This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a change to branch fix/security-zizmor-self-repository-2664
in repository https://gitbox.apache.org/repos/asf/superset.git
from 0bffb4a97d3 Merge branch 'master' into
fix/security-zizmor-self-repository-2664
add 056fd218d44 fix: handle missing table element in downloadAsPivotExcel
(#39386)
add 08694d64cb8 fix(plugin-chart-table): declare DataTable hooks before
the early return (#43150)
add 204ccc7ce7f fix(datasets): apply Schema filter on the combined
datasource list (#43829)
add 33c6df77c99 fix(database): don't reattach stored connection details
when the effective destination changes (#44003)
add c45fc6a31a2 feat(embedded): diagnose guest-token header size budgets
(#43944)
add 57eafd75e0c docs(handlebars): correct helper names that are not
registered (#44020)
add 067a356b6f0 fix(chart): include echart_options in Matrixify
render-trigger allowlist (#43946)
add 3ccab2ea7aa fix(time-format): share DateWithFormatter and stop reading
four-digit years as epoch offsets (#43909)
add a114b4cc468 fix(import): skip redundant has_table check when dataset
import has no data URI (#43808)
add 85ea6e900a4 docs(mcp): document MCP_STATELESS_HTTP and its multi-pod
tradeoff (#43902)
add 60553b4326a docs(ag-grid): document Show summary support for Raw
Records mode (#43905)
add 7029c468c4d fix(reports): bound CSV transport retries and sanitize
failures (#43977)
add bc35151350c docs(handlebars): correct helper names in the 6.1.0
versioned docs (#44024)
add 04ab089962f chore(deps): bump @swc/html from 1.15.43 to 1.16.2 in
/docs in the security group across 1 directory (#44023)
add 5986fe92c2f fix(rls): roll back db.session after RLS failure in
get_from_clause (#43883)
add e6d088d6b1b fix(mcp): surface rejected filter columns in get_chart_sql
(#43680)
add 10866337c5c docs(helm): document Gateway API HTTPRoute support (#43635)
add 1339bdc6ce1 ci: bump ASF allowlist-check to v1.0.1 for self-repository
syntax support (#44014)
add 492e6b7dcf1 Merge branch 'master' into
fix/security-zizmor-self-repository-2664
No new revisions were added by this update.
Summary of changes:
.github/workflows/asf-allowlist-check.yml | 2 +-
docs/admin_docs/configuration/alerts-reports.mdx | 33 +++
docs/admin_docs/configuration/mcp-server.mdx | 3 +
docs/admin_docs/installation/kubernetes.mdx | 48 ++++
.../creating-your-first-dashboard.mdx | 9 +
docs/docs/using-superset/embedding.mdx | 48 ++++
docs/docs/using-superset/handlebars-chart.mdx | 76 ++++--
.../using-superset/handlebars-chart.mdx | 76 ++++--
docs/yarn.lock | 148 +++++-----
.../src/chart/components/StatefulChart.test.tsx | 98 +++++++
.../src/chart/components/StatefulChart.tsx | 30 +++
.../src/time-format}/DateWithFormatter.ts | 13 +-
.../superset-ui-core/src/time-format/index.ts | 1 +
.../src/time-format/utils/stringifyTimeInput.ts | 15 +-
.../test/time-format}/DateWithFormatter.test.ts | 23 +-
.../time-format/utils/stringifyTimeInput.test.ts | 23 ++
.../src/transformProps.ts | 2 +-
.../src/utils/formatValue.ts | 2 +-
.../src/utils/useColDefs.ts | 7 +-
...rmatter.test.ts => formatDurationValue.test.ts} | 23 +-
.../src/react-pivottable/TableRenderers.tsx | 34 +--
.../test/react-pivottable/tableRenders.test.tsx | 39 +++
.../plugin-chart-table/src/DataTable/DataTable.tsx | 154 ++++++-----
.../plugins/plugin-chart-table/src/TableChart.tsx | 2 +-
.../plugin-chart-table/src/transformProps.ts | 2 +-
.../src/utils/DateWithFormatter.ts | 62 -----
.../plugin-chart-table/src/utils/formatValue.ts | 2 +-
.../test/DataTable/DataTable.test.tsx | 129 +++++++++
.../plugin-chart-table/test/TableChart.test.tsx | 2 +-
...rmatter.test.ts => formatDurationValue.test.ts} | 23 +-
.../src/embedded/guestTokenDiagnostics.test.ts | 101 +++++++
.../src/embedded/guestTokenDiagnostics.ts | 71 +++++
superset-frontend/src/embedded/index.test.tsx | 191 ++++++++++---
superset-frontend/src/embedded/index.tsx | 46 +++-
superset-frontend/src/types/bootstrapTypes.ts | 5 +-
.../src/utils/downloadAsPivotExcel.test.ts | 19 ++
.../src/utils/downloadAsPivotExcel.ts | 7 +
superset/commands/database/exceptions.py | 29 ++
superset/commands/database/importers/v1/utils.py | 60 ++---
superset/commands/database/test_connection.py | 41 ++-
superset/commands/database/update.py | 87 ++++++
superset/commands/database/utils.py | 96 +++++++
superset/commands/database/validate.py | 47 +++-
superset/commands/dataset/importers/v1/utils.py | 34 ++-
superset/commands/datasource/list.py | 112 +++++++-
superset/commands/report/chart_data.py | 194 ++++++++++++++
superset/commands/report/execute.py | 91 ++++---
superset/common/query_actions.py | 78 ++++--
superset/config.py | 6 +
superset/daos/database.py | 17 +-
superset/daos/datasource.py | 4 +
superset/embedded/view.py | 7 +-
superset/mcp_service/chart/chart_helpers.py | 70 +++++
superset/mcp_service/chart/tool/get_chart_data.py | 64 +----
superset/mcp_service/chart/tool/get_chart_sql.py | 19 +-
superset/models/helpers.py | 13 +-
superset/security/api.py | 24 +-
superset/security/guest_token.py | 19 ++
superset/tasks/scheduler.py | 16 +-
superset/utils/csv.py | 9 +-
tests/integration_tests/datasource/api_tests.py | 62 +++++
tests/integration_tests/embedded/test_view.py | 17 +-
tests/integration_tests/reports/commands_tests.py | 109 +++++++-
.../charts/commands/data/test_get_data_command.py | 15 +-
.../commands/databases/test_connection_test.py | 60 +++++
tests/unit_tests/commands/databases/update_test.py | 297 ++++++++++++++++++++
.../unit_tests/commands/databases/validate_test.py | 205 ++++++++++++++
tests/unit_tests/commands/datasource/list_test.py | 224 ++++++++++++++++
.../unit_tests/commands/report/chart_data_test.py | 298 +++++++++++++++++++++
tests/unit_tests/commands/report/execute_test.py | 148 +++++++++-
tests/unit_tests/common/test_query_actions.py | 97 +++++++
tests/unit_tests/dao/datasource_test.py | 31 +++
.../databases/commands/importers/v1/import_test.py | 43 +++
.../datasets/commands/importers/v1/import_test.py | 142 ++++++++++
.../mcp_service/chart/tool/test_get_chart_data.py | 39 ++-
.../mcp_service/chart/tool/test_get_chart_sql.py | 102 +++++++
.../models/test_virtual_dataset_format.py | 25 ++
.../unit_tests/security/guest_token_audit_test.py | 87 ++++++
.../tasks/test_scheduler_soft_timeout.py | 44 ++-
tests/unit_tests/utils/csv_tests.py | 27 +-
80 files changed, 4135 insertions(+), 643 deletions(-)
rename superset-frontend/{plugins/plugin-chart-ag-grid-table/src/utils =>
packages/superset-ui-core/src/time-format}/DateWithFormatter.ts (82%)
copy superset-frontend/{plugins/plugin-chart-table/test/utils =>
packages/superset-ui-core/test/time-format}/DateWithFormatter.test.ts (65%)
rename
superset-frontend/plugins/plugin-chart-ag-grid-table/test/utils/{DateWithFormatter.test.ts
=> formatDurationValue.test.ts} (63%)
delete mode 100644
superset-frontend/plugins/plugin-chart-table/src/utils/DateWithFormatter.ts
create mode 100644
superset-frontend/plugins/plugin-chart-table/test/DataTable/DataTable.test.tsx
rename
superset-frontend/plugins/plugin-chart-table/test/utils/{DateWithFormatter.test.ts
=> formatDurationValue.test.ts} (63%)
create mode 100644 superset-frontend/src/embedded/guestTokenDiagnostics.test.ts
create mode 100644 superset-frontend/src/embedded/guestTokenDiagnostics.ts
create mode 100644 superset/commands/report/chart_data.py
create mode 100644 tests/unit_tests/commands/report/chart_data_test.py
