Vitor Avila cf2f4c0438 fix(OAuth2): Re-query the OAuth2 token to avoid stale reference (#40071) ...

(cherry picked from commit d40a5cad5d)

2026-05-19 15:12:17 -07:00

..

advanced_data_type

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

annotation_layers

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

async_events

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

available_domains

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

cachekeys

fix: Nested transaction is inactive when embedding dashboard (#30699)

2024-10-24 13:08:55 -03:00

charts

fix(charts): set g.form_data for metric() Jinja macro on GET chart data endpoint (#39347)

2026-04-29 09:12:55 -07:00

cli

feat: Dynamic currency (#36416)

2026-01-26 12:40:52 -08:00

columns

chore: remove sl_ tables (#28704)

2024-05-29 19:04:37 -07:00

commands

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-18 14:05:41 -07:00

common

fix(sql): quote identifiers in transpile_to_dialect to fix case-sensitive column filters (#39521)

2026-05-06 14:42:18 -07:00

connectors

fix(dataset): calculated columns in virtual datasets fail when used as dynamic aggregation filter dimensions (#39004)

2026-04-29 09:12:55 -07:00

core/mcp

fix: core mcp injection and ephemeral envs (#36440)

2026-01-26 12:40:50 -08:00

css_templates

fix: Add user filtering to changed_by. Fixes #27986 (#29287)

2024-07-25 15:23:00 -06:00

daos

fix(mcp): fall back to title match when dashboard slug lookup misses (#39567)

2026-05-15 20:09:55 -07:00

dashboards

fix(reports): preserve urlParams in multi-tab report fan-out (#39884)

2026-05-06 14:00:15 -07:00

databases

feat: support for import/export masked_encrypted_extra (backend) (#38077)

2026-03-11 14:05:09 -07:00

datasets

fix(clickhouse): prevent expensive table scan (#39867)

2026-05-06 11:49:41 -07:00

datasource

feat(validation): Add SQL expression validation in popovers (#34642)

2026-01-26 12:40:40 -08:00

db_engine_specs

fix(GSheets OAuth2): Re-add UnauthenticatedError (#39785)

2026-05-19 15:12:17 -07:00

distributed_lock

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

embedded

docs(api): Improve api documentation for dashboard endpoints(filter_state, permalink, embedded) (#32142)

2025-02-13 19:02:45 +02:00

embedded_dashboard

…

examples

feat: Dynamic currency (#36416)

2026-01-26 12:40:52 -08:00

explorables

fix(dashboard): Prevent fatal error when database connection is unavailable (#37576)

2026-02-09 09:27:25 -08:00

explore

fix(explore): Display missing dataset for denied access (#34129)

2025-07-16 13:36:03 -07:00

extensions

feat: add option for hash algorithms (#35621)

2026-01-26 12:40:50 -08:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-18 14:05:41 -07:00

initialization

feat(alerts/reports): external URL warning (#35021)

2026-03-09 10:17:13 -07:00

key_value

feat(oauth2): add PKCE support for database OAuth2 authentication (#37067)

2026-02-28 23:33:53 -08:00

mcp_service

feat(mcp): add create_virtual_dataset tool to save SQL queries as datasets (#39279)

2026-05-18 10:56:33 -07:00

migrations

feat: Dynamic currency (#36416)

2026-01-26 12:40:52 -08:00

models

fix(time-comparison): use chart row_limit instead of instance config in offset queries (#39490)

2026-05-18 10:58:47 -07:00

queries

fix(sqllab): show actual execution duration in Query History (#34511)

2025-08-12 14:34:34 -07:00

reports

fix(filterReports): _generate_native_filter() crashes on null/empty filterValues (#38954)

2026-04-13 10:16:49 -07:00

row_level_security

fix(row_level_security): Correct api response code for update (#34672)

2025-08-13 23:51:10 +03:00

security

fix(security): add UserSAMLModelView to USER_MODEL_VIEWS (#39568)

2026-04-29 09:12:55 -07:00

sql

feat(sqlglot): Vertica dialect (#39969)

2026-05-08 11:49:22 -07:00

sql_validators

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

sqllab

feat(streaming): Streaming CSV uploads for over 100k records for constant memory usage (#35478)

2026-01-26 12:40:47 -08:00

static

feat: Add PWA file handler for CSV/XLS/Parquet uploads (#36191)

2026-02-02 21:25:32 -08:00

tables

chore: remove sl_ tables (#28704)

2024-05-29 19:04:37 -07:00

tags

fix: remove unwanted info from tags REST API (#36266)

2025-11-25 08:41:39 -08:00

tasks

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-19 15:12:17 -07:00

templates

fix(reports): keep body sized so standalone screenshots don't time out (#39944)

2026-05-08 14:28:16 -07:00

temporary_cache

chore: set up ruff as a new linter/formatter (#28158)

2024-04-24 17:19:53 -07:00

themes

feat(theming): add per-theme custom font URL support (#36317)

2026-01-26 12:40:50 -08:00

thumbnails

perf(security): cache RLS filters per-request to avoid repeated DB queries (#38110)

2026-02-28 23:33:53 -08:00

translations

feat: refactor modals to use consistent design patterns (#34711)

2026-01-26 12:40:41 -08:00

utils

fix(OAuth2): Re-query the OAuth2 token to avoid stale reference (#40071)

2026-05-19 15:12:17 -07:00

views

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-19 15:12:17 -07:00

__init__.py

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

app.py

chore: Support specifying app_root via superset_config.py (#38284)

2026-03-04 21:27:27 -08:00

config.py

feat(api-keys): add API key authentication via FAB SecurityManager (#37973)

2026-03-25 19:24:50 -07:00

constants.py

fix: centralize cache timeout -1 logic to prevent caching (#34654)

2025-08-18 08:45:20 +01:00

custom_database_errors.py

feat(db): custom database error messages (#34674)

2026-01-26 12:40:44 -08:00

dataframe.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 11:07:10 -08:00

errors.py

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

exceptions.py

fix: OAuth2 exception should be 403 (#40074)

2026-05-19 15:12:17 -07:00

forms.py

refactor: Unify all json.(loads|dumps) usage to utils.json (#28702)

2024-05-28 14:17:41 -07:00

jinja_context.py

chore: annotate important types (#36034)

2026-01-26 12:40:47 -08:00

legacy.py

chore: set up ruff as a new linter/formatter (#28158)

2024-04-24 17:19:53 -07:00

result_set.py

fix(SQL Lab): handle columns without names (#38986)

2026-04-13 10:16:49 -07:00

schemas.py

…

sql_lab.py

fix(security): Add table blocklist and fix MCP SQL validation bypass (#37411)

2026-02-10 16:21:57 -08:00

stats_logger.py

docs: pypi-installation on Ubuntu 24.04 and statsd package for event-logging (#32891)

2025-06-27 13:52:00 -07:00

superset_typing.py

feat(oauth2): add PKCE support for database OAuth2 authentication (#37067)

2026-02-28 23:33:53 -08:00

viz.py

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-19 15:12:17 -07:00