superset2

mirror of https://github.com/apache/superset.git synced 2026-07-25 08:02:28 +00:00

Files

Evan Rusackas b05fe4857e fix(chart): require chart access for query_context-only updates (#40648 )

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-06-13 04:16:29 -07:00

advanced_data_type

…

annotation_layers

…

async_events

fix: raise random_key entropy and add expiry to async query tokens (#40638 )

2026-06-08 16:24:06 -07:00

charts

fix(charts): tighten chart schema input validation (query_context JSON, prophet/rolling bounds) (#40634 )

2026-06-10 08:17:12 -07:00

cli

feat(embedded): add guest token revocation support (#40671 )

2026-06-10 09:17:30 -07:00

columns

…

commands

fix(chart): require chart access for query_context-only updates (#40648 )

2026-06-13 04:16:29 -07:00

common

fix: use pd.to_numeric in df_metrics_to_num to handle string-encoded numerics from ClickHouse (#40190 )

2026-06-09 10:28:34 -07:00

connectors

fix(dataset): preserve numeric column types when pydruid infers STRING from first-row value (#40677 )

2026-06-05 09:25:57 -07:00

dao

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637 )

2026-06-08 17:07:57 -07:00

daos

feat(core): SoftDeleteMixin and restore infrastructure (#39977 )

2026-05-29 13:08:10 -07:00

dashboards

fix(permalink): accept null entries in activeTabs for v5-imported dashboards (#40969 )

2026-06-11 22:03:27 +07:00

databases

fix(schemas): tighten guest dataset fields, external_url protocols, ssh creds, prophet bounds (#40640 )

2026-06-09 18:30:30 -07:00

datasets

fix(dataset): validate catalog against allow_multi_catalog on import (#40376 )

2026-06-01 09:24:28 -07:00

datasource

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

db_engine_specs

fix: ODPS (MaxCompute) data source table preview failed (#38174 )

2026-06-05 17:57:44 -07:00

distributed_lock

feat: add global task framework (#36368 )

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557 )

2026-02-12 14:12:12 -08:00

explore

…

extensions

feat(extensions): static supply-chain controls — denylist + version policy (#40668 )

2026-06-04 12:29:03 -07:00

fixtures

fix(assets): Support uploading tags using the assets import endpoint (#38343 )

2026-06-09 10:13:28 -04:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502 )

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649 )

2026-06-08 16:53:37 -07:00

key_value

feat(embedded): add guest token revocation support (#40671 )

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): add dataset_id to update_chart to support rebinding chart datasource (#40853 )

2026-06-12 10:42:53 -04:00

migrations

…

models

fix(charts): apply DISALLOWED_SQL_FUNCTIONS gate to adhoc expressions (#40568 )

2026-06-03 12:52:22 +01:00

pandas_postprocessing

test(prophet): pin yhat_lower can be negative for negative series (#21734 ) (#40141 )

2026-05-18 07:21:04 -07:00

queries

fix: Enforce per-user caching on legacy API endpoint (#39789 )

2026-04-30 18:04:33 -03:00

reports

fix(reports): stamp email subject date at send time, not import time (#40693 )

2026-06-04 12:03:28 -07:00

scripts

fix(i18n): don't flag intentional string deletions as translation regressions (#40716 )

2026-06-03 14:47:31 -07:00

security

feat(security): force password change on first use (opt-in) (#40669 )

2026-06-11 22:23:10 -07:00

semantic_layers

fix(semantic layers): coerce filter types (#40222 )

2026-05-21 09:25:27 -04:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378 )

2026-06-03 12:58:17 -07:00

sql

fix: ODPS (MaxCompute) data source table preview failed (#38174 )

2026-06-05 17:57:44 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698 )

2026-04-20 18:29:51 -04:00

sqllab

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632 )

2026-06-03 00:14:48 -07:00

tables

…