** - Browse extensions shared by the community

docs/developer_portal/extensions/quick-start.md

@@ -94,12 +94,14 @@ The generated `extension.json` contains basic metadata. Update it to register yo
   "frontend": {
     "contributions": {
       "views": {
-        "sqllab.panels": [
-          {
-            "id": "hello_world.main",
-            "name": "Hello World"
-          }
-        ]
+        "sqllab": {
+          "panels": [
+            {
+              "id": "hello_world.main",
+              "name": "Hello World"
+            }
+          ]
+        }
       }
     },
     "moduleFederation": {

docs/developer_portal/extensions/registry.md

@@ -1,6 +1,6 @@
 ---
 title: Community Extensions
-sidebar_position: 10
+sidebar_position: 11
 ---
 
 <!--

docs/developer_portal/extensions/tasks.md

@@ -0,0 +1,440 @@
+---
+title: Tasks
+sidebar_position: 10
+---
+
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements.  See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership.  The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License.  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied.  See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+
+# Global Task Framework
+
+The Global Task Framework (GTF) provides a unified way to manage background tasks. It handles task execution, progress tracking, cancellation, and deduplication for both synchronous and asynchronous execution. The framework uses distributed locking internally to ensure race-free operations—you don't need to worry about concurrent task creation or cancellation conflicts.
+
+## Enabling GTF
+
+GTF is disabled by default and must be enabled via the `GLOBAL_TASK_FRAMEWORK` feature flag in your `superset_config.py`:
+
+```python
+FEATURE_FLAGS = {
+    "GLOBAL_TASK_FRAMEWORK": True,
+}
+```
+
+When GTF is disabled:
+- The Task List UI menu item is hidden
+- The `/api/v1/task/*` endpoints return 404
+- Calling or scheduling a `@task`-decorated function raises `GlobalTaskFrameworkDisabledError`
+
+:::note Future Migration
+When GTF is considered stable, it will replace legacy Celery tasks for built-in features like thumbnails and alerts & reports. Enabling this flag prepares your deployment for that migration.
+:::
+
+## Quick Start
+
+### Define a Task
+
+```python
+from superset_core.api.tasks import task, get_context
+
+@task
+def process_data(dataset_id: int) -> None:
+    ctx = get_context()
+
+    @ctx.on_cleanup
+    def cleanup():
+        logger.info("Processing complete")
+
+    data = fetch_dataset(dataset_id)
+    process_and_cache(data)
+```
+
+### Execute a Task
+
+```python
+# Async execution - schedules on Celery worker
+task = process_data.schedule(dataset_id=123)
+print(task.status)  # "pending"
+
+# Sync execution - runs inline in current process
+task = process_data(dataset_id=123)
+# ... blocks until complete
+print(task.status)  # "success"
+```
+
+### Async vs Sync Execution
+
+| Method | When to Use |
+|--------|-------------|
+| `.schedule()` | Long-running operations, background processing, when you need to return immediately |
+| Direct call | Short operations, when deduplication matters, when you need the result before responding |
+
+Both execution modes provide the same task features: deduplication, progress tracking, cancellation, and visibility in the Task List UI. The difference is whether execution happens in a Celery worker (async) or inline (sync).
+
+## Task Lifecycle
+
+```
+PENDING ──→ IN_PROGRESS ────→ SUCCESS
+   │             │
+   │             ├──────────→ FAILURE
+   │             ↓                ↑
+   │         ABORTING ────────────┘
+   │             │
+   │             ├──────────→ TIMED_OUT (timeout)
+   │             │
+   └─────────────┴──────────→ ABORTED (user cancel)
+```
+
+| Status | Description |
+|--------|-------------|
+| `PENDING` | Queued, awaiting execution |
+| `IN_PROGRESS` | Executing |
+| `ABORTING` | Abort/timeout triggered, abort handlers running |
+| `SUCCESS` | Completed successfully |
+| `FAILURE` | Failed with error or abort/cleanup handler exception |
+| `ABORTED` | Cancelled by user/admin |
+| `TIMED_OUT` | Exceeded configured timeout |
+
+## Context API
+
+Access task context via `get_context()` from within any `@task` function. The context provides methods for updating task metadata and registering handlers.
+
+### Updating Task Metadata
+
+Use `update_task()` to report progress and store custom payload data:
+
+```python
+@task
+def my_task(items: list[int]) -> None:
+    ctx = get_context()
+
+    for i, item in enumerate(items):
+        result = process(item)
+        ctx.update_task(
+            progress=(i + 1, len(items)),
+            payload={"last_result": result}
+        )
+```
+
+:::tip
+Call `update_task()` once per iteration for best performance. Frequent DB writes are throttled to limit metastore load, so batching progress and payload updates together in a single call ensures both are persisted at the same time.
+:::
+
+#### Progress Formats
+
+The `progress` parameter accepts three formats:
+
+| Format | Example | Display |
+|--------|---------|---------|
+| `tuple[int, int]` | `progress=(3, 100)` | 3 of 100 (3%) with ETA |
+| `float` (0.0-1.0) | `progress=0.5` | 50% with ETA |
+| `int` | `progress=42` | 42 processed |
+
+:::tip
+Use the tuple format `(current, total)` whenever possible. It provides the richest information to users: showing both the count and percentage, while still computing ETA automatically.
+:::
+
+#### Payload
+
+The `payload` parameter stores custom metadata that can help users understand what the task is doing. Each call to `update_task()` replaces the previous payload completely.
+
+In the Task List UI, when a payload is defined, an info icon appears in the **Details** column. Users can hover over it to see the JSON content.
+
+### Handlers
+
+Register handlers to run cleanup logic or respond to abort requests:
+
+| Handler | When it runs | Use case |
+|---------|--------------|----------|
+| `on_cleanup` | Always (success, failure, abort) | Release resources, close connections |
+| `on_abort` | When task is aborted | Set stop flag, cancel external operations |
+
+```python
+@task
+def my_task() -> None:
+    ctx = get_context()
+
+    @ctx.on_cleanup
+    def cleanup():
+        logger.info("Task ended, cleaning up")
+
+    @ctx.on_abort
+    def handle_abort():
+        logger.info("Abort requested")
+
+    # ... task logic
+```
+
+Multiple handlers of the same type execute in LIFO order (last registered runs first). Abort handlers run first when abort is detected, then cleanup handlers run when the task ends.
+
+#### Best-Effort Execution
+
+**All registered handlers will always be attempted, even if one fails.** This ensures that a failure in one handler doesn't prevent other handlers from running their cleanup logic.
+
+For example, if you have three cleanup handlers and the second one throws an exception:
+1. Handler 3 runs ✓
+2. Handler 2 throws an exception ✗ (logged, but execution continues)
+3. Handler 1 runs ✓
+
+If any handler fails, the task is marked as `FAILURE` with combined error details showing all handler failures.
+
+:::tip
+Write handlers to be independent and self-contained. Don't assume previous handlers succeeded, and don't rely on shared state between handlers.
+:::
+
+## Making Tasks Abortable
+
+When users click **Cancel** in the Task List, the system decides whether to **abort** (stop) the task or **unsubscribe** (remove the user from a shared task). Abort occurs when:
+- It's a private or system task
+- It's a shared task and the user is the last subscriber
+- An admin checks **Force abort** to stop the task for all subscribers
+
+Pending tasks can always be aborted: they simply won't start. In-progress tasks require an abort handler to be abortable:
+
+```python
+@task
+def abortable_task(items: list[str]) -> None:
+    ctx = get_context()
+    should_stop = False
+
+    @ctx.on_abort
+    def handle_abort():
+        nonlocal should_stop
+        should_stop = True
+        logger.info("Abort signal received")
+
+    @ctx.on_cleanup
+    def cleanup():
+        logger.info("Task ended, cleaning up")
+
+    for item in items:
+        if should_stop:
+            return  # Exit gracefully
+        process(item)
+```
+
+**Key points:**
+- Registering `on_abort` marks the task as abortable and starts the abort listener
+- The abort handler fires automatically when abort is triggered
+- Use a flag pattern to gracefully stop processing at safe points
+- Without an abort handler, in-progress tasks cannot be aborted: the Cancel button in the Task List UI will be disabled
+
+The framework automatically skips execution if a task was aborted while pending: no manual check needed at task start.
+
+:::tip
+Always implement an abort handler for long-running tasks. This allows users to cancel unneeded tasks and free up worker capacity for other operations.
+:::
+
+## Timeouts
+
+Set a timeout to automatically abort tasks that run too long:
+
+```python
+from superset_core.api.tasks import task, get_context, TaskOptions
+
+# Set default timeout in decorator
+@task(timeout=300)  # 5 minutes
+def process_data(dataset_id: int) -> None:
+    ctx = get_context()
+    should_stop = False
+
+    @ctx.on_abort
+    def handle_abort():
+        nonlocal should_stop
+        should_stop = True
+
+    for chunk in fetch_large_dataset(dataset_id):
+        if should_stop:
+            return
+        process(chunk)
+
+# Override timeout at call time
+task = process_data.schedule(
+    dataset_id=123,
+    options=TaskOptions(timeout=600)  # Override to 10 minutes
+)
+```
+
+### How Timeouts Work
+
+The timeout timer starts when the task begins executing (status changes to `IN_PROGRESS`). When the timeout expires:
+
+1. **With an abort handler registered:** The task transitions to `ABORTING`, abort handlers run, then cleanup handlers run. The final status depends on handler execution:
+   - If handlers complete successfully → `TIMED_OUT` status
+   - If handlers throw an exception → `FAILURE` status
+
+2. **Without an abort handler:** The framework cannot forcibly terminate the task. A warning is logged, and the task continues running. The Task List UI shows a warning indicator (⚠️) in the Details column to alert users that the timeout cannot be enforced.
+
+### Timeout Precedence
+
+| Source | Priority | Example |
+|--------|----------|---------|
+| `TaskOptions.timeout` | Highest | `options=TaskOptions(timeout=600)` |
+| `@task(timeout=...)` | Default | `@task(timeout=300)` |
+| Not set | No timeout | Task runs indefinitely |
+
+Call-time options always override decorator defaults, allowing tasks to have sensible defaults while permitting callers to extend or shorten the timeout for specific use cases.
+
+:::warning
+Timeouts require an abort handler to be effective. Without one, the timeout triggers only a warning and the task continues running. Always implement an abort handler when using timeouts.
+:::
+
+## Deduplication
+
+Use `task_key` to prevent duplicate task execution:
+
+```python
+from superset_core.api.tasks import TaskOptions
+
+# Without key - creates new task each time (random UUID)
+task1 = my_task.schedule(x=1)
+task2 = my_task.schedule(x=1)  # Different task
+
+# With key - joins existing task if active
+task1 = my_task.schedule(x=1, options=TaskOptions(task_key="report_123"))
+task2 = my_task.schedule(x=1, options=TaskOptions(task_key="report_123"))  # Returns same task
+```
+
+When a task with matching key already exists, the user is added as a subscriber and the existing task is returned. This behavior is consistent across all scopes—private tasks naturally have only one subscriber since their deduplication key includes the user ID.
+
+Deduplication only applies to active tasks (pending/in-progress). Once a task completes, a new task with the same key can be created.
+
+### Sync Join-and-Wait
+
+When a sync call joins an existing task, it blocks until the task completes:
+
+```python
+# Schedule async task
+task = my_task.schedule(options=TaskOptions(task_key="report_123"))
+
+# Later sync call with same key blocks until completion of the active task
+task2 = my_task(options=TaskOptions(task_key="report_123"))
+assert task.uuid == task2.uuid  # True
+print(task2.status)  # "success" (terminal status)
+```
+
+## Task Scopes
+
+```python
+from superset_core.api.tasks import task, TaskScope
+
+@task  # Private by default
+def private_task(): ...
+
+@task(scope=TaskScope.SHARED)  # Multiple users can subscribe
+def shared_task(): ...
+
+@task(scope=TaskScope.SYSTEM)  # Admin-only visibility
+def system_task(): ...
+```
+
+| Scope | Visibility | Cancel Behavior |
+|-------|------------|-----------------|
+| `PRIVATE` | Creator only | Cancels immediately |
+| `SHARED` | All subscribers | Last subscriber cancels; others unsubscribe |
+| `SYSTEM` | Admins only | Admin cancels |
+
+## Task Cleanup
+
+Completed tasks accumulate in the database over time. Configure a scheduled prune job to automatically remove old tasks:
+
+```python
+# In your superset_config.py, add to your Celery beat schedule:
+CELERY_CONFIG.beat_schedule["prune_tasks"] = {
+    "task": "prune_tasks",
+    "schedule": crontab(minute=0, hour=0),  # Run daily at midnight
+    "kwargs": {
+        "retention_period_days": 90,   # Keep tasks for 90 days
+        "max_rows_per_run": 10000,     # Limit deletions per run
+    },
+}
+```
+
+The prune job only removes tasks in terminal states (`SUCCESS`, `FAILURE`, `ABORTED`, `TIMED_OUT`). Active tasks (`PENDING`, `IN_PROGRESS`, `ABORTING`) are never pruned.
+
+See `superset/config.py` for a complete example configuration.
+
+:::tip Signal Cache for Faster Notifications
+By default, abort detection and sync join-and-wait use database polling. Configure `SIGNAL_CACHE_CONFIG` to enable Redis pub/sub for real-time notifications. See [Signal Cache Backend](/docs/configuration/cache#signal-cache-backend) for configuration details.
+:::
+
+## API Reference
+
+### @task Decorator
+
+```python
+@task(
+    name: str | None = None,
+    scope: TaskScope = TaskScope.PRIVATE,
+    timeout: int | None = None
+)
+```
+
+- `name`: Task identifier (defaults to function name)
+- `scope`: `PRIVATE`, `SHARED`, or `SYSTEM`
+- `timeout`: Default timeout in seconds (can be overridden via `TaskOptions`)
+
+### TaskContext Methods
+
+| Method | Description |
+|--------|-------------|
+| `update_task(progress, payload)` | Update progress and/or custom payload |
+| `on_cleanup(handler)` | Register cleanup handler |
+| `on_abort(handler)` | Register abort handler (makes task abortable) |
+
+### TaskOptions
+
+```python
+TaskOptions(
+    task_key: str | None = None,
+    task_name: str | None = None,
+    timeout: int | None = None
+)
+```
+
+- `task_key`: Deduplication key (also used as display name if `task_name` is not set)
+- `task_name`: Human-readable display name for the Task List UI
+- `timeout`: Timeout in seconds (overrides decorator default)
+
+:::tip
+Provide a descriptive `task_name` for better readability in the Task List UI. While `task_key` is used for deduplication and may be technical (e.g., `chart_export_123`), `task_name` can be user-friendly (e.g., `"Export Sales Chart 123"`).
+:::
+
+## Error Handling
+
+Let exceptions propagate: the framework captures them automatically and sets task status to `FAILURE`:
+
+```python
+@task
+def risky_task() -> None:
+    # No try/catch needed - framework handles it
+    result = operation_that_might_fail()
+```
+
+On failure, the framework records:
+- `error_message`: Exception message
+- `exception_type`: Exception class name
+- `stack_trace`: Full traceback (visible when `SHOW_STACKTRACE=True`)
+
+In the Task List UI, failed tasks show error details when hovering over the status. When stack traces are enabled, a separate bug icon appears in the **Details** column for viewing the full traceback.
+
+Cleanup handlers still run after an exception, so resources can be properly released as necessary.
+
+:::tip
+Use descriptive exception messages. In environments where stack traces are hidden (`SHOW_STACKTRACE=False`), users see only the error message and exception type when hovering over failed tasks. Clear messages help users troubleshoot issues without administrator assistance.
+:::

docs/developer_portal/guidelines/frontend-style-guidelines.md

@@ -47,5 +47,5 @@ This is a list of statements that describe how we do frontend development in Sup
   - We do not debate code formatting style in PRs, instead relying on automated tooling to enforce it.
   - If there's not a linting rule, we don't have a rule!
   - See: [Linting How-Tos](../contributing/howtos#typescript--javascript)
-- We use [React Storybook](https://storybook.js.org/) and [Applitools](https://applitools.com/) to help preview/test and stabilize our components
+- We use [React Storybook](https://storybook.js.org/) to help preview/test and stabilize our components
   - A public Storybook with components from the `master` branch is available [here](https://apache-superset.github.io/superset-ui/?path=/story/*)

docs/developer_portal/sidebars.js

@@ -53,6 +53,7 @@ module.exports = {
         'extensions/deployment',
         'extensions/mcp',
         'extensions/security',
+        'extensions/tasks',
         'extensions/registry',
       ],
     },

docs/developer_portal/testing/overview.md

@@ -60,7 +60,6 @@ Superset embraces a testing pyramid approach:
 - **pytest**: Python testing framework with powerful fixtures and plugins
 - **SQLAlchemy Test Utilities**: Database testing and transaction management
 - **Flask Test Client**: API endpoint testing and request simulation
-- **Factory Boy**: Test data generation and model factories
 
 ## Best Practices
 
@@ -157,7 +156,6 @@ npm run test:coverage
 - **React Testing Library** - Component testing utilities
 - **Playwright** - End-to-end testing (replacing Cypress)
 - **Storybook** - Component development and testing
-- **MSW** - API mocking for testing
 
 ---
 

docs/docs/configuration/cache.mdx

@@ -7,6 +7,12 @@ version: 1
 
 # Caching
 
+:::note
+When a cache backend is configured, Superset expects it to remain available. Operations will
+fail if the configured backend becomes unavailable rather than silently degrading. This
+fail-fast behavior ensures operators are immediately aware of infrastructure issues.
+:::
+
 Superset uses [Flask-Caching](https://flask-caching.readthedocs.io/) for caching purposes.
 Flask-Caching supports various caching backends, including Redis (recommended), Memcached,
 SimpleCache (in-memory), or the local filesystem.
@@ -153,6 +159,84 @@ Then on configuration:
 WEBDRIVER_AUTH_FUNC = auth_driver
 ```
 
+## Signal Cache Backend
+
+Superset supports an optional signal cache (`SIGNAL_CACHE_CONFIG`) for
+high-performance distributed operations. This configuration enables:
+
+- **Distributed locking**: Moves lock operations from the metadata database to Redis, improving
+  performance and reducing metastore load
+- **Real-time event notifications**: Enables instant pub/sub messaging for task abort signals and
+  completion notifications instead of polling-based approaches
+
+:::note
+This requires Redis or Valkey specifically—it uses Redis-specific features (pub/sub, `SET NX EX`)
+that are not available in general Flask-Caching backends.
+:::
+
+### Configuration
+
+The signal cache uses Flask-Caching style configuration for consistency with other cache
+backends. Configure `SIGNAL_CACHE_CONFIG` in `superset_config.py`:
+
+```python
+SIGNAL_CACHE_CONFIG = {
+    "CACHE_TYPE": "RedisCache",
+    "CACHE_REDIS_HOST": "localhost",
+    "CACHE_REDIS_PORT": 6379,
+    "CACHE_REDIS_DB": 0,
+    "CACHE_REDIS_PASSWORD": "",  # Optional
+}
+```
+
+For Redis Sentinel deployments:
+
+```python
+SIGNAL_CACHE_CONFIG = {
+    "CACHE_TYPE": "RedisSentinelCache",
+    "CACHE_REDIS_SENTINELS": [("sentinel1", 26379), ("sentinel2", 26379)],
+    "CACHE_REDIS_SENTINEL_MASTER": "mymaster",
+    "CACHE_REDIS_SENTINEL_PASSWORD": None,  # Sentinel password (if different)
+    "CACHE_REDIS_PASSWORD": "",  # Redis password
+    "CACHE_REDIS_DB": 0,
+}
+```
+
+For SSL/TLS connections:
+
+```python
+SIGNAL_CACHE_CONFIG = {
+    "CACHE_TYPE": "RedisCache",
+    "CACHE_REDIS_HOST": "redis.example.com",
+    "CACHE_REDIS_PORT": 6380,
+    "CACHE_REDIS_SSL": True,
+    "CACHE_REDIS_SSL_CERTFILE": "/path/to/client.crt",
+    "CACHE_REDIS_SSL_KEYFILE": "/path/to/client.key",
+    "CACHE_REDIS_SSL_CA_CERTS": "/path/to/ca.crt",
+}
+```
+
+### Distributed Lock TTL
+
+You can configure the default lock TTL (time-to-live) in seconds. Locks automatically expire after
+this duration to prevent deadlocks from crashed processes:
+
+```python
+DISTRIBUTED_LOCK_DEFAULT_TTL = 30  # Default: 30 seconds
+```
+
+Individual lock acquisitions can override this value when needed.
+
+### Database-Only Mode
+
+When `SIGNAL_CACHE_CONFIG` is not configured, Superset uses database-backed operations:
+
+- **Locking**: Uses the KeyValue table with periodic cleanup of expired entries
+- **Event notifications**: Uses database polling instead of pub/sub
+
+While database-backed operations work reliably, the Redis backend is recommended for production
+deployments where low latency and reduced database load are important.
+
 :::resources
 - [Blog: The Data Engineer's Guide to Lightning-Fast Superset Dashboards](https://preset.io/blog/the-data-engineers-guide-to-lightning-fast-apache-superset-dashboards/)
 - [Blog: Accelerating Dashboards with Materialized Views](https://preset.io/blog/accelerating-apache-superset-dashboards-with-materialized-views/)

docs/docs/configuration/configuring-superset.mdx

@@ -141,10 +141,10 @@ database engine on a separate host or container.
 
 Superset supports the following database engines/versions:
 
-| Database Engine                           | Supported Versions                       |
-| ----------------------------------------- | ---------------------------------------- |
-| [PostgreSQL](https://www.postgresql.org/) | 10.X, 11.X, 12.X, 13.X, 14.X, 15.X, 16.X |
-| [MySQL](https://www.mysql.com/)           | 5.7, 8.X                                 |
+| Database Engine                           | Supported Versions                             |
+| ----------------------------------------- | ---------------------------------------------- |
+| [PostgreSQL](https://www.postgresql.org/) | 10.X, 11.X, 12.X, 13.X, 14.X, 15.X, 16.X, 17.X |
+| [MySQL](https://www.mysql.com/)           | 5.7, 8.X                                       |
 
 Use the following database drivers and connection strings:
 

docs/docs/faq.mdx

@@ -1,7 +1,63 @@
 ---
 sidebar_position: 9
+title: Frequently Asked Questions
+description: Common questions about Apache Superset including performance, database support, visualizations, and configuration.
+keywords: [superset faq, superset questions, superset help, data visualization faq]
 ---
 
+import FAQSchema from '@site/src/components/FAQSchema';
+
+<FAQSchema faqs={[
+  {
+    question: "How big of a dataset can Superset handle?",
+    answer: "Superset can work with even gigantic databases. Superset acts as a thin layer above your underlying databases or data engines, which do all the processing. Superset simply visualizes the results of the query. The key to achieving acceptable performance is whether your database can execute queries and return results at acceptable speed."
+  },
+  {
+    question: "What are the computing specifications required to run Superset?",
+    answer: "The specs depend on how many users you have and their activity, not on the size of your data. Community members have reported 8GB RAM, 2vCPUs as adequate for a moderately-sized instance. Monitor your resource usage and adjust as needed."
+  },
+  {
+    question: "Can I join or query multiple tables at one time?",
+    answer: "Not in the Explore or Visualization UI directly. A Superset SQLAlchemy datasource can only be a single table or a view. You can create a view that joins tables, or use SQL Lab where you can write SQL queries to join multiple tables."
+  },
+  {
+    question: "How do I create my own visualization?",
+    answer: "Read the instructions in the Creating Visualization Plugins documentation to learn how to build custom visualizations for Superset."
+  },
+  {
+    question: "Can I upload and visualize CSV data?",
+    answer: "Yes! Superset supports CSV upload functionality. Read the Exploring Data documentation to learn how to enable and use CSV upload."
+  },
+  {
+    question: "Why are my queries timing out?",
+    answer: "There are many possible causes. For SQL Lab, Superset allows queries to run up to 6 hours by default (configurable via SQLLAB_ASYNC_TIME_LIMIT_SEC). For dashboard timeouts, check your gateway/proxy timeout settings and adjust SUPERSET_WEBSERVER_TIMEOUT in superset_config.py."
+  },
+  {
+    question: "Why is the map not visible in the geospatial visualization?",
+    answer: "You need to register a free account at Mapbox.com, obtain an API key, and add it to your .env file at the key MAPBOX_API_KEY."
+  },
+  {
+    question: "What database engine can I use as a backend for Superset?",
+    answer: "Superset is tested using MySQL, PostgreSQL, and SQLite backends for storing its internal metadata. While Superset supports many databases as data sources, only these are recommended for the metadata store in production."
+  },
+  {
+    question: "Does Superset work with my database?",
+    answer: "Superset supports any database with a Python SQLAlchemy dialect and DBAPI driver. Check the Connecting to Databases documentation for the full list of supported databases."
+  },
+  {
+    question: "Does Superset offer a public API?",
+    answer: "Yes, Superset has a public REST API documented using Swagger. Enable FAB_API_SWAGGER_UI in superset_config.py to access interactive API documentation at /swagger/v1."
+  },
+  {
+    question: "Does Superset collect any telemetry data?",
+    answer: "Superset uses Scarf by default to collect basic telemetry data to help maintainers understand version usage. Users can opt out by setting the SCARF_ANALYTICS environment variable to false."
+  },
+  {
+    question: "Does Superset have a trash bin to recover deleted assets?",
+    answer: "No, there is no built-in way to recover deleted dashboards, charts, or datasets. It is recommended to take periodic backups of the metadata database and use export functionality for recovery."
+  }
+]} />
+
 # FAQ
 
 ## How big of a dataset can Superset handle?

docs/docusaurus.config.ts

@@ -23,6 +23,7 @@ import type * as OpenApiPlugin from 'docusaurus-plugin-openapi-docs';
 import { themes } from 'prism-react-renderer';
 import remarkImportPartial from 'remark-import-partial';
 import remarkLocalizeBadges from './plugins/remark-localize-badges.mjs';
+import remarkTechArticleSchema from './plugins/remark-tech-article-schema.mjs';
 import * as fs from 'fs';
 import * as path from 'path';
 
@@ -46,7 +47,7 @@ if (!versionsConfig.components.disabled) {
       sidebarPath: require.resolve('./sidebarComponents.js'),
       editUrl:
         'https://github.com/apache/superset/edit/master/docs/components',
-      remarkPlugins: [remarkImportPartial, remarkLocalizeBadges],
+      remarkPlugins: [remarkImportPartial, remarkLocalizeBadges, remarkTechArticleSchema],
       admonitions: {
         keywords: ['note', 'tip', 'info', 'warning', 'danger', 'resources'],
         extendDefaults: true,
@@ -74,7 +75,7 @@ if (!versionsConfig.developer_portal.disabled) {
       sidebarPath: require.resolve('./sidebarTutorials.js'),
       editUrl:
         'https://github.com/apache/superset/edit/master/docs/developer_portal',
-      remarkPlugins: [remarkImportPartial, remarkLocalizeBadges],
+      remarkPlugins: [remarkImportPartial, remarkLocalizeBadges, remarkTechArticleSchema],
       admonitions: {
         keywords: ['note', 'tip', 'info', 'warning', 'danger', 'resources'],
         extendDefaults: true,
@@ -180,6 +181,83 @@ const config: Config = {
   favicon: '/img/favicon.ico',
   organizationName: 'apache',
   projectName: 'superset',
+
+  // SEO: Structured data (Organization, Software, WebSite with SearchAction)
+  headTags: [
+    // SoftwareApplication schema
+    {
+      tagName: 'script',
+      attributes: {
+        type: 'application/ld+json',
+      },
+      innerHTML: JSON.stringify({
+        '@context': 'https://schema.org',
+        '@type': 'SoftwareApplication',
+        name: 'Apache Superset',
+        applicationCategory: 'BusinessApplication',
+        operatingSystem: 'Cross-platform',
+        description: 'Apache Superset is a modern, enterprise-ready business intelligence web application for data exploration and visualization.',
+        url: 'https://superset.apache.org',
+        license: 'https://www.apache.org/licenses/LICENSE-2.0',
+        author: {
+          '@type': 'Organization',
+          name: 'Apache Software Foundation',
+          url: 'https://www.apache.org/',
+          logo: 'https://www.apache.org/foundation/press/kit/asf_logo.png',
+        },
+        offers: {
+          '@type': 'Offer',
+          price: '0',
+          priceCurrency: 'USD',
+        },
+        featureList: [
+          'Interactive dashboards',
+          'SQL IDE',
+          '40+ visualization types',
+          'Semantic layer',
+          'Role-based access control',
+          'REST API',
+        ],
+      }),
+    },
+    // WebSite schema with SearchAction (enables sitelinks search box in Google)
+    {
+      tagName: 'script',
+      attributes: {
+        type: 'application/ld+json',
+      },
+      innerHTML: JSON.stringify({
+        '@context': 'https://schema.org',
+        '@type': 'WebSite',
+        name: 'Apache Superset',
+        url: 'https://superset.apache.org',
+        potentialAction: {
+          '@type': 'SearchAction',
+          target: {
+            '@type': 'EntryPoint',
+            urlTemplate: 'https://superset.apache.org/search?q={search_term_string}',
+          },
+          'query-input': 'required name=search_term_string',
+        },
+      }),
+    },
+    // Preconnect hints for faster external resource loading
+    {
+      tagName: 'link',
+      attributes: {
+        rel: 'preconnect',
+        href: 'https://WR5FASX5ED-dsn.algolia.net',
+        crossorigin: 'anonymous',
+      },
+    },
+    {
+      tagName: 'link',
+      attributes: {
+        rel: 'preconnect',
+        href: 'https://analytics.apache.org',
+      },
+    },
+  ],
   themes: [
     '@saucelabs/theme-github-codeblock',
     '@docusaurus/theme-mermaid',
@@ -212,6 +290,19 @@ const config: Config = {
         },
       },
     ],
+    // SEO: Generate robots.txt during build
+    [
+      require.resolve('./plugins/robots-txt-plugin.js'),
+      {
+        policies: [
+          {
+            userAgent: '*',
+            allow: '/',
+            disallow: ['/api/v1/', '/_next/', '/static/js/*.map'],
+          },
+        ],
+      },
+    ],
     [
       '@docusaurus/plugin-client-redirects',
       {
@@ -373,7 +464,7 @@ const config: Config = {
             }
             return `https://github.com/apache/superset/edit/master/docs/${versionDocsDirPath}/${docPath}`;
           },
-          remarkPlugins: [remarkImportPartial, remarkLocalizeBadges],
+          remarkPlugins: [remarkImportPartial, remarkLocalizeBadges, remarkTechArticleSchema],
           admonitions: {
             keywords: ['note', 'tip', 'info', 'warning', 'danger', 'resources'],
             extendDefaults: true,
@@ -396,11 +487,57 @@ const config: Config = {
         theme: {
           customCss: require.resolve('./src/styles/custom.css'),
         },
+        // SEO: Sitemap configuration with priorities
+        sitemap: {
+          lastmod: 'date',
+          changefreq: 'weekly',
+          priority: 0.5,
+          ignorePatterns: ['/tags/**'],
+          filename: 'sitemap.xml',
+          createSitemapItems: async (params) => {
+            const { defaultCreateSitemapItems, ...rest } = params;
+            const items = await defaultCreateSitemapItems(rest);
+            return items.map((item) => {
+              // Boost priority for key pages
+              if (item.url.includes('/docs/intro')) {
+                return { ...item, priority: 1.0, changefreq: 'daily' };
+              }
+              if (item.url.includes('/docs/quickstart')) {
+                return { ...item, priority: 0.9, changefreq: 'weekly' };
+              }
+              if (item.url.includes('/docs/installation/')) {
+                return { ...item, priority: 0.8, changefreq: 'weekly' };
+              }
+              if (item.url.includes('/docs/databases')) {
+                return { ...item, priority: 0.8, changefreq: 'weekly' };
+              }
+              if (item.url.includes('/docs/faq')) {
+                return { ...item, priority: 0.7, changefreq: 'monthly' };
+              }
+              if (item.url === 'https://superset.apache.org/') {
+                return { ...item, priority: 1.0, changefreq: 'daily' };
+              }
+              return item;
+            });
+          },
+        },
       } satisfies Options,
     ],
   ],
 
   themeConfig: {
+    // SEO: OpenGraph and Twitter meta tags
+    metadata: [
+      { name: 'keywords', content: 'data visualization, business intelligence, BI, dashboards, SQL, analytics, open source, Apache, charts, reporting' },
+      { property: 'og:type', content: 'website' },
+      { property: 'og:site_name', content: 'Apache Superset' },
+      { property: 'og:image', content: 'https://superset.apache.org/img/superset-og-image.png' },
+      { property: 'og:image:width', content: '1200' },
+      { property: 'og:image:height', content: '630' },
+      { name: 'twitter:card', content: 'summary_large_image' },
+      { name: 'twitter:image', content: 'https://superset.apache.org/img/superset-og-image.png' },
+      { name: 'twitter:site', content: '@ApacheSuperset' },
+    ],
     colorMode: {
       defaultMode: 'dark',
       disableSwitch: false,
@@ -499,7 +636,6 @@ const config: Config = {
       copyright: `
           <div class="footer__ci-services">
             <span>CI powered by</span>
-            <a href="https://applitools.com/" target="_blank" rel="nofollow noopener noreferrer"><img src="/img/applitools.png" alt="Applitools" title="Applitools - Visual Testing" /></a>
             <a href="https://www.netlify.com/" target="_blank" rel="nofollow noopener noreferrer"><img src="/img/netlify.png" alt="Netlify" title="Netlify - Deploy Previews" /></a>
           </div>
           <p>Copyright © ${new Date().getFullYear()},

docs/i18n/en/docusaurus-theme-classic/footer.json

@@ -1,6 +1,6 @@
 {
   "copyright": {
-    "message": "\n          <div class=\"footer__ci-services\">\n            <span>CI powered by</span>\n            <a href=\"https://applitools.com/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"><img src=\"/img/applitools.png\" alt=\"Applitools\" title=\"Applitools - Visual Testing\" /></a>\n            <a href=\"https://www.netlify.com/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"><img src=\"/img/netlify.png\" alt=\"Netlify\" title=\"Netlify - Deploy Previews\" /></a>\n          </div>\n          <p>Copyright © 2026,\n          The <a href=\"https://www.apache.org/\" target=\"_blank\" rel=\"noreferrer\">Apache Software Foundation</a>,\n          Licensed under the Apache <a href=\"https://apache.org/licenses/LICENSE-2.0\" target=\"_blank\" rel=\"noreferrer\">License</a>.</p>\n          <p><small>Apache Superset, Apache, Superset, the Superset logo, and the Apache feather logo are either registered trademarks or trademarks of The Apache Software Foundation. All other products or name brands are trademarks of their respective holders, including The Apache Software Foundation.\n          <a href=\"https://www.apache.org/\" target=\"_blank\">Apache Software Foundation</a> resources</small></p>\n          <img class=\"footer__divider\" src=\"/img/community/line.png\" alt=\"Divider\" />\n          <p>\n            <small>\n              <a href=\"/docs/security/\" target=\"_blank\" rel=\"noreferrer\">Security</a>&nbsp;|&nbsp;\n              <a href=\"https://www.apache.org/foundation/sponsorship.html\" target=\"_blank\" rel=\"noreferrer\">Donate</a>&nbsp;|&nbsp;\n              <a href=\"https://www.apache.org/foundation/thanks.html\" target=\"_blank\" rel=\"noreferrer\">Thanks</a>&nbsp;|&nbsp;\n              <a href=\"https://apache.org/events/current-event\" target=\"_blank\" rel=\"noreferrer\">Events</a>&nbsp;|&nbsp;\n              <a href=\"https://apache.org/licenses/\" target=\"_blank\" rel=\"noreferrer\">License</a>&nbsp;|&nbsp;\n              <a href=\"https://privacy.apache.org/policies/privacy-policy-public.html\" target=\"_blank\" rel=\"noreferrer\">Privacy</a>\n            </small>\n          </p>\n          <!-- telemetry/analytics pixel: -->\n          <img referrerPolicy=\"no-referrer-when-downgrade\" src=\"https://static.scarf.sh/a.png?x-pxid=39ae6855-95fc-4566-86e5-360d542b0a68\" />\n          ",
+    "message": "\n          <div class=\"footer__ci-services\">\n            <span>CI powered by</span>\n            <a href=\"https://www.netlify.com/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"><img src=\"/img/netlify.png\" alt=\"Netlify\" title=\"Netlify - Deploy Previews\" /></a>\n          </div>\n          <p>Copyright © 2026,\n          The <a href=\"https://www.apache.org/\" target=\"_blank\" rel=\"noreferrer\">Apache Software Foundation</a>,\n          Licensed under the Apache <a href=\"https://apache.org/licenses/LICENSE-2.0\" target=\"_blank\" rel=\"noreferrer\">License</a>.</p>\n          <p><small>Apache Superset, Apache, Superset, the Superset logo, and the Apache feather logo are either registered trademarks or trademarks of The Apache Software Foundation. All other products or name brands are trademarks of their respective holders, including The Apache Software Foundation.\n          <a href=\"https://www.apache.org/\" target=\"_blank\">Apache Software Foundation</a> resources</small></p>\n          <img class=\"footer__divider\" src=\"/img/community/line.png\" alt=\"Divider\" />\n          <p>\n            <small>\n              <a href=\"/docs/security/\" target=\"_blank\" rel=\"noreferrer\">Security</a>&nbsp;|&nbsp;\n              <a href=\"https://www.apache.org/foundation/sponsorship.html\" target=\"_blank\" rel=\"noreferrer\">Donate</a>&nbsp;|&nbsp;\n              <a href=\"https://www.apache.org/foundation/thanks.html\" target=\"_blank\" rel=\"noreferrer\">Thanks</a>&nbsp;|&nbsp;\n              <a href=\"https://apache.org/events/current-event\" target=\"_blank\" rel=\"noreferrer\">Events</a>&nbsp;|&nbsp;\n              <a href=\"https://apache.org/licenses/\" target=\"_blank\" rel=\"noreferrer\">License</a>&nbsp;|&nbsp;\n              <a href=\"https://privacy.apache.org/policies/privacy-policy-public.html\" target=\"_blank\" rel=\"noreferrer\">Privacy</a>\n            </small>\n          </p>\n          <!-- telemetry/analytics pixel: -->\n          <img referrerPolicy=\"no-referrer-when-downgrade\" src=\"https://static.scarf.sh/a.png?x-pxid=39ae6855-95fc-4566-86e5-360d542b0a68\" />\n          ",
     "description": "The footer copyright"
   }
 }

docs/package.json

@@ -48,25 +48,26 @@
     "@emotion/react": "^11.13.3",
     "@emotion/styled": "^11.14.1",
     "@fontsource/fira-code": "^5.2.7",
+    "@fontsource/ibm-plex-mono": "^5.2.7",
     "@fontsource/inter": "^5.2.8",
     "@mdx-js/react": "^3.1.1",
     "@saucelabs/theme-github-codeblock": "^0.3.0",
-    "@storybook/addon-docs": "^8.6.15",
+    "@storybook/addon-docs": "^8.6.17",
     "@storybook/blocks": "^8.6.15",
-    "@storybook/channels": "^8.6.15",
-    "@storybook/client-logger": "^8.6.15",
-    "@storybook/components": "^8.6.15",
-    "@storybook/core": "^8.6.15",
-    "@storybook/core-events": "^8.6.15",
+    "@storybook/channels": "^8.6.17",
+    "@storybook/client-logger": "^8.6.17",
+    "@storybook/components": "^8.6.17",
+    "@storybook/core": "^8.6.17",
+    "@storybook/core-events": "^8.6.17",
     "@storybook/csf": "^0.1.13",
-    "@storybook/docs-tools": "^8.6.15",
-    "@storybook/preview-api": "^8.6.15",
+    "@storybook/docs-tools": "^8.6.17",
+    "@storybook/preview-api": "^8.6.17",
     "@storybook/theming": "^8.6.15",
     "@superset-ui/core": "^0.20.4",
     "@swc/core": "^1.15.11",
-    "antd": "^6.2.3",
+    "antd": "^6.3.0",
     "baseline-browser-mapping": "^2.9.19",
-    "caniuse-lite": "^1.0.30001769",
+    "caniuse-lite": "^1.0.30001770",
     "docusaurus-plugin-openapi-docs": "^4.6.0",
     "docusaurus-theme-openapi-docs": "^4.6.0",
     "js-yaml": "^4.1.1",
@@ -81,8 +82,8 @@
     "react-table": "^7.8.0",
     "remark-import-partial": "^0.0.2",
     "reselect": "^5.1.1",
-    "storybook": "^8.6.15",
-    "swagger-ui-react": "^5.31.0",
+    "storybook": "^8.6.17",
+    "swagger-ui-react": "^5.31.1",
     "swc-loader": "^0.2.7",
     "tinycolor2": "^1.4.2",
     "unist-util-visit": "^5.1.0"
@@ -94,7 +95,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/react": "^19.1.8",
     "@typescript-eslint/eslint-plugin": "^8.52.0",
-    "@typescript-eslint/parser": "^8.52.0",
+    "@typescript-eslint/parser": "^8.55.0",
     "eslint": "^9.39.2",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
@@ -102,8 +103,8 @@
     "globals": "^17.3.0",
     "prettier": "^3.8.1",
     "typescript": "~5.9.3",
-    "typescript-eslint": "^8.54.0",
-    "webpack": "^5.105.0"
+    "typescript-eslint": "^8.56.0",
+    "webpack": "^5.105.2"
   },
   "browserslist": {
     "production": [

docs/plugins/remark-tech-article-schema.mjs

@@ -0,0 +1,153 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+// Note: visit from unist-util-visit is available if needed for tree traversal
+
+/**
+ * Remark plugin that automatically injects TechArticle schema import and component
+ * into documentation MDX files based on frontmatter.
+ *
+ * This enables rich snippets for technical documentation in search results.
+ *
+ * Frontmatter options:
+ * - title: (required) Article headline
+ * - description: (required) Article description
+ * - keywords: (optional) Array of keywords
+ * - seo_proficiency: (optional) 'Beginner' or 'Expert', defaults to 'Beginner'
+ * - seo_schema: (optional) Set to false to disable schema injection
+ */
+export default function remarkTechArticleSchema() {
+  return (tree, file) => {
+    const frontmatter = file.data.frontMatter || {};
+
+    // Skip if explicitly disabled or missing required fields
+    if (frontmatter.seo_schema === false) {
+      return;
+    }
+
+    // Only add schema if we have title and description
+    if (!frontmatter.title || !frontmatter.description) {
+      return;
+    }
+
+    const title = frontmatter.title;
+    const description = frontmatter.description;
+    const keywords = Array.isArray(frontmatter.keywords) ? frontmatter.keywords : [];
+    const proficiencyLevel = frontmatter.seo_proficiency || 'Beginner';
+
+    // Create the import statement
+    const importNode = {
+      type: 'mdxjsEsm',
+      value: `import TechArticleSchema from '@site/src/components/TechArticleSchema';`,
+      data: {
+        estree: {
+          type: 'Program',
+          sourceType: 'module',
+          body: [
+            {
+              type: 'ImportDeclaration',
+              specifiers: [
+                {
+                  type: 'ImportDefaultSpecifier',
+                  local: { type: 'Identifier', name: 'TechArticleSchema' },
+                },
+              ],
+              source: {
+                type: 'Literal',
+                value: '@site/src/components/TechArticleSchema',
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    // Create the component node for MDX
+    const componentNode = {
+      type: 'mdxJsxFlowElement',
+      name: 'TechArticleSchema',
+      attributes: [
+        {
+          type: 'mdxJsxAttribute',
+          name: 'title',
+          value: title,
+        },
+        {
+          type: 'mdxJsxAttribute',
+          name: 'description',
+          value: description,
+        },
+        ...(keywords.length > 0
+          ? [
+              {
+                type: 'mdxJsxAttribute',
+                name: 'keywords',
+                value: {
+                  type: 'mdxJsxAttributeValueExpression',
+                  value: JSON.stringify(keywords),
+                  data: {
+                    estree: {
+                      type: 'Program',
+                      sourceType: 'module',
+                      body: [
+                        {
+                          type: 'ExpressionStatement',
+                          expression: {
+                            type: 'ArrayExpression',
+                            elements: keywords.map((k) => ({
+                              type: 'Literal',
+                              value: k,
+                            })),
+                          },
+                        },
+                      ],
+                    },
+                  },
+                },
+              },
+            ]
+          : []),
+        ...(proficiencyLevel !== 'Beginner'
+          ? [
+              {
+                type: 'mdxJsxAttribute',
+                name: 'proficiencyLevel',
+                value: proficiencyLevel,
+              },
+            ]
+          : []),
+      ],
+      children: [],
+    };
+
+    // Insert import at the beginning
+    tree.children.unshift(importNode);
+
+    // Find the first heading and insert component after it
+    let insertIndex = 1; // Default: after import
+    for (let i = 1; i < tree.children.length; i++) {
+      if (tree.children[i].type === 'heading') {
+        insertIndex = i + 1;
+        break;
+      }
+    }
+
+    tree.children.splice(insertIndex, 0, componentNode);
+  };
+}

docs/plugins/robots-txt-plugin.js

@@ -0,0 +1,83 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+/* eslint-disable @typescript-eslint/no-require-imports */
+const fs = require('fs');
+const path = require('path');
+/* eslint-enable @typescript-eslint/no-require-imports */
+
+/**
+ * Docusaurus plugin to generate robots.txt during build
+ * Configuration is passed via plugin options
+ */
+module.exports = function robotsTxtPlugin(context, options = {}) {
+  const { siteConfig } = context;
+  const {
+    policies = [{ userAgent: '*', allow: '/' }],
+    additionalSitemaps = [],
+  } = options;
+
+  return {
+    name: 'robots-txt-plugin',
+
+    async postBuild({ outDir }) {
+      const sitemapUrl = `${siteConfig.url}/sitemap.xml`;
+
+      // Build robots.txt content
+      const lines = [];
+
+      // Add policies
+      for (const policy of policies) {
+        lines.push(`User-agent: ${policy.userAgent}`);
+
+        if (policy.allow) {
+          const allows = Array.isArray(policy.allow) ? policy.allow : [policy.allow];
+          for (const allow of allows) {
+            lines.push(`Allow: ${allow}`);
+          }
+        }
+
+        if (policy.disallow) {
+          const disallows = Array.isArray(policy.disallow) ? policy.disallow : [policy.disallow];
+          for (const disallow of disallows) {
+            lines.push(`Disallow: ${disallow}`);
+          }
+        }
+
+        if (policy.crawlDelay) {
+          lines.push(`Crawl-delay: ${policy.crawlDelay}`);
+        }
+
+        lines.push(''); // Empty line between policies
+      }
+
+      // Add sitemaps
+      lines.push(`Sitemap: ${sitemapUrl}`);
+      for (const sitemap of additionalSitemaps) {
+        lines.push(`Sitemap: ${sitemap}`);
+      }
+
+      // Write robots.txt
+      const robotsPath = path.join(outDir, 'robots.txt');
+      fs.writeFileSync(robotsPath, lines.join('\n'));
+
+      console.log('Generated robots.txt');
+    },
+  };
+};

docs/sidebarTutorials.js

@@ -97,6 +97,7 @@ const sidebars = {
         'extensions/deployment',
         'extensions/mcp',
         'extensions/security',
+        'extensions/tasks',
         'extensions/registry',
       ],
     },

docs/src/components/FAQSchema.tsx

@@ -0,0 +1,66 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import type { JSX } from 'react';
+import Head from '@docusaurus/Head';
+
+interface FAQItem {
+  question: string;
+  answer: string;
+}
+
+interface FAQSchemaProps {
+  faqs: FAQItem[];
+}
+
+/**
+ * Component that injects FAQPage JSON-LD structured data
+ * Use this on FAQ pages to enable rich snippets in search results
+ *
+ * @example
+ * <FAQSchema faqs={[
+ *   { question: "What is Superset?", answer: "Apache Superset is..." },
+ *   { question: "How do I install it?", answer: "You can install via..." }
+ * ]} />
+ */
+export default function FAQSchema({ faqs }: FAQSchemaProps): JSX.Element | null {
+  // FAQPage schema requires a non-empty mainEntity array per schema.org specs
+  if (!faqs || faqs.length === 0) {
+    return null;
+  }
+
+  const schema = {
+    '@context': 'https://schema.org',
+    '@type': 'FAQPage',
+    mainEntity: faqs.map((faq) => ({
+      '@type': 'Question',
+      name: faq.question,
+      acceptedAnswer: {
+        '@type': 'Answer',
+        text: faq.answer,
+      },
+    })),
+  };
+
+  return (
+    <Head>
+      <script type="application/ld+json">{JSON.stringify(schema)}</script>
+    </Head>
+  );
+}

docs/src/components/TechArticleSchema.tsx

@@ -0,0 +1,91 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import type { JSX } from 'react';
+import Head from '@docusaurus/Head';
+import { useLocation } from '@docusaurus/router';
+
+interface TechArticleSchemaProps {
+  title: string;
+  description: string;
+  datePublished?: string;
+  dateModified?: string;
+  keywords?: string[];
+  proficiencyLevel?: 'Beginner' | 'Expert';
+}
+
+/**
+ * Component that injects TechArticle JSON-LD structured data for documentation pages.
+ * This helps search engines understand technical documentation content.
+ *
+ * @example
+ * <TechArticleSchema
+ *   title="Installing Superset with Docker"
+ *   description="Learn how to install Apache Superset using Docker Compose"
+ *   keywords={['docker', 'installation', 'superset']}
+ *   proficiencyLevel="Beginner"
+ * />
+ */
+export default function TechArticleSchema({
+  title,
+  description,
+  datePublished,
+  dateModified,
+  keywords = [],
+  proficiencyLevel = 'Beginner',
+}: TechArticleSchemaProps): JSX.Element {
+  const location = useLocation();
+  const url = `https://superset.apache.org${location.pathname}`;
+
+  const schema = {
+    '@context': 'https://schema.org',
+    '@type': 'TechArticle',
+    headline: title,
+    description,
+    url,
+    proficiencyLevel,
+    author: {
+      '@type': 'Organization',
+      name: 'Apache Superset Contributors',
+      url: 'https://github.com/apache/superset/graphs/contributors',
+    },
+    publisher: {
+      '@type': 'Organization',
+      name: 'Apache Software Foundation',
+      url: 'https://www.apache.org/',
+      logo: {
+        '@type': 'ImageObject',
+        url: 'https://www.apache.org/foundation/press/kit/asf_logo.png',
+      },
+    },
+    mainEntityOfPage: {
+      '@type': 'WebPage',
+      '@id': url,
+    },
+    ...(datePublished && { datePublished }),
+    ...(dateModified && { dateModified }),
+    ...(keywords.length > 0 && { keywords: keywords.join(', ') }),
+  };
+
+  return (
+    <Head>
+      <script type="application/ld+json">{JSON.stringify(schema)}</script>
+    </Head>
+  );
+}

docs/src/components/databases/DatabaseIndex.tsx

@@ -579,7 +579,7 @@ const DatabaseIndex: React.FC<DatabaseIndexProps> = ({ data }) => {
         columns={columns}
         rowKey={(record) => record.isCompatible ? `${record.compatibleWith}-${record.name}` : record.name}
         pagination={{
-          pageSize: 20,
+          defaultPageSize: 20,
           showSizeChanger: true,
           showTotal: (total) => `${total} databases`,
         }}

docs/src/components/databases/DatabasePage.tsx

@@ -104,6 +104,10 @@ const DatabasePage: React.FC<DatabasePageProps> = ({ database, name }) => {
     </div>
   );
 
+  // Ensure db filename can be obtained regardless of how db doc gets generated
+  // by either Flask app (superset.db_engine_specs.postgres) or fallback mode (postgres)
+  const databaseModuleFilename = `${database.module?.split('.').pop()}.py`;
+
   // Render driver information
   const renderDrivers = () => {
     if (!docs?.drivers?.length) return null;
@@ -770,11 +774,11 @@ const DatabasePage: React.FC<DatabasePageProps> = ({ database, name }) => {
               Help improve this documentation by editing the engine spec:
             </Text>
             <a
-              href={`https://github.com/apache/superset/edit/master/superset/db_engine_specs/${database.module}.py`}
+              href={`https://github.com/apache/superset/edit/master/superset/db_engine_specs/${databaseModuleFilename}`}
               target="_blank"
               rel="noreferrer"
             >
-              <EditOutlined /> Edit {database.module}.py
+              <EditOutlined /> Edit {databaseModuleFilename}
             </a>
           </Space>
         </Card>

docs/src/data/databases.json

@@ -1,16 +1,16 @@
 {
-  "generated": "2026-01-31T10:47:01.730Z",
+  "generated": "2026-02-16T04:47:37.257Z",
   "statistics": {
-    "totalDatabases": 70,
-    "withDocumentation": 70,
-    "withConnectionString": 70,
+    "totalDatabases": 72,
+    "withDocumentation": 72,
+    "withConnectionString": 72,
     "withDrivers": 36,
     "withAuthMethods": 4,
-    "supportsJoins": 66,
-    "supportsSubqueries": 67,
+    "supportsJoins": 68,
+    "supportsSubqueries": 69,
     "supportsDynamicSchema": 15,
     "supportsCatalog": 9,
-    "averageScore": 32,
+    "averageScore": 31,
     "maxScore": 201,
     "byCategory": {
       "Other Databases": [
@@ -74,6 +74,7 @@
         "Apache Kylin",
         "Azure Synapse",
         "Ocient",
+        "Apache Phoenix",
         "Amazon Redshift",
         "RisingWave",
         "SingleStore",
@@ -151,12 +152,14 @@
         "Greenplum",
         "Apache Hive",
         "Apache Impala",
+        "Apache IoTDB",
         "Apache Kylin",
         "MariaDB",
         "MonetDB",
         "MySQL",
         "OceanBase",
         "Parseable",
+        "Apache Phoenix",
         "Apache Pinot",
         "PostgreSQL",
         "Presto",
@@ -187,6 +190,7 @@
       "Time Series Databases": [
         "CrateDB",
         "Apache Druid",
+        "Apache IoTDB",
         "Apache Pinot",
         "TDengine"
       ],
@@ -197,7 +201,9 @@
         "Apache Druid",
         "Apache Hive",
         "Apache Impala",
+        "Apache IoTDB",
         "Apache Kylin",
+        "Apache Phoenix",
         "Apache Pinot",
         "Apache Solr",
         "Apache Spark SQL"
@@ -2890,6 +2896,47 @@
       "query_cost_estimation": false,
       "sql_validation": false
     },
+    "Apache IoTDB": {
+      "engine": "apache_iotdb",
+      "engine_name": "Apache IoTDB",
+      "module": "iotdb",
+      "documentation": {
+        "description": "Apache IoTDB is a time series database designed for IoT data, with efficient storage and query capabilities for massive time series data.",
+        "logo": "apache-iotdb.svg",
+        "homepage_url": "https://iotdb.apache.org/",
+        "categories": [
+          "APACHE_PROJECTS",
+          "TIME_SERIES",
+          "OPEN_SOURCE"
+        ],
+        "pypi_packages": [
+          "apache-iotdb"
+        ],
+        "connection_string": "iotdb://{username}:{password}@{hostname}:{port}",
+        "default_port": 6667,
+        "parameters": {
+          "username": "Database username (default: root)",
+          "password": "Database password (default: root)",
+          "hostname": "IP address or hostname",
+          "port": "Default 6667"
+        },
+        "notes": "The IoTDB SQLAlchemy dialect was written to integrate with Apache Superset. IoTDB uses a hierarchical data model, which is reorganized into a relational model for SQL queries."
+      },
+      "time_grains": {},
+      "score": 0,
+      "max_score": 0,
+      "joins": true,
+      "subqueries": true,
+      "supports_dynamic_schema": false,
+      "supports_catalog": false,
+      "supports_dynamic_catalog": false,
+      "ssh_tunneling": false,
+      "query_cancelation": false,
+      "supports_file_upload": false,
+      "user_impersonation": false,
+      "query_cost_estimation": false,
+      "sql_validation": false
+    },
     "Azure Data Explorer": {
       "engine": "azure_data_explorer",
       "engine_name": "Azure Data Explorer",
@@ -4039,6 +4086,41 @@
       "query_cost_estimation": false,
       "sql_validation": false
     },
+    "Apache Phoenix": {
+      "engine": "apache_phoenix",
+      "engine_name": "Apache Phoenix",
+      "module": "phoenix",
+      "documentation": {
+        "description": "Apache Phoenix is a relational database layer over Apache HBase, providing low-latency SQL queries over HBase data.",
+        "logo": "apache-phoenix.png",
+        "homepage_url": "https://phoenix.apache.org/",
+        "categories": [
+          "APACHE_PROJECTS",
+          "ANALYTICAL_DATABASES",
+          "OPEN_SOURCE"
+        ],
+        "pypi_packages": [
+          "phoenixdb"
+        ],
+        "connection_string": "phoenix://{hostname}:{port}/",
+        "default_port": 8765,
+        "notes": "Phoenix provides a SQL interface to Apache HBase. The phoenixdb driver connects via the Phoenix Query Server and supports a subset of SQLAlchemy."
+      },
+      "time_grains": {},
+      "score": 0,
+      "max_score": 0,
+      "joins": true,
+      "subqueries": true,
+      "supports_dynamic_schema": false,
+      "supports_catalog": false,
+      "supports_dynamic_catalog": false,
+      "ssh_tunneling": false,
+      "query_cancelation": false,
+      "supports_file_upload": false,
+      "user_impersonation": false,
+      "query_cost_estimation": false,
+      "sql_validation": false
+    },
     "Apache Pinot": {
       "engine": "apache_pinot",
       "engine_name": "Apache Pinot",
@@ -4207,6 +4289,80 @@
               "OPEN_SOURCE"
             ]
           },
+          {
+            "name": "Supabase",
+            "description": "Open-source Firebase alternative built on top of PostgreSQL, providing a full backend-as-a-service with a hosted Postgres database.",
+            "logo": "supabase.svg",
+            "homepage_url": "https://supabase.com/",
+            "pypi_packages": [
+              "psycopg2"
+            ],
+            "connection_string": "postgresql://{username}:{password}@{host}:{port}/{database}",
+            "connection_examples": [
+              {
+                "description": "Supabase project (connection pooler)",
+                "connection_string": "postgresql://{username}.{project_ref}:{password}@aws-0-{region}.pooler.supabase.com:6543/{database}"
+              }
+            ],
+            "parameters": {
+              "username": "Database user (default: postgres)",
+              "password": "Database password",
+              "host": "Supabase project host (from project settings)",
+              "port": "Default 5432 (direct) or 6543 (pooler)",
+              "database": "Database name (default: postgres)",
+              "project_ref": "Supabase project reference (from project settings)",
+              "region": "Supabase project region (e.g., us-east-1)"
+            },
+            "notes": "Find connection details in your Supabase project dashboard under Settings > Database. Use the connection pooler (port 6543) for better connection management.",
+            "docs_url": "https://supabase.com/docs/guides/database/connecting-to-postgres",
+            "categories": [
+              "HOSTED_OPEN_SOURCE"
+            ]
+          },
+          {
+            "name": "Google AlloyDB",
+            "description": "Google Cloud's PostgreSQL-compatible database service for demanding transactional and analytical workloads.",
+            "logo": "alloydb.png",
+            "homepage_url": "https://cloud.google.com/alloydb",
+            "pypi_packages": [
+              "psycopg2"
+            ],
+            "connection_string": "postgresql://{username}:{password}@{host}:{port}/{database}",
+            "parameters": {
+              "username": "Database user (default: postgres)",
+              "password": "Database password",
+              "host": "AlloyDB instance IP or Auth Proxy address",
+              "port": "Default 5432",
+              "database": "Database name"
+            },
+            "notes": "For public IP connections, use the AlloyDB Auth Proxy for secure access. Private IP connections can connect directly.",
+            "docs_url": "https://cloud.google.com/alloydb/docs",
+            "categories": [
+              "CLOUD_GCP",
+              "HOSTED_OPEN_SOURCE"
+            ]
+          },
+          {
+            "name": "Neon",
+            "description": "Serverless PostgreSQL with branching, scale-to-zero, and bottomless storage.",
+            "logo": "neon.png",
+            "homepage_url": "https://neon.tech/",
+            "pypi_packages": [
+              "psycopg2"
+            ],
+            "connection_string": "postgresql://{username}:{password}@{host}/{database}?sslmode=require",
+            "parameters": {
+              "username": "Neon role name",
+              "password": "Neon role password",
+              "host": "Neon hostname (e.g., ep-cool-name-123456.us-east-2.aws.neon.tech)",
+              "database": "Database name (default: neondb)"
+            },
+            "notes": "SSL is required for all connections. Find connection details in the Neon console under Connection Details.",
+            "docs_url": "https://neon.tech/docs/connect/connect-from-any-app",
+            "categories": [
+              "HOSTED_OPEN_SOURCE"
+            ]
+          },
           {
             "name": "Amazon Aurora PostgreSQL",
             "description": "Amazon Aurora PostgreSQL is a fully managed, PostgreSQL-compatible relational database with up to 5x the throughput of standard PostgreSQL.",

helm/superset/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 13.4.4
+  version: 16.7.27
 - name: redis
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 17.9.4
-digest: sha256:c6290bb7e8ce9c694c06b3f5e9b9d01401943b0943c515d3a7a3a8dc1e6492ea
-generated: "2025-03-16T00:52:41.47139769+09:00"
+digest: sha256:fcae507ca24a20b9cc08b8bf0fcb0eba8ffa33126ab6f71cc3a6e1d5e997e9e3
+generated: "2026-02-08T14:11:58.8058368+01:00"

helm/superset/Chart.yaml

@@ -29,10 +29,10 @@ maintainers:
   - name: craig-rueda
     email: craig@craigrueda.com
     url: https://github.com/craig-rueda
-version: 0.15.2 # See [README](https://github.com/apache/superset/blob/master/helm/superset/README.md#versioning) for version details.
+version: 0.15.4 # See [README](https://github.com/apache/superset/blob/master/helm/superset/README.md#versioning) for version details.
 dependencies:
   - name: postgresql
-    version: 13.4.4
+    version: 16.7.27
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
   - name: redis

helm/superset/README.md

@@ -23,7 +23,7 @@ NOTE: This file is generated by helm-docs: https://github.com/norwoodj/helm-docs
 
 # superset
 
-![Version: 0.15.2](https://img.shields.io/badge/Version-0.15.2-informational?style=flat-square)
+![Version: 0.15.4](https://img.shields.io/badge/Version-0.15.4-informational?style=flat-square)
 
 Apache Superset is a modern, enterprise-ready business intelligence web application
 
@@ -50,7 +50,7 @@ On helm this can be set on `extraSecretEnv.SUPERSET_SECRET_KEY` or `configOverri
 
 | Repository | Name | Version |
 |------------|------|---------|
-| oci://registry-1.docker.io/bitnamicharts | postgresql | 13.4.4 |
+| oci://registry-1.docker.io/bitnamicharts | postgresql | 16.7.27 |
 | oci://registry-1.docker.io/bitnamicharts | redis | 17.9.4 |
 
 ## Values

helm/superset/values.yaml

@@ -312,6 +312,12 @@ supersetNode:
         - /bin/sh
         - -c
         - dockerize -wait "tcp://$DB_HOST:$DB_PORT" -timeout 120s
+      resources:
+        limits:
+          memory: "256Mi"
+        requests:
+          cpu: "250m"
+          memory: "128Mi"
 
   # -- Launch additional containers into supersetNode pod
   extraContainers: []
@@ -410,6 +416,12 @@ supersetWorker:
         - /bin/sh
         - -c
         - dockerize -wait "tcp://$DB_HOST:$DB_PORT" -wait "tcp://$REDIS_HOST:$REDIS_PORT" -timeout 120s
+      resources:
+        limits:
+          memory: "256Mi"
+        requests:
+          cpu: "250m"
+          memory: "128Mi"
   # -- Launch additional containers into supersetWorker pod
   extraContainers: []
   # -- Annotations to be added to supersetWorker deployment
@@ -492,6 +504,12 @@ supersetCeleryBeat:
         - /bin/sh
         - -c
         - dockerize -wait "tcp://$DB_HOST:$DB_PORT" -wait "tcp://$REDIS_HOST:$REDIS_PORT" -timeout 120s
+      resources:
+        limits:
+          memory: "256Mi"
+        requests:
+          cpu: "250m"
+          memory: "128Mi"
   # -- Launch additional containers into supersetCeleryBeat pods
   extraContainers: []
   # -- Annotations to be added to supersetCeleryBeat deployment
@@ -585,6 +603,12 @@ supersetCeleryFlower:
         - /bin/sh
         - -c
         - dockerize -wait "tcp://$DB_HOST:$DB_PORT" -wait "tcp://$REDIS_HOST:$REDIS_PORT" -timeout 120s
+      resources:
+        limits:
+          memory: "256Mi"
+        requests:
+          cpu: "250m"
+          memory: "128Mi"
   # -- Launch additional containers into supersetCeleryFlower pods
   extraContainers: []
   # -- Annotations to be added to supersetCeleryFlower deployment
@@ -749,6 +773,12 @@ init:
         - /bin/sh
         - -c
         - dockerize -wait "tcp://$DB_HOST:$DB_PORT" -timeout 120s
+      resources:
+        limits:
+          memory: "256Mi"
+        requests:
+          cpu: "250m"
+          memory: "128Mi"
   # -- A Superset init script
   # @default -- a script to create admin user and initialize roles
   initscript: |-

pyproject.toml

@@ -82,7 +82,7 @@ dependencies = [
     "parsedatetime",
     "paramiko>=3.4.0",
     "pgsanity",
-    "Pillow>=11.0.0, <12",
+    "Pillow>=11.0.0, <13",
     "polyline>=2.0.0, <3.0",
     "pydantic>=2.8.0",
     "pyparsing>=3.0.6, <4",
@@ -99,8 +99,8 @@ dependencies = [
     "simplejson>=3.15.0",
     "slack_sdk>=3.19.0, <4",
     "sqlalchemy>=1.4, <2",
-    "sqlalchemy-utils>=0.38.3, <0.39",
-    "sqlglot>=27.15.2, <28",
+    "sqlalchemy-utils>=0.38.0, <0.43", # expanding lowerbound to work with pydoris
+    "sqlglot>=28.10.0, <29",
     # newer pandas needs 0.9+
     "tabulate>=0.9.0, <1.0",
     "typing-extensions>=4, <5",
@@ -141,7 +141,7 @@ druid = ["pydruid>=0.6.5,<0.7"]
 duckdb = ["duckdb>=1.4.2,<2", "duckdb-engine>=0.17.0"]
 dynamodb = ["pydynamodb>=0.4.2"]
 solr = ["sqlalchemy-solr >= 0.2.0"]
-elasticsearch = ["elasticsearch-dbapi>=0.2.9, <0.3.0"]
+elasticsearch = ["elasticsearch-dbapi>=0.2.12, <0.3.0"]
 exasol = ["sqlalchemy-exasol >= 2.4.0, <3.0"]
 excel = ["xlrd>=1.2.0, <1.3"]
 fastmcp = ["fastmcp==2.14.3"]

requirements/base.txt

@@ -399,12 +399,12 @@ sqlalchemy==1.4.54
     #   marshmallow-sqlalchemy
     #   shillelagh
     #   sqlalchemy-utils
-sqlalchemy-utils==0.38.3
+sqlalchemy-utils==0.42.0
     # via
     #   apache-superset (pyproject.toml)
     #   apache-superset-core
     #   flask-appbuilder
-sqlglot==27.15.2
+sqlglot==28.10.0
     # via
     #   apache-superset (pyproject.toml)
     #   apache-superset-core

requirements/development.txt

@@ -990,13 +990,13 @@ sqlalchemy==1.4.54
     #   sqlalchemy-utils
 sqlalchemy-bigquery==1.15.0
     # via apache-superset
-sqlalchemy-utils==0.38.3
+sqlalchemy-utils==0.42.0
     # via
     #   -c requirements/base-constraint.txt
     #   apache-superset
     #   apache-superset-core
     #   flask-appbuilder
-sqlglot==27.15.2
+sqlglot==28.10.0
     # via
     #   -c requirements/base-constraint.txt
     #   apache-superset

superset-core/pyproject.toml

@@ -18,7 +18,7 @@
 
 [project]
 name = "apache-superset-core"
-version = "0.0.1rc3"
+version = "0.0.1rc4"
 description = "Core Python package for building Apache Superset backend extensions and integrations"
 readme = "README.md"
 authors = [
@@ -45,8 +45,8 @@ dependencies = [
     "flask-appbuilder>=5.0.2,<6",
     "pydantic>=2.8.0",
     "sqlalchemy>=1.4.0,<2.0",
-    "sqlalchemy-utils>=0.38.0",
-    "sqlglot>=27.15.2, <28",
+    "sqlalchemy-utils>=0.38.0, <0.43", # expanding lowerbound to work with pydoris
+    "sqlglot>=28.10.0, <29",
     "typing-extensions>=4.0.0",
 ]
 

superset-core/src/superset_core/api/daos.py

@@ -46,6 +46,7 @@ from superset_core.api.models import (
     Query,
     SavedQuery,
     Tag,
+    Task,
     User,
 )
 
@@ -248,6 +249,48 @@ class KeyValueDAO(BaseDAO[KeyValue]):
     id_column_name = "id"
 
 
+class TaskDAO(BaseDAO[Task]):
+    """
+    Abstract Task DAO interface.
+
+    Host implementations will replace this class during initialization
+    with a concrete implementation providing actual functionality.
+    """
+
+    # Class variables that will be set by host implementation
+    model_cls = None
+    base_filter = None
+    id_column_name = "id"
+    uuid_column_name = "uuid"
+
+    @classmethod
+    @abstractmethod
+    def find_by_task_key(
+        cls,
+        task_type: str,
+        task_key: str,
+        scope: str = "private",
+        user_id: int | None = None,
+    ) -> Task | None:
+        """
+        Find active task by type, key, scope, and user.
+
+        Uses dedup_key internally for efficient querying with a unique index.
+        Only returns tasks that are active (pending or in progress).
+
+        Uniqueness logic by scope:
+        - private: scope + task_type + task_key + user_id
+        - shared/system: scope + task_type + task_key (user-agnostic)
+
+        :param task_type: Task type to filter by
+        :param task_key: Task identifier for deduplication
+        :param scope: Task scope (private/shared/system)
+        :param user_id: User ID (required for private tasks)
+        :returns: Task instance or None if not found or not active
+        """
+        ...
+
+
 __all__ = [
     "BaseDAO",
     "DatasetDAO",
@@ -259,4 +302,5 @@ __all__ = [
     "SavedQueryDAO",
     "TagDAO",
     "KeyValueDAO",
+    "TaskDAO",
 ]

superset-core/src/superset_core/api/models.py

@@ -40,6 +40,7 @@ from flask_appbuilder import Model
 from sqlalchemy.orm import scoped_session
 
 if TYPE_CHECKING:
+    from superset_core.api.tasks import TaskProperties
     from superset_core.api.types import (
         AsyncQueryHandle,
         QueryOptions,
@@ -361,6 +362,132 @@ class KeyValue(CoreModel):
     changed_by_fk: int | None
 
 
+class Task(CoreModel):
+    """
+    Abstract Task model interface.
+
+    Host implementations will replace this class during initialization
+    with concrete implementation providing actual functionality.
+
+    This model represents async tasks in the Global Task Framework (GTF).
+
+    Non-filterable fields (progress, error info, execution config) are stored
+    in a `properties` JSON blob for schema flexibility.
+    """
+
+    __abstract__ = True
+
+    # Type hints for expected column attributes
+    id: int
+    uuid: UUID
+    task_key: str  # For deduplication
+    task_type: str  # e.g., 'sql_execution'
+    task_name: str | None  # Human readable name
+    scope: str  # private/shared/system
+    status: str
+    dedup_key: str  # Computed deduplication key
+
+    # Timestamps (from AuditMixinNullable)
+    created_on: datetime | None
+    changed_on: datetime | None
+    started_at: datetime | None
+    ended_at: datetime | None
+
+    # User context
+    created_by_fk: int | None
+    user_id: int | None
+
+    # Task output data
+    payload: str  # JSON serialized task output data
+
+    def get_payload(self) -> dict[str, Any]:
+        """
+        Get payload as parsed JSON.
+
+        Payload contains task-specific output data set by task code.
+
+        Host implementations will replace this method during initialization
+        with concrete implementation providing actual functionality.
+
+        :returns: Dictionary containing payload data
+        """
+        raise NotImplementedError("Method will be replaced during initialization")
+
+    def set_payload(self, data: dict[str, Any]) -> None:
+        """
+        Update payload with new data (merges with existing).
+
+        Host implementations will replace this method during initialization
+        with concrete implementation providing actual functionality.
+
+        :param data: Dictionary of data to merge into payload
+        """
+        raise NotImplementedError("Method will be replaced during initialization")
+
+    @property
+    def properties(self) -> Any:
+        """
+        Get typed properties (runtime state and execution config).
+
+        Properties contain:
+        - is_abortable: bool | None - has abort handler registered
+        - progress_percent: float | None - progress 0.0-1.0
+        - progress_current: int | None - current iteration count
+        - progress_total: int | None - total iterations
+        - error_message: str | None - human-readable error message
+        - exception_type: str | None - exception class name
+        - stack_trace: str | None - full formatted traceback
+        - timeout: int | None - timeout in seconds
+
+        Host implementations will replace this property during initialization.
+
+        :returns: TaskProperties dataclass instance
+        """
+        raise NotImplementedError("Property will be replaced during initialization")
+
+    def update_properties(self, updates: "TaskProperties") -> None:
+        """
+        Update specific properties fields (merge semantics).
+
+        Only updates fields present in the updates dict.
+
+        Host implementations will replace this method during initialization.
+
+        :param updates: TaskProperties dict with fields to update
+
+        Example:
+            task.update_properties({"is_abortable": True})
+        """
+        raise NotImplementedError("Method will be replaced during initialization")
+
+
+class TaskSubscriber(CoreModel):
+    """
+    Abstract TaskSubscriber model interface.
+
+    Host implementations will replace this class during initialization
+    with concrete implementation providing actual functionality.
+
+    This model tracks task subscriptions for multi-user shared tasks. When a user
+    schedules a shared task with the same parameters as an existing task,
+    they are subscribed to that task instead of creating a duplicate.
+    """
+
+    __abstract__ = True
+
+    # Type hints for expected attributes (no actual field definitions)
+    id: int
+    task_id: int
+    user_id: int
+    subscribed_at: datetime
+
+    # Audit fields from AuditMixinNullable
+    created_on: datetime | None
+    changed_on: datetime | None
+    created_by_fk: int | None
+    changed_by_fk: int | None
+
+
 def get_session() -> scoped_session:
     """
     Retrieve the SQLAlchemy session to directly interface with the
@@ -384,6 +511,8 @@ __all__ = [
     "SavedQuery",
     "Tag",
     "KeyValue",
+    "Task",
+    "TaskSubscriber",
     "CoreModel",
     "get_session",
 ]

superset-core/src/superset_core/api/tasks.py

@@ -0,0 +1,361 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+from __future__ import annotations
+
+from abc import ABC, abstractmethod
+from dataclasses import dataclass
+from enum import Enum
+from typing import Any, Callable, Generic, Literal, ParamSpec, TypedDict, TypeVar
+
+from superset_core.api.models import Task
+
+P = ParamSpec("P")
+R = TypeVar("R")
+
+
+class TaskStatus(str, Enum):
+    """
+    Status of task execution.
+    """
+
+    PENDING = "pending"
+    IN_PROGRESS = "in_progress"
+    SUCCESS = "success"
+    FAILURE = "failure"
+    ABORTING = "aborting"  # Abort/timeout requested, handlers running
+    ABORTED = "aborted"  # User/admin cancelled
+    TIMED_OUT = "timed_out"  # Timeout expired
+
+
+class TaskScope(str, Enum):
+    """
+    Scope of task visibility and access control.
+    """
+
+    PRIVATE = "private"  # User-specific tasks (default)
+    SHARED = "shared"  # Multi-user collaborative tasks
+    SYSTEM = "system"  # Admin-only background tasks
+
+
+class TaskProperties(TypedDict, total=False):
+    """
+    TypedDict for task runtime state and execution config.
+
+    Stored as JSON in the database, accessed as a dict throughout the codebase.
+    All fields are optional (total=False) - only set keys are present in the dict.
+
+    Usage:
+        # Reading - always use .get() since keys may not be present
+        if task.properties.get("is_abortable"):
+            ...
+
+        # Writing/updating - only include keys you want to set
+        task.update_properties({"is_abortable": True, "progress_percent": 0.5})
+
+    Notes:
+        - Sparse dict: only keys that are explicitly set are present
+        - Unknown keys from JSON are preserved (forward compatibility)
+        - Always use .get() for reads since keys may be absent
+    """
+
+    # Execution config - set at task creation
+    execution_mode: Literal["async", "sync"]
+    timeout: int
+
+    # Runtime state - set by framework during execution
+    is_abortable: bool
+    progress_percent: float
+    progress_current: int
+    progress_total: int
+
+    # Error info - set when task fails
+    error_message: str
+    exception_type: str
+    stack_trace: str
+
+
+@dataclass(frozen=True)
+class TaskOptions:
+    """
+    Execution metadata for tasks.
+
+    NOTE: This is intentionally minimal for the initial implementation.
+    Additional options (queue, priority, run_at, delay_s,
+    max_retries, retry_backoff_s, tags, etc.) can be added later when needed.
+
+    Future enhancements will include:
+    - Validation (e.g., run_at vs delay_s mutual exclusion)
+    - Queue routing and priority management
+    - Retry policies and backoff strategies
+
+    Example:
+        from superset_core.api.tasks import TaskOptions, TaskScope
+
+        # Private task (default)
+        task = my_task.schedule(arg1)
+
+        # Custom task with deduplication
+        task = my_task.schedule(
+            arg1,
+            options=TaskOptions(
+                task_key="custom_key",
+                task_name="Custom Task Name"
+            )
+        )
+
+        # Task with custom name
+        task = admin_task.schedule(
+            options=TaskOptions(task_name="Admin Operation")
+        )
+
+        # Task with timeout (overrides decorator default)
+        task = long_task.schedule(
+            options=TaskOptions(timeout=600)  # 10 minute timeout
+        )
+    """
+
+    task_key: str | None = None
+    task_name: str | None = None
+    timeout: int | None = None  # Timeout in seconds
+
+
+class TaskContext(ABC):
+    """
+    Abstract task context for write-only task state updates.
+
+    Tasks use this context to update their state (progress, payload) and
+    check for cancellation. Tasks should not need to read their own state -
+    they are the source of state, not consumers of it.
+
+    Host implementations will replace this abstract class during initialization
+    with a concrete implementation providing actual functionality.
+    """
+
+    @abstractmethod
+    def update_task(
+        self,
+        progress: float | int | tuple[int, int] | None = None,
+        payload: dict[str, Any] | None = None,
+    ) -> None:
+        """
+        Update task progress and/or payload atomically.
+
+        All parameters are optional. Payload is merged with existing data,
+        not replaced. All updates occur in a single database transaction.
+
+        Progress can be specified in three ways:
+        - float (0.0-1.0): Percentage only, e.g., 0.5 means 50%
+        - int: Count only (total unknown), e.g., 42 means "42 items processed"
+        - tuple[int, int]: Count and total, e.g., (3, 100) means "3 of 100"
+          The percentage is automatically computed from count/total.
+
+        :param progress: Progress value, or None to leave unchanged
+        :param payload: Payload data to merge (dict), or None to leave unchanged
+
+        Examples:
+            # Percentage only - displays as "In progress: 50 %"
+            ctx.update_task(progress=0.5)
+
+            # Count only (total unknown) - displays as "In progress: 42"
+            ctx.update_task(progress=42)
+
+            # Count and total - displays as "In progress: 3 of 100 (3 %)"
+            ctx.update_task(progress=(3, 100))
+
+            # Update payload only
+            ctx.update_task(payload={"step": "processing"})
+
+            # Update both atomically
+            ctx.update_task(
+                progress=(80, 100),
+                payload={"processed": 80, "total": 100}
+            )
+        """
+        ...
+
+    @abstractmethod
+    def on_cleanup(self, handler: Callable[[], None]) -> Callable[[], None]:
+        """
+        Register a cleanup handler that runs when the task ends.
+
+        Cleanup handlers are called when the task completes (success),
+        fails with an error, or is cancelled. Multiple handlers can be
+        registered and will execute in LIFO order (last registered runs first).
+
+        Can be used as a decorator:
+            @ctx.on_cleanup
+            def cleanup():
+                logger.info("Task ended")
+
+        Or called directly:
+            ctx.on_cleanup(lambda: logger.info("Task ended"))
+
+        :param handler: Cleanup function to register
+        :returns: The handler (for decorator compatibility)
+        """
+        ...
+
+    @abstractmethod
+    def on_abort(self, handler: Callable[[], None]) -> Callable[[], None]:
+        """
+        Register handler that runs when task is aborted.
+
+        When the first handler is registered, background polling starts
+        automatically. The handler will be called when an abort is detected.
+
+        The handler executes in a background thread and the task code
+        continues running unless the handler takes action to stop it.
+
+        :param handler: Callback function to execute when abort is detected
+        :returns: The handler (for decorator compatibility)
+
+        Example:
+            @ctx.on_abort
+            def handle_abort():
+                logger.info("Task was aborted!")
+                cleanup_partial_work()
+        """
+        ...
+
+
+def task(
+    name: str | None = None,
+    scope: TaskScope = TaskScope.PRIVATE,
+    timeout: int | None = None,
+) -> Callable[[Callable[P, R]], "TaskWrapper[P]"]:
+    """
+    Decorator to register a task.
+
+    Host implementations will replace this function during initialization
+    with a concrete implementation providing actual functionality.
+
+    :param name: Optional unique task name (e.g., "superset.generate_thumbnail").
+                 If not provided, uses the function name as the task name.
+    :param scope: Task scope (TaskScope.PRIVATE, SHARED, or SYSTEM).
+                  Defaults to TaskScope.PRIVATE.
+    :param timeout: Optional timeout in seconds. When the timeout is reached,
+                    abort handlers are triggered if registered. Can be overridden
+                    at call time via TaskOptions(timeout=...).
+    :returns: TaskWrapper with .schedule() method
+
+    Note:
+        Both direct calls and .schedule() return Task, regardless of the
+        original function's return type. The decorated function's return value
+        is discarded; only side effects and context updates matter.
+
+    Example:
+        from superset_core.api.tasks import task, get_context, TaskScope
+
+        # Private task (default scope)
+        @task
+        def generate_thumbnail(chart_id: int) -> None:
+            ctx = get_context()
+            # ... task implementation
+
+        # Named task with shared scope
+        @task(name="generate_report", scope=TaskScope.SHARED)
+        def generate_chart_thumbnail(chart_id: int) -> None:
+            ctx = get_context()
+
+            # Update progress and payload atomically
+            ctx.update_task(
+                progress=0.5,
+                payload={"chart_id": chart_id, "status": "processing"}
+            )
+            # ... task implementation
+
+            ctx.update_task(progress=1.0)
+
+        # System task (admin-only)
+        @task(scope=TaskScope.SYSTEM)
+        def cleanup_old_data() -> None:
+            ctx = get_context()
+            # ... cleanup implementation
+
+        # Task with timeout
+        @task(timeout=300)  # 5-minute timeout
+        def long_running_task() -> None:
+            ctx = get_context()
+
+            @ctx.on_abort
+            def handle_abort():
+                # Called when timeout or manual abort
+                pass
+
+        # Schedule async execution
+        task = generate_chart_thumbnail.schedule(chart_id=123)  # Returns Task
+
+        # Direct call for sync execution (blocks until task is complete)
+        task = generate_chart_thumbnail(chart_id=123)  # Also returns Task
+    """
+    raise NotImplementedError("Function will be replaced during initialization")
+
+
+class TaskWrapper(Generic[P]):
+    """
+    Type stub for task wrapper returned by @task decorator.
+
+    Both __call__ and .schedule() return Task.
+    """
+
+    def __call__(self, *args: P.args, **kwargs: P.kwargs) -> Task:
+        """Execute the task synchronously."""
+        raise NotImplementedError("Will be replaced during initialization")
+
+    def schedule(self, *args: P.args, **kwargs: P.kwargs) -> Task:
+        """Schedule the task for async execution."""
+        raise NotImplementedError("Will be replaced during initialization")
+
+
+def get_context() -> TaskContext:
+    """
+    Get the current task context from ambient context.
+
+    Host implementations will replace this function during initialization
+    with a concrete implementation providing actual functionality.
+
+    This function provides ambient access to the task context without
+    requiring it to be passed as a parameter. It can only be called
+    from within an async task execution.
+
+    :returns: The current TaskContext
+    :raises RuntimeError: If called outside a task execution context
+
+    Example:
+        @task("thumbnail_generation")
+        def generate_chart_thumbnail(chart_id: int):
+            ctx = get_context()  # Access ambient context
+
+            # Update task state - no need to fetch task object
+            ctx.update_task(
+                progress=0.5,
+                payload={"chart_id": chart_id}
+            )
+    """
+    raise NotImplementedError("Function will be replaced during initialization")
+
+
+__all__ = [
+    "TaskStatus",
+    "TaskScope",
+    "TaskProperties",
+    "TaskContext",
+    "TaskOptions",
+    "task",
+    "get_context",
+]

superset-core/src/superset_core/extensions/types.py

@@ -56,19 +56,37 @@ class ModuleFederationConfig(BaseModel):
 
 
 class ContributionConfig(BaseModel):
-    """Configuration for frontend UI contributions."""
+    """Configuration for frontend UI contributions.
+
+    Views and menus use a nested structure: type -> scope -> location -> contributions.
+
+    Example:
+        {
+            "views": {
+                "sqllab": {
+                    "panels": [{"id": "my-ext.panel", "name": "My Panel"}],
+                    "leftSidebar": [{"id": "my-ext.sidebar", "name": "Sidebar"}]
+                }
+            },
+            "menus": {
+                "sqllab": {
+                    "editor": {"primary": [...], "secondary": [...]}
+                }
+            }
+        }
+    """
 
     commands: list[dict[str, Any]] = Field(
         default_factory=list,
         description="Command contributions",
     )
-    views: dict[str, list[dict[str, Any]]] = Field(
+    views: dict[str, dict[str, list[dict[str, Any]]]] = Field(
         default_factory=dict,
-        description="View contributions by location",
+        description="View contributions by scope and location",
     )
-    menus: dict[str, Any] = Field(
+    menus: dict[str, dict[str, Any]] = Field(
         default_factory=dict,
-        description="Menu contributions",
+        description="Menu contributions by scope and location",
     )
 
 

superset-extensions-cli/src/superset_extensions_cli/templates/frontend/package.json.j2

@@ -23,8 +23,6 @@
     "@babel/preset-typescript": "^7.26.0",
     "@types/react": "^19.0.10",
     "copy-webpack-plugin": "^13.0.0",
-    "install": "^0.13.0",
-    "npm": "^11.1.0",
     "ts-loader": "^9.5.2",
     "typescript": "^5.8.2",
     "webpack": "^5.98.0",

superset-frontend/.eslintrc.js

@@ -135,7 +135,9 @@ module.exports = {
     'icons',
     'i18n-strings',
     'react-prefer-function-component',
+    'react-you-might-not-need-an-effect',
     'prettier',
+    'react-you-might-not-need-an-effect',
   ],
   rules: {
     // === Essential Superset customizations ===
@@ -235,12 +237,32 @@ module.exports = {
     'jsx-a11y/mouse-events-have-key-events': 0,
     'jsx-a11y/no-static-element-interactions': 0,
 
+    // React effect best practices
+    'react-you-might-not-need-an-effect/no-empty-effect': 'error',
+    'react-you-might-not-need-an-effect/no-pass-live-state-to-parent': 'error',
+    'react-you-might-not-need-an-effect/no-initialize-state': 'error',
+
     // Lodash
     'lodash/import-scope': [2, 'member'],
 
+    // React effect best practices
+    'react-you-might-not-need-an-effect/no-reset-all-state-on-prop-change':
+      'error',
+    'react-you-might-not-need-an-effect/no-chain-state-updates': 'error',
+    'react-you-might-not-need-an-effect/no-event-handler': 'error',
+    'react-you-might-not-need-an-effect/no-derived-state': 'error',
+
+    // Storybook
+    'storybook/prefer-pascal-case': 'error',
+
     // File progress
     'file-progress/activate': 1,
 
+    // React effect rules
+    'react-you-might-not-need-an-effect/no-adjust-state-on-prop-change':
+      'error',
+    'react-you-might-not-need-an-effect/no-pass-data-to-parent': 'error',
+
     // Restricted imports
     'no-restricted-imports': [
       'error',
@@ -273,6 +295,52 @@ module.exports = {
     ],
   },
   overrides: [
+    // Ban JavaScript files in src/ - all new code must be TypeScript
+    {
+      files: ['src/**/*.js', 'src/**/*.jsx'],
+      rules: {
+        'no-restricted-syntax': [
+          'error',
+          {
+            selector: 'Program',
+            message:
+              'JavaScript files are not allowed in src/. Please use TypeScript (.ts/.tsx) instead.',
+          },
+        ],
+      },
+    },
+    // Ban JavaScript files in plugins/ - all plugin source code must be TypeScript
+    {
+      files: ['plugins/**/src/**/*.js', 'plugins/**/src/**/*.jsx'],
+      rules: {
+        'no-restricted-syntax': [
+          'error',
+          {
+            selector: 'Program',
+            message:
+              'JavaScript files are not allowed in plugins/. Please use TypeScript (.ts/.tsx) instead.',
+          },
+        ],
+      },
+    },
+    // Ban JavaScript files in packages/ - with exceptions for config files and generators
+    {
+      files: ['packages/**/src/**/*.js', 'packages/**/src/**/*.jsx'],
+      excludedFiles: [
+        'packages/generator-superset/**/*', // Yeoman generator templates run via Node
+        'packages/**/__mocks__/**/*', // Test mocks
+      ],
+      rules: {
+        'no-restricted-syntax': [
+          'error',
+          {
+            selector: 'Program',
+            message:
+              'JavaScript files are not allowed in packages/. Please use TypeScript (.ts/.tsx) instead.',
+          },
+        ],
+      },
+    },
     {
       files: ['*.ts', '*.tsx'],
       parser: '@typescript-eslint/parser',
@@ -303,7 +371,7 @@ module.exports = {
         ],
         '@typescript-eslint/no-empty-function': 0,
         '@typescript-eslint/no-explicit-any': 0,
-        '@typescript-eslint/no-use-before-define': 1,
+        '@typescript-eslint/no-use-before-define': 'error',
         '@typescript-eslint/no-non-null-assertion': 0,
         '@typescript-eslint/explicit-function-return-type': 0,
         '@typescript-eslint/explicit-module-boundary-types': 0,
@@ -399,27 +467,13 @@ module.exports = {
         '**/spec/**/*',
       ],
       excludedFiles: 'cypress-base/cypress/**/*',
-      plugins: ['jest', 'jest-dom', 'no-only-tests', 'testing-library'],
-      env: {
-        'jest/globals': true,
-      },
-      settings: {
-        jest: {
-          version: 'detect',
-        },
-      },
-      extends: [
-        'plugin:jest/recommended',
-        'plugin:jest-dom/recommended',
-        'plugin:testing-library/react',
-      ],
+      plugins: ['jest-dom', 'no-only-tests', 'testing-library'],
+      extends: ['plugin:jest-dom/recommended', 'plugin:testing-library/react'],
       rules: {
         'import/no-extraneous-dependencies': [
           'error',
           { devDependencies: true },
         ],
-        'jest/consistent-test-it': 'error',
-        'no-only-tests/no-only-tests': 'error',
         'prefer-promise-reject-errors': 0,
         'max-classes-per-file': 0,
 

superset-frontend/.storybook/main.js

@@ -23,8 +23,13 @@ const customConfig = require('../webpack.config.js');
 // Filter out plugins that shouldn't be included in Storybook's static build
 // ReactRefreshWebpackPlugin adds Fast Refresh code that requires a dev server runtime,
 // which isn't available when serving the static storybook build
+// ForkTsCheckerWebpackPlugin causes TypeScript project reference errors in Storybook context
+const pluginsToExclude = [
+  'ReactRefreshWebpackPlugin',
+  'ForkTsCheckerWebpackPlugin',
+];
 const filteredPlugins = customConfig.plugins.filter(
-  plugin => plugin.constructor.name !== 'ReactRefreshWebpackPlugin',
+  plugin => !pluginsToExclude.includes(plugin.constructor.name),
 );
 
 // Deep clone and modify rules to disable React Fast Refresh and dev mode in SWC loader
@@ -73,9 +78,9 @@ const disableDevModeInRules = rules =>
 
 module.exports = {
   stories: [
-    '../src/@(components|common|filters|explore|views|dashboard|features)/**/*.stories.@(tsx|jsx)',
-    '../packages/superset-ui-demo/storybook/stories/**/*.*.@(tsx|jsx)',
-    '../packages/superset-ui-core/src/components/**/*.stories.@(tsx|jsx)',
+    '../src/**/*.stories.tsx',
+    '../packages/superset-ui-core/src/**/*.stories.tsx',
+    '../plugins/*/src/**/*.stories.tsx',
   ],
 
   addons: [
@@ -102,13 +107,15 @@ module.exports = {
         ...customConfig.resolve?.alias,
         // Fix for Storybook 8.6.x with React 17 - resolve ESM module paths
         'react-dom/test-utils': require.resolve('react-dom/test-utils'),
+        // Shared storybook utilities
+        '@storybook-shared': join(__dirname, 'shared'),
       },
     },
     plugins: [...config.plugins, ...filteredPlugins],
   }),
 
   typescript: {
-    reactDocgen: 'react-docgen-typescript',
+    reactDocgen: getAbsolutePath('react-docgen-typescript'),
   },
 
   framework: {

superset-frontend/.storybook/preview.jsx

@@ -28,6 +28,27 @@ import { App, Layout, Space, Content } from 'antd';
 import 'src/theme.ts';
 import './storybook.css';
 
+// Set up bootstrap data for components that check HTML_SANITIZATION config
+// (e.g., HandlebarsViewer). This allows <style> tags in Handlebars templates.
+if (typeof document !== 'undefined') {
+  let appEl = document.getElementById('app');
+  if (!appEl) {
+    appEl = document.createElement('div');
+    appEl.id = 'app';
+    document.body.appendChild(appEl);
+  }
+  appEl.setAttribute(
+    'data-bootstrap',
+    JSON.stringify({
+      common: {
+        conf: {
+          HTML_SANITIZATION: false,
+        },
+      },
+    }),
+  );
+}
+
 export const GlobalStylesOverrides = () => (
   <Global
     styles={css`

superset-frontend/.storybook/shared/ResizableChartDemo.tsx

@@ -61,10 +61,7 @@ export default function ResizableChartDemo({
   );
 }
 
-export const withResizableChartDemo: Decorator<{
-  width: number;
-  height: number;
-}> = (storyFn, context) => {
+export const withResizableChartDemo: Decorator = (Story, context) => {
   const {
     parameters: { initialSize, panelPadding },
   } = context;
@@ -73,7 +70,14 @@ export const withResizableChartDemo: Decorator<{
       initialSize={initialSize as Size | undefined}
       panelPadding={panelPadding}
     >
-      {innerSize => storyFn({ ...context, ...context.args, ...innerSize })}
+      {innerSize => (
+        <Story
+          args={{
+            ...context.args,
+            ...innerSize,
+          }}
+        />
+      )}
     </ResizableChartDemo>
   );
 };

superset-frontend/.storybook/shared/ResizablePanel.tsx

@@ -23,9 +23,25 @@ import {
   ResizableBoxProps,
   ResizeCallbackData,
 } from 'react-resizable';
+import { styled } from '@apache-superset/core/ui';
 
 import 'react-resizable/css/styles.css';
 
+const StyledResizableBox = styled(ResizableBox)`
+  &.panel {
+    overflow: hidden;
+    background: ${({ theme }) => theme.colorBgContainer};
+    border: 1px solid ${({ theme }) => theme.colorBorder};
+    border-radius: ${({ theme }) => theme.borderRadius}px;
+  }
+
+  .panel-body {
+    overflow: hidden;
+    width: 100%;
+    height: 100%;
+  }
+`;
+
 export type Size = ResizeCallbackData['size'];
 
 export default function ResizablePanel({
@@ -41,7 +57,7 @@ export default function ResizablePanel({
 }) {
   const { width, height } = initialSize;
   return (
-    <ResizableBox
+    <StyledResizableBox
       className="panel"
       width={width}
       height={height}
@@ -60,6 +76,6 @@ export default function ResizablePanel({
         {heading ? <div className="panel-heading">{heading}</div> : null}
         <div className="panel-body">{children}</div>
       </>
-    </ResizableBox>
+    </StyledResizableBox>
   );
 }

superset-frontend/.storybook/shared/createQueryStory.tsx

@@ -32,7 +32,7 @@ export default function createQueryStory({
     [key: string]: {
       chartType: string;
       formData: {
-        [key: string]: any;
+        [key: string]: unknown;
       };
     };
   };
@@ -43,7 +43,7 @@ export default function createQueryStory({
     mode: string | number,
     width: number,
     height: number,
-    formData: any,
+    formData: string,
   ) => {
     const { chartType } = choices[mode];
 

superset-frontend/.storybook/shared/index.ts

@@ -17,21 +17,18 @@
  * under the License.
  */
 
-import { SuperChart, VizType } from '@superset-ui/core';
-import dummyDatasource from '../../../../../shared/dummyDatasource';
-import data from '../data';
-
-export const basic = () => (
-  <SuperChart
-    chartType="box-plot"
-    width={800}
-    height={600}
-    datasource={dummyDatasource}
-    queriesData={[{ data }]}
-    formData={{
-      colorScheme: 'd3Category10',
-      vizType: VizType.BoxPlot,
-      whiskerOptions: 'Min/max (no outliers)',
-    }}
-  />
-);
+export { default as ErrorMessage } from './ErrorMessage';
+export { default as Expandable } from './Expandable';
+export { default as ResizablePanel, type Size } from './ResizablePanel';
+export {
+  default as ResizableChartDemo,
+  SupersetBody,
+  withResizableChartDemo,
+} from './ResizableChartDemo';
+export {
+  default as VerifyCORS,
+  renderError,
+  type Props as VerifyCORSProps,
+} from './VerifyCORS';
+export { default as createQueryStory } from './createQueryStory';
+export { default as dummyDatasource } from './dummyDatasource';

superset-frontend/.swcrc

@@ -1,64 +0,0 @@
-{
-  "$schema": "https://json.schemastore.org/swcrc",
-  "jsc": {
-    "parser": {
-      "syntax": "typescript",
-      "tsx": true,
-      "decorators": false,
-      "dynamicImport": true
-    },
-    "transform": {
-      "react": {
-        "runtime": "automatic",
-        "importSource": "@emotion/react",
-        "throwIfNamespace": true
-      },
-      "optimizer": {
-        "globals": {
-          "vars": {
-            "process.env.NODE_ENV": "production"
-          }
-        }
-      }
-    },
-    "target": "es2015",
-    "loose": true,
-    "externalHelpers": false,
-    "preserveAllComments": false,
-    "experimental": {
-      "plugins": [
-        [
-          "@swc/plugin-emotion",
-          {
-            "sourceMap": true,
-            "autoLabel": "dev-only",
-            "labelFormat": "[local]"
-          }
-        ],
-        [
-          "@swc/plugin-transform-imports",
-          {
-            "lodash": {
-              "transform": "lodash/{{member}}",
-              "preventFullImport": true,
-              "skipDefaultConversion": false
-            },
-            "lodash-es": {
-              "transform": "lodash-es/{{member}}",
-              "preventFullImport": true,
-              "skipDefaultConversion": false
-            }
-          }
-        ]
-      ]
-    }
-  },
-  "module": {
-    "type": "es6",
-    "strict": false,
-    "strictMode": false,
-    "lazy": false,
-    "noInterop": false
-  },
-  "minify": false
-}

superset-frontend/babel.config.js

@@ -52,8 +52,6 @@ module.exports = {
     ['@babel/plugin-transform-private-methods', { loose: true }],
     ['@babel/plugin-transform-nullish-coalescing-operator', { loose: true }],
     ['@babel/plugin-transform-runtime', { corejs: 3 }],
-    // only used in packages/superset-ui-core/src/chart/components/reactify.tsx
-    ['babel-plugin-typescript-to-proptypes', { loose: true }],
     [
       '@emotion/babel-plugin',
       {

superset-frontend/cypress-base/applitools.config.js

@@ -1,29 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-module.exports = {
-  apiKey: process.env.APPLITOOLS_API_KEY,
-  batchId: process.env.APPLITOOLS_BATCH_ID,
-  batchName: process.env.APPLITOOLS_BATCH_NAME,
-  browser: [{ width: 1920, height: 1080, name: 'chrome' }],
-  failCypressOnDiff: false,
-  isDisabled: false,
-  showLogs: false,
-  testConcurrency: 10,
-  ignoreCaret: true,
-};

superset-frontend/cypress-base/cypress.config.ts

@@ -18,73 +18,67 @@
  */
 // eslint-disable-next-line import/no-extraneous-dependencies
 import { defineConfig } from 'cypress';
-import eyesPlugin from '@applitools/eyes-cypress';
 
 const { verifyDownloadTasks } = require('cy-verify-downloads');
 
-export default eyesPlugin(
-  defineConfig({
-    chromeWebSecurity: false,
-    defaultCommandTimeout: 8000,
-    numTestsKeptInMemory: 3,
-    // Disabled after realizing this MESSES UP rison encoding in intricate ways
-    experimentalFetchPolyfill: false,
-    experimentalMemoryManagement: true,
-    requestTimeout: 10000,
-    video: false,
-    viewportWidth: 1280,
-    viewportHeight: 1024,
-    projectId: 'ud5x2f',
-    retries: {
-      runMode: 2,
-      openMode: 0,
+export default defineConfig({
+  chromeWebSecurity: false,
+  defaultCommandTimeout: 8000,
+  numTestsKeptInMemory: 3,
+  // Disabled after realizing this MESSES UP rison encoding in intricate ways
+  experimentalFetchPolyfill: false,
+  experimentalMemoryManagement: true,
+  requestTimeout: 10000,
+  video: false,
+  viewportWidth: 1280,
+  viewportHeight: 1024,
+  projectId: 'ud5x2f',
+  retries: {
+    runMode: 2,
+    openMode: 0,
+  },
+  e2e: {
+    // We've imported your old cypress plugins here.
+    // You may want to clean this up later by importing these.
+    setupNodeEvents(on, config) {
+      // ECONNRESET on Chrome/Chromium 117.0.5851.0 when using Cypress <12.15.0
+      // Check https://github.com/cypress-io/cypress/issues/27804 for context
+      // TODO: This workaround should be removed when upgrading Cypress
+      on('before:browser:launch', (browser, launchOptions) => {
+        if (browser.name === 'chrome' && browser.isHeadless) {
+          // eslint-disable-next-line no-param-reassign
+          launchOptions.args = launchOptions.args.map(arg => {
+            if (arg === '--headless') {
+              return '--headless=new';
+            }
+
+            return arg;
+          });
+
+          launchOptions.args.push(
+            '--disable-dev-shm-usage',
+            '--disable-gpu',
+            '--no-sandbox',
+            '--disable-software-rasterizer',
+            '--memory-pressure-off',
+            '--js-flags=--max-old-space-size=4096',
+            '--disable-background-timer-throttling',
+            '--disable-backgrounding-occluded-windows',
+            '--disable-renderer-backgrounding',
+          );
+        }
+        return launchOptions;
+      });
+
+      // eslint-disable-next-line global-require
+      require('@cypress/code-coverage/task')(on, config);
+      on('task', verifyDownloadTasks);
+      // eslint-disable-next-line global-require,import/extensions
+      return config;
     },
-    e2e: {
-      // We've imported your old cypress plugins here.
-      // You may want to clean this up later by importing these.
-      setupNodeEvents(on, config) {
-        // ECONNRESET on Chrome/Chromium 117.0.5851.0 when using Cypress <12.15.0
-        // Check https://github.com/cypress-io/cypress/issues/27804 for context
-        // TODO: This workaround should be removed when upgrading Cypress
-        on('before:browser:launch', (browser, launchOptions) => {
-          if (browser.name === 'chrome' && browser.isHeadless) {
-            // eslint-disable-next-line no-param-reassign
-            launchOptions.args = launchOptions.args.map(arg => {
-              if (arg === '--headless') {
-                return '--headless=new';
-              }
-
-              return arg;
-            });
-
-            launchOptions.args.push(
-              '--disable-dev-shm-usage',
-              '--disable-gpu',
-              '--no-sandbox',
-              '--disable-software-rasterizer',
-              '--memory-pressure-off',
-              '--js-flags=--max-old-space-size=4096',
-              '--disable-background-timer-throttling',
-              '--disable-backgrounding-occluded-windows',
-              '--disable-renderer-backgrounding',
-            );
-          }
-          return launchOptions;
-        });
-
-        // eslint-disable-next-line global-require
-        require('@cypress/code-coverage/task')(on, config);
-        on('task', verifyDownloadTasks);
-        // eslint-disable-next-line global-require,import/extensions
-        return config;
-      },
-      baseUrl: 'http://localhost:8088',
-      excludeSpecPattern: ['**/_skip.*'],
-      experimentalRunAllSpecs: true,
-      specPattern: [
-        'cypress/e2e/**/*.{js,jsx,ts,tsx}',
-        'cypress/applitools/**/*.{js,jsx,ts,tsx}',
-      ],
-    },
-  }),
-);
+    baseUrl: 'http://localhost:8088',
+    excludeSpecPattern: ['**/_skip.*'],
+    experimentalRunAllSpecs: true,
+    specPattern: ['cypress/e2e/**/*.{js,jsx,ts,tsx}'],
+  },
+});

superset-frontend/cypress-base/cypress/applitools/chartlist.test.ts

@@ -1,45 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { CHART_LIST } from 'cypress/utils/urls';
-
-describe('charts list view', () => {
-  beforeEach(() => {
-    cy.visit(CHART_LIST);
-  });
-
-  afterEach(() => {
-    cy.eyesClose();
-  });
-
-  it('should load the Charts list', () => {
-    cy.get('[aria-label="unordered-list"]').click();
-    cy.eyesOpen({
-      testName: 'Charts list-view',
-    });
-    cy.eyesCheckWindow('Charts list-view loaded');
-  });
-
-  it('should load the Charts card list', () => {
-    cy.get('[aria-label="appstore"]').click();
-    cy.eyesOpen({
-      testName: 'Charts card-view',
-    });
-    cy.eyesCheckWindow('Charts card-view loaded');
-  });
-});

superset-frontend/cypress-base/cypress/applitools/dashboard.test.ts

@@ -1,53 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { WORLD_HEALTH_DASHBOARD } from 'cypress/utils/urls';
-import { waitForChartLoad } from 'cypress/utils';
-import { WORLD_HEALTH_CHARTS } from '../e2e/dashboard/utils';
-
-describe('Dashboard load', () => {
-  beforeEach(() => {
-    cy.visit(WORLD_HEALTH_DASHBOARD);
-    WORLD_HEALTH_CHARTS.forEach(waitForChartLoad);
-  });
-
-  afterEach(() => {
-    cy.eyesClose();
-  });
-
-  it('should load the Dashboard', () => {
-    cy.eyesOpen({
-      testName: 'Dashboard page',
-    });
-    cy.eyesCheckWindow('Dashboard loaded');
-  });
-
-  it('should load the Dashboard in edit mode', () => {
-    cy.get('.header-with-actions')
-      .find('[aria-label="Edit dashboard"]')
-      .click();
-    // wait for a chart to appear
-    cy.get('[data-test="grid-container"]').find('.box_plot', {
-      timeout: 10000,
-    });
-    cy.eyesOpen({
-      testName: 'Dashboard edit mode',
-    });
-    cy.eyesCheckWindow('Dashboard edit mode loaded');
-  });
-});

superset-frontend/cypress-base/cypress/applitools/dashboardlist.test.ts

@@ -1,45 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { DASHBOARD_LIST } from 'cypress/utils/urls';
-
-describe('dashboard list view', () => {
-  beforeEach(() => {
-    cy.visit(DASHBOARD_LIST);
-  });
-
-  afterEach(() => {
-    cy.eyesClose();
-  });
-
-  it('should load the Dashboards list', () => {
-    cy.get('[aria-label="unordered-list"]').click();
-    cy.eyesOpen({
-      testName: 'Dashboards list-view',
-    });
-    cy.eyesCheckWindow('Dashboards list-view loaded');
-  });
-
-  it('should load the Dashboards card list', () => {
-    cy.get('[aria-label="appstore"]').click();
-    cy.eyesOpen({
-      testName: 'Dashboards card-view',
-    });
-    cy.eyesCheckWindow('Dashboards card-view loaded');
-  });
-});

superset-frontend/cypress-base/cypress/applitools/explore.test.ts

@@ -1,46 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import {
-  FORM_DATA_DEFAULTS,
-  NUM_METRIC,
-} from '../e2e/explore/visualizations/shared.helper';
-
-describe('explore view', () => {
-  beforeEach(() => {
-    cy.intercept('POST', '**/superset/explore_json/**').as('getJson');
-  });
-
-  afterEach(() => {
-    cy.eyesClose();
-  });
-
-  it('should load Explore', () => {
-    const LINE_CHART_DEFAULTS = {
-      ...FORM_DATA_DEFAULTS,
-      viz_type: 'echarts_timeseries_line',
-    };
-    const formData = { ...LINE_CHART_DEFAULTS, metrics: [NUM_METRIC] };
-    cy.visitChartByParams(formData);
-    cy.verifySliceSuccess({ waitAlias: '@getJson', chartSelector: 'svg' });
-    cy.eyesOpen({
-      testName: 'Explore page',
-    });
-    cy.eyesCheckWindow('Explore loaded');
-  });
-});

superset-frontend/cypress-base/cypress/e2e/chart_list/_skip.filter.test.ts

@@ -1,57 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-import { CHART_LIST } from 'cypress/utils/urls';
-import { setGridMode, clearAllInputs } from 'cypress/utils';
-import { setFilter } from '../explore/utils';
-
-describe('Charts filters', () => {
-  before(() => {
-    cy.visit(CHART_LIST);
-    setGridMode('card');
-  });
-
-  beforeEach(() => {
-    clearAllInputs();
-  });
-
-  it('should allow filtering by "Owner"', () => {
-    setFilter('Owner', 'alpha user');
-    setFilter('Owner', 'admin user');
-  });
-
-  it('should allow filtering by "Modified by" correctly', () => {
-    setFilter('Modified by', 'alpha user');
-    setFilter('Modified by', 'admin user');
-  });
-
-  it('should allow filtering by "Type" correctly', () => {
-    setFilter('Type', 'Area Chart');
-    setFilter('Type', 'Bubble Chart');
-  });
-
-  it('should allow filtering by "Dataset" correctly', () => {
-    setFilter('Dataset', 'birth_names');
-    setFilter('Dataset', 'video_game_sales');
-  });
-
-  it('should allow filtering by "Dashboards" correctly', () => {
-    setFilter('Dashboard', 'USA Births Names');
-    setFilter('Dashboard', 'Video Game Sales');
-  });
-});

superset-frontend/cypress-base/cypress/e2e/chart_list/list.test.ts

@@ -23,12 +23,9 @@ import {
   interceptBulkDelete,
   interceptUpdate,
   interceptDelete,
-  visitSampleChartFromList,
-  saveChartToDashboard,
   interceptFiltering,
   interceptFavoriteStatus,
 } from '../explore/utils';
-import { interceptGet as interceptDashboardGet } from '../dashboard/utils';
 
 function orderAlphabetical() {
   setFilter('Sort', 'Alphabetical');
@@ -57,60 +54,6 @@ function visitChartList() {
 }
 
 describe('Charts list', () => {
-  describe('Cross-referenced dashboards', () => {
-    beforeEach(() => {
-      cy.createSampleDashboards([0, 1, 2, 3]);
-      cy.createSampleCharts([0]);
-      visitChartList();
-    });
-
-    // Skipped: depends on "Supported Charts Dashboard" which requires specific example loading
-    it.skip('should show the cross-referenced dashboards in the table cell', () => {
-      interceptDashboardGet();
-      cy.getBySel('table-row')
-        .first()
-        .find('[data-test="table-row-cell"]')
-        .find('[data-test="crosslinks"]')
-        .should('be.empty');
-      cy.getBySel('table-row')
-        .eq(10)
-        .find('[data-test="table-row-cell"]')
-        .find('[data-test="crosslinks"]')
-        .contains('Supported Charts Dashboard')
-        .invoke('removeAttr', 'target')
-        .click();
-      cy.wait('@get');
-    });
-
-    it('should show the newly added dashboards in a tooltip', () => {
-      interceptDashboardGet();
-      visitSampleChartFromList('1 - Sample chart');
-      saveChartToDashboard('1 - Sample chart', '1 - Sample dashboard');
-      saveChartToDashboard('1 - Sample chart', '2 - Sample dashboard');
-      saveChartToDashboard('1 - Sample chart', '3 - Sample dashboard');
-      saveChartToDashboard('1 - Sample chart', '4 - Sample dashboard');
-      visitChartList();
-
-      cy.getBySel('count-crosslinks').should('be.visible');
-    });
-  });
-
-  describe('card mode', () => {
-    before(() => {
-      visitChartList();
-      setGridMode('card');
-    });
-
-    it('should preserve other filters when sorting', () => {
-      // Check that we have some cards (count varies based on loaded examples)
-      cy.getBySel('styled-card').should('have.length.at.least', 1);
-      setFilter('Type', 'Big Number');
-      setFilter('Sort', 'Least recently modified');
-      // After filtering to Big Number type, we should have fewer cards
-      cy.getBySel('styled-card').should('have.length.at.least', 1);
-    });
-  });
-
   describe('common actions', () => {
     beforeEach(() => {
       visitChartList();

superset-frontend/cypress-base/cypress/support/e2e.ts

@@ -17,7 +17,6 @@
  * under the License.
  */
 import '@cypress/code-coverage/support';
-import '@applitools/eyes-cypress/commands';
 import { expect } from 'chai';
 import rison from 'rison';
 

superset-frontend/cypress-base/package.json

@@ -16,7 +16,6 @@
     ]
   },
   "dependencies": {
-    "@applitools/eyes-cypress": "^3.44.9",
     "@cypress/code-coverage": "^3.10.4",
     "@superset-ui/core": "^2.1.0",
     "brace": "^0.11.1",

superset-frontend/cypress-base/tsconfig.json

@@ -6,11 +6,11 @@
     "strict": true,
     "target": "es2019",
     "lib": ["es2019", "DOM"],
-    "types": ["cypress", "@applitools/eyes-cypress", "node"],
+    "types": ["cypress", "node"],
     "allowJs": true,
     "noEmit": true
   },
-  "files": ["cypress/support/index.d.ts", "./node_modules/@applitools/eyes-cypress/types/index.d.ts"],
+  "files": ["cypress/support/index.d.ts"],
   "include": ["cypress/**/*.ts", "./cypress.config.ts"],
   "exclude": ["node_modules"]
 }

superset-frontend/eslint-rules/eslint-plugin-i18n-strings/index.ts

@@ -22,27 +22,40 @@
  * @author Apache
  */
 
+import type { Rule } from 'eslint';
+import type { Node } from 'estree';
+
 //------------------------------------------------------------------------------
 // Rule Definition
 //------------------------------------------------------------------------------
 
-/** @type {import('eslint').Rule.RuleModule} */
-module.exports = {
+const plugin: { rules: Record<string, Rule.RuleModule> } = {
   rules: {
     'no-template-vars': {
-      create(context) {
-        function handler(node) {
-          if (node.arguments.length) {
-            const firstArgs = node.arguments[0];
+      meta: {
+        type: 'problem',
+        docs: {
+          description: 'Disallow variables in translation template strings',
+        },
+        schema: [],
+      },
+      create(context: Rule.RuleContext): Rule.RuleListener {
+        function handler(node: Node): void {
+          const callNode = node as Node & {
+            arguments: Array<Node & { type: string; expressions?: Node[] }>;
+          };
+          // Check all arguments (e.g., tn has singular and plural templates)
+          for (const arg of callNode.arguments ?? []) {
             if (
-              firstArgs.type === 'TemplateLiteral' &&
-              firstArgs.expressions.length
+              arg.type === 'TemplateLiteral' &&
+              (arg as Node & { expressions?: Node[] }).expressions?.length
             ) {
               context.report({
                 node,
                 message:
                   "Don't use variables in translation string templates. Flask-babel is a static translation service, so it can't handle strings that include variables",
               });
+              break; // Only report once per call
             }
           }
         }
@@ -53,19 +66,29 @@ module.exports = {
       },
     },
     'sentence-case-buttons': {
-      create(context) {
-        function isTitleCase(str) {
+      meta: {
+        type: 'suggestion',
+        docs: {
+          description: 'Enforce sentence case for button text in translations',
+        },
+        schema: [],
+      },
+      create(context: Rule.RuleContext): Rule.RuleListener {
+        function isTitleCase(str: string): boolean {
           // Match "Delete Dataset", "Create Chart", etc. (2+ title-cased words)
           return /^[A-Z][a-z]+(\s+[A-Z][a-z]*)+$/.test(str);
         }
 
-        function isButtonContext(node) {
-          const { parent } = node;
+        function isButtonContext(node: Node & { parent?: Node }): boolean {
+          const { parent } = node as Node & {
+            parent?: Node & Record<string, unknown>;
+          };
           if (!parent) return false;
 
           // Check for button-specific props
           if (parent.type === 'Property') {
-            const key = parent.key.name;
+            const key = (parent as unknown as { key: { name: string } }).key
+              .name;
             return [
               'primaryButtonName',
               'secondaryButtonName',
@@ -75,10 +98,16 @@ module.exports = {
           }
 
           // Check for Button components
-          if (parent.type === 'JSXExpressionContainer') {
-            const jsx = parent.parent;
-            if (jsx?.type === 'JSXElement') {
-              const elementName = jsx.openingElement.name.name;
+          // Cast to string because ESTree Node type doesn't include JSX types
+          if ((parent.type as string) === 'JSXExpressionContainer') {
+            const jsx = (parent as Node & { parent?: Node }).parent as
+              | (Node & {
+                  type: string;
+                  openingElement?: { name: { name: string } };
+                })
+              | undefined;
+            if ((jsx?.type as string) === 'JSXElement') {
+              const elementName = jsx?.openingElement?.name.name;
               return elementName === 'Button';
             }
           }
@@ -86,21 +115,24 @@ module.exports = {
           return false;
         }
 
-        function handler(node) {
-          if (node.arguments.length) {
-            const firstArg = node.arguments[0];
-            if (
-              firstArg.type === 'Literal' &&
-              typeof firstArg.value === 'string'
-            ) {
-              const text = firstArg.value;
+        function handler(node: Node): void {
+          const callNode = node as Node & {
+            arguments: Array<Node & { type: string; value?: unknown }>;
+          };
+          // Check all string literal arguments (e.g., tn has singular and plural)
+          for (const arg of callNode.arguments ?? []) {
+            if (arg.type === 'Literal' && typeof arg.value === 'string') {
+              const text = arg.value;
 
-              if (isButtonContext(node) && isTitleCase(text)) {
+              if (
+                isButtonContext(node as Node & { parent?: Node }) &&
+                isTitleCase(text)
+              ) {
                 const sentenceCase = text
                   .toLowerCase()
-                  .replace(/^\w/, c => c.toUpperCase());
+                  .replace(/^\w/, (c: string) => c.toUpperCase());
                 context.report({
-                  node: firstArg,
+                  node: arg,
                   message: `Button text should use sentence case: "${text}" should be "${sentenceCase}"`,
                 });
               }
@@ -116,3 +148,5 @@ module.exports = {
     },
   },
 };
+
+module.exports = plugin;

superset-frontend/eslint-rules/eslint-plugin-i18n-strings/no-template-vars.test.ts

@@ -22,17 +22,19 @@
  * @author Apache
  */
 /* eslint-disable no-template-curly-in-string */
+import type { Rule } from 'eslint';
+
 const { RuleTester } = require('eslint');
-const plugin = require('.');
+const plugin: { rules: Record<string, Rule.RuleModule> } = require('.');
 
 //------------------------------------------------------------------------------
 // Tests
 //------------------------------------------------------------------------------
 
 const ruleTester = new RuleTester({ parserOptions: { ecmaVersion: 6 } });
-const rule = plugin.rules['no-template-vars'];
+const rule: Rule.RuleModule = plugin.rules['no-template-vars'];
 
-const errors = [
+const errors: Array<{ type: string }> = [
   {
     type: 'CallExpression',
   },

superset-frontend/eslint-rules/eslint-plugin-i18n-strings/package.json

@@ -2,7 +2,7 @@
   "name": "eslint-plugin-i18n-strings",
   "version": "1.0.0",
   "description": "Warns about translation variables",
-  "main": "index.js",
+  "main": "index.ts",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
   },

superset-frontend/eslint-rules/eslint-plugin-icons/index.ts

@@ -22,12 +22,29 @@
  * @author Apache
  */
 
+import type { Rule } from 'eslint';
+import type { Node } from 'estree';
+
 //------------------------------------------------------------------------------
 // Rule Definition
 //------------------------------------------------------------------------------
 
-/** @type {import('eslint').Rule.RuleModule} */
-module.exports = {
+interface JSXAttribute {
+  name?: { name: string };
+  value?: { type: string; value?: string; expression?: { value: string } };
+}
+
+interface JSXOpeningElement {
+  name: { name: string };
+  attributes: JSXAttribute[];
+}
+
+interface JSXElementNode {
+  type: string;
+  openingElement: JSXOpeningElement;
+}
+
+const plugin: { rules: Record<string, Rule.RuleModule> } = {
   rules: {
     'no-fa-icons-usage': {
       meta: {
@@ -39,20 +56,27 @@ module.exports = {
         },
         schema: [],
       },
-      create(context) {
+      create(context: Rule.RuleContext): Rule.RuleListener {
         return {
           // Check for JSX elements with class names containing "fa"
-          JSXElement(node) {
+          JSXElement(node: Node): void {
+            const jsxNode = node as unknown as JSXElementNode;
             if (
-              node.openingElement &&
-              node.openingElement.name.name === 'i' &&
-              node.openingElement.attributes &&
-              node.openingElement.attributes.some(
-                attr =>
-                  attr.name &&
-                  attr.name.name === 'className' &&
-                  /fa fa-/.test(attr.value.value),
-              )
+              jsxNode.openingElement &&
+              jsxNode.openingElement.name.name === 'i' &&
+              jsxNode.openingElement.attributes &&
+              jsxNode.openingElement.attributes.some((attr: JSXAttribute) => {
+                if (attr.name?.name !== 'className') return false;
+                // Handle className="fa fa-home"
+                if (attr.value?.type === 'Literal') {
+                  return /fa fa-/.test(attr.value.value ?? '');
+                }
+                // Handle className={'fa fa-home'}
+                if (attr.value?.type === 'JSXExpressionContainer') {
+                  return /fa fa-/.test(attr.value.expression?.value ?? '');
+                }
+                return false;
+              })
             ) {
               context.report({
                 node,
@@ -66,3 +90,5 @@ module.exports = {
     },
   },
 };
+
+module.exports = plugin;

superset-frontend/eslint-rules/eslint-plugin-icons/no-fontawesome.test.ts

@@ -22,16 +22,20 @@
  * @author Apache
  */
 
+import type { Rule } from 'eslint';
+
 const { RuleTester } = require('eslint');
-const plugin = require('.');
+const plugin: { rules: Record<string, Rule.RuleModule> } = require('.');
 
 //------------------------------------------------------------------------------
 // Tests
 //------------------------------------------------------------------------------
-const ruleTester = new RuleTester({ parserOptions: { ecmaVersion: 6 } });
-const rule = plugin.rules['no-fa-icons-usage'];
+const ruleTester = new RuleTester({
+  parserOptions: { ecmaVersion: 6, ecmaFeatures: { jsx: true } },
+});
+const rule: Rule.RuleModule = plugin.rules['no-fa-icons-usage'];
 
-const errors = [
+const errors: Array<{ message: string }> = [
   {
     message:
       'FontAwesome icons should not be used. Use the src/components/Icons component instead.',

superset-frontend/eslint-rules/eslint-plugin-icons/package.json

@@ -2,7 +2,7 @@
   "name": "eslint-plugin-icons",
   "version": "1.0.0",
   "description": "Warns about direct usage of Ant Design icons",
-  "main": "index.js",
+  "main": "index.ts",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
   },

superset-frontend/eslint-rules/eslint-plugin-theme-colors/colors.ts

@@ -18,7 +18,7 @@
  */
 
 // https://www.w3.org/wiki/CSS/Properties/color/keywords
-module.exports = [
+const COLOR_KEYWORDS: string[] = [
   'black',
   'silver',
   'gray',
@@ -170,3 +170,5 @@ module.exports = [
   'whitesmoke',
   'yellowgreen',
 ];
+
+export default COLOR_KEYWORDS;

superset-frontend/eslint-rules/eslint-plugin-theme-colors/index.js

@@ -1,119 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-
-/**
- * @fileoverview Rule to warn about literal colors
- * @author Apache
- */
-
-const COLOR_KEYWORDS = require('./colors');
-
-function hasHexColor(quasi) {
-  if (typeof quasi === 'string') {
-    const regex = /#([a-f0-9]{3}|[a-f0-9]{4}(?:[a-f0-9]{2}){0,2})\b/gi;
-    return !!quasi.match(regex);
-  }
-  return false;
-}
-
-function hasRgbColor(quasi) {
-  if (typeof quasi === 'string') {
-    const regex = /rgba?\((\d+),\s*(\d+),\s*(\d+)(?:,\s*(\d+(?:\.\d+)?))?\)/i;
-    return !!quasi.match(regex);
-  }
-  return false;
-}
-
-function hasLiteralColor(quasi, strict = false) {
-  if (typeof quasi === 'string') {
-    // matches literal colors at the start or end of a CSS prop
-    return COLOR_KEYWORDS.some(color => {
-      const regexColon = new RegExp(`: ${color}`);
-      const regexSemicolon = new RegExp(` ${color};`);
-      return (
-        !!quasi.match(regexColon) ||
-        !!quasi.match(regexSemicolon) ||
-        (strict && quasi === color)
-      );
-    });
-  }
-  return false;
-}
-
-const WARNING_MESSAGE =
-  'Theme color variables are preferred over rgb(a)/hex/literal colors';
-
-//------------------------------------------------------------------------------
-// Rule Definition
-//------------------------------------------------------------------------------
-
-/** @type {import('eslint').Rule.RuleModule} */
-module.exports = {
-  rules: {
-    'no-literal-colors': {
-      create(context) {
-        const warned = [];
-        return {
-          TemplateElement(node) {
-            const rawValue = node?.value?.raw;
-            const isChildParentTagged =
-              node?.parent?.parent?.type === 'TaggedTemplateExpression';
-            const isChildParentArrow =
-              node?.parent?.parent?.type === 'ArrowFunctionExpression';
-            const isParentTemplateLiteral =
-              node?.parent?.type === 'TemplateLiteral';
-            const loc = node?.parent?.parent?.loc;
-            const locId = loc && JSON.stringify(loc);
-            const hasWarned = warned.includes(locId);
-            if (
-              !hasWarned &&
-              (isChildParentTagged ||
-                (isChildParentArrow && isParentTemplateLiteral)) &&
-              rawValue &&
-              (hasLiteralColor(rawValue) ||
-                hasHexColor(rawValue) ||
-                hasRgbColor(rawValue))
-            ) {
-              context.report(node, loc, WARNING_MESSAGE);
-              warned.push(locId);
-            }
-          },
-          Literal(node) {
-            const value = node?.value;
-            const isParentProperty = node?.parent?.type === 'Property';
-            const locId = JSON.stringify(node.loc);
-            const hasWarned = warned.includes(locId);
-
-            if (
-              !hasWarned &&
-              isParentProperty &&
-              value &&
-              (hasLiteralColor(value, true) ||
-                hasHexColor(value) ||
-                hasRgbColor(value))
-            ) {
-              context.report(node, node.loc, WARNING_MESSAGE);
-              warned.push(locId);
-            }
-          },
-        };
-      },
-    },
-  },
-};

superset-frontend/eslint-rules/eslint-plugin-theme-colors/index.ts

@@ -0,0 +1,162 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+/**
+ * @fileoverview Rule to warn about literal colors
+ * @author Apache
+ */
+
+import type { Rule } from 'eslint';
+import type { Node, SourceLocation } from 'estree';
+
+import COLOR_KEYWORDS from './colors';
+
+function hasHexColor(quasi: string): boolean {
+  const regex = /#([a-f0-9]{3}|[a-f0-9]{4}(?:[a-f0-9]{2}){0,2})\b/gi;
+  return !!quasi.match(regex);
+}
+
+function hasRgbColor(quasi: string): boolean {
+  const regex = /rgba?\((\d+),\s*(\d+),\s*(\d+)(?:,\s*(\d+(?:\.\d+)?))?\)/i;
+  return !!quasi.match(regex);
+}
+
+function hasLiteralColor(quasi: string, strict: boolean = false): boolean {
+  // matches literal colors at the start or end of a CSS prop
+  return COLOR_KEYWORDS.some((color: string) => {
+    const regexColon = new RegExp(`: ${color}`);
+    const regexSemicolon = new RegExp(` ${color};`);
+    return (
+      !!quasi.match(regexColon) ||
+      !!quasi.match(regexSemicolon) ||
+      (strict && quasi === color)
+    );
+  });
+}
+
+const WARNING_MESSAGE: string =
+  'Theme color variables are preferred over rgb(a)/hex/literal colors';
+
+//------------------------------------------------------------------------------
+// Rule Definition
+//------------------------------------------------------------------------------
+
+interface TemplateElementNode {
+  type: string;
+  value?: { raw: string };
+  loc?: SourceLocation | null;
+  parent?: {
+    type: string;
+    parent?: { type: string; loc?: SourceLocation | null };
+  };
+}
+
+interface LiteralNode {
+  type: string;
+  value?: unknown;
+  loc?: SourceLocation | null;
+  parent?: { type: string };
+}
+
+const plugin: { rules: Record<string, Rule.RuleModule> } = {
+  rules: {
+    'no-literal-colors': {
+      meta: {
+        type: 'suggestion',
+        docs: {
+          description:
+            'Disallow literal color values; use theme colors instead',
+        },
+        schema: [],
+      },
+      create(context: Rule.RuleContext): Rule.RuleListener {
+        const warned: string[] = [];
+        return {
+          TemplateElement(node: Node): void {
+            const templateNode = node as TemplateElementNode;
+            const rawValue = templateNode?.value?.raw;
+            const isChildParentTagged =
+              templateNode?.parent?.parent?.type === 'TaggedTemplateExpression';
+            const isChildParentArrow =
+              templateNode?.parent?.parent?.type === 'ArrowFunctionExpression';
+            const isParentTemplateLiteral =
+              templateNode?.parent?.type === 'TemplateLiteral';
+            const loc = templateNode?.parent?.parent?.loc;
+            const locId = loc && JSON.stringify(loc);
+            const hasWarned = locId ? warned.includes(locId) : false;
+            if (
+              !hasWarned &&
+              (isChildParentTagged ||
+                (isChildParentArrow && isParentTemplateLiteral)) &&
+              rawValue &&
+              (hasLiteralColor(rawValue) ||
+                hasHexColor(rawValue) ||
+                hasRgbColor(rawValue))
+            ) {
+              context.report({
+                node,
+                ...(loc && { loc: loc as SourceLocation }),
+                message: WARNING_MESSAGE,
+              });
+              if (locId) {
+                warned.push(locId);
+              }
+            }
+          },
+          Literal(node: Node): void {
+            const literalNode = node as LiteralNode;
+            const value = literalNode?.value;
+            // Only process string literals (not numbers, booleans, null, or RegExp)
+            if (typeof value !== 'string') {
+              return;
+            }
+            const parent = literalNode?.parent as Node & {
+              type: string;
+              value?: Node;
+            };
+            // Only check property values, not keys (e.g., { color: 'red' } not { red: 1 })
+            const isPropertyValue =
+              parent?.type === 'Property' && parent.value === node;
+            const locId = node.loc ? JSON.stringify(node.loc) : null;
+            const hasWarned = locId ? warned.includes(locId) : false;
+
+            if (
+              !hasWarned &&
+              isPropertyValue &&
+              (hasLiteralColor(value, true) ||
+                hasHexColor(value) ||
+                hasRgbColor(value))
+            ) {
+              context.report({
+                node,
+                ...(node.loc && { loc: node.loc as SourceLocation }),
+                message: WARNING_MESSAGE,
+              });
+              if (locId) {
+                warned.push(locId);
+              }
+            }
+          },
+        };
+      },
+    },
+  },
+};
+
+module.exports = plugin;

superset-frontend/eslint-rules/eslint-plugin-theme-colors/package.json

@@ -2,7 +2,7 @@
   "name": "eslint-plugin-theme-colors",
   "version": "1.0.0",
   "description": "Warns about rgb(a)/hex/literal colors",
-  "main": "index.js",
+  "main": "index.ts",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
   },

superset-frontend/jest.config.js

@@ -36,7 +36,13 @@ module.exports = {
     '^@apache-superset/core/(.*)$': '<rootDir>/packages/superset-core/src/$1',
   },
   testEnvironment: '<rootDir>/spec/helpers/jsDomWithFetchAPI.ts',
-  modulePathIgnorePatterns: ['<rootDir>/packages/generator-superset'],
+  modulePathIgnorePatterns: [
+    '<rootDir>/packages/generator-superset',
+    '<rootDir>/packages/.*/esm',
+    '<rootDir>/packages/.*/lib',
+    '<rootDir>/plugins/.*/esm',
+    '<rootDir>/plugins/.*/lib',
+  ],
   setupFilesAfterEnv: ['<rootDir>/spec/helpers/setup.ts'],
   snapshotSerializers: ['@emotion/jest/serializer'],
   testEnvironmentOptions: {
@@ -47,7 +53,6 @@ module.exports = {
     'src/**/*.{js,jsx,ts,tsx}',
     '{packages,plugins}/**/src/**/*.{js,jsx,ts,tsx}',
     '!**/*.stories.*',
-    '!packages/superset-ui-demo/**/*',
   ],
   coverageDirectory: '<rootDir>/coverage/',
   coveragePathIgnorePatterns: [
@@ -59,7 +64,7 @@ module.exports = {
   ],
   coverageReporters: ['lcov', 'json-summary', 'html', 'text'],
   transformIgnorePatterns: [
-    'node_modules/(?!d3-(array|interpolate|color|time|scale|time-format)|internmap|@mapbox/tiny-sdf|remark-gfm|(?!@ngrx|(?!deck.gl)|d3-scale)|markdown-table|micromark-*.|decode-named-character-reference|character-entities|mdast-util-*.|unist-util-*.|ccount|escape-string-regexp|nanoid|uuid|@rjsf/*.|sinon|echarts|zrender|fetch-mock|pretty-ms|parse-ms|ol|@babel/runtime|@emotion|cheerio|cheerio/lib|parse5|dom-serializer|entities|htmlparser2|rehype-sanitize|hast-util-sanitize|unified|unist-.*|hast-.*|rehype-.*|remark-.*|mdast-.*|micromark-.*|parse-entities|property-information|space-separated-tokens|comma-separated-tokens|bail|devlop|zwitch|longest-streak|geostyler|geostyler-.*|react-error-boundary|react-json-tree|react-base16-styling|lodash-es)',
+    'node_modules/(?!d3-(array|interpolate|color|time|scale|time-format|format)|internmap|@mapbox/tiny-sdf|remark-gfm|(?!@ngrx|(?!deck.gl)|d3-scale)|markdown-table|micromark-*.|decode-named-character-reference|character-entities|mdast-util-*.|unist-util-*.|ccount|escape-string-regexp|nanoid|uuid|@rjsf/*.|echarts|zrender|fetch-mock|pretty-ms|parse-ms|ol|@babel/runtime|@emotion|cheerio|cheerio/lib|parse5|dom-serializer|entities|htmlparser2|rehype-sanitize|hast-util-sanitize|unified|unist-.*|hast-.*|rehype-.*|remark-.*|mdast-.*|micromark-.*|parse-entities|property-information|space-separated-tokens|comma-separated-tokens|bail|devlop|zwitch|longest-streak|geostyler|geostyler-.*|react-error-boundary|react-json-tree|react-base16-styling|lodash-es)',
   ],
   preset: 'ts-jest',
   transform: {

superset-frontend/oxlint.json

@@ -1,10 +1,11 @@
 {
   "$schema": "./node_modules/oxlint/configuration_schema.json",
-  "plugins": ["import", "react", "jsx-a11y", "typescript", "unicorn"],
+  "plugins": ["import", "react", "jest", "jsx-a11y", "typescript", "unicorn"],
   "env": {
     "browser": true,
     "node": true,
-    "es2020": true
+    "es2020": true,
+    "jest": true
   },
   "globals": {
     "__webpack_public_path__": "writable",
@@ -27,12 +28,14 @@
     // === Core ESLint rules ===
     // Error prevention
     "no-console": "warn",
-    "no-alert": "warn",
+    "no-alert": "error",
+    "constructor-super": "error",
     "no-debugger": "error",
     "no-unused-vars": "off",
     "no-undef": "error",
     "no-prototype-builtins": "off",
-    "no-unsafe-optional-chaining": "off",
+    "no-unsafe-optional-chaining": "error",
+    "no-constant-binary-expression": "error",
     "no-import-assign": "off",
     "no-promise-executor-return": "off",
 
@@ -134,7 +137,7 @@
     "react/jsx-no-bind": "off",
     "react/jsx-props-no-spreading": "off",
     "react/jsx-boolean-value": ["error", "never", { "always": [] }],
-    "react/jsx-no-duplicate-props": ["error", { "ignoreCase": true }],
+    "react/jsx-no-duplicate-props": "error",
     "react/jsx-no-undef": "error",
     "react/jsx-pascal-case": ["error", { "allowAllCaps": true, "ignore": [] }],
     "react/jsx-uses-vars": "error",
@@ -147,7 +150,8 @@
     ],
     "react/no-array-index-key": "off",
     "react/no-children-prop": "error",
-    "react/no-danger": "warn",
+    "react/no-danger": "error",
+    "react/forbid-foreign-prop-types": "error",
     "react/no-danger-with-children": "error",
     "react/no-deprecated": "error",
     "react/no-did-update-set-state": "error",
@@ -230,7 +234,7 @@
     "@typescript-eslint/ban-types": "off",
     "@typescript-eslint/no-empty-function": "off",
     "@typescript-eslint/no-explicit-any": "off",
-    "@typescript-eslint/no-use-before-define": "warn",
+    "@typescript-eslint/no-use-before-define": "error",
     "@typescript-eslint/no-non-null-assertion": "off",
     "@typescript-eslint/explicit-function-return-type": "off",
     "@typescript-eslint/explicit-module-boundary-types": "off",
@@ -249,6 +253,9 @@
     ],
 
     // === Unicorn rules (bonus coverage) ===
+    "unicorn/no-new-array": "error",
+    "unicorn/no-invalid-remove-event-listener": "error",
+    "unicorn/no-useless-length-check": "error",
     "unicorn/filename-case": "off",
     "unicorn/prevent-abbreviations": "off",
     "unicorn/no-null": "off",
@@ -256,18 +263,26 @@
     "unicorn/no-array-for-each": "off",
     "unicorn/prefer-module": "off",
     "unicorn/prefer-node-protocol": "off",
-    "unicorn/no-useless-undefined": "off"
+    "unicorn/no-useless-undefined": "off",
+
+    // === Jest rules ===
+    "jest/consistent-test-it": ["error", { "fn": "test" }],
+    "jest/no-focused-tests": "error",
+    "jest/no-disabled-tests": "error",
+    "jest/expect-expect": [
+      "error",
+      {
+        "assertFunctionNames": [
+          "expect",
+          "expect*",
+          "runTimezoneTest",
+          "compareURI",
+          "test*WithInitialValues"
+        ]
+      }
+    ]
   },
   "ignorePatterns": [
-    "*.test.{js,ts,jsx,tsx}",
-    "*.spec.{js,ts,jsx,tsx}",
-    "**/__tests__/**",
-    "**/__mocks__/**",
-    "**/test/**",
-    "**/tests/**",
-    "**/spec/**",
-    "plugins/**/test/**/*",
-    "packages/**/test/**/*",
     "packages/generator-superset/**/*",
     "cypress-base/**",
     "node_modules/**",