You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2026/05/30 02:57:30 UTC
(superset) branch security/workflow-run-origin-check updated (5a11444cb47 -> e0b5313a151)
This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a change to branch security/workflow-run-origin-check
in repository https://gitbox.apache.org/repos/asf/superset.git
discard 5a11444cb47 security(ci): restrict docs deployment to trusted workflow_run origins
omit 178ffdd75fe fix(dashboard): prevent "undefined undefined" owner names when removing from properties modal
add c73106b7a28 fix(chart-echarts): drop white textBorder from Funnel segment labels (#40468)
add 0dc58d10420 feat(mcp): browser hello page with working middleware and config-driven content (#40471)
add e68251fa704 feat(mcp): support custom SQL metrics in generate_chart and update_chart (#40448)
add f037449b753 fix(roles): resolve HTTP 429 and 414 errors on role management page (#39465)
add 8a0026b1736 fix(groups): display user full name in role edit user dropdown (#39942)
add f663f47628a fix(embedding): require non-default JWT secret when embedded dashboards are enabled (#39999)
add ec09cec6bdf fix(ci): correct first-interaction inputs in welcome workflow (#40508)
add f7e1f968946 fix(i18n): Wrapped default Chat Error message in t() to support translation (#40504)
add 96b96ad7d47 chore(deps): bump ws from 8.20.1 to 8.21.0 in /superset-websocket (#40483)
add b0da0cf202b chore(ci): update GHA actions to Node.js 24-compatible versions (#40477)
add 8853ab5c753 feat(mcp): add get_dashboard_layout companion tool (#40328)
add b2320820b4a feat(core): SoftDeleteMixin and restore infrastructure (#39977)
add 8f88bbcc796 chore(deps-dev): bump @swc/core from 1.15.33 to 1.15.40 in /superset-frontend (#40519)
add 63ae80ab623 chore(deps-dev): bump baseline-browser-mapping from 2.10.31 to 2.10.32 in /superset-frontend (#40518)
add e1948c87c6d chore(deps-dev): bump webpack-sources from 3.4.1 to 3.5.0 in /superset-frontend (#40517)
add cf9ee99b5ae chore(deps-dev): bump eslint-plugin-react-you-might-not-need-an-effect from 0.10.1 to 0.10.2 in /superset-frontend (#40516)
add 61cb0aeae74 chore(deps): bump @swc/core from 1.15.33 to 1.15.40 in /docs (#40515)
add c3bda6baea9 chore(deps): bump fs-extra from 11.3.2 to 11.3.5 in /superset-frontend (#40487)
add ead21d9789d chore(deps): bump react-syntax-highlighter from 16.1.0 to 16.1.1 in /superset-frontend (#40486)
add 661ff31c6d5 chore(deps): bump yeoman-generator from 8.1.2 to 8.2.2 in /superset-frontend (#40485)
add 63e3a18e8f4 chore(deps): bump baseline-browser-mapping from 2.10.31 to 2.10.32 in /docs (#40484)
add ae5823fb9c2 chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /superset-frontend (#40480)
add e73d2d0bf60 chore(deps): bump tmp from 0.2.4 to 0.2.7 in /superset-frontend/cypress-base (#40476)
add 53e2793bc3c fix: coerce out-of-bounds nanosecond timestamps to NaT instead of raising (#40127)
add e0b5313a151 security(ci): restrict docs deployment to trusted workflow_run origins
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (5a11444cb47)
\
N -- N -- N refs/heads/security/workflow-run-origin-check (e0b5313a151)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/actions/setup-docker/action.yml | 6 +-
.github/actions/setup-supersetbot/action.yml | 4 +-
.github/workflows/docker.yml | 6 +-
.github/workflows/welcome-new-users.yml | 11 +-
docs/package.json | 4 +-
docs/yarn.lock | 160 +++---
superset-frontend/cypress-base/package-lock.json | 12 +-
superset-frontend/package-lock.json | 252 ++++-----
superset-frontend/package.json | 8 +-
.../packages/generator-superset/package.json | 2 +-
.../packages/superset-ui-core/package.json | 2 +-
.../src/Funnel/transformProps.ts | 2 -
.../test/Funnel/transformProps.test.ts | 9 +
.../src/components/Chart/ChartErrorMessage.tsx | 3 +-
.../dashboard/components/PropertiesModal/index.tsx | 24 +-
.../src/features/groups/GroupListModal.tsx | 3 +-
superset-frontend/src/features/groups/utils.ts | 3 +-
.../src/features/roles/RoleListEditModal.test.tsx | 113 ++--
.../src/features/roles/RoleListEditModal.tsx | 59 ++-
superset-frontend/src/features/users/utils.ts | 9 +
superset-frontend/src/utils/fetchOptions.ts | 21 +-
superset-frontend/src/utils/getOwnerName.test.ts | 12 -
superset-frontend/src/utils/getOwnerName.ts | 5 +-
superset-websocket/package-lock.json | 14 +-
superset-websocket/package.json | 2 +-
superset/commands/dataset/importers/v1/utils.py | 39 +-
superset/commands/importers/v1/utils.py | 47 ++
superset/commands/restore.py | 98 ++++
superset/config.py | 4 +-
superset/constants.py | 2 +
superset/daos/base.py | 85 +++-
superset/daos/database.py | 7 +
superset/initialization/__init__.py | 75 ++-
superset/mcp_service/app.py | 2 +
superset/mcp_service/chart/chart_utils.py | 81 ++-
superset/mcp_service/chart/schemas.py | 219 +++++++-
superset/mcp_service/chart/tool/generate_chart.py | 25 +-
superset/mcp_service/chart/tool/update_chart.py | 33 +-
.../chart/validation/dataset_validator.py | 45 +-
.../chart/validation/runtime/__init__.py | 4 +-
.../validation/runtime/chart_type_suggester.py | 23 +-
.../chart/validation/schema_validator.py | 35 +-
superset/mcp_service/dashboard/schemas.py | 254 ++++++++-
superset/mcp_service/dashboard/tool/__init__.py | 2 +
.../dashboard/tool/get_dashboard_layout.py | 119 +++++
superset/mcp_service/jwt_verifier.py | 275 +++++++++-
superset/mcp_service/mcp_config.py | 6 +-
superset/mcp_service/server.py | 58 +++
superset/mcp_service/utils/sanitization.py | 127 ++++-
superset/models/helpers.py | 260 +++++++++-
superset/result_set.py | 4 +-
superset/security/manager.py | 50 +-
superset/views/filters.py | 213 +++++++-
.../importers/v1/test_find_existing_for_import.py | 180 +++++++
.../unit_tests/commands/importers/v1/utils_test.py | 119 +++++
.../commands/test_base_restore_command.py | 187 +++++++
tests/unit_tests/daos/test_base_dao_soft_delete.py | 100 ++++
.../mcp_service/chart/test_big_number_chart.py | 41 +-
.../mcp_service/chart/test_chart_schemas.py | 254 +++++++++
.../mcp_service/chart/test_chart_utils.py | 207 ++++++++
.../mcp_service/chart/tool/test_generate_chart.py | 90 ++++
.../mcp_service/chart/tool/test_update_chart.py | 58 +++
.../chart/validation/test_runtime_validator.py | 25 +
.../dashboard/tool/test_get_dashboard_layout.py | 285 +++++++++++
tests/unit_tests/mcp_service/test_jwt_verifier.py | 6 +-
.../mcp_service/test_jwt_verifier_browser_hello.py | 126 +++++
.../mcp_service/utils/test_sanitization.py | 200 ++++++++
tests/unit_tests/models/test_soft_delete_mixin.py | 566 +++++++++++++++++++++
tests/unit_tests/result_set_test.py | 20 +
tests/unit_tests/views/test_soft_delete_filter.py | 356 +++++++++++++
70 files changed, 5254 insertions(+), 504 deletions(-)
create mode 100644 superset/commands/restore.py
create mode 100644 superset/mcp_service/dashboard/tool/get_dashboard_layout.py
create mode 100644 tests/unit_tests/commands/importers/v1/test_find_existing_for_import.py
create mode 100644 tests/unit_tests/commands/importers/v1/utils_test.py
create mode 100644 tests/unit_tests/commands/test_base_restore_command.py
create mode 100644 tests/unit_tests/daos/test_base_dao_soft_delete.py
create mode 100644 tests/unit_tests/mcp_service/dashboard/tool/test_get_dashboard_layout.py
create mode 100644 tests/unit_tests/mcp_service/test_jwt_verifier_browser_hello.py
create mode 100644 tests/unit_tests/models/test_soft_delete_mixin.py
create mode 100644 tests/unit_tests/views/test_soft_delete_filter.py