Commit Graph
934 Commits
Author SHA1 Message Date
junjun b05d90c6c8 feat: MCP supports configuration to disable rendering charts 2026-03-30 10:47:12 +08:00
junjun f88cb01117 feat: MCP supports selecting workspaces #926 2026-03-24 16:18:49 +08:00
junjun 54f1da7652 feat: MCP supports selecting workspaces #926 2026-03-24 16:17:23 +08:00
junjun 49b08b07dd feat: MCP supports selecting workspaces #926 2026-03-24 16:00:41 +08:00
junjun 11d1affa29 feat: MCP supports selecting workspaces #926 2026-03-24 15:40:56 +08:00
junjun 0c1cbd4831 feat: MCP supports selecting workspaces #926 2026-03-24 15:10:24 +08:00
junjun d55c30be4a feat: MCP supports selecting workspaces #926 2026-03-24 14:36:29 +08:00
junjun f32e1fdff3 feat: MCP supports selecting workspaces #926 2026-03-24 14:21:59 +08:00
junjun f6a0a5bb4d feat: MCP supports selecting workspaces #926 2026-03-24 14:01:03 +08:00
junjun e5e9e535ea fix: MySQL adds SSL configuration 2026-03-24 10:17:49 +08:00
xuwei-fit2cloud 65b386138c Update PyPI mirror URL to Aliyun 2026-03-18 17:10:38 +08:00
xuwei-fit2cloud a645de1a25 Bump version from 1.6.0 to 1.7.0 2026-03-18 15:49:22 +08:00
fit2cloud-chenyw 3eca13735b perf: Cancel Duplicate Email Verification 2026-03-17 15:19:31 +08:00
junjun 0315e27fd0 feat: Support SSL for MySQL 2026-03-17 15:12:49 +08:00
fit2cloud-chenyw 5c136b46c5 perf: Optimize Embedded Assistant Cache Settings 2026-03-17 14:38:42 +08:00
fit2cloud-chenyw 8b8cd3e8c9 perf: System variables are set as user-selectable attributes 2026-03-17 12:31:29 +08:00
fit2cloud-chenyw 24d5f2a3d5 fix: The max_tokens parameter in the model configuration is invalid 2026-03-17 11:37:01 +08:00
junjun b9594285e8 feat: support system variable 2026-03-17 10:57:02 +08:00
junjun 527b18fa82 feat: support system variable 2026-03-17 10:36:05 +08:00
junjun 606949af67 feat: support system variable 2026-03-16 18:20:33 +08:00
fit2cloud-chenyw 6d63dcefc5 fix: Clickjacking Attack 2026-03-16 15:44:57 +08:00
junjun a357dd01a4 feat: support system variable 2026-03-16 14:23:53 +08:00
fit2cloud-chenyw b181d64e6d perf: Failed to create third-party user due to missing system variables 2026-03-16 14:13:17 +08:00
jackieya 4feb553c42 refactor: optimize decorator order and fix HTTPException imports per review 2026-03-16 10:37:37 +08:00
jackieya 2772cde16e security: fix RCE via terminology poisoning and restrict upload access 2026-03-16 10:37:37 +08:00
junjun 5963561933 refactor: system variable sort by name 2026-03-16 10:01:58 +08:00
junjun bb30a3a545 fix: Fix SSRF causing arbitrary file read vulnerability 2026-03-13 18:21:24 +08:00
junjun beeddb64c6 refactor: system variable sort by create time 2026-03-13 17:24:13 +08:00
junjun 15c75365ae refactor: The data table supports enabling and disabling 2026-03-13 14:06:25 +08:00
anch0r00 94ca094467 style: fix import order for psycopg2 2026-03-11 15:44:55 +08:00
anch0r00 39f2203cec fix: prevent SQL injection in uploadExcel via psycopg2.sql.Identifier 2026-03-11 15:44:55 +08:00
junjun ff98514827 fix: Fix SSRF causing arbitrary file read vulnerability 2026-03-10 10:48:33 +08:00
ulleo 0ff44b4d94 fix: fix log persistence issues with concurrent question requests
#940
2026-03-04 18:04:18 +08:00
Langel 0dd6536bf8 fix: add missing comma in whitelist.py causing /mcp* routes to be unwhitelisted
"*.css.map" was missing a trailing comma, causing Python's implicit string
literal concatenation to merge it with the next entry into "*.css.map/mcp*".
This made the /mcp* whitelist rule never match, so all /mcp/* endpoints
(mcp_start, mcp_question, mcp_get_sql, mcp_execute_sql, etc.) were blocked
by TokenMiddleware with "Miss Token[X-SQLBOT-TOKEN]" even though they are
intended to handle their own authentication internally.
2026-03-02 11:08:43 +08:00
wangjiahao 82de276aad feat(dashboard): The dashboard supports displaying real-time data 2026-02-28 16:02:08 +08:00
王嘉豪 9dccaf12d1 feat(dashboard): The dashboard supports displaying real-time data (#930) 2026-02-28 14:53:51 +08:00
junjun 28ff1c9a0b fix: Fix the issue of incorrect data source connection pool recycling 2026-02-10 17:01:24 +08:00
fit2cloud-chenyw 5208b59800 fix: Authentication is required to access the API documentation #839 2026-02-09 16:47:40 +08:00
junjun 5105f8b51c feat: support system variable 2026-02-05 10:37:55 +08:00
junjun d9129073b9 feat: support system variable 2026-02-05 10:15:46 +08:00
junjun 4135aa3b1b refactor: Optimize row permission logic 2026-02-04 17:59:50 +08:00
ulleo b5b6282b85 fix: prevent scientific notation in exported Excel data 2026-02-04 17:30:20 +08:00
junjun 566d6ead14 feat: mcp provide datasource 2026-02-04 17:07:16 +08:00
fit2cloud-chenyw e3363923d6 perf: API Permission Error Message Optimization 2026-02-04 16:33:11 +08:00
ulleo e2e4459a7c pref: improve date format display while querying data 2026-02-04 16:29:55 +08:00
ulleo d0bc870cc2 fix: fix encoding issues when querying BIT type fields 2026-02-04 16:13:54 +08:00
ulleo 32af7a11d7 feat: add dimension and metric field constraints to SQL generation templates 2026-02-04 15:21:56 +08:00
xuwei-fit2cloud 22bd467c04 Add numpy version 2.3.5 to dependencies 2026-02-04 15:14:01 +08:00
xuwei-fit2cloud b85511f256 Bump version from 1.5.0 to 1.6.0 2026-02-04 15:12:35 +08:00
junjun 989eef51d6 fix: assistant support oracle connection mode 2026-02-04 14:25:20 +08:00