Evan 0052909f10 fix(version): check EXPOSE_VERSION_INFO before calling get_version_metadata ...

- Skip get_version_metadata() when the flag is False: read VERSION_STRING
  directly from app config so git subprocesses are never invoked on
  unauthenticated /version requests when version details are redacted
- Add missing build_number assertion in the positive-flag test case
- Update the disabled-flag test to match new code path (no longer mocks
  get_version_metadata; sets VERSION_STRING directly in app config)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-03 02:32:31 -07:00

..

advanced_data_type

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

annotation_layers

…

async_events

chore(GAQ): Remove GLOBAL_ASYNC_QUERIES_REDIS_CONFIG (#30284)

2025-01-21 20:03:00 -08:00

charts

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632)

2026-06-03 00:14:48 -07:00

columns

…

commands

fix(reports): guard SUCCESS-state report execution against duplicate sends and stuck WORKING state (#40657)

2026-06-02 15:09:14 -07:00

common

fix(time-comparison): shift offset filter when X-axis is adhoc Custom SQL (#40586)

2026-06-02 09:52:42 -07:00

connectors

test(datasets): regression test for Jinja not rendered on sync columns (#25839) (#40224)

2026-05-20 11:46:36 -07:00

dao

feat(mcp): add list_tags and get_tag_info MCP tools (#40349)

2026-05-29 22:16:59 -04:00

daos

feat(core): SoftDeleteMixin and restore infrastructure (#39977)

2026-05-29 13:08:10 -07:00

dashboards

fix(dashboard-import): remap chartsInScope on import (#26338) (#40140)

2026-05-20 13:41:14 -07:00

databases

fix(ssh-tunnel): validate server_address format (SSRF defense-in-depth) (#40665)

2026-06-02 21:19:24 -07:00

datasets

fix(dataset): validate catalog against allow_multi_catalog on import (#40376)

2026-06-01 09:24:28 -07:00

datasource

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

db_engine_specs

test(presto): 401 Unauthorized must surface as CONNECTION_ACCESS_DENIED_ERROR (#33554) (#40618)

2026-06-02 10:49:58 -07:00

distributed_lock

feat: add global task framework (#36368)

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557)

2026-02-12 14:12:12 -08:00

explore

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

extensions

fix(extensions): add cache headers and strip Vary: Cookie for extension static assets (#40120)

2026-05-15 09:23:39 -03:00

fixtures

fix(dev/ci): pre-commit fixes galore (#32352)

2025-02-24 11:26:45 -07:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

key_value

chore(key_value): prune expired entries from the key-value store (#40663)

2026-06-02 12:36:32 -07:00

mcp_service

fix(mcp): honor AUTH_ROLE_ADMIN and warn on permission-less protected tools (#40659)

2026-06-02 21:20:11 -07:00

migrations

refactor: Enable G logging rules and comprehensive ruff improvements (#35081)

2025-09-15 12:42:49 -07:00

models

fix(models): HTML-escape data-controlled values in dashboard_link and Slice.icons (#40639)

2026-06-02 16:15:11 -07:00

pandas_postprocessing

test(prophet): pin yhat_lower can be negative for negative series (#21734) (#40141)

2026-05-18 07:21:04 -07:00

queries

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 18:04:33 -03:00

reports

fix(reports): sanitize error text in email notification template (#40641)

2026-06-02 13:40:10 -07:00

scripts

fix(i18n): auto-add ASF license header in backfill_po.py (#40395)

2026-06-01 11:53:35 -07:00

security

fix(embedded): resolve guest user permissions in user_view_menu_names (#39197)

2026-06-01 10:30:05 -07:00

semantic_layers

fix(semantic layers): coerce filter types (#40222)

2026-05-21 09:25:27 -04:00

sql

fix(sqllab): require dataset match for raw query access (#40409)

2026-06-02 21:50:27 +01:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632)

2026-06-03 00:14:48 -07:00

tables

…

tags

fix(tags): expire tag relationship after deleting all tagged objects (#38163)

2026-03-04 10:37:19 -03:00

tasks

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-05 21:21:48 -03:00

themes

feat(theming): add per-theme custom font URL support (#36317)

2025-12-08 16:46:01 -08:00

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

utils

chore(excel): strip document metadata from Excel exports (#40661)

2026-06-02 11:48:36 -07:00

views

fix(version): check EXPOSE_VERSION_INFO before calling get_version_metadata

2026-06-03 02:32:31 -07:00

__init__.py

…

config_test.py

feat(config): add Cross-Origin-Resource-Policy default header

2026-06-03 02:32:31 -07:00

conftest.py

fix: Bump FAB to 5.X (#33055)

2025-09-12 09:21:37 +01:00

core_tests.py

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

extension_tests.py

fix(reports): keep body sized so standalone screenshots don't time out (#39944)

2026-05-07 12:26:50 +02:00

feature_flag_test.py

…

initialization_test.py

chore: Support specifying app_root via superset_config.py (#38284)

2026-02-28 01:35:08 -03:00

jinja_context_test.py

fix(jinja): apply consistent escaping to url_param values from request args (#40633)

2026-06-02 21:23:48 -07:00

legacy_tests.py

…

result_set_test.py

fix: coerce out-of-bounds nanosecond timestamps to NaT instead of raising (#40127)

2026-05-29 14:32:33 -07:00

sql_lab_execution_context.py

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

sql_lab_test.py

fix(rls): prevent double-apply when converting physical dataset to virtual (#39725)

2026-05-14 18:05:48 +03:00

test_sqllab_error_stacktrace.py

fix(sqllab): surface stacktrace in SQL Lab error responses (#28248) (#40585)

2026-06-02 10:41:39 -07:00

test_viz_cache_key.py

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 18:04:33 -03:00

test_viz_get_df_payload.py

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-05 21:21:48 -03:00