Elizabeth Thompson f6c574edd8 fix(screenshots): validate cached screenshot image bytes on read and write (#42120) ...

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-31 15:13:59 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

feat(async): cancel running chart queries under GLOBAL_ASYNC_QUERIES (#42305)

2026-07-28 18:02:16 +03:00

charts

fix(pivot-table): keep each Rows field as its own CSV/XLSX column (#42443)

2026-07-29 15:47:28 -07:00

cli

fix(cli): avoid DetachedInstanceError in compute-thumbnails (#41530)

2026-07-09 19:26:41 -07:00

columns

…

commands

fix(alerts-reports): catch CroniterBadDateError in report frequency validation (#42650)

2026-07-31 15:04:30 -07:00

common

fix(time-comparison): preserve inner bounds for relative offsets (#42357)

2026-07-31 11:03:47 -07:00

connectors

refactor: engine enforce SQLAlchemy 2.0 (#42277)

2026-07-22 11:11:48 -07:00

dao

fix(dashboard): preserve refresh_frequency when absent from save data (#42354)

2026-07-27 23:13:11 -07:00

daos

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

dashboards

feat(dashboard): export dashboard chart data to Excel (async, S3 + email) (#41133)

2026-07-21 12:17:00 -04:00

databases

chore: session enforce sqlalchemy 2.0 (#42365)

2026-07-26 19:28:42 -07:00

datasets

fix(clickhouse): bound system sampling reads instead of failing on max_rows_to_read (#42464)

2026-07-29 10:20:20 -07:00

datasource

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

db_engine_specs

fix(db2): stop truncating table comments to one character (#42645)

2026-07-31 12:36:36 -07:00

distributed_lock

chore: session enforce sqlalchemy 2.0 (#42365)

2026-07-26 19:28:42 -07:00

examples

feat(versioning): entity-version base infrastructure (gated off, dark launch) (#41176)

2026-07-09 19:57:05 -07:00

explore

test(security): prove Drill By access does not require can_explore (#27900) (#41967)

2026-07-13 12:05:16 -07:00

extensions

fix(extensions): make LOCAL_EXTENSIONS hot reload reliable in Docker (#40084)

2026-07-24 15:30:04 -07:00

fixtures

fix(assets): Support uploading tags using the assets import endpoint (#38343)

2026-06-09 10:13:28 -04:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

initialization

fix: reject default guest/async JWT secrets at startup (#40649)

2026-06-08 16:53:37 -07:00

key_value

feat(extensions): add a Storage API for extensions (#39171)

2026-07-21 16:23:56 -03:00

mcp_service

fix(mcp): fall back to a temporal dataset column (#42575)

2026-07-30 17:39:49 -04:00

middleware

fix(app-root): restore legacy redirects for HEAD and the /superset app root (#42015)

2026-07-15 13:13:46 -07:00

migrations

feat(versioning): version-history retention cleanup job (#41075)

2026-07-27 19:59:11 -07:00

models

fix(clickhouse): bound system sampling reads instead of failing on max_rows_to_read (#42464)

2026-07-29 10:20:20 -07:00

openapi

fix(swagger): support URL prefix via APPLICATION_ROOT in OpenAPI and Swagger UI (#40908)

2026-07-13 15:47:09 -07:00

pandas_postprocessing

fix(forecast): resolve time grain robustly for Prophet forecasting (#42145)

2026-07-22 16:08:57 -07:00

queries

feat(table/pivot-table): correct non-additive totals/subtotals via DB rollup [SIP-216] (#41184)

2026-07-22 10:06:05 -07:00

reports

feat: added email delivery of XLSX reports (#40885)

2026-07-17 10:35:34 -07:00

row_level_security

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

scripts

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

security

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

semantic_layers

feat(versioning): version-history retention cleanup job (#41075)

2026-07-27 19:59:11 -07:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378)

2026-06-03 12:58:17 -07:00

sql

feat(KustoKQL): Add support for NULL / IS NOT NULL operator (#37890)

2026-07-23 18:28:37 -07:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(databricks): classify insufficient-permissions errors as 4xx (#41945)

2026-07-14 13:44:41 -07:00

subjects

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

tables

…

tags

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

tasks

fix(alerts-reports): skip inactive users when resolving report executor (#42612)

2026-07-31 09:15:59 -07:00

themes

fix(marshmallow): add compatibility layer for Flask-AppBuilder with marshmallow 4.x (#35920)

2026-07-08 12:09:50 -07:00

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

utils

fix(screenshots): validate cached screenshot image bytes on read and write (#42120)

2026-07-31 15:13:59 -07:00

versioning

feat(versioning): version-restore engine and endpoints for charts, dashboards, and datasets (#42469)

2026-07-29 09:54:37 -07:00

views

fix(errors): downgrade SSH tunnel connection-failure logging to WARNING (SC-115347) (#42538)

2026-07-29 15:03:17 -07:00

__init__.py

…

config_swagger_ui_test.py

fix(config): make Swagger UI opt-in (off by default) (#41300)

2026-06-25 10:34:28 -07:00

config_test.py

feat(versioning): version-history retention cleanup job (#41075)

2026-07-27 19:59:11 -07:00

conftest.py

chore: session enforce sqlalchemy 2.0 (#42365)

2026-07-26 19:28:42 -07:00

core_tests.py

fix(explore): render Jinja before validating legacy chart filters (#41996)

2026-07-23 22:05:14 -07:00

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

docker_compose_image_tag_test.py

fix(docker): isolate tagged images from host packages (#42249)

2026-07-28 11:51:48 -07:00

extension_tests.py

fix: replace deprecated appbuilder.app with current_app (#40876)

2026-06-09 15:01:43 -07:00

feature_flag_test.py

…

initialization_test.py

fix: close gaps in pkg_resources/sqlalchemy-redshift warning suppression (#41935)

2026-07-29 15:05:18 -07:00

jinja_context_test.py

test(jinja): prove current_user_* macros produce collision-free cache keys (#42122)

2026-07-17 16:50:11 -07:00

legacy_tests.py

…

result_set_test.py

test(result_set): add regression test for empty result set column metadata (#35962)

2026-07-27 23:08:59 -07:00

sql_lab_execution_context.py

fix(sqllab): quote CTAS target identifiers and validate tmp_table_name format (#40245)

2026-06-03 12:55:25 +01:00

sql_lab_test.py

fix(sqllab): apply SQL_QUERY_MUTATOR in SQL Lab when MUTATE_AFTER_SPLIT is set (#41127)

2026-07-20 15:36:45 -07:00

test_check_secret_key.py

fix(config): refuse to start with an empty SECRET_KEY (#41299)

2026-06-26 12:07:17 -07:00

test_init_extensions_logging.py

fix(extensions): log extension-init failures via the logger, not print() (#41304)

2026-06-23 11:25:33 -07:00

test_marshmallow4_compat.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

test_marshmallow_compatibility.py

fix(marshmallow): add compatibility layer for Flask-AppBuilder with marshmallow 4.x (#35920)

2026-07-08 12:09:50 -07:00

test_mcp_stdio_entrypoint.py

fix(mcp): redirect stdio click echo without recursion (#40814)

2026-06-15 10:10:40 -07:00

test_sqllab_error_stacktrace.py

fix(sqllab): surface stacktrace in SQL Lab error responses (#28248) (#40585)

2026-06-02 10:41:39 -07:00

test_subdirectory_url_for.py

refactor(frontend): centralize subdirectory URL prefixing behind nav helpers (#39925)

2026-07-01 11:20:13 -07:00

test_viz_cache_key.py

feat(mcp): chart type plugin registry for extensible generate_chart (#39922)

2026-07-02 00:31:19 -04:00

test_viz_get_df_payload.py

fix(viz): gate stacktrace behind SHOW_STACKTRACE and allowlist resample method (#40636)

2026-06-08 16:09:59 -07:00

test_viz_query_obj.py

fix(explore): render Jinja before validating legacy chart filters (#41996)

2026-07-23 22:05:14 -07:00