superset2

mirror of https://github.com/apache/superset.git synced 2026-07-19 13:15:49 +00:00

Files

dependabot[bot] 543ad04ca0 chore(deps): bump pyarrow from 20.0.0 to 24.0.0 (#39756 )

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evan <evan@preset.io>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-09 12:51:33 -07:00

advanced_data_type

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

annotation_layers

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

async_events

fix: raise random_key entropy and add expiry to async query tokens (#40638 )

2026-06-08 16:24:06 -07:00

available_domains

chore: proper current_app.config proxy usage (#34345 )

2025-07-31 19:27:42 -07:00

cachekeys

…

charts

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

cli

fix(re-encrypt): handle non-id PKs and make command idempotent (#40079 )

2026-05-12 17:59:52 -07:00

columns

…

commands

fix(rls): apply standard datasource access checks in RLS rule commands (#40650 )

2026-06-09 11:24:12 -07:00

common

fix: use pd.to_numeric in df_metrics_to_num to handle string-encoded numerics from ClickHouse (#40190 )

2026-06-09 10:28:34 -07:00

connectors

fix(dataset): unify validation for stored and adhoc SQL expressions (#40392 )

2026-06-03 12:55:50 +01:00

core

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

css_templates

chore: bump rison to 2.0.0 (#39529 )

2026-04-24 15:52:42 -04:00

daos

fix(uploads,dao): add zip-safety check to columnar reader and cap DAO page size (#40637 )

2026-06-08 17:07:57 -07:00

dashboards

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

databases

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

datasets

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

datasource

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

db_engine_specs

fix: ODPS (MaxCompute) data source table preview failed (#38174 )

2026-06-05 17:57:44 -07:00

distributed_lock

refactor(config): SIGNAL_CACHE_CONFIG → DISTRIBUTED_COORDINATION_CONFIG (#38395 )

2026-03-04 09:40:21 -08:00

embedded

fix(embedded): add Sec-Fetch-Dest defense-in-depth check on the embedded view (#40667 )

2026-06-09 11:08:08 -07:00

embedded_dashboard

…

examples

fix(examples): skip URI safety check for system imports (#37577 )

2026-02-02 09:24:16 -08:00

explorables

feat: semantic layer extension (#37815 )

2026-05-05 12:07:46 -04:00

explore

fix(ag-grid): persist AG Grid column filters in explore permalinks (#38393 )

2026-03-11 01:56:24 +05:30

extensions

fix: harden ZIP safety checks (total-size cap, zero-division guard) and extension path matching (#40664 )

2026-06-08 14:14:53 -07:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502 )

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649 )

2026-06-08 16:53:37 -07:00

key_value

fix: raise random_key entropy and add expiry to async query tokens (#40638 )

2026-06-08 16:24:06 -07:00

mcp_service

fix(mcp): enforce audience, algorithm, issuer binding, and token scopes (strict mode) (#40653 )

2026-06-09 11:08:20 -07:00

migrations

fix(migrations): replay user_favorite_tag migration for 3.0.x upgraders (#38157 )

2026-06-09 09:30:09 -07:00

models

fix(sqllab): prevent corrupted query state from blocking SQL Lab access (#40580 )

2026-06-09 10:51:45 +01:00

queries

fix(commands,api): enforce command validation, sanitize export filename/token, set cache TTLs (#40655 )

2026-06-09 10:29:46 -07:00

reports

fix(reports): stamp email subject date at send time, not import time (#40693 )

2026-06-04 12:03:28 -07:00

row_level_security

fix(rls): apply standard datasource access checks in RLS rule commands (#40650 )

2026-06-09 11:24:12 -07:00

security

fix(mcp): API key authentication for MCP — transport, validation, and RBAC (#39604 )

2026-06-04 15:04:43 -04:00

semantic_layers

chore(deps): bump pyarrow from 20.0.0 to 24.0.0 (#39756 )

2026-06-09 12:51:33 -07:00

sql

fix: ODPS (MaxCompute) data source table preview failed (#38174 )

2026-06-05 17:57:44 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698 )

2026-04-20 18:29:51 -04:00

sqllab

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245 )

2026-06-03 12:55:25 +01:00

static

chore: remove redundant service-worker.js placeholder (#38348 )

2026-03-03 01:43:17 -08:00

tables

…