ANNOUNCEMENTS

Superset 5.0.0 Release Notes

Evan Rusackas

Apache Superset 5.0.0 Release Notes

We are thrilled to announce the release of Apache Superset 5.0.0, a major milestone that brings substantial improvements across the entire platform. This version delivers significant UX enhancements, performance optimizations, expanded database connectivity, and modernized data exploration capabilities. Built upon months of collaborative work, Superset 5.0.0 represents our commitment to providing an intuitive, powerful, and flexible data visualization and exploration platform that meets the needs of organizations of all sizes.

User Experience & Interface Improvements

Superset 5.0 brings substantial UX enhancements to elevate your data exploration experience:

Enhanced SQL Lab Experience

  • Refreshed query history pane (#31316) with improved navigation and organization

  • Enhanced table metadata UI layout and header actions (#29900)

  • Enhanced table data interaction with selection and copying capability in SQL Lab and dataset view (#31602)

  • Table metadata improvements: Enhanced display of table column information and keys (#32763)

  • Query reliability: Improved query retry mechanisms with proper ID parameter passing (#32774)

Modern UI Components & Design

  • Redesigned labels system for better organization and discoverability (#31575)
  • Ant Design 5 upgrade: Many core components have been upgraded from Ant Design v4 to v5, as a major step toward customizability and reduced maintenance. This release upgrades the Modal (#31420), Button (#31623), List (#30963), Avatar (#30740), Input (#30730), Switch (#30731) and other core UI components
  • Better filter experience with improved filter bar accessibility (#30812) and UI refinements (#31449, #31279)
  • Chart controls: Adjusted Y-axis title margin defaults for better visual appearance (#32720)
  • Color picker: Improved color picker control width and usability (#32851)
  • Time comparison UI: Hide comparison column configurations when not applicable (#32847)
  • CSS improvements: Fixed various styling typos and issues (#28350)
  • Navigation: Enhanced logging of user navigation paths for better analytics (#32795)
  • Dashboard improvements: Enhanced tab drag and drop reordering with positional placement and indicators (#29395)
  • Dataset management: Allow dataset swap after deletion for improved workflow (#30364)

Localization

  • Dutch translations: Added Dutch language support for current datetime filters (#31869)

Performance & Infrastructure Improvements

Frontend Performance Optimizations

Major optimizations to improve dashboard load times and overall responsiveness:

  • Lazy loading of heavy components like React Ace (#29796), moment-timezone (#29791), and rehype-raw (#29855)
  • Modern frameworks: Migrated to React 17 (#31961) and TypeScript 5 (#31979) for improved performance and type safety
  • Bundle optimization: Implemented tree shaking for Ant Design icons (#29787) to reduce bundle size
  • Dashboard optimization: Optimized dashboard components (#31240, #31241, #31242) to reduce unnecessary re-renders
  • State management: Improved state management for native filters and cross filters (#31243)
  • Library updates: Replaced Moment.js with the lighter DayJS library (#31310)

Global Async Queries Enterprise Enhancements

  • Redis Sentinel support (#29912): Introduced GLOBAL_ASYNC_QUERIES_CACHE_BACKEND configuration to replace the previous standalone Redis setup, eliminating single points of failure for enterprise deployments. This enables high-availability Redis Sentinel configurations for production GAQ deployments.
  • Machine authentication improvements (#29591): Fixed critical authentication flow for GAQ-enabled deployments, ensuring all after_request decorated functions are properly called, which allows Reports and Alerts to work seamlessly with Global Async Queries.
  • Enhanced screenshot generation (#32193): Improved Celery-based screenshot generation by fixing cache key synchronization between frontend and worker processes, resolving dashboard screenshot caching issues.

Developer Experience & Infrastructure

  • Docker improvements: Improved Docker and docker compose setup with better boot sequence (#31747, #31876) and significant Docker refactor reducing access levels for the Superset user (#31385)
  • CI/CD enhancements: GitHub Actions enhancements for frontend (#31386) and CI/CD pipelines (#31518, #31740)
  • Dependency management: Transition from pip-compile-multi to uv for dependency management (#31313, #32239)
  • Development tooling: Enhanced migration helpers (#31303) and database model improvements with UUIDMixin (#30398)
  • Code cleanup: Cleanup of legacy charts (#31582) and code paths (#31976, #31943)
  • Linting: Deprecated pylint in favor of ruff as the python linter (development-only impact) (#31262)
  • Build analysis: Added webpack visualizer for bundle analysis and optimization (#29875)
  • Customization: Enable injecting custom HTML into head for enhanced theming and analytics (#29917)
  • Pre-commit hook improvements (#31984, #31845): Enhanced development workflow by adding ESLint to pre-commit hooks and optimizing the execution order to run Prettier before ESLint, preventing conflicts and improving code quality enforcement.
  • ESLint v9 upgrade (#30359): Major linting infrastructure update for the WebSocket components, bringing improved TypeScript support and modern JavaScript linting capabilities.
  • Extensive TypeScript migrations: Dozens of React components migrated from JavaScript to TypeScript, including core dashboard components, chart controls, and utility functions, improving type safety and developer experience.
  • Testing infrastructure modernization: Large-scale migration from Enzyme to React Testing Library across many test suites, providing more reliable and maintainable frontend tests that better reflect user interactions.
  • Kubernetes & Cloud Deployment: Helm chart improvements (#30710, #30956) enhanced Kubernetes deployment capabilities with extraLabels support for all resources to meet organizational labeling requirements, and fixed missing pod labels for init jobs to support Network Policies in secure environments.
  • CORS and networking updates: Important improvements for embedded deployments, including better handling of cross-origin requests and enhanced proxy configuration support.

Data & Connectivity Enhancements

Database Connectivity

  • OAuth2 improvements: Improved OAuth2 support for database connections (#30674, #30126, #30082, #30071), including BigQuery, Trino, and Firebolt
  • Enhanced database engines: Enhanced database engine specifications with additional time grains for Trino and Presto (#30926) and PostgreSQL (#30325)
  • Authentication: Better authentication with user impersonation support for StarRocks (#28110)
  • New connectors: Added connectors for YDB (#31141), Parseable (#32052), and Denodo Virtual DataPort (#29927)
  • Catalog support: Added catalog support for Apache Doris (#31580)

Data Management & Schema

  • Dataset organization: Added database migration support for dataset folder organization (backend infrastructure) (#32680)
  • Catalog synchronization: Improved dataset and query catalog updates when database configurations change (#32829)
  • Schema validation: Fixed missing catalog field issues in saved query schemas (#32775)
  • Virtual datasets: Virtual datasets now benefit from predicate pushdown for improved query performance (#31486)
  • Advanced temporal filters: Enhanced Jinja templating with advanced temporal filter functionality for more sophisticated time-based queries (#30142)

Export & Import Improvements

  • Excel exports: Fixed big number truncation issues to preserve data accuracy (#32739)
  • Excel security: Enhanced Excel formula quoting to prevent security issues (#31166)
  • File uploads: Improved CSV/Excel upload form guidance for date columns (#32797)
  • Google Sheets: Resolved frontend errors when accessing disallowed Google Sheets (#32792)

Chart & Visualization Enhancements

  • Chart rendering: Enhanced ECharts series sorting using natural comparison for better data ordering (#32850)
  • Time comparison: Fixed metric label reversion issues during time comparison operations (#32793)
  • Table improvements: Better time grain handling for table charts (#32848) and improved column display (#32847)
  • ECharts enhancements: Improved visualization components with ECharts time shift color control (#29897)
  • Temporal comparison: Improved temporal comparison features (#30002, #31889)
  • Chart formatting: New chart formatting options including duration formatter (#30593) and memory units (#30559)
  • New chart plugin: Added plugin-chart-cartodiagram for enhanced geospatial visualization capabilities (#25869)
  • Geographic visualizations: Added France country map with overseas territories (#31037) and Hungary country map (#29627)
  • Rich content support: HTML rendering now works in pivot tables for enhanced formatting (#29724)
  • Custom formatting: Added Handlebars formatNumber and group helpers for advanced template customization (#31261)

Security & Governance

  • Enhanced security: Resolved CVE-2025-29907 and CVE-2025-25977 vulnerabilities by pinning jspdf dependencies (#32802)
  • Database compatibility: Fixed foreign key compatibility issues with Flask-AppBuilder 4.6.1 (#32759, #32848)
  • Authentication improvements: Better role model handling (#32873) and Redis username configuration for async events (#32834)
  • Configuration fixes: Corrected Slack image URL in talisman security configuration (#32778)
  • Row Level Security: Better SQL representation of RLS filter clauses (#32779) and improvements for digest generation (#30336)
  • OAuth2 token management: OAuth2 token purging when database configuration changes (#31164)
  • Access control: Login screen redirection for unauthenticated dashboard access attempts (#30380)
  • Database security: Better database and dataset deletion modal dialogs with details (#30016)
  • Permission improvements: Improved handling of permissions and endpoints (#31959, #32679)
  • ClickHouse security: Certain ClickHouse functions have been disabled by default ("version", "currentDatabase", "hostName") (#31198)
  • CSRF improvements: CSRF Token Handling has been modified to align with HTTP standards (#31173)

Alert and Reporting Improvements

  • Email formatting: Better email report format with date formatting in email subjects (#31413)
  • PDF exports: Support for exporting all dashboard tabs to a single PDF (#30694)
  • Alert capabilities: SQL query mutation capability for alerts (#31840)
  • Security integration: Digest generation now respects Row Level Security (#30336)
  • Slack integration: Slack notification improvements with V2 API support (#32336, #32599)
  • Schedule fixes: Fixed timezone offset issue that was affecting alert/report scheduling since 3.1.0 (#29798)
  • Customization: New DATE_FORMAT_IN_EMAIL_SUBJECT feature flag for customizable email subject dates (#31413)

These enhancements reflect Superset's ongoing commitment to delivering a powerful, performant, and user-friendly data visualization platform for organizations of all sizes.

(Potentially) breaking changes

Several breaking changes have been made. You can see the complete list in the update instructions. The bulk of these include:

  • Removal and updated defaults for feature flags and config options. You can see UPDATING.md for full details, but in a nutshell:
    • DISABLE_LEGACY_DATASOURCE_EDITOR feature flag was previously set to true, and has been removed.
    • CSV_UPLOAD_MAX_SIZE config has been removed.
    • ALERT_REPORTS_EXECUTE_AS and THUMBNAILS_EXECUTE_AS config parameters have been renamed to ALERT_REPORTS_EXECUTORS and THUMBNAILS_EXECUTORS. CACHE_WARMUP_EXECUTORS has been introduced, and THUMBNAILS_SELENIUM_USER has been removed. From here on, to use a fixed executor for async tasks, use the new FixedExecutor class (see docs).
    • Removed the previously deprecated DASHBOARD_CROSS_FILTERS feature flag
    • GLOBAL_ASYNC_QUERIES_REDIS_CONFIG has been removed in favor of GLOBAL_ASYNC_QUERIES_CACHE_BACKEND.
    • USE-ANALAGOUS-COLORS was corrected to USE-ANALOGOUS-COLORS - users need to update their configs
    • The SHARE_QUERIES_VIA_KV_STORE and KV_STORE feature flags have been removed, as was the legacy /kv endpoint in favor of proper permalink support. We still support legacy links in 5.0, but in 6.0, only permalinks will be supported.
    • Default UPLOAD_FOLDER changed from /app/static/uploads/ to /static/uploads/ (#25166)
  • Chart migrations from legacy charts (some of which have been deprecated/removed) to modern Echarts equivalents. The legacy Area, Bar, Event Flow, Heatmap, Histogram, Line, Sankey, and Sankey Loop charts will all be automatically migrated to their ECharts counterparts with the exception of the Event Flow and Sankey Loop charts which were removed as they were not actively maintained and not widely used. If you were using the Event Flow or Sankey Loop charts, you will need to find an alternative solution.
  • Minor API modifications, including consolidation of CSV/Excel/columnar uploads to a single endpoint (#31959).
  • Updated build tooling for Docker, translation workflows, and dependency management. Translations are no longer included by default (#30099), Firefox was removed from the dev layer (#30021), and Docker images now use uv pip install instead of pip install (#31260)
  • Upgraded to React 17
  • Python 3.9 has been deprecated, and v3.11 is now recommended (#31503).

It's also worth noting that there are additional deprecations that have taken place that will affect upgrades to forthcoming versions of Superset, including SUPERSET_WEBSERVER_DOMAINS which will be removed in favor of HTTP/2 support.

...and more!

On top of all of these highlighted improvements, the full changelog for Superset 5.0 includes over 800 pull requests, comprising approximately 250 bug fixes, 70 new features, and hundreds of other improvements including dependency updates, documentation enhancements, refactoring efforts and more.

This release represents one of the most substantial updates to the Superset platform, with contributions from more than 100 unique developers across the Apache Superset community.


Installation and Upgrade

We generally recommend that people run the latest release of Apache Superset possible. Not just for the latest-and-greatest features, but also to make sure that they get the latest security patches (especially if it's hosted publicly) and stability fixes.

For installation instructions, please see our installation documentation.

For upgrade instructions, please see our upgrade documentation.

It's also worth noting for Preset customers that many of these features have already been deployed to your workspaces. Remaining changes are coming soon, and you will be upgraded seamlessly.

What's next?

Now that Superset 5.0 has hit the streets, it's time to start looking forward yet again. Superset 6.0 is planned to come into view in the coming weeks and months, with a target of the second half of 2025. While there are many SIPs in flight, and any number of new features and fixes may land, one thing we know for sure is that Superset will support THEMING! Immediately following 5.0.0, the first major PR toward this milestone has been merged! After some touch-ups and testing, we expect that this will be the driving theme (pardon the pun) for the next major release (though it is planned to land for Preset customers prior to that release). If you want to learn more about what's coming up in Theming, sign up for the webinar!

We're also continuing on the charge for Superset Extensions, and while the launch timing here is unclear, it's the next major milestone on our roadmap.

Getting involved

The Apache Superset community continues to grow and thrive. We encourage you to:

Thank you to all the contributors who made this release possible, those who tested it and voted on its release, and especially our esteemed release manager Michael S. Molina!

If you want to get involved in the building/testing/releasing of upcoming Apache Superset releases, there are many ways to do so!

– Join Superset Town Hall and/or Release Strategy meetings (all on the https://superset.apache.org/community)

  • Join the #release-feedback-and-questions and/or #release-announcements channels on slack
  • Open a PR, big or small! All contributions welcome!

All the features of Superset (and more) without the hassles of scaling/managing/upgrading, with plenty of time to grow into it. Free for five users, forever.

Subscribe to our blog updates

Receive a weekly digest of new blog posts

Close