Evan 8737f010f3 fix(databricks): preserve resolved OAuth2 token request URI ...

get_oauth2_token clobbered the config's already-resolved token_request_uri
with the AWS template that still contained an unsubstituted account-id
placeholder, so the token exchange POSTed to .../accounts/{}/v1/token. Only
fall back to the AWS endpoint when no token_request_uri is configured.

Co-authored-by: fabian_zse <fabian@zalando.de>
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 21:33:16 -07:00

..

advanced_data_type

chore: fix lint on untouched files (#41333)

2026-06-23 11:29:19 -07:00

annotation_layers

chore: bump rison to 2.0.0 (#39529)

2026-04-24 15:52:42 -04:00

async_events

fix(async): derive async channel from guest token for embedded RLS queries (closes #31492) (#41397)

2026-06-26 12:09:06 -07:00

available_domains

…

cachekeys

fix(cachekey): use data_cache for chart query result invalidation (#40493)

2026-06-26 18:01:14 -07:00

charts

feat(explore): add full-range option for time-shift comparison (#41334)

2026-06-25 18:30:33 +03:00

cli

fix(logging): safely render database URIs in startup warnings (#38229)

2026-06-22 09:05:16 -07:00

columns

…

commands

fix(reports): reliability fixes for alert/report execution (#41177)

2026-06-26 12:09:12 -07:00

common

feat(explore): add full-range option for time-shift comparison (#41334)

2026-06-25 18:30:33 +03:00

connectors

refactor: update SQLAlchemy select() syntax to 2.0 (#40276)

2026-06-17 17:50:32 -07:00

core

fix(mcp): add safeguards to ensure all MCP tools are wrapped with mcp_auth_hook (#40412)

2026-06-18 10:27:53 -07:00

css_templates

chore: bump rison to 2.0.0 (#39529)

2026-04-24 15:52:42 -04:00

daos

feat(mcp): list_charts accepts dashboards filter (#40397)

2026-06-25 17:14:11 -07:00

dashboards

fix(thumbnails): add deduplication to dashboard thumbnail Celery tasks (#38576)

2026-06-26 12:41:02 -04:00

databases

fix(database): mask SSH tunnel credentials explicitly on read paths (#41293)

2026-06-26 12:07:02 -07:00

datasets

fix(dataset): import/export jinja template bug (#28790)

2026-06-23 13:25:49 -07:00

datasource

perf(filters): cache column-values endpoint to skip DB on repeat requests (#40839)

2026-06-23 23:41:26 -07:00

db_engine_specs

fix(databricks): preserve resolved OAuth2 token request URI

2026-06-27 21:33:16 -07:00

distributed_lock

fix(thumbnails): add deduplication to dashboard thumbnail Celery tasks (#38576)

2026-06-26 12:41:02 -04:00

embedded

fix(embedded): add Sec-Fetch-Dest defense-in-depth check on the embedded view (#40667)

2026-06-09 11:08:08 -07:00

embedded_dashboard

…

examples

fix(examples): skip URI safety check for system imports (#37577)

2026-02-02 09:24:16 -08:00

explorables

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

explore

fix(ag-grid): persist AG Grid column filters in explore permalinks (#38393)

2026-03-11 01:56:24 +05:30

extensions

feat(extensions): add Chat contribution type (SIP-214) (#41205)

2026-06-25 08:57:30 -03:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

initialization

fix(config): refuse to start with an empty SECRET_KEY (#41299)

2026-06-26 12:07:17 -07:00

key_value

feat(embedded): add guest token revocation support (#40671)

2026-06-10 09:17:30 -07:00

mcp_service

fix(mcp): include embedded_uuid in get_dashboard_info response (#41195)

2026-06-26 18:00:10 -07:00

migrations

refactor: update Connection.execute() to use queries with text() (#40277)

2026-06-22 15:36:15 -07:00

models

fix(datasource): validate expressions through the shared adhoc-expression checks (#41427)

2026-06-27 19:47:59 +01:00

queries

fix(SavedQueries): allow other admin users see "saved queries" (#20604) (#21769)

2026-06-23 12:14:48 -07:00

reports

fix(reports): reliability fixes for alert/report execution (#41177)

2026-06-26 12:09:12 -07:00

row_level_security

fix(rls): preserve tables/roles on partial RLS rule updates (#41294)

2026-06-24 16:16:47 -07:00

security

fix(security): reject unknown fields on guest-token RLS rules (#41217)

2026-06-24 16:16:43 -07:00

semantic_layers

chore(deps): bump pyarrow from 20.0.0 to 24.0.0 (#39756)

2026-06-09 12:51:33 -07:00

sql

fix(sql): detect set operations and nested selects in subquery check (#38452)

2026-06-22 20:27:32 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245)

2026-06-03 12:55:25 +01:00

static

chore: remove redundant service-worker.js placeholder (#38348)

2026-03-03 01:43:17 -08:00

tables

…

tags

fix(tags): tags api change tag_get_objects method to be aligned with api documentation (#29338)

2026-06-23 14:12:33 -07:00

tasks

fix(thumbnails): add deduplication to dashboard thumbnail Celery tasks (#38576)

2026-06-26 12:41:02 -04:00

templates

fix: replace deprecated appbuilder.app with current_app (#40876)

2026-06-09 15:01:43 -07:00

temporary_cache

…

themes

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

translations

fix(i18n): repair corrupted Romanian catalog so it parses again (#41467)

2026-06-27 09:13:39 -04:00

utils

fix(pandas_postprocessing): pass string operator names to GroupBy.agg to avoid FutureWarning (#41025)

2026-06-27 15:01:43 -07:00

views

feat(api): log rejected related/distinct field access as security events (#41306)

2026-06-26 15:45:36 -07:00

__init__.py

…

app.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

config.py

fix(config): expose build details (git SHA/build number) to admins only (#41301)

2026-06-26 12:08:04 -07:00

constants.py

fix: reject default guest/async JWT secrets at startup (#40649)

2026-06-08 16:53:37 -07:00

custom_database_errors.py

…

dataframe.py

fix(result_set): preserve JSON/JSONB data as objects instead of strings (#38172)

2026-06-05 11:41:40 -07:00

errors.py

…

exceptions.py

fix(thumbnails): add deduplication to dashboard thumbnail Celery tasks (#38576)

2026-06-26 12:41:02 -04:00

forms.py

…

jinja_context.py

fix(charts): evaluate access before rendering query filters; isolate macro env (#40982)

2026-06-13 19:01:54 +01:00

legacy.py

…

marshmallow_compatibility.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

result_set.py

fix(sql_lab): serialize dict/list cell values as valid JSON strings (#41099)

2026-06-23 20:39:23 -07:00

schemas.py

…

sql_lab.py

fix(sqllab): prevent corrupted query state from blocking SQL Lab access (#40580)

2026-06-09 10:51:45 +01:00

stats_logger.py

…

superset_typing.py

feat(explore): add full-range option for time-shift comparison (#41334)

2026-06-25 18:30:33 +03:00

viz.py

fix(viz): use series_limit/series_limit_metric in query_obj dict (#41002)

2026-06-27 15:01:40 -07:00