You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by as...@apache.org on 2026/08/20 10:51:57 UTC

(superset) branch alexandrusoare/fix/block-guest-custom-sql-injection updated (84e44d99c53 -> a4628aa19c7)

This is an automated email from the ASF dual-hosted git repository.

alexandrusoare pushed a change to branch alexandrusoare/fix/block-guest-custom-sql-injection
in repository https://gitbox.apache.org/repos/asf/superset.git


    from 84e44d99c53 fixing unit test
     add 08dfca96313 fix(ci): enforce a single Alembic migration head (#42890)
     add 59361581cdf fix(embedded): restore chart rendering for guest dashboards (#43095)
     add e2bb33b1da1 chore(deps): bump the ag-grid group across 1 directory with 2 updates (#43103)
     add 5554b892ffa fix(mcp): preserve table chart state during updates (#42655)
     add 762fdccfdef fix(oauth2): log database token failures (#42644)
     add e1777737a71 fix(docs): sync live component demos to the docs site's dark mode toggle (#42602)
     add c8305b0ba98 feat(ci): publish Python unit test results as PR check annotations (#42503)
     add fbeba10f750 fix(sqllab): make MenuDotsDropdown trigger focusable for tab rename (#43015)
     add d5ae93c9b8d test(echarts): pin Bar chart X Axis Title flows through untouched (#42560) (#42599)
     add 25c2ca11276 ci: run pre-commit checks via prek (#42500)
     add b8ca729f9fc fix(sql): only force a LIMIT onto query expressions (#43097)
     add d0658bacc89 fix(mcp): give concurrent tool calls isolated db sessions (#42629)
     add ec136f6d8df fix(charts): decode CSV bytes payload before feeding pandas StringIO (#32370) (#42735)
     add c8cb09d4589 fix(dev): stop the webpack dev-proxy from hanging on a mid-stream backend disconnect (#42811)
     add e1468a709c0 fix(sunburst): keep SQL null and literal string "null" as distinct groups (#43013)
     add 117b92a517a fix(mcp): expose table column formatting (#42658)
     add 5b281585194 fix(helm): stop shipping conflicting podDisruptionBudget defaults (#42995)
     add 6211f9936b3 feat(mobile): Add mobile-friendly dashboard consumption mode (#37141)
     add 67bbe0ac173 ci: speed up backend CI with astral-sh/setup-uv and apt package caching (#42498)
     add dc9547554b4 fix(echarts): normalize BigInt metric values before summing/dividing in stacked charts (#36401) (#42594)
     add f7a2f0ec501 feat(table): allow choosing Sum or Average for the "Show summary" totals row (#43027)
     add 3c7633f935f fix(encrypt): stop naive padding from truncating secrets ending in '*' (#43074)
     add 01d0772d4f3 fix(box-plot): distribute across field not marked as required for datasets without a temporal column (#43087)
     add a63483b9b1a fix(sql): rebase Dremio dialect on sqlglot's native dialect (#43099)
     add 3fb58900b9a chore(duckdb): remove cursor.description workaround, no longer reproducible (#43101)
     add 930ba64fdf3 fix(ci): format ErrorMessage tests (#43114)
     add 8f78f9eb9c7 chore: update CODEOWNERS for extension and config files (#43142)
     add 537f0fd2dbe fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)
     add a188e9473ab feat(chart): let Drill By scope to the clicked x-axis value (#42296)
     add bacaf08a22f docs(perf): add Dashboard Performance guide covering virtualization, lazy tabs, and chart-count guidance (#40238)
     add aec567f7d6c chore(deps): bump antd from 6.5.3 to 6.5.4 in /superset-frontend (#43162)
     add a6db0d1cde2 chore(deps): bump query-string from 9.4.1 to 9.5.0 in /superset-frontend (#43161)
     add 9bc3173e3a3 chore(deps): bump antd from 6.5.3 to 6.5.4 in /docs (#43160)
     add 8523ea4d0a9 chore(deps): bump caniuse-lite from 1.0.30001806 to 1.0.30001807 in /docs (#43159)
     add acf39e3ef0c chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /superset-frontend (#43158)
     add 3b99e092d08 chore(deps-dev): bump tsx from 4.23.9 to 4.23.10 in /superset-frontend (#43157)
     add 9c5bde94918 chore(deps): bump mapbox-gl from 3.28.0 to 3.28.1 in /superset-frontend (#43156)
     add 7c0c5283c3f chore(deps-dev): bump the storybook group in /superset-frontend with 5 updates (#43155)
     add a4c47359e61 chore(deps): bump the storybook group in /docs with 2 updates (#43154)
     add 84c371d56e1 chore: fix stale developer_portal paths (#43143)
     add 92728169de9 docs: document the zstd prerequisite for the frontend dev server (#43109)
     add c395b9a2383 fix(examples): migrate Life Expectancy VS Rural % example off the removed legacy bubble viz_type (#43152)
     add 856599027a8 fix(mcp): harden the embedded-guest chart data-read path
     add 1e65d93a836 fix(sql): handle ORDER BY in embedded MSSQL queries (#43127)
     add b62ec512d2c fix(explore): hide edit-properties menu item for non-owner/non-editor users (#38884) (#42737)
     add c068a8c09cf fix(dashboard): preserve certification fields when Certification panel is closed (#42957)
     add dd1afb029fd fix(ci): stop py311/py312 docker builds from silently matching lean (#42509)
     add 0a7ebe1dd18 fix(ci): stop superseded Docs Deployment runs from showing as cancelled (#42488)
     add e808fcbcada fix(mcp): bind all generated charts to dashboard time filters (#42490)
     add edfb009e1c4 fix(mcp): expose query context to Jinja macros (#42822)
     add 81e431cd501 fix(mcp): return all chart query results (#42824)
     add 8967e6c2d33 fix(mcp): accept changed_on_delta_humanized as order_column in list tools (#42571)
     add f4587218dd1 fix(mcp): populate user_id in MCP audit logs (#42767)
     add 2eedc609a80 fix(sql_lab): return 400 not 500 when raise_for_access hits malformed Jinja in results.py (#43145)
     add 738d12677a9 fix(i18n-es): correct stranded translations in API key and semantic layer catalogs (#43080)
     add a3bc2d908c4 ci(frontend): track bundle size over time with benchmark-action (#42511)
     add ca94026e977 fix(sqllab): async queries no longer stuck at Running forever (#42896)
     add 21ae918656c fix(mcp): validate chart queries before persistence (#43128)
     add e7139a7ac2d fix(models): enforce one OAuth2 token per user+database (#42897)
     add 4684851336b fix(import): isolate per-tag import in a SAVEPOINT to avoid poisoned session (#42912) (#42920)
     add 69c4011a95a feat(embedded): Add setDataMask API method (#35754)
     add f7c70568c3f fix(charts): fix Bubble chart crash and correct example's time_range to a year with real data (#43201)
     add 7679c5641ab fix(lint-metrics): record oxlint plugin rules under their canonical id (#43198)
     add 93cc5204820 chore(deps): bump @googleapis/sheets from 13.0.2 to 14.0.0 in /superset-frontend (#43047)
     add 22dde07a8e2 chore(deps): bump mako from 1.3.12 to 1.4.1 (#43207)
     add cece082eed0 chore(deps-dev): update pyocient requirement from <4,>=1.0.15 to >=3.9.0,<4 (#43211)
     add 2e8a8031f88 chore(deps): bump cachetools from 7.1.6 to 7.1.7 (#43208)
     add 065342f8c91 chore(deps-dev): bump pandas-gbq from 0.35.0 to 0.35.1 (#43212)
     add ad3103fdb0b chore(deps-dev): bump fastmcp from 3.4.5 to 3.4.7 (#43210)
     add 94459ae8859 ci: declare top-level permissions on the remaining workflows (#43197)
     add 2773bc94eb4 chore(deps-dev): bump sqlalchemy-bigquery from 1.17.1 to 1.17.2 (#43209)
     add a2c004266b7 fix(ci): update vulnerable transitive nanoid (#43166)
     add 70d06e3d777 docs(faq): convert flask fab freeze question to a proper heading (#43221)
     add d114eb638b7 fix(datasets): preserve metric warning_markdown when extra is absent (#42763)
     add a8216e3787a fix(calendar): localize date labels (#43163)
     add cfd40bdd0d1 fix(dashboard): derive filter scope on read instead of serving a stale cache (#43252)
     add 1991e3f0d2b fix(datasets): keep metric certified_by when certification details are typed next (#43255)
     add aaf9eba1611 fix(db_engine_specs): skip malformed third-party dialect entry points (#43110)
     add cdeca0c1798 chore(deps-dev): bump tsx from 4.23.10 to 4.23.12 in /superset-frontend (#43250)
     add 98276cd1f35 chore(deps-dev): bump baseline-browser-mapping from 2.11.12 to 2.11.13 in /superset-frontend (#43249)
     add 70ba9c9552d chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 in /superset-frontend (#43248)
     add b3a9b9beb49 chore(deps-dev): bump @types/node from 26.1.2 to 26.2.0 in /superset-frontend (#43247)
     add afde126d9a7 chore(deps-dev): bump @testing-library/jest-dom from 7.0.0 to 7.0.1 in /superset-frontend (#43246)
     add d917071708f chore(deps): bump caniuse-lite from 1.0.30001807 to 1.0.30001809 in /docs (#43244)
     add 5105899810b chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 in /superset-websocket (#43242)
     add 3ed97f9691e chore(deps): bump ws from 8.21.2 to 8.21.3 in /superset-websocket (#43241)
     add 97eafd61400 chore(deps-dev): bump @types/node from 26.1.2 to 26.2.0 in /superset-websocket (#43240)
     add 6e270df4a24 fix(sql-lab): catch TemplateError in StreamingSqlResultExportCommand.validate (#43226)
     add 2f8875aaef7 feat(semantic layers): optional metadata for metrics/dimensions (#43269)
     add c9c230142bb chore(deps): bump baseline-browser-mapping from 2.11.12 to 2.11.13 in /docs (#43243)
     add 2807f1b0e81 fix(dashboard): report the real error when saving a dashboard fails (#43140)
     add e2070d79dc1 fix(reports): wait for ECharts paint before capturing report screenshots (#43077)
     add 98136d547cc fix(reports): fail closed on alert screenshot capture instead of delivering a blank (#43031)
     add 13eb47a1dab fix(api): improved request handling and embedded dashboard scoping (#42930)
     add ed20e729d01 chore(deps): bump google-auth-library from 11.0.0 to 11.0.1 in /superset-frontend (#43292)
     add f766de6d0db chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /superset-frontend (#43291)
     add 49374f1fe5c chore(deps): bump antd from 6.5.4 to 6.6.0 in /docs (#43289)
     add b4d79462ecd chore(deps-dev): bump oxlint from 1.77.0 to 1.78.0 in /superset-frontend (#43288)
     add bdafb6c3305 chore(deps-dev): bump oxfmt from 0.62.0 to 0.63.0 in /docs (#43287)
     add 5105f13726a chore(deps-dev): bump the typescript-eslint group in /docs with 3 updates (#43286)
     add 72458ab26f1 chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.66.0 to 8.67.0 in /superset-frontend in the typescript-eslint group (#43285)
     add 8ef7be57881 chore(deps-dev): bump oxfmt from 0.62.0 to 0.63.0 in /superset-websocket (#43283)
     add d12320239a0 chore(deps-dev): bump typescript-eslint from 8.66.0 to 8.67.0 in /superset-websocket (#43282)
     add 936f073b9ae chore(deps-dev): bump @typescript-eslint/parser from 8.66.0 to 8.67.0 in /superset-websocket (#43281)
     add ebab31adc20 chore(deps): bump antd from 6.5.4 to 6.6.0 in /superset-frontend (#43294)
     add 3c90bdc6f04 chore(deps-dev): bump oxfmt from 0.62.0 to 0.63.0 in /superset-frontend (#43293)
     add 2d1daac11aa fix(explore): samples endpoint now honors requested row limit (#43148)
     add 60e1802c523 fix(dashboard): mute the Group By display control loading spinner (#42879)
     add fd063d17bfc fix(security): harden account password-change and session-invalidation handling (#42934)
     add 086b4af65d4 feat(mcp): per-resource token scopes with user-permission intersection (#42297)
     add f9946020967 fix(dashboard): align list OpenAPI schema (#43256)
     add a13a5f1af4b chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.67.0 in /superset-websocket (#43284)
     add e4ea6e23d8e chore(deps): bump supercluster from 8.0.1 to 9.0.0 in /superset-frontend (#43290)
     add 7d4f30574fb feat(tooltip): add Truncate labels control to timeseries charts (#43272)
     add c0ab5f3385c fix(dashboard): preserve native filter keys for dataset-less filters on save (#42898)
     add 34cd50cc484 test(chart): mock the event log endpoint in the drill-to-detail menu test (#43183)
     add 5ce52e531dc fix(clickhouse): add PT1S time grain (#43217)
     add 097c99b19cb fix: remove a labeler glob that matches no files (#43270)
     add fde0ba26d1b fix(mcp): validate virtual dataset metadata and surface errors (#43129)
     add 15699150960 feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)
     add c07f3ebf2d4 chore(deps-dev): bump @swc/plugin-emotion from 14.15.0 to 14.19.0 in /superset-frontend (#43328)
     add 334e280489a chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /superset-frontend (#43326)
     add 1339bcd9dae chore(deps): bump swagger-ui-react from 5.32.12 to 5.32.13 in /docs (#43325)
     add eafbff9f8d3 chore(deps-dev): bump globals from 17.9.0 to 17.10.0 in /docs (#43324)
     add 53a8a0e1403 chore(deps): bump the docusaurus-openapi group in /docs with 2 updates (#43323)
     add 01ce8358a6e chore(deps-dev): bump globals from 17.9.0 to 17.10.0 in /superset-websocket (#43321)
     add 8222db33405 fix(dataset): preserve legacy default dashboard URLs (#43190)
     add 6d77efad29c fix(chart): stop contextmenu propagation in BigNumberViz (#43267)
     add 8c500ccee1f fix(users): show password validation errors (#43191)
     add c10054f521e fix(plugin-chart-chord): declare react as a peerDependency (#43304)
     add b8fca2145d9 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#43322)
     add faf7c34c0a9 fix(explore): legacy boolean filters and limit available operators based on calculated column type (#43341)
     add 5a96c3f538f chore(ci): disable Git commit info capture in Playwright E2E tests to avoid timeout (#43213)
     add c2d653b4b80 fix: set maxHeight of List components to height when in AutoSizer (#43056)
     add f9cedf84e20 fix: drop post-processing options the operation no longer accepts (#42927)
     add 5d4358a1493 chore(deps): bump google-auth-library from 11.0.1 to 11.0.2 in /superset-frontend (#43364)
     add 80bba12d0fc chore(deps-dev): bump globals from 17.10.0 to 17.11.0 in /docs (#43363)
     add b288db91f95 chore(deps): bump github/codeql-action/init from 4.37.6 to 4.37.7 (#43362)
     add 8b67fb4d308 chore(deps-dev): bump globals from 17.10.0 to 17.11.0 in /superset-websocket (#43360)
     add a4628aa19c7 Merge branch 'master' into alexandrusoare/fix/block-guest-custom-sql-injection

No new revisions were added by this update.

Summary of changes:
 .asf.yaml                                          |    1 +
 .github/CODEOWNERS                                 |   16 +-
 .github/actions/setup-backend/action.yml           |   28 +-
 .github/labeler.yml                                |    2 +-
 .github/workflows/bump-python-package.yml          |    8 +-
 .github/workflows/check-db-migration-confict.yml   |    3 +
 .github/workflows/codeql-analysis.yml              |    5 +-
 .github/workflows/docker.yml                       |   63 +-
 .../workflows/enforce-single-migration-head.yml    |   85 ++
 .github/workflows/frontend-bundle-size-nightly.yml |  135 +++
 .github/workflows/github-action-validator.yml      |    3 +
 .github/workflows/issue-creation.yml               |    3 +
 .github/workflows/labeler.yml                      |    3 +
 .github/workflows/latest-release-tag.yml           |    3 +
 .github/workflows/pr-lint.yml                      |    3 +
 .github/workflows/pre-commit.yml                   |   31 +-
 .../scripts/check-docs-deploy-freshness.sh         |   49 +
 .../scripts/check-docs-deploy-freshness.test.sh    |  100 ++
 .github/workflows/showtime-cleanup.yml             |    3 +
 .github/workflows/showtime-trigger.yml             |    3 +
 .github/workflows/superset-docs-deploy.yml         |   87 +-
 .github/workflows/superset-e2e.yml                 |    3 +
 .github/workflows/superset-frontend.yml            |   97 ++
 .github/workflows/superset-helm-release.yml        |    3 +
 .github/workflows/superset-playwright.yml          |   14 +
 .github/workflows/superset-python-presto-hive.yml  |    3 +
 .../workflows/superset-python-unittest-report.yml  |   70 ++
 .github/workflows/superset-python-unittest.yml     |   33 +-
 .github/workflows/superset-translations.yml        |    5 +-
 .github/workflows/supersetbot.yml                  |    3 +
 .github/workflows/welcome-new-users.yml            |    3 +
 AGENTS.md                                          |    2 +-
 CONTRIBUTING.md                                    |    2 +-
 README.md                                          |    2 +
 UPDATING.md                                        |   10 +
 docker/pythonpath_dev/superset_config.py           |    1 +
 .../configuration/configuring-superset.mdx         |   48 +
 .../configuration/dashboard-performance.mdx        |  184 +++
 docs/admin_docs/security/security.mdx              |   14 +-
 .../contributing/development-setup.md              |   24 +
 .../frontend/component-style-guidelines.md         |    2 +-
 docs/docs/faq.mdx                                  |   54 +-
 docs/docs/using-superset/mobile-experience.mdx     |   93 ++
 docs/package.json                                  |   26 +-
 docs/src/components/StorybookWrapper.jsx           |   67 +-
 docs/static/feature-flags.json                     |    6 +
 .../img/screenshots/mobile/mobile_dashboard.jpg    |  Bin 0 -> 68479 bytes
 .../screenshots/mobile/mobile_dashboard_list.jpg   |  Bin 0 -> 82502 bytes
 .../screenshots/mobile/mobile_filter_drawer.jpg    |  Bin 0 -> 58074 bytes
 docs/static/img/screenshots/mobile/mobile_home.jpg |  Bin 0 -> 35338 bytes
 .../img/screenshots/mobile/mobile_nav_drawer.jpg   |  Bin 0 -> 35385 bytes
 .../img/screenshots/mobile/mobile_unsupported.jpg  |  Bin 0 -> 42668 bytes
 docs/static/resources/openapi.json                 |   72 +-
 docs/yarn.lock                                     |  624 +++++-----
 helm/superset/Chart.yaml                           |    2 +-
 helm/superset/README.md                            |   28 +-
 helm/superset/templates/pdb-beat.yaml              |    2 +-
 helm/superset/templates/pdb-flower.yaml            |    2 +-
 helm/superset/templates/pdb-mcp.yaml               |    2 +-
 helm/superset/templates/pdb-worker.yaml            |    2 +-
 helm/superset/templates/pdb-ws.yaml                |    2 +-
 helm/superset/templates/pdb.yaml                   |    2 +-
 helm/superset/tests/pdb_test.yaml                  |   87 ++
 helm/superset/values.yaml                          |   26 +-
 pyproject.toml                                     |   12 +-
 requirements/base.in                               |    2 +-
 requirements/base.txt                              |    4 +-
 requirements/development.txt                       |   12 +-
 scripts/docker-build-extra-flags.sh                |   48 +
 .../src/superset_core/semantic_layers/types.py     |    8 +-
 superset-core/tests/semantic_layers/test_types.py  |   97 ++
 superset-embedded-sdk/package-lock.json            |  506 +++++++++
 superset-embedded-sdk/package.json                 |    1 +
 superset-embedded-sdk/src/index.test.ts            |  213 ++++
 superset-embedded-sdk/src/index.ts                 |   22 +
 superset-frontend/package-lock.json                | 1188 ++++++++------------
 superset-frontend/package.json                     |   43 +-
 .../packages/superset-core/src/common/index.ts     |    1 +
 .../src/theme/SupersetThemeProvider.test.tsx       |  205 ++++
 .../superset-core/src/theme/Theme.test.tsx         |   41 +
 .../packages/superset-core/src/theme/Theme.tsx     |   88 +-
 .../components/ColumnTypeLabel/ColumnTypeLabel.tsx |    5 +
 .../src/utils/getTotalsMetrics.test.ts             |   79 ++
 .../src/utils/getTotalsMetrics.ts                  |   43 +
 .../superset-ui-chart-controls/src/utils/index.ts  |    1 +
 .../test/components/ColumnTypeLabel.test.tsx       |   17 +
 .../packages/superset-ui-core/package.json         |    6 +-
 .../superset-ui-core/src/chart/types/Base.ts       |    7 +
 .../src/components/AsyncAceEditor/index.tsx        |    3 +
 .../src/components/AsyncAceEditor/types.ts         |    3 +
 .../src/components/Dropdown/Dropdown.test.tsx      |   35 +-
 .../src/components/Dropdown/index.tsx              |   28 +-
 .../src/components/DynamicEditableTitle/index.tsx  |   16 +
 .../src/components/PageHeaderWithActions/index.tsx |   18 +
 .../src/components/Select/AsyncSelect.test.tsx     |   10 +-
 .../src/components/Select/Select.test.tsx          |    6 +-
 .../superset-ui-core/src/utils/featureFlags.ts     |    1 +
 .../packages/superset-ui-core/src/utils/tooltip.ts |   56 +-
 .../superset-ui-core/test/utils/tooltip.test.ts    |   92 +-
 superset-frontend/playwright.config.ts             |   22 +
 .../generators/docs/mobile-screenshots.spec.ts     |  173 +++
 superset-frontend/playwright/pages/EmbeddedPage.ts |   38 +-
 .../tests/mobile/mobile-dashboard.spec.ts          |  284 +++++
 .../tests/mobile/mobile-navigation.spec.ts         |  192 ++++
 superset-frontend/playwright/utils/constants.ts    |    2 +-
 .../plugin-chart-ag-grid-table/src/buildQuery.ts   |   24 +-
 .../src/controlPanel.tsx                           |   27 +-
 .../test/buildQuery.test.ts                        |   68 ++
 .../plugins/plugin-chart-calendar/src/Calendar.ts  |    5 +-
 .../src/vendor/cal-heatmap.ts                      |   12 +-
 .../test/ReactCalendar.test.tsx                    |   23 +
 .../plugin-chart-calendar/test/cal-heatmap.test.ts |   61 +
 .../plugins/plugin-chart-chord/package.json        |    6 +-
 .../src/BigNumber/BigNumberViz.test.tsx            |   34 +
 .../src/BigNumber/BigNumberViz.tsx                 |    1 +
 .../src/BoxPlot/controlPanel.ts                    |    5 +-
 .../src/Bubble/transformProps.test.ts              |   70 ++
 .../src/Bubble/transformProps.ts                   |    7 +-
 .../src/Gantt/transformProps.ts                    |    1 +
 .../src/MixedTimeseries/transformProps.ts          |   10 +-
 .../src/MixedTimeseries/types.ts                   |    3 +
 .../src/Timeseries/EchartsTimeseries.test.tsx      |   99 +-
 .../src/Timeseries/EchartsTimeseries.tsx           |   57 +-
 .../src/Timeseries/constants.ts                    |    1 +
 .../src/Timeseries/transformProps.ts               |   10 +-
 .../plugin-chart-echarts/src/Timeseries/types.ts   |    2 +
 .../src/components/Echart.test.tsx                 |   36 +-
 .../plugin-chart-echarts/src/components/Echart.tsx |   26 +-
 .../plugins/plugin-chart-echarts/src/controls.tsx  |   22 +
 .../plugin-chart-echarts/src/utils/forecast.ts     |   14 +-
 .../plugin-chart-echarts/src/utils/series.ts       |   43 +-
 .../plugin-chart-echarts/src/utils/treeBuilder.ts  |  125 +-
 .../src/utils/xAxisDrillByFilter.ts                |  164 +++
 .../test/BoxPlot/controlPanel.test.ts              |   57 +
 .../test/MixedTimeseries/transformProps.test.ts    |   57 +
 .../test/Timeseries/Bar/transformProps.test.ts     |   90 ++
 .../test/Timeseries/transformProps.test.ts         |  124 ++
 .../test/utils/forecast.test.ts                    |   55 +-
 .../plugin-chart-echarts/test/utils/series.test.ts |  112 +-
 .../test/utils/treeBuilder.test.ts                 |   72 ++
 .../test/utils/xAxisDrillByFilter.test.ts          |  238 ++++
 .../plugin-chart-point-cluster-map/package.json    |    4 +-
 .../plugins/plugin-chart-table/src/buildQuery.ts   |    5 +
 .../plugin-chart-table/src/controlPanel.tsx        |   25 +
 .../plugin-chart-table/test/buildQuery.test.ts     |   65 ++
 superset-frontend/scripts/bundle-size-summary.js   |   86 ++
 .../scripts/oxlint-metrics-uploader.js             |   58 +-
 superset-frontend/spec/helpers/mobileTestUtils.ts  |  169 +++
 superset-frontend/spec/helpers/testing-library.tsx |    2 +-
 .../spec/scripts/bundle-size-summary.test.js       |  110 ++
 .../spec/scripts/oxlint-metrics-uploader.test.js   |   58 +
 .../components/EditorWrapper/useKeywords.test.ts   |  160 +++
 .../SqlLab/components/EditorWrapper/useKeywords.ts |   63 +-
 .../SqlEditorTabHeader/SqlEditorTabHeader.test.tsx |    8 +-
 .../SqlLab/components/SqlEditorTabHeader/index.tsx |   15 +-
 .../TabbedSqlEditors/TabbedSqlEditors.test.tsx     |    6 +-
 .../src/SqlLab/reducers/sqlLab.test.ts             |   43 +
 superset-frontend/src/SqlLab/reducers/sqlLab.ts    |   13 +-
 .../ChartContextMenu/ChartContextMenu.test.tsx     |   70 +-
 .../Chart/ChartContextMenu/ChartContextMenu.tsx    |   27 +-
 .../Chart/DrillBy/DrillBySubmenu.test.tsx          |  134 +++
 .../components/Chart/DrillBy/DrillBySubmenu.tsx    |  112 +-
 .../useDrillDetailMenuItems.test.tsx               |    5 +
 .../DatasourceEditor/DatasourceEditor.tsx          |    6 +-
 .../tests/DatasourceEditor.test.tsx                |   11 +
 .../DatasourceEditorMetricCertification.test.tsx   |   73 ++
 .../tests/DatasourceEditorWarningMarkdown.test.tsx |   97 ++
 .../Datasource/components/Fieldset/index.tsx       |   16 +-
 .../ErrorMessage/BasicErrorAlert.test.tsx          |    9 +-
 .../ErrorMessage/DatabaseErrorMessage.test.tsx     |    9 +-
 .../DatasetNotFoundErrorMessage.test.tsx           |    9 +-
 .../ErrorMessageWithStackTrace.test.tsx            |    9 +-
 .../FrontendNetworkErrorMessage.test.tsx           |    9 +-
 .../ErrorMessage/ParameterErrorMessage.test.tsx    |    9 +-
 .../ErrorMessage/TimeoutErrorMessage.test.tsx      |    9 +-
 .../src/components/ListView/CardCollection.tsx     |   13 +
 .../src/components/ListView/ListView.test.tsx      |  224 ++++
 .../src/components/ListView/ListView.tsx           |  103 +-
 superset-frontend/src/components/ListView/utils.ts |   25 +-
 .../MobileRouteGuard/MobileRouteGuard.test.tsx     |   64 ++
 .../src/components/MobileRouteGuard/index.tsx      |   49 +-
 .../src/core/editors/AceEditorProvider.tsx         |   14 +-
 .../src/dashboard/actions/dashboardState.test.ts   |  101 +-
 .../src/dashboard/actions/dashboardState.ts        |   89 +-
 .../src/dashboard/actions/nativeFilters.ts         |   14 +-
 .../DashboardBuilder/DashboardBuilder.test.tsx     |   49 +
 .../DashboardBuilder/DashboardBuilder.tsx          |   87 +-
 .../DashboardBuilder/DashboardWrapper.tsx          |   17 +
 .../dashboard/components/DashboardBuilder/state.ts |   15 +-
 .../dashboard/components/Header/Header.test.tsx    |    7 +
 .../src/dashboard/components/Header/index.tsx      |   48 +-
 .../src/dashboard/components/Header/types.ts       |    4 +
 .../Header/useHeaderActionsDropdownMenu.tsx        |   81 +-
 .../PropertiesModal/PropertiesModal.test.tsx       |   51 +
 .../dashboard/components/PropertiesModal/index.tsx |    2 +-
 .../src/dashboard/components/SliceAdder.tsx        |    2 +-
 .../components/SliceHeader/SliceHeader.test.tsx    |   42 +
 .../src/dashboard/components/SliceHeader/index.tsx |    7 +-
 .../ChartHolder/ChartHolder.test.tsx               |  147 ++-
 .../gridComponents/ChartHolder/ChartHolder.tsx     |   64 +-
 .../components/gridComponents/Row/Row.tsx          |   22 +
 .../gridComponents/TabsRenderer/TabsRenderer.tsx   |   55 +-
 .../FilterControls/GroupByFilterCard.test.tsx      |   38 +-
 .../FilterBar/FilterControls/GroupByFilterCard.tsx |    2 +-
 .../nativeFilters/FilterBar/Vertical.tsx           |   74 +-
 .../components/nativeFilters/FilterBar/index.tsx   |    1 +
 .../components/nativeFilters/FilterBar/types.ts    |    5 +
 .../FiltersConfigForm/DatasetSelect.test.tsx       |    2 +-
 .../transformers/buildTarget.test.ts               |   10 +
 .../FiltersConfigModal/transformers/buildTarget.ts |   12 +-
 .../transformers/customizationTransformer.test.ts  |  102 ++
 .../transformers/customizationTransformer.ts       |    5 +-
 .../transformers/filterTransformer.test.ts         |  156 +++
 .../transformers/filterTransformer.ts              |    7 +-
 .../nativeFilters/FiltersConfigModal/utils.ts      |   70 --
 .../components/resizable/ResizableContainer.tsx    |   16 +
 superset-frontend/src/embedded/api.test.ts         |  155 +++
 superset-frontend/src/embedded/api.tsx             |   57 +
 superset-frontend/src/embedded/index.tsx           |    1 +
 .../components/DatasourcePanel/DatasourceItems.tsx |    2 +-
 .../ExploreChartHeader/ExploreChartHeader.test.tsx |   11 +-
 .../controls/ColumnConfigControl/constants.tsx     |    7 +
 .../ColumnSelectPopover.test.tsx                   |   16 +-
 .../FilterControl/AdhocFilter/AdhocFilter.test.ts  |   68 ++
 .../controls/FilterControl/AdhocFilter/index.ts    |   19 +
 .../FilterControl/AdhocFilterEditPopover/index.tsx |   18 +-
 ...AdhocFilterEditPopoverSimpleTabContent.test.tsx |  138 +++
 .../index.tsx                                      |  126 ++-
 .../controls/FilterControl/utils/translateToSQL.ts |   11 +
 .../AdhocMetricEditPopover.test.tsx                |   16 +-
 .../useExploreAdditionalActionsMenu/index.tsx      |   23 +-
 .../useExploreAdditionalActionsMenu.test.tsx       |   69 +-
 superset-frontend/src/explore/constants.ts         |   53 +-
 .../exploreUtils/getSimpleSQLExpression.test.ts    |   11 +
 .../src/explore/exploreUtils/index.ts              |   13 +-
 .../src/features/apiKeys/ApiKeyCreateModal.tsx     |   34 +-
 .../src/features/apiKeys/ApiKeyList.tsx            |   13 +
 .../src/features/apiKeys/apiKeyScopes.test.ts      |   50 +
 .../src/features/apiKeys/apiKeyScopes.ts           |   55 +
 .../src/features/dashboards/DashboardCard.tsx      |   12 +-
 .../src/features/home/ActivityTable.tsx            |   28 +-
 .../src/features/home/EmptyState.test.tsx          |   39 +
 superset-frontend/src/features/home/EmptyState.tsx |   10 +-
 superset-frontend/src/features/home/Menu.tsx       |   75 +-
 .../src/features/home/RightMenu.test.tsx           |  127 ++-
 superset-frontend/src/features/home/RightMenu.tsx  |  197 +++-
 .../src/features/home/SubMenu.test.tsx             |   32 +
 superset-frontend/src/features/home/SubMenu.tsx    |   66 +-
 superset-frontend/src/features/home/types.ts       |    1 +
 .../src/features/roles/RoleFormItems.test.tsx      |    6 +-
 .../src/features/users/UserListModal.tsx           |   41 +-
 superset-frontend/src/features/users/utils.test.ts |   99 ++
 superset-frontend/src/features/users/utils.ts      |   41 +-
 superset-frontend/src/hooks/useIsMobile.ts         |   88 ++
 .../src/pages/DashboardList/DashboardList.test.tsx |    7 +
 .../src/pages/DashboardList/index.tsx              |   33 +-
 .../DatasetList/DatasetList.listview.test.tsx      |   28 +
 .../DatasetList/DatasetList.subdirectory.test.tsx  |   37 +-
 superset-frontend/src/pages/DatasetList/index.tsx  |    9 +-
 .../src/pages/Home/Home.mobile.test.tsx            |  183 +++
 superset-frontend/src/pages/Home/Home.test.tsx     |    7 +
 superset-frontend/src/pages/Home/index.tsx         |   43 +-
 .../MobileUnsupported/MobileUnsupported.test.tsx   |   95 ++
 .../src/pages/MobileUnsupported/index.tsx          |  141 +++
 superset-frontend/src/views/App.tsx                |   37 +-
 superset-frontend/src/views/CRUD/utils.tsx         |   12 +
 superset-frontend/src/views/routes.tsx             |   36 +-
 .../tools/webpack.proxy-config.test.js             |  272 +++++
 superset-frontend/webpack.config.js                |   10 +
 superset-frontend/webpack.proxy-config.js          |  102 +-
 superset-websocket/package-lock.json               |  320 +++---
 superset-websocket/package.json                    |   16 +-
 superset/charts/client_processing.py               |   16 +-
 superset/charts/data/api.py                        |    7 +-
 superset/charts/data/form_data.py                  |   63 ++
 superset/commands/database/oauth2.py               |   38 +-
 superset/commands/dataset/importers/v1/utils.py    |   58 +-
 superset/commands/importers/v1/utils.py            |   54 +-
 superset/commands/report/execute.py                |   78 +-
 superset/commands/sql_lab/results.py               |   10 +
 .../commands/sql_lab/streaming_export_command.py   |   10 +
 superset/common/query_context_processor.py         |   47 +-
 superset/common/query_object.py                    |   83 +-
 superset/config.py                                 |    5 +
 superset/connectors/sqla/models.py                 |    8 +-
 superset/daos/dashboard.py                         |   16 +-
 superset/dashboards/api.py                         |   10 +-
 superset/dashboards/filter_scope.py                |  275 +++++
 superset/dashboards/filters.py                     |  119 +-
 superset/databases/api.py                          |    7 +-
 superset/databases/schemas.py                      |   24 +
 superset/datasource/api.py                         |    5 +
 superset/db_engine_specs/README.md                 |    8 +-
 superset/db_engine_specs/__init__.py               |   23 +-
 superset/db_engine_specs/base.py                   |  133 ++-
 superset/db_engine_specs/bigquery.py               |    7 +
 superset/db_engine_specs/clickhouse.py             |   67 +-
 superset/db_engine_specs/databricks.py             |    5 +
 superset/db_engine_specs/duckdb.py                 |   35 +-
 superset/db_engine_specs/hive.py                   |    6 +
 superset/db_engine_specs/mssql.py                  |    5 +
 superset/db_engine_specs/mysql.py                  |    4 +
 superset/db_engine_specs/sybase.py                 |    5 +
 .../charts/Life_Expectancy_VS_Rural.yaml           |   49 +-
 superset/exceptions.py                             |   13 +-
 superset/extensions/cache_middleware.py            |    8 +-
 superset/extensions/storage/api.py                 |   10 +-
 superset/initialization/__init__.py                |   12 +-
 superset/jinja_context.py                          |   38 +-
 superset/mcp_service/app.py                        |   28 +
 superset/mcp_service/auth.py                       |  244 ++--
 superset/mcp_service/chart/chart_utils.py          |  220 +++-
 superset/mcp_service/chart/compile.py              |   28 +-
 superset/mcp_service/chart/plugins/table.py        |   19 +-
 .../mcp_service/chart/resources/chart_configs.py   |    2 +
 superset/mcp_service/chart/schemas.py              |  151 ++-
 superset/mcp_service/chart/tool/generate_chart.py  |  120 +-
 superset/mcp_service/chart/tool/get_chart_data.py  |  131 ++-
 .../mcp_service/chart/tool/get_chart_preview.py    |   13 +-
 superset/mcp_service/chart/tool/list_charts.py     |    3 +-
 superset/mcp_service/chart/tool/update_chart.py    |  212 +++-
 .../mcp_service/chart/tool/update_chart_preview.py |   56 +-
 .../chart/validation/dataset_validator.py          |  113 +-
 superset/mcp_service/chart/validation/pipeline.py  |    2 +-
 superset/mcp_service/common/schema_discovery.py    |    3 +
 superset/mcp_service/composite_token_verifier.py   |   54 +-
 .../mcp_service/dashboard/tool/list_dashboards.py  |   12 +-
 superset/mcp_service/dataset/schemas.py            |   17 +-
 .../dataset/tool/create_virtual_dataset.py         |   22 +-
 superset/mcp_service/dataset/tool/list_datasets.py |   11 +-
 superset/mcp_service/dataset/tool/query_dataset.py |    3 +
 superset/mcp_service/mcp_config.py                 |    8 +-
 superset/mcp_service/mcp_core.py                   |   22 +
 superset/mcp_service/middleware.py                 |   85 +-
 superset/mcp_service/server.py                     |   10 +
 superset/mcp_service/session_scope.py              |   69 ++
 superset/mcp_service/system/tool/get_schema.py     |    9 +-
 superset/mcp_service/utils/token_utils.py          |   62 +-
 ...da0e3f0081bf_enforce_oauth2_token_uniqueness.py |   97 ++
 ...e5ed955_merge_oauth2_token_uniqueness_with_.py} |   12 +-
 superset/models/core.py                            |    4 +-
 superset/models/helpers.py                         |  232 +++-
 superset/security/api_key_scopes.py                |   77 ++
 superset/security/manager.py                       |  303 ++++-
 superset/security/session_invalidation.py          |   30 +-
 superset/semantic_layers/models.py                 |   34 +-
 superset/sql/dialects/dremio.py                    |   28 +-
 superset/sql/parse.py                              |   41 +-
 superset/sqllab/schemas.py                         |   36 +-
 superset/sqllab/utils.py                           |    1 +
 superset/tasks/async_queries.py                    |    7 +-
 superset/tasks/context.py                          |    7 +-
 superset/tasks/decorators.py                       |   20 +-
 superset/tasks/filters.py                          |   23 +-
 superset/tasks/manager.py                          |   13 +-
 superset/tasks/scheduler.py                        |   10 +-
 superset/templates/superset/spa.html               |    7 +
 superset/translations/es/LC_MESSAGES/messages.po   |  197 ++--
 superset/utils/core.py                             |   22 +-
 superset/utils/encrypt.py                          |   57 +-
 superset/utils/filters.py                          |    6 +-
 superset/utils/link_redirect.py                    |   12 +-
 superset/utils/log.py                              |   60 +-
 superset/utils/network.py                          |   23 +-
 superset/utils/oauth2.py                           |   36 +-
 superset/utils/pandas_postprocessing/utils.py      |    6 +-
 superset/utils/screenshot_utils.py                 |   43 +-
 superset/views/base_api.py                         |   75 +-
 superset/views/custom_tags_api_mixin.py            |   17 +-
 superset/views/datasource/utils.py                 |   10 +-
 superset/views/users/api.py                        |   38 +-
 superset/views/users/schemas.py                    |   28 +-
 tests/integration_tests/base_api_tests.py          |   52 +
 tests/integration_tests/dashboards/api_tests.py    |   59 +
 tests/integration_tests/databases/api_tests.py     |   40 +
 tests/integration_tests/datasource/api_tests.py    |   15 +
 .../integration_tests/non_additive_totals_tests.py |   42 +
 .../queries/saved_queries/api_tests.py             |    6 +-
 tests/integration_tests/sql_lab/commands_tests.py  |   24 +
 tests/integration_tests/sqla_models_tests.py       |  149 +++
 tests/integration_tests/utils/encrypt_tests.py     |   12 +-
 .../charts/commands/importers/v1/import_test.py    |   70 ++
 .../unit_tests/charts/data/form_data_test.py       |   21 +-
 tests/unit_tests/charts/test_client_processing.py  |   90 +-
 tests/unit_tests/commands/databases/oauth2_test.py |   67 ++
 tests/unit_tests/commands/report/execute_test.py   |  176 +++
 .../sql_lab/streaming_export_command_test.py       |   19 +
 .../common/test_query_context_processor.py         |   43 +
 tests/unit_tests/daos/test_tasks.py                |   11 +-
 tests/unit_tests/dashboards/filter_scope_test.py   |  233 ++++
 tests/unit_tests/databases/api_test.py             |   22 +
 tests/unit_tests/databases/oauth2_api_test.py      |  275 +++++
 tests/unit_tests/databases/test_schemas.py         |   54 +
 .../datasets/commands/importers/v1/import_test.py  |   76 ++
 tests/unit_tests/db_engine_specs/test_base.py      |   32 +-
 tests/unit_tests/db_engine_specs/test_bigquery.py  |   12 +
 .../unit_tests/db_engine_specs/test_clickhouse.py  |  151 ++-
 .../unit_tests/db_engine_specs/test_databricks.py  |   17 +
 tests/unit_tests/db_engine_specs/test_duckdb.py    |   28 +
 tests/unit_tests/db_engine_specs/test_hive.py      |   23 +
 tests/unit_tests/db_engine_specs/test_init.py      |   87 ++
 tests/unit_tests/db_engine_specs/test_mssql.py     |   11 +
 tests/unit_tests/db_engine_specs/test_mysql.py     |   11 +
 .../unit_tests/db_engine_specs/test_sybase.py      |   21 +-
 tests/unit_tests/extensions/storage/test_api.py    |   26 +
 .../unit_tests/extensions/test_cache_middleware.py |   11 +
 tests/unit_tests/jinja_context_test.py             |   35 +
 .../mcp_service/chart/test_big_number_chart.py     |    1 +
 .../mcp_service/chart/test_chart_utils.py          |   90 ++
 tests/unit_tests/mcp_service/chart/test_compile.py |   40 +
 .../chart/test_dashboard_time_binding.py           |  567 ++++++++++
 .../mcp_service/chart/test_new_chart_types.py      |   60 +
 .../mcp_service/chart/tool/test_generate_chart.py  |   33 +-
 .../mcp_service/chart/tool/test_get_chart_data.py  |  452 +++++++-
 .../chart/tool/test_get_chart_type_schema.py       |    9 +-
 .../mcp_service/chart/tool/test_list_charts.py     |   40 +
 .../mcp_service/chart/tool/test_update_chart.py    |  474 ++++++++
 .../chart/tool/test_update_chart_preview.py        |  277 ++++-
 .../validation/test_column_name_normalization.py   |   68 ++
 .../dashboard/tool/test_dashboard_tools.py         |   63 +-
 .../mcp_service/dataset/tool/test_dataset_tools.py |  129 ++-
 .../mcp_service/dataset/tool/test_query_dataset.py |   68 ++
 .../mcp_service/system/tool/test_get_schema.py     |   39 +-
 .../mcp_service/system/tool/test_mcp_core.py       |   69 +-
 tests/unit_tests/mcp_service/test_auth_rbac.py     |  159 ++-
 .../mcp_service/test_auth_user_resolution.py       |   70 +-
 .../mcp_service/test_composite_token_verifier.py   |   48 +-
 .../mcp_service/test_guest_token_auth.py           |    7 -
 tests/unit_tests/mcp_service/test_middleware.py    |   67 ++
 .../mcp_service/test_middleware_logging.py         |  103 ++
 tests/unit_tests/mcp_service/test_session_scope.py |  233 ++++
 .../test_enforce_oauth2_token_uniqueness.py        |  173 +++
 tests/unit_tests/models/core_test.py               |   69 +-
 tests/unit_tests/models/test_multivalue_filter.py  |  274 +++++
 tests/unit_tests/models/test_multivalue_length.py  |  130 +++
 .../models/test_virtual_dataset_format.py          |   58 +
 tests/unit_tests/openapi/test_static_spec.py       |   54 +
 .../unit_tests/pandas_postprocessing/test_utils.py |   24 +-
 tests/unit_tests/queries/query_object_test.py      |  141 +++
 tests/unit_tests/security/manager_test.py          |   89 ++
 tests/unit_tests/security/test_api_key_scopes.py   |  251 +++++
 .../security/test_embedded_guest_chart_access.py   |  185 +++
 .../test_password_change_session_invalidation.py   |  276 +++++
 .../test_superset_user_api_subject_sync.py         |  229 ++++
 tests/unit_tests/semantic_layers/models_test.py    |   27 +
 tests/unit_tests/sql/dialects/dremio_tests.py      |   27 +
 tests/unit_tests/sql/parse_tests.py                |   90 +-
 tests/unit_tests/sqllab/test_schemas.py            |   54 +
 tests/unit_tests/sqllab/test_utils.py              |   52 +
 tests/unit_tests/subjects/test_filters.py          |   27 +
 tests/unit_tests/tasks/test_filters.py             |   44 +
 tests/unit_tests/utils/encrypt_test.py             |   61 +
 tests/unit_tests/utils/filters_test.py             |   41 +-
 tests/unit_tests/utils/oauth2_tests.py             |  104 +-
 .../unit_tests/utils/test_encrypt_cbc_iv_reuse.py  |   14 +-
 tests/unit_tests/utils/test_link_redirect.py       |   18 +
 tests/unit_tests/utils/test_network.py             |   35 +-
 tests/unit_tests/utils/test_screenshot_utils.py    |   18 +
 tests/unit_tests/views/datasource/utils_test.py    |   61 +
 tests/unit_tests/views/test_current_user_api.py    |  160 +++
 .../unit_tests/views/test_custom_tags_api_mixin.py |  109 ++
 461 files changed, 23908 insertions(+), 3135 deletions(-)
 create mode 100644 .github/workflows/enforce-single-migration-head.yml
 create mode 100644 .github/workflows/frontend-bundle-size-nightly.yml
 create mode 100755 .github/workflows/scripts/check-docs-deploy-freshness.sh
 create mode 100755 .github/workflows/scripts/check-docs-deploy-freshness.test.sh
 create mode 100644 .github/workflows/superset-python-unittest-report.yml
 create mode 100644 docs/admin_docs/configuration/dashboard-performance.mdx
 create mode 100644 docs/docs/using-superset/mobile-experience.mdx
 create mode 100644 docs/static/img/screenshots/mobile/mobile_dashboard.jpg
 create mode 100644 docs/static/img/screenshots/mobile/mobile_dashboard_list.jpg
 create mode 100644 docs/static/img/screenshots/mobile/mobile_filter_drawer.jpg
 create mode 100644 docs/static/img/screenshots/mobile/mobile_home.jpg
 create mode 100644 docs/static/img/screenshots/mobile/mobile_nav_drawer.jpg
 create mode 100644 docs/static/img/screenshots/mobile/mobile_unsupported.jpg
 create mode 100644 helm/superset/tests/pdb_test.yaml
 create mode 100755 scripts/docker-build-extra-flags.sh
 create mode 100644 superset-core/tests/semantic_layers/test_types.py
 create mode 100644 superset-embedded-sdk/src/index.test.ts
 create mode 100644 superset-frontend/packages/superset-core/src/theme/SupersetThemeProvider.test.tsx
 create mode 100644 superset-frontend/packages/superset-ui-chart-controls/src/utils/getTotalsMetrics.test.ts
 create mode 100644 superset-frontend/packages/superset-ui-chart-controls/src/utils/getTotalsMetrics.ts
 create mode 100644 superset-frontend/playwright/generators/docs/mobile-screenshots.spec.ts
 create mode 100644 superset-frontend/playwright/tests/mobile/mobile-dashboard.spec.ts
 create mode 100644 superset-frontend/playwright/tests/mobile/mobile-navigation.spec.ts
 create mode 100644 superset-frontend/plugins/plugin-chart-calendar/test/cal-heatmap.test.ts
 create mode 100644 superset-frontend/plugins/plugin-chart-echarts/src/Bubble/transformProps.test.ts
 create mode 100644 superset-frontend/plugins/plugin-chart-echarts/src/utils/xAxisDrillByFilter.ts
 create mode 100644 superset-frontend/plugins/plugin-chart-echarts/test/BoxPlot/controlPanel.test.ts
 create mode 100644 superset-frontend/plugins/plugin-chart-echarts/test/utils/xAxisDrillByFilter.test.ts
 create mode 100644 superset-frontend/scripts/bundle-size-summary.js
 create mode 100644 superset-frontend/spec/helpers/mobileTestUtils.ts
 create mode 100644 superset-frontend/spec/scripts/bundle-size-summary.test.js
 create mode 100644 superset-frontend/spec/scripts/oxlint-metrics-uploader.test.js
 create mode 100644 superset-frontend/src/components/Datasource/components/DatasourceEditor/tests/DatasourceEditorMetricCertification.test.tsx
 create mode 100644 superset-frontend/src/components/Datasource/components/DatasourceEditor/tests/DatasourceEditorWarningMarkdown.test.tsx
 create mode 100644 superset-frontend/src/components/MobileRouteGuard/MobileRouteGuard.test.tsx
 copy superset-embedded-sdk/src/withTimeout.ts => superset-frontend/src/components/MobileRouteGuard/index.tsx (50%)
 create mode 100644 superset-frontend/src/dashboard/components/nativeFilters/FiltersConfigModal/transformers/customizationTransformer.test.ts
 create mode 100644 superset-frontend/src/dashboard/components/nativeFilters/FiltersConfigModal/transformers/filterTransformer.test.ts
 create mode 100644 superset-frontend/src/embedded/api.test.ts
 create mode 100644 superset-frontend/src/features/apiKeys/apiKeyScopes.test.ts
 create mode 100644 superset-frontend/src/features/apiKeys/apiKeyScopes.ts
 create mode 100644 superset-frontend/src/features/users/utils.test.ts
 create mode 100644 superset-frontend/src/hooks/useIsMobile.ts
 create mode 100644 superset-frontend/src/pages/Home/Home.mobile.test.tsx
 create mode 100644 superset-frontend/src/pages/MobileUnsupported/MobileUnsupported.test.tsx
 create mode 100644 superset-frontend/src/pages/MobileUnsupported/index.tsx
 create mode 100644 superset-frontend/tools/webpack.proxy-config.test.js
 create mode 100644 superset/charts/data/form_data.py
 create mode 100644 superset/dashboards/filter_scope.py
 create mode 100644 superset/mcp_service/session_scope.py
 create mode 100644 superset/migrations/versions/2026-08-07_09-00_da0e3f0081bf_enforce_oauth2_token_uniqueness.py
 copy superset/migrations/versions/{2016-03-22_23-25_d2424a248d63_.py => 2026-08-15_01-39_1072de5ed955_merge_oauth2_token_uniqueness_with_.py} (78%)
 create mode 100644 superset/security/api_key_scopes.py
 copy superset/migrations/versions/2022-02-25_08-06_ab9a9d86e695_deprecate_time_range_endpoints.py => tests/unit_tests/charts/data/form_data_test.py (67%)
 create mode 100644 tests/unit_tests/dashboards/filter_scope_test.py
 create mode 100644 tests/unit_tests/databases/oauth2_api_test.py
 copy superset-frontend/netlify.toml => tests/unit_tests/db_engine_specs/test_sybase.py (60%)
 create mode 100644 tests/unit_tests/mcp_service/chart/test_dashboard_time_binding.py
 create mode 100644 tests/unit_tests/mcp_service/test_session_scope.py
 create mode 100644 tests/unit_tests/migrations/test_enforce_oauth2_token_uniqueness.py
 create mode 100644 tests/unit_tests/models/test_multivalue_filter.py
 create mode 100644 tests/unit_tests/models/test_multivalue_length.py
 create mode 100644 tests/unit_tests/openapi/test_static_spec.py
 create mode 100644 tests/unit_tests/security/test_api_key_scopes.py
 create mode 100644 tests/unit_tests/security/test_embedded_guest_chart_access.py
 create mode 100644 tests/unit_tests/security/test_password_change_session_invalidation.py
 create mode 100644 tests/unit_tests/security/test_superset_user_api_subject_sync.py
 create mode 100644 tests/unit_tests/sqllab/test_schemas.py
 create mode 100644 tests/unit_tests/sqllab/test_utils.py
 create mode 100644 tests/unit_tests/tasks/test_filters.py
 create mode 100644 tests/unit_tests/views/test_current_user_api.py
 create mode 100644 tests/unit_tests/views/test_custom_tags_api_mixin.py