3 people 2b6044b624 fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395) ...

Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-21 12:34:37 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

…

available_domains

…

cachekeys

…

charts

fix(cache): warm native dashboard filter defaults (#43073)

2026-08-12 22:30:48 -07:00

css_templates

…

dao

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

dashboards

fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)

2026-08-21 12:34:37 -07:00

databases

fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)

2026-08-13 14:04:38 -07:00

datasets

fix: hydrate JWT user before list API filters (#39946)

2026-08-10 14:18:28 -07:00

datasource

feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)

2026-08-19 10:56:49 -07:00

db_engine_specs

feat: bump SQLAlchemy to 2.0 and flask-sqlalchemy to 3.1.1 (#42803)

2026-08-12 19:55:14 -07:00

deletion_retention

refactor(deletion-retention): add declarative purge policies (#42888)

2026-08-11 09:55:36 -07:00

embedded

…

explore

…

extensions

…

fixtures

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

importexport

…

migrations

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

queries

feat(mcp): per-resource token scopes with user-permission intersection (#42297)

2026-08-18 13:11:27 -04:00

reports

fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)

2026-08-21 12:34:37 -07:00

security

fix(rls): return a descriptive error for duplicate rule names (#42819)

2026-08-11 12:41:24 -07:00

sql_lab

fix(sql_lab): return 400 not 500 when raise_for_access hits malformed Jinja in results.py (#43145)

2026-08-14 15:02:47 -07:00

subjects

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

tags

…

tasks

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

themes

…

users

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

utils

fix(encrypt): stop naive padding from truncating secrets ending in '*' (#43074)

2026-08-13 13:15:37 -07:00

versioning

feat: bump SQLAlchemy to 2.0 and flask-sqlalchemy to 3.1.1 (#42803)

2026-08-12 19:55:14 -07:00

views

feat(soft-delete): Recently Archived view with restore and permanent delete (#41550)

2026-08-03 12:21:48 -07:00

__init__.py

…

access_tests.py

…

base_api_tests.py

fix(dashboard): align list OpenAPI schema (#43256)

2026-08-18 10:22:50 -07:00

base_tests.py

fix: hydrate JWT user before list API filters (#39946)

2026-08-10 14:18:28 -07:00

cache_tests.py

…

celery_tests.py

fix(sql-lab): improved SQL statement parsing and validation (#42928)

2026-08-11 19:35:43 -07:00

cli_tests.py

…

commands_test.py

feat(dashboard): expand all chart descriptions (#32958)

2026-08-06 14:47:30 -07:00

conftest.py

…

constants.py

…

core_tests.py

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

dashboard_tests.py

feat(hooks): add configurable post-creation hook for dashboards (#42837)

2026-08-06 16:11:55 +03:00

dashboard_utils.py

…

datasource_tests.py

feat: bump SQLAlchemy to 2.0 and flask-sqlalchemy to 3.1.1 (#42803)

2026-08-12 19:55:14 -07:00

dict_import_export_tests.py

…

dynamic_plugins_tests.py

…

email_tests.py

…

event_logger_tests.py

…

form_tests.py

…

import_export_tests.py

feat(dashboard): expand all chart descriptions (#32958)

2026-08-06 14:47:30 -07:00

insert_chart_mixin.py

…

log_api_tests.py

…

logging_configurator_tests.py

…

model_tests.py

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

non_additive_totals_tests.py

feat(table): allow choosing Sum or Average for the "Show summary" totals row (#43027)

2026-08-13 13:15:23 -07:00

query_context_tests.py

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

result_set_tests.py

…

security_tests.py

feat(security): add guest user attributes and get_guest_user_attribute() macro (#33924)

2026-08-08 16:56:07 -07:00

sql_validator_tests.py

…

sqla_models_tests.py

feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)

2026-08-19 10:56:49 -07:00

sqllab_tests.py

…

stats_logger_tests.py

…

strategy_tests.py

…

superset_test_config_sqllab_backend_persist_off.py

…

superset_test_config_thumbnails.py

…

superset_test_config.py

feat: bump SQLAlchemy to 2.0 and flask-sqlalchemy to 3.1.1 (#42803)

2026-08-12 19:55:14 -07:00

superset_test_custom_template_processors.py

…

tagging_tests.py

…

test_app.py

…

test_database_password_encoding.py

…

test_granular_export_api.py

…

test_jinja_context.py

…

test_subdirectory_deployments.py

…

thumbnails_tests.py

feat(Reports&Alerts): remove Selenium support, require Playwright (#43028)

2026-08-11 16:06:26 -07:00

utils_tests.py

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00