superset2

advanced_data_type

…

annotation_layers

…

async_events

fix: raise random_key entropy and add expiry to async query tokens (#40638 )

2026-06-08 16:24:06 -07:00

charts

Merge remote-tracking branch 'origin/master' into hughhhh/dashboard-export-spec-review

2026-06-24 21:03:21 -04:00

cli

fix(logging): safely render database URIs in startup warnings (#38229 )

2026-06-22 09:05:16 -07:00

columns

…

commands

fix(rls): preserve tables/roles on partial RLS rule updates (#41294 )

2026-06-24 16:16:47 -07:00

common

chore: fix lint on untouched files (#41333 )

2026-06-23 11:29:19 -07:00

connectors

fix(dataset): preserve numeric column types when pydruid infers STRING from first-row value (#40677 )

2026-06-05 09:25:57 -07:00

dao

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637 )

2026-06-08 17:07:57 -07:00

daos

fix(reports): escape LIKE wildcards in text filter and preserve typed screenshot width (#40980 )

2026-06-15 09:59:40 -07:00

dashboards

Merge remote-tracking branch 'origin/master' into hughhhh/dashboard-export-spec-review

2026-06-24 21:03:21 -04:00

databases

feat(ssh_tunnel): add opt-in server host key verification (#40673 )

2026-06-15 12:17:14 -07:00

datasets

fix(dataset): import/export jinja template bug (#28790 )

2026-06-23 13:25:49 -07:00

datasource

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

db_engine_specs

fix(bigquery): preserve catalog in partition metadata lookup (#40200 )

2026-06-24 01:41:06 -07:00

distributed_lock

feat: add global task framework (#36368 )

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557 )

2026-02-12 14:12:12 -08:00

explore

…

extensions

fix(ssh-tunnel): support ed25519 and ECDSA keys, not just RSA (#24180 ) (#40139 )

2026-06-23 09:15:45 -07:00

fixtures

fix(assets): Support uploading tags using the assets import endpoint (#38343 )

2026-06-09 10:13:28 -04:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502 )

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649 )

2026-06-08 16:53:37 -07:00

key_value

feat(embedded): add guest token revocation support (#40671 )

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): require MCP_JWT_AUDIENCE when MCP JWT auth is enabled (#41292 )

2026-06-24 16:53:36 -07:00

migrations

…

models

fix(models): use Series.iloc for positional access in post_process_df (#41344 )

2026-06-23 11:22:22 -07:00

pandas_postprocessing

fix(pandas-postprocessing): handle prophet errors and validate minimum data points for forecast (#41180 )

2026-06-24 10:44:23 -07:00

queries

fix: Enforce per-user caching on legacy API endpoint (#39789 )

2026-04-30 18:04:33 -03:00

reports

fix(reports): escape LIKE wildcards in text filter and preserve typed screenshot width (#40980 )

2026-06-15 09:59:40 -07:00

row_level_security

fix(rls): reject empty or whitespace-only RLS clauses (#41297 )

2026-06-23 11:24:38 -07:00

scripts

fix(i18n): don't flag intentional string deletions as translation regressions (#40716 )

2026-06-03 14:47:31 -07:00

security

fix(security): reject unknown fields on guest-token RLS rules (#41217 )

2026-06-24 16:16:43 -07:00

semantic_layers

fix(semantic layers): coerce filter types (#40222 )

2026-05-21 09:25:27 -04:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378 )

2026-06-03 12:58:17 -07:00

sql

fix(sql): detect set operations and nested selects in subquery check (#38452 )

2026-06-22 20:27:32 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698 )

2026-04-20 18:29:51 -04:00

sqllab

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632 )

2026-06-03 00:14:48 -07:00

tables

…