Evan be0d9bc9e3 fix(embedded): include all_columns from stored query context in guest sort targets ...

Address review feedback: the stored query context loop in
_collect_sortable_identifiers omitted all_columns, silently rejecting
legitimate guest sorts on table charts configured with 'show all
columns'. Add it, plus a regression test and clarifying comments on the
order-by union and the intentional stored_values asymmetry.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 05:51:00 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

fix: raise random_key entropy and add expiry to async query tokens (#40638)

2026-06-08 16:24:06 -07:00

charts

fix(chart API): Do not duplicate Jinja-applied filters with filters_dashboard_id (#41131)

2026-06-18 14:25:54 -03:00

cli

feat(embedded): add guest token revocation support (#40671)

2026-06-10 09:17:30 -07:00

columns

…

commands

fix(reports): escape LIKE wildcards in text filter and preserve typed screenshot width (#40980)

2026-06-15 09:59:40 -07:00

common

fix(query_object_factory): normalize deprecated query fields before constructing QueryObject (#41204)

2026-06-18 15:02:07 -07:00

connectors

fix(dataset): preserve numeric column types when pydruid infers STRING from first-row value (#40677)

2026-06-05 09:25:57 -07:00

dao

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637)

2026-06-08 17:07:57 -07:00

daos

fix(reports): escape LIKE wildcards in text filter and preserve typed screenshot width (#40980)

2026-06-15 09:59:40 -07:00

dashboards

fix(dashboard): do not add importer as owner when overwriting existing dashboard (#38615)

2026-06-14 05:10:03 -07:00

databases

feat(ssh_tunnel): add opt-in server host key verification (#40673)

2026-06-15 12:17:14 -07:00

datasets

fix(network): validate target hostname in outbound requests (#39301)

2026-06-13 20:26:58 +01:00

datasource

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

db_engine_specs

refactor: update SQLAlchemy select() syntax to 2.0 (#40276)

2026-06-17 17:50:32 -07:00

distributed_lock

feat: add global task framework (#36368)

2026-02-09 10:45:56 -08:00

examples

test(examples): add tests for UUID threading and security bypass (#37557)

2026-02-12 14:12:12 -08:00

explore

…

extensions

feat(ssh_tunnel): add opt-in server host key verification (#40673)

2026-06-15 12:17:14 -07:00

fixtures

fix(assets): Support uploading tags using the assets import endpoint (#38343)

2026-06-09 10:13:28 -04:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649)

2026-06-08 16:53:37 -07:00

key_value

feat(embedded): add guest token revocation support (#40671)

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): add safeguards to ensure all MCP tools are wrapped with mcp_auth_hook (#40412)

2026-06-18 10:27:53 -07:00

migrations

…

models

fix(theme): embedded method overrides dashboard level config (#40777)

2026-06-17 18:33:04 -07:00

pandas_postprocessing

fix(sql): broaden mutating-statement detection in SQL Lab parser (#40421)

2026-06-16 15:07:34 -07:00

queries

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 18:04:33 -03:00

reports

fix(reports): escape LIKE wildcards in text filter and preserve typed screenshot width (#40980)

2026-06-15 09:59:40 -07:00

scripts

fix(i18n): don't flag intentional string deletions as translation regressions (#40716)

2026-06-03 14:47:31 -07:00

security

fix(embedded): include all_columns from stored query context in guest sort targets

2026-06-23 05:51:00 -07:00

semantic_layers

fix(semantic layers): coerce filter types (#40222)

2026-05-21 09:25:27 -04:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378)

2026-06-03 12:58:17 -07:00

sql

fix(sql): broaden mutating-statement detection in SQL Lab parser (#40421)

2026-06-16 15:07:34 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(export): sanitize user-supplied CSV export filename (charts + SQL Lab) (#40632)

2026-06-03 00:14:48 -07:00

tables

…

tags

fix(tags): expire tag relationship after deleting all tagged objects (#38163)

2026-03-04 10:37:19 -03:00

tasks

fix: cache warmup using WebDriver for reliable authentication (#38449)

2026-06-05 16:36:30 -07:00

themes

…

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

utils

fix(reports): require user in get_screenshot, simplify Selenium lifecycle, and fail on tiled screenshot error (#41080)

2026-06-18 15:46:17 -07:00

views

fix(theme): embedded method overrides dashboard level config (#40777)

2026-06-17 18:33:04 -07:00

__init__.py

…

config_test.py

…

conftest.py

…

core_tests.py

…

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

extension_tests.py

fix: replace deprecated appbuilder.app with current_app (#40876)

2026-06-09 15:01:43 -07:00

feature_flag_test.py

…

initialization_test.py

chore: Support specifying app_root via superset_config.py (#38284)

2026-02-28 01:35:08 -03:00

jinja_context_test.py

fix(charts): evaluate access before rendering query filters; isolate macro env (#40982)

2026-06-13 19:01:54 +01:00

legacy_tests.py

…

result_set_test.py

chore(deps): bump pyarrow from 20.0.0 to 24.0.0 (#39756)

2026-06-09 12:51:33 -07:00

sql_lab_execution_context.py

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245)

2026-06-03 12:55:25 +01:00

sql_lab_test.py

fix(sqllab): prevent corrupted query state from blocking SQL Lab access (#40580)

2026-06-09 10:51:45 +01:00

test_mcp_stdio_entrypoint.py

fix(mcp): redirect stdio click echo without recursion (#40814)

2026-06-15 10:10:40 -07:00

test_sqllab_error_stacktrace.py

fix(sqllab): surface stacktrace in SQL Lab error responses (#28248) (#40585)

2026-06-02 10:41:39 -07:00

test_viz_cache_key.py

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 18:04:33 -03:00

test_viz_get_df_payload.py

fix(viz): gate stacktrace behind SHOW_STACKTRACE and allowlist resample method (#40636)

2026-06-08 16:09:59 -07:00