Amin Ghadersohi 875d0c062f fix(mcp): prevent GRID_ID injection into ROOT_ID on tabbed dashboards (#38890) ...

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit aa1a69555b)

2026-03-30 09:43:35 -03:00

..

advanced_data_type

…

annotation_layers

…

async_events

…

charts

…

columns

…

commands

fix(keys): Unsafe dict access in get_native_filters_params() crashes execution (#38272)

2026-03-24 11:59:29 -03:00

common

fix(excel): remove unwanted index column from Excel exports (#38176)

2026-02-23 08:28:40 -08:00

connectors

fix(dataset): add email field to owners_data for Chart Explore path (#38836)

2026-03-30 09:14:12 -03:00

dao

refactor(core): reorganize superset-core packages into feature-based structure (#38448)

2026-03-05 17:41:15 -03:00

daos

refactor(core): reorganize superset-core packages into feature-based structure (#38448)

2026-03-05 17:41:15 -03:00

dashboards

perf(dashboard): skip thumbnail_url computing on single dashboard endpoint (#38015)

2026-02-19 18:15:20 +01:00

databases

feat: support for import/export masked_encrypted_extra (backend) (#38077)

2026-03-04 11:26:28 -08:00

datasets

fix(dataset): add missing currency_code_column to DatasetPostSchema (#38853)

2026-03-30 09:09:43 -03:00

datasource

…

db_engine_specs

feat(database): add Google Cloud Datastore db engine spec (#37677)

2026-03-06 16:40:17 -08:00

distributed_lock

feat: add global task framework (#36368)

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557)

2026-02-12 14:12:12 -08:00

explore

…

extensions

chore(extensions): simplify backend package structure by removing superset_extensions namespace (#38476)

2026-03-06 14:49:49 -03:00

fixtures

…

importexport

feat: support for import/export masked_encrypted_extra (backend) (#38077)

2026-03-04 11:26:28 -08:00

key_value

…

mcp_service

fix(mcp): prevent GRID_ID injection into ROOT_ID on tabbed dashboards (#38890)

2026-03-30 09:43:35 -03:00

migrations

…

models

fix: type probing (#38889)

2026-03-30 09:09:11 -03:00

pandas_postprocessing

…

queries

…

reports

fix(report): raise warning when filter type not recognized (#38676)

2026-03-26 13:26:31 -03:00

scripts

…

security

fix: add parent_slice_id for multilayer charts to embed (#38243)

2026-03-17 11:41:47 -03:00

sql

fix(firebolt): Firebolt SQL entered with EXCLUDE is rewritten to EXCEPT (#38742)

2026-03-20 16:34:03 -03:00

tables

…

tags

fix(tags): expire tag relationship after deleting all tagged objects (#38163)

2026-03-04 10:37:19 -03:00

tasks

refactor(core): reorganize superset-core packages into feature-based structure (#38448)

2026-03-05 17:41:15 -03:00

themes

…

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

utils

feat(alerts/reports): external URL warning (#35021)

2026-03-06 11:57:03 -05:00

views

fix(datasource): align access validation in legacy views (#38647)

2026-03-26 13:31:06 -03:00

__init__.py

…

config_test.py

…

conftest.py

…

core_tests.py

…

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

extension_tests.py

fix(templates): restore css_bundle calls in spa.html for production builds (#38350)

2026-03-03 10:27:39 -08:00

feature_flag_test.py

…

initialization_test.py

chore: Support specifying app_root via superset_config.py (#38284)

2026-02-28 01:35:08 -03:00

jinja_context_test.py

fix: support nested function calls in cache_key_wrapper (#38569)

2026-03-17 11:40:05 -03:00

legacy_tests.py

…

result_set_test.py

…

sql_lab_execution_context.py

…

sql_lab_test.py

fix(embedded): prevent double RLS application in virtual datasets (#37395)

2026-03-17 11:40:36 -03:00