superset2

advanced_data_type

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

annotation_layers

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

async_events

fix: raise random_key entropy and add expiry to async query tokens (#40638 )

2026-06-08 16:24:06 -07:00

available_domains

chore: proper current_app.config proxy usage (#34345 )

2025-07-31 19:27:42 -07:00

cachekeys

…

charts

Merge branch 'master' into hughhhh/dashboard-export-spec-review

2026-06-20 23:13:23 -04:00

cli

fix(cli): inconsistent options for set-database-uri (#34893 )

2026-06-16 17:50:51 -07:00

columns

…

commands

fix(reports): require user in get_screenshot, simplify Selenium lifecycle, and fail on tiled screenshot error (#41080 )

2026-06-18 15:46:17 -07:00

common

fix(query_object_factory): normalize deprecated query fields before constructing QueryObject (#41204 )

2026-06-18 15:02:07 -07:00

connectors

refactor: update SQLAlchemy select() syntax to 2.0 (#40276 )

2026-06-17 17:50:32 -07:00

core

fix(mcp): add safeguards to ensure all MCP tools are wrapped with mcp_auth_hook (#40412 )

2026-06-18 10:27:53 -07:00

css_templates

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

daos

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637 )

2026-06-08 17:07:57 -07:00

dashboards

Merge branch 'master' into hughhhh/dashboard-export-spec-review

2026-06-20 23:13:23 -04:00

databases

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751 )

2026-06-19 10:02:35 -07:00

datasets

feat(api): return uuid in POST response for dataset, chart, and dashboard (#37806 )

2026-06-13 16:53:08 -07:00

datasource

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

db_engine_specs

refactor: update SQLAlchemy select() syntax to 2.0 (#40276 )

2026-06-17 17:50:32 -07:00

distributed_lock

refactor(config): SIGNAL_CACHE_CONFIG → DISTRIBUTED_COORDINATION_CONFIG (#38395 )

2026-03-04 09:40:21 -08:00

embedded

fix(embedded): add Sec-Fetch-Dest defense-in-depth check on the embedded view (#40667 )

2026-06-09 11:08:08 -07:00

embedded_dashboard

…

examples

fix(examples): skip URI safety check for system imports (#37577 )

2026-02-02 09:24:16 -08:00

explorables

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

explore

fix(ag-grid): persist AG Grid column filters in explore permalinks (#38393 )

2026-03-11 01:56:24 +05:30

extensions

refactor: update SQLAlchemy select() syntax to 2.0 (#40276 )

2026-06-17 17:50:32 -07:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502 )

2026-05-11 10:24:42 -07:00

initialization

feat(security): force password change on first use (opt-in) (#40669 )

2026-06-11 22:23:10 -07:00

key_value

feat(embedded): add guest token revocation support (#40671 )

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): generate durable explore permalink URL instead of ephemeral form_data_key (#40773 )

2026-06-19 08:50:11 -07:00

migrations

refactor: update SQLAlchemy select() syntax to 2.0 (#40276 )

2026-06-17 17:50:32 -07:00

models

fix(chart): preserve SQL_QUERY_MUTATOR line comments structure (#41215 )

2026-06-19 15:07:24 -03:00

queries

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

reports

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751 )

2026-06-19 10:02:35 -07:00

row_level_security

fix(rls): apply standard datasource access checks in RLS rule commands (#40650 )

2026-06-09 11:24:12 -07:00

security

feat(security): Add extension hooks for custom access control, ownership, and asset lifecycle (#40707 )

2026-06-16 15:25:03 +03:00

semantic_layers

chore(deps): bump pyarrow from 20.0.0 to 24.0.0 (#39756 )

2026-06-09 12:51:33 -07:00

sql

fix(sql): preserve multi-arg DISTINCT in sanitize_clause and format (#39340 )

2026-06-19 13:02:50 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698 )

2026-04-20 18:29:51 -04:00

sqllab

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245 )

2026-06-03 12:55:25 +01:00

static

chore: remove redundant service-worker.js placeholder (#38348 )

2026-03-03 01:43:17 -08:00

tables

…