Joe Li 6b201cbe5f Merge branch 'master' into sl-time-range

2026-07-01 10:20:59 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

fix(async-query): prevent JWT InvalidSubjectError for guest users (#37862)

2026-06-30 23:42:41 -07:00

charts

fix(chart API): Consider time grain filters with the filters_dashboard_id param (#41290)

2026-06-22 20:01:24 -03:00

cli

fix(logging): safely render database URIs in startup warnings (#38229)

2026-06-22 09:05:16 -07:00

columns

…

commands

feat(sql): schema-qualified table denylist + information_schema/lo_* defaults (#41120)

2026-07-01 16:57:45 +01:00

common

feat(explore): add full-range option for time-shift comparison (#41334)

2026-06-25 18:30:33 +03:00

connectors

fix(dataset): preserve numeric column types when pydruid infers STRING from first-row value (#40677)

2026-06-05 09:25:57 -07:00

dao

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637)

2026-06-08 17:07:57 -07:00

daos

feat(soft-delete): gate soft delete behind a temporary SOFT_DELETE release toggle (#41166)

2026-07-01 08:09:52 -07:00

dashboards

feat: added deterministic field generation to dashboard export (#36339)

2026-06-24 01:41:44 -07:00

databases

feat(ssh_tunnel): add opt-in server host key verification (#40673)

2026-06-15 12:17:14 -07:00

datasets

fix(dataset): import/export jinja template bug (#28790)

2026-06-23 13:25:49 -07:00

datasource

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

db_engine_specs

fix(bigquery): backslash-escape apostrophes in filter values (#38835)

2026-06-27 00:55:47 -07:00

distributed_lock

feat: add global task framework (#36368)

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557)

2026-02-12 14:12:12 -08:00

explore

…

extensions

fix(ssh-tunnel): support ed25519 and ECDSA keys, not just RSA (#24180) (#40139)

2026-06-23 09:15:45 -07:00

fixtures

fix(assets): Support uploading tags using the assets import endpoint (#38343)

2026-06-09 10:13:28 -04:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649)

2026-06-08 16:53:37 -07:00

key_value

feat(embedded): add guest token revocation support (#40671)

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): escape LIKE wildcards in find_users to prevent user enumeration (#41593)

2026-07-01 13:01:46 -04:00

migrations

…

models

feat(sql): schema-qualified table denylist + information_schema/lo_* defaults (#41120)

2026-07-01 16:57:45 +01:00

pandas_postprocessing

fix(pandas_postprocessing): pass string operator names to GroupBy.agg to avoid FutureWarning (#41025)

2026-06-27 15:01:43 -07:00

queries

feat(explore): add full-range option for time-shift comparison (#41334)

2026-06-25 18:30:33 +03:00

reports

fix(reports): reliability fixes for alert/report execution (#41177)

2026-06-26 12:09:12 -07:00

row_level_security

fix(rls): reject empty or whitespace-only RLS clauses (#41297)

2026-06-23 11:24:38 -07:00

scripts

fix(i18n): key translation-regression check on per-msgid transitions (#41596)

2026-06-30 16:54:39 -07:00

security

fix(config): make Swagger UI opt-in (off by default) (#41300)

2026-06-25 10:34:28 -07:00

semantic_layers

fix(semantic layers): start/end ranges

2026-06-30 16:15:54 -04:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378)

2026-06-03 12:58:17 -07:00

sql

feat(sql): schema-qualified table denylist + information_schema/lo_* defaults (#41120)

2026-07-01 16:57:45 +01:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632)

2026-06-03 00:14:48 -07:00

tables

…

tags

fix(tags): remove unsatisfiable foreign keys from tagged_object.object_id (#41126)

2026-06-29 09:30:04 -07:00

tasks

fix(thumbnails): add deduplication to dashboard thumbnail Celery tasks (#38576)

2026-06-26 12:41:02 -04:00

themes

…

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

utils

fix(screenshots): catch empty-bytes tiled result and set ERROR on falsy image (#41097)

2026-06-29 11:52:40 -07:00

views

fix(telemetry): use Scarf static pixel instead of gateway redirect (#41129)

2026-06-27 22:41:17 -07:00

__init__.py

…

config_swagger_ui_test.py

fix(config): make Swagger UI opt-in (off by default) (#41300)

2026-06-25 10:34:28 -07:00

config_test.py

chore(config): default SMTP_SSL_SERVER_AUTH to True (#40647)

2026-06-30 13:50:38 -07:00

conftest.py

…

core_tests.py

…

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

extension_tests.py

fix: replace deprecated appbuilder.app with current_app (#40876)

2026-06-09 15:01:43 -07:00

feature_flag_test.py

…

initialization_test.py

refactor: make import/expression layer SQLAlchemy 2.0-compatible (#41179)

2026-06-29 11:38:59 -07:00

jinja_context_test.py

fix(charts): evaluate access before rendering query filters; isolate macro env (#40982)

2026-06-13 19:01:54 +01:00

legacy_tests.py

…

result_set_test.py

fix(sql_lab): serialize dict/list cell values as valid JSON strings (#41099)

2026-06-23 20:39:23 -07:00

sql_lab_execution_context.py

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245)

2026-06-03 12:55:25 +01:00

sql_lab_test.py

fix(sqllab): prevent corrupted query state from blocking SQL Lab access (#40580)

2026-06-09 10:51:45 +01:00

test_check_secret_key.py

fix(config): refuse to start with an empty SECRET_KEY (#41299)

2026-06-26 12:07:17 -07:00

test_init_extensions_logging.py

fix(extensions): log extension-init failures via the logger, not print() (#41304)

2026-06-23 11:25:33 -07:00

test_marshmallow4_compat.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

test_mcp_stdio_entrypoint.py

fix(mcp): redirect stdio click echo without recursion (#40814)

2026-06-15 10:10:40 -07:00

test_sqllab_error_stacktrace.py

fix(sqllab): surface stacktrace in SQL Lab error responses (#28248) (#40585)

2026-06-02 10:41:39 -07:00

test_viz_cache_key.py

chore: fix lint on untouched files (#41333)

2026-06-23 11:29:19 -07:00

test_viz_get_df_payload.py

fix(viz): gate stacktrace behind SHOW_STACKTRACE and allowlist resample method (#40636)

2026-06-08 16:09:59 -07:00