You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@superset.apache.org by Ville Brofeldt <vi...@gmail.com> on 2026/10/16 23:26:41 UTC

[VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Hello Superset Community,

This is a call for the vote to release Apache Superset version 7.0.0.

Changes since 7.0.0rc1:
- Security: Public-role RLS rules now apply to anonymous users (#45333), embedded guest checks fail closed (#43896), guest identity is preserved on MCP permalink lookup (#45346), semantic view edits and same-database dataset repoints now require data access (#45154, #44080), and address classification is refined (#45230)
- Dashboards: charts the viewer can't read show an access error instead of blanking the page (#45398), temporal x-axis cross-filters apply to target charts (#45310), and the refresh dropdown honours DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
- WebSocket server: supports Redis/Valkey Sentinel and full TLS options (CA, client certs, verification) (#45355)
- Charts and data: fixes for post-processing of geography columns and column renames (#45086, #45043) and the X-axis sort control (#44956)
- Examples, connections and engines: example chart datasource references are rewritten on import (#45378), SupersetClient.postForm accepts an absolute URL (#45204), and the AWS IAM engine's cachetools import is optional (#38269)
- Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)

The release candidate: https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/

The Git tag for the release: https://github.com/apache/superset/tree/7.0.0rc2

The CHANGELOG for the release: https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md

The instructions for updating to the release: https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md

Public keys are available at: https://www.apache.org/dist/superset/KEYS

The vote will be left open until at least 72 hours have passed
and the necessary number of votes (3) have been reached.

Please vote accordingly:

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove with the reason

Thanks,
Ville

Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Posted by Cubensio Mimidensio <cu...@outlook.com>.
+1 (non-binding)
________________________________
De: Ville Brofeldt <vi...@gmail.com>
Enviado: viernes, 16 de octubre de 2026 05:26 p. m.
Para: dev@superset.apache.org <de...@superset.apache.org>
Asunto: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Hello Superset Community,

This is a call for the vote to release Apache Superset version 7.0.0.

Changes since 7.0.0rc1:
- Security: Public-role RLS rules now apply to anonymous users (#45333), embedded guest checks fail closed (#43896), guest identity is preserved on MCP permalink lookup (#45346), semantic view edits and same-database dataset repoints now require data access (#45154, #44080), and address classification is refined (#45230)
- Dashboards: charts the viewer can't read show an access error instead of blanking the page (#45398), temporal x-axis cross-filters apply to target charts (#45310), and the refresh dropdown honours DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
- WebSocket server: supports Redis/Valkey Sentinel and full TLS options (CA, client certs, verification) (#45355)
- Charts and data: fixes for post-processing of geography columns and column renames (#45086, #45043) and the X-axis sort control (#44956)
- Examples, connections and engines: example chart datasource references are rewritten on import (#45378), SupersetClient.postForm accepts an absolute URL (#45204), and the AWS IAM engine's cachetools import is optional (#38269)
- Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)

The release candidate: https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/

The Git tag for the release: https://github.com/apache/superset/tree/7.0.0rc2

The CHANGELOG for the release: https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md

The instructions for updating to the release: https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md

Public keys are available at: https://www.apache.org/dist/superset/KEYS

The vote will be left open until at least 72 hours have passed
and the necessary number of votes (3) have been reached.

Please vote accordingly:

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove with the reason

Thanks,
Ville

Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Posted by Madhushree <ma...@apache.org>.
+1 (non-binding)

Thanks,
Madhushree

On 2026-10-16 23:26 UTC Ville Brofeldt wrote:
> Hello Superset Community,
> 
> This is a call for the vote to release Apache Superset version 7.0.0.
> 
> Changes since 7.0.0rc1:
> - Security: Public-role RLS rules now apply to anonymous users (#45333), embedded guest checks fail closed (#43896), guest identity is preserved on MCP permalink lookup (#45346), semantic view edits and same-database dataset repoints now require data access (#45154, #44080), and address classification is refined (#45230)
> - Dashboards: charts the viewer can't read show an access error instead of blanking the page (#45398), temporal x-axis cross-filters apply to target charts (#45310), and the refresh dropdown honours DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
> - WebSocket server: supports Redis/Valkey Sentinel and full TLS options (CA, client certs, verification) (#45355)
> - Charts and data: fixes for post-processing of geography columns and column renames (#45086, #45043) and the X-axis sort control (#44956)
> - Examples, connections and engines: example chart datasource references are rewritten on import (#45378), SupersetClient.postForm accepts an absolute URL (#45204), and the AWS IAM engine's cachetools import is optional (#38269)
> - Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)
> 
> The release candidate: https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/
> 
> The Git tag for the release: https://github.com/apache/superset/tree/7.0.0rc2
> 
> The CHANGELOG for the release: https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md
> 
> The instructions for updating to the release: https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md
> 
> Public keys are available at: https://www.apache.org/dist/superset/KEYS
> 
> The vote will be left open until at least 72 hours have passed
> and the necessary number of votes (3) have been reached.
> 
> Please vote accordingly:
> 
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
> 
> Thanks,
> Ville

Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Posted by Aleem Sattar <al...@savantly.net>.
Hi Ville,

Happy to help contribute. Thank you for running the release!
The PR is up: https://github.com/apache/superset/pull/45408

-Aleem



________________________________
From: Ville Brofeldt <vi...@gmail.com>
Sent: Saturday, October 17, 2026 12:13 AM
To: dev@superset.apache.org <de...@superset.apache.org>
Subject: Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Hi Aleem,

thanks for helping test the latest release candidate. If you don't mind,
please open a PR agaist master to fix the regression, and we'll cherry it
into the next RC if there are other issues that need fixing.

Ville

On Fri, Oct 16, 2026 at 9:38 PM Aleem Sattar <al...@savantly.net>
wrote:

> +0 (non-binding)
>
>   Tested rc2 on a copy of our prod metadata on an upgrade from 6.1.0.
> Mostly good except one pivot table regression, also present in rc1: a plain
> MIN/MAX metric on a text column renders empty cells.
>
>   Repro and 2 options for suggested fixes in
> https://github.com/apache/superset/issues/45405. Not sure if it's
> considered a blocker as the workaround is pretty simple, but happy to open
> a PR.
>
>  -Aleem
>
>
>
> ________________________________
> From: Ville Brofeldt <vi...@gmail.com>
> Sent: Friday, October 16, 2026 6:26 PM
> To: dev@superset.apache.org <de...@superset.apache.org>
> Subject: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2
>
> Hello Superset Community,
>
> This is a call for the vote to release Apache Superset version 7.0.0.
>
> Changes since 7.0.0rc1:
> - Security: Public-role RLS rules now apply to anonymous users (#45333),
> embedded guest checks fail closed (#43896), guest identity is preserved on
> MCP permalink lookup (#45346), semantic view edits and same-database
> dataset repoints now require data access (#45154, #44080), and address
> classification is refined (#45230)
> - Dashboards: charts the viewer can't read show an access error instead of
> blanking the page (#45398), temporal x-axis cross-filters apply to target
> charts (#45310), and the refresh dropdown honours
> DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
> - WebSocket server: supports Redis/Valkey Sentinel and full TLS options
> (CA, client certs, verification) (#45355)
> - Charts and data: fixes for post-processing of geography columns and
> column renames (#45086, #45043) and the X-axis sort control (#44956)
> - Examples, connections and engines: example chart datasource references
> are rewritten on import (#45378), SupersetClient.postForm accepts an
> absolute URL (#45204), and the AWS IAM engine's cachetools import is
> optional (#38269)
> - Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)
>
> The release candidate:
> https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/
>
> The Git tag for the release:
> https://github.com/apache/superset/tree/7.0.0rc2
>
> The CHANGELOG for the release:
> https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md
>
> The instructions for updating to the release:
> https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md
>
> Public keys are available at: https://www.apache.org/dist/superset/KEYS
>
> The vote will be left open until at least 72 hours have passed
> and the necessary number of votes (3) have been reached.
>
> Please vote accordingly:
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
>
> Thanks,
> Ville
>

Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Posted by Ville Brofeldt <vi...@gmail.com>.
Hi Aleem,

thanks for helping test the latest release candidate. If you don't mind,
please open a PR agaist master to fix the regression, and we'll cherry it
into the next RC if there are other issues that need fixing.

Ville

On Fri, Oct 16, 2026 at 9:38 PM Aleem Sattar <al...@savantly.net>
wrote:

> +0 (non-binding)
>
>   Tested rc2 on a copy of our prod metadata on an upgrade from 6.1.0.
> Mostly good except one pivot table regression, also present in rc1: a plain
> MIN/MAX metric on a text column renders empty cells.
>
>   Repro and 2 options for suggested fixes in
> https://github.com/apache/superset/issues/45405. Not sure if it's
> considered a blocker as the workaround is pretty simple, but happy to open
> a PR.
>
>  -Aleem
>
>
>
> ________________________________
> From: Ville Brofeldt <vi...@gmail.com>
> Sent: Friday, October 16, 2026 6:26 PM
> To: dev@superset.apache.org <de...@superset.apache.org>
> Subject: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2
>
> Hello Superset Community,
>
> This is a call for the vote to release Apache Superset version 7.0.0.
>
> Changes since 7.0.0rc1:
> - Security: Public-role RLS rules now apply to anonymous users (#45333),
> embedded guest checks fail closed (#43896), guest identity is preserved on
> MCP permalink lookup (#45346), semantic view edits and same-database
> dataset repoints now require data access (#45154, #44080), and address
> classification is refined (#45230)
> - Dashboards: charts the viewer can't read show an access error instead of
> blanking the page (#45398), temporal x-axis cross-filters apply to target
> charts (#45310), and the refresh dropdown honours
> DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
> - WebSocket server: supports Redis/Valkey Sentinel and full TLS options
> (CA, client certs, verification) (#45355)
> - Charts and data: fixes for post-processing of geography columns and
> column renames (#45086, #45043) and the X-axis sort control (#44956)
> - Examples, connections and engines: example chart datasource references
> are rewritten on import (#45378), SupersetClient.postForm accepts an
> absolute URL (#45204), and the AWS IAM engine's cachetools import is
> optional (#38269)
> - Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)
>
> The release candidate:
> https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/
>
> The Git tag for the release:
> https://github.com/apache/superset/tree/7.0.0rc2
>
> The CHANGELOG for the release:
> https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md
>
> The instructions for updating to the release:
> https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md
>
> Public keys are available at: https://www.apache.org/dist/superset/KEYS
>
> The vote will be left open until at least 72 hours have passed
> and the necessary number of votes (3) have been reached.
>
> Please vote accordingly:
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
>
> Thanks,
> Ville
>

Re: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Posted by Aleem Sattar <al...@savantly.net>.
+0 (non-binding)

  Tested rc2 on a copy of our prod metadata on an upgrade from 6.1.0. Mostly good except one pivot table regression, also present in rc1: a plain MIN/MAX metric on a text column renders empty cells.

  Repro and 2 options for suggested fixes in https://github.com/apache/superset/issues/45405. Not sure if it's considered a blocker as the workaround is pretty simple, but happy to open a PR.

 -Aleem



________________________________
From: Ville Brofeldt <vi...@gmail.com>
Sent: Friday, October 16, 2026 6:26 PM
To: dev@superset.apache.org <de...@superset.apache.org>
Subject: [VOTE] Release Apache Superset 7.0.0 based on Superset 7.0.0rc2

Hello Superset Community,

This is a call for the vote to release Apache Superset version 7.0.0.

Changes since 7.0.0rc1:
- Security: Public-role RLS rules now apply to anonymous users (#45333), embedded guest checks fail closed (#43896), guest identity is preserved on MCP permalink lookup (#45346), semantic view edits and same-database dataset repoints now require data access (#45154, #44080), and address classification is refined (#45230)
- Dashboards: charts the viewer can't read show an access error instead of blanking the page (#45398), temporal x-axis cross-filters apply to target charts (#45310), and the refresh dropdown honours DASHBOARD_AUTO_REFRESH_INTERVALS (#44982)
- WebSocket server: supports Redis/Valkey Sentinel and full TLS options (CA, client certs, verification) (#45355)
- Charts and data: fixes for post-processing of geography columns and column renames (#45086, #45043) and the X-axis sort control (#44956)
- Examples, connections and engines: example chart datasource references are rewritten on import (#45378), SupersetClient.postForm accepts an absolute URL (#45204), and the AWS IAM engine's cachetools import is optional (#38269)
- Dependencies: urllib3 2.8.0 and werkzeug 3.1.9 (#45255)

The release candidate: https://dist.apache.org/repos/dist/dev/superset/7.0.0rc2/

The Git tag for the release: https://github.com/apache/superset/tree/7.0.0rc2

The CHANGELOG for the release: https://github.com/apache/superset/blob/7.0.0rc2/CHANGELOG/7.0.0.md

The instructions for updating to the release: https://github.com/apache/superset/blob/7.0.0rc2/UPDATING.md

Public keys are available at: https://www.apache.org/dist/superset/KEYS

The vote will be left open until at least 72 hours have passed
and the necessary number of votes (3) have been reached.

Please vote accordingly:

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove with the reason

Thanks,
Ville