[pull] master from apache:master - #1014

Merged

pull[bot] merged 11 commits into

code:masterfrom

Aug 18, 2026

Commits on Aug 18, 2026

chore(deps): bump antd from 6.5.4 to 6.6.0 in /superset-frontend (#43294)

authored
ebab31a
chore(deps-dev): bump oxfmt from 0.62.0 to 0.63.0 in /superset-frontend (#43293)
dependabot[bot]
authored
3c90bdc
fix(explore): samples endpoint now honors requested row limit (#43148)

sadpandajoe
and
claude
authored
2d1daac
fix(dashboard): mute the Group By display control loading spinner (#42879)

authored
60e1802
fix(security): harden account password-change and session-invalidation handling (#42934)

authored
fd063d1
feat(mcp): per-resource token scopes with user-permission intersection (#42297)

aminghadersohi
and
claude
authored
086b4af
fix(dashboard): align list OpenAPI schema (#43256)
endimonan
authored
f994602
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.67.0 in /superset-websocket (#43284)
dependabot[bot]
authored
a13a5f1
chore(deps): bump supercluster from 8.0.1 to 9.0.0 in /superset-frontend (#43290)
dependabot[bot]
authored
e4ea6e2
feat(tooltip): add Truncate labels control to timeseries charts (#43272)
nytai
authored
7d4f305
fix(dashboard): preserve native filter keys for dataset-less filters on save (#42898)

authored
c0ab5f3