Elizabeth ThompsonandClaude Opus 4.8 3258f5fa3f fix(security): catch JSONDecodeError on stored query_context in query_context_modified (#43795) ...

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2026-09-03 15:07:24 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

charts

fix(charts): exclude string helpers from post_processing operation allowlist (#43345)

2026-09-03 11:48:29 -07:00

cli

fix(cli): avoid DetachedInstanceError in compute-thumbnails (#41530)

2026-07-09 19:26:41 -07:00

columns

…

commands

perf(dashboard): batch dataset lookups during dashboard export (#43017)

2026-09-03 11:07:47 +02:00

common

feat(datasource): headless query API for Explorable datasources (#43527)

2026-09-02 09:00:37 -07:00

connectors

fix(snowflake): quote case-sensitive lowercase column identifiers in generated SQL (#43312)

2026-09-02 15:52:20 -07:00

dao

fix(dao): don't mask transient OperationalError as a "not found" result (#43479)

2026-08-27 17:34:53 -04:00

daos

fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)

2026-08-21 12:34:37 -07:00

dashboards

fix(dashboard): remove @has_access_api from filter state REST API (#43564)

2026-08-28 17:06:06 -07:00

databases

chore(database): remove dead extra validation exception classes (#42411)

2026-08-25 15:14:16 -07:00

datasets

fix(sqllab): explain dataset save failures instead of "Fatal error" (#43334)

2026-09-02 11:10:52 +02:00

datasource

feat(chart): list semantic views in the Create Chart datasource picker (#43629)

2026-09-02 16:33:19 -04:00

db_engine_specs

fix(snowflake): quote case-sensitive lowercase column identifiers in generated SQL (#43312)

2026-09-02 15:52:20 -07:00

distributed_lock

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

examples

fix(import): tighten ownership and validation checks across asset importers (#43393)

2026-08-21 12:35:33 -07:00

explore

fix(explore): catch TemplateError when validating access for query-backed form_data (#43470)

2026-08-28 15:03:08 -07:00

extensions

fix(metadb): apply SUPERSET_META_DB_LIMIT after join instead of per-table (#36304) (#42598)

2026-08-25 19:31:11 -07:00

fixtures

feat(dashboard): expand all chart descriptions (#32958)

2026-08-06 14:47:30 -07:00

importexport

…

initialization

chore(security): warn when legacy encryption engine is configured (#42937)

2026-08-11 09:35:46 -07:00

key_value

fix: commit migration write in get_shared_value to stop recurring md5 deprecation warning (#42916)

2026-08-12 15:02:34 -07:00

mcp_service

feat(mcp): let get_dashboard_info accept filter_state directly (#43688)

2026-08-31 15:46:53 -03:00

middleware

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

migrations

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

models

fix(charts): resolve semantic-view datasource name and link in chart list (#43649)

2026-09-02 20:56:33 -04:00

openapi

fix(dashboard): align list OpenAPI schema (#43256)

2026-08-18 10:22:50 -07:00

pandas_postprocessing

fix(chart): map the remaining time grains for Prophet forecasting (#43205)

2026-08-28 20:35:52 -07:00

queries

fix(charts): exclude string helpers from post_processing operation allowlist (#43345)

2026-09-03 11:48:29 -07:00

reports

fix(reports): downgrade Slack channel-fetch auth-error logging to WARNING (SC-115301) (#42484)

2026-09-02 15:06:58 -07:00

row_level_security

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

scripts

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

security

fix(security): catch JSONDecodeError on stored query_context in query_context_modified (#43795)

2026-09-03 15:07:24 -07:00

semantic_layers

fix(semantic_layers): mask write-only config fields, gate flag-off endpoints (#43474)

2026-09-02 10:16:59 -07:00

server

…

sql

fix(sql): catch sqlglot ParseError when parsing RLS predicates (#43651)

2026-09-01 15:04:18 -07:00

sql_validators

…

sqllab

fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)

2026-08-13 14:04:38 -07:00

subjects

fix(mcp): harden the embedded-guest chart data-read path

2026-08-14 14:55:11 -03:00

tables

…

tags

fix(tags): catch TemplateError when validating access for tagged SQL Lab queries on delete (#43433)

2026-08-31 15:02:22 -07:00

tasks

fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)

2026-08-21 12:34:37 -07:00

themes

fix: add missing access checks to semantic-layer and theme endpoints (#43389)

2026-08-24 08:52:45 -07:00

thumbnails

fix: tighten SSRF validation, executor resolution, and cache scoping across reports/thumbnails (#43395)

2026-08-21 12:34:37 -07:00

translations

feat(i18n): serve language packs as versioned, immutable-cacheable scripts (#41780)

2026-08-02 21:59:44 -07:00

utils

fix(reports): prevent blank dashboard captures (#43784)

2026-09-03 01:30:14 -04:00

versioning

fix(dataset): stop a stale edit modal from silently reverting a saved change (#43583)

2026-08-28 21:07:36 +03:00

views

fix(i18n): make language pack endpoint public for embedded dashboards (#42438)

2026-08-28 20:46:27 -07:00

__init__.py

…

config_swagger_ui_test.py

fix(config): make Swagger UI opt-in (off by default) (#41300)

2026-06-25 10:34:28 -07:00

config_test.py

feat(versioning): version-history retention cleanup job (#41075)

2026-07-27 19:59:11 -07:00

conftest.py

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

core_tests.py

fix(explore): render Jinja before validating legacy chart filters (#41996)

2026-07-23 22:05:14 -07:00

dataframe_test.py

…

docker_compose_image_tag_test.py

fix(docker): isolate tagged images from host packages (#42249)

2026-07-28 11:51:48 -07:00

extension_tests.py

…

feature_flag_test.py

…

frontend_bundle_size_workflow_test.py

fix(ci): restore scheduled CI checks (#43266)

2026-08-24 12:31:50 -07:00

initialization_test.py

fix(reports): enforce dashboard readiness and execution budget (#42624)

2026-08-05 14:30:35 -07:00

jinja_context_test.py

fix(jinja): reuse get_request_json_body in get_dataset_id_from_context (#43556)

2026-09-02 15:47:51 -07:00

legacy_tests.py

…

result_set_test.py

test(result_set): add regression test for empty result set column metadata (#35962)

2026-07-27 23:08:59 -07:00

scheduled_docker_image_refresh_test.py

fix(ci): use current actions for Docker refresh (#42482)

2026-08-11 12:04:09 -07:00

sql_lab_execution_context.py

fix(sql-lab): improved SQL statement parsing and validation (#42928)

2026-08-11 19:35:43 -07:00

sql_lab_test.py

feat(snowflake): Add support for OAuth 2.0 authentication (#36856)

2026-08-24 21:22:14 -07:00

test_check_secret_key.py

fix(config): refuse to start with an empty SECRET_KEY (#41299)

2026-06-26 12:07:17 -07:00

test_init_extensions_logging.py

fix(extensions): log extension-init failures via the logger, not print() (#41304)

2026-06-23 11:25:33 -07:00

test_marshmallow4_compat.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

test_marshmallow_compatibility.py

fix(marshmallow): add compatibility layer for Flask-AppBuilder with marshmallow 4.x (#35920)

2026-07-08 12:09:50 -07:00

test_mcp_stdio_entrypoint.py

…

test_sqllab_error_stacktrace.py

…

test_subdirectory_url_for.py

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00