blazer 3.3.0 → 3.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c0195ef0a71f12d25336eeb7e50ddcf7a307480a34c778c884d805cb046068e
-  data.tar.gz: '068f14c8b5c5df75a8638fd1f6354d9957f56fc3bf855944dadb23ce69aa336a'
+  metadata.gz: ec2b494fc5ea15a06d18125d5c9d9173ee84adedb30016f935225904b31dbd65
+  data.tar.gz: a6ea63deaff42cce760843f2171ef125e946b5a1f68f14f49ed2051b94f4d4d1
 SHA512:
-  metadata.gz: 9fe14dbedbe3705c61339074437c2117d102d03a15050a3caaa9df4b2077937911891b01a1d4afd92ca432330191133a1f8e098d2695d050c00799a918badf82
-  data.tar.gz: 074d5b2d452d90741a950257fb69b96b01f3e3d0b5ae5570a096d6a23e17d529322018b3d4ebad2ca5793fa77386d41c1472c22fa9a8f272c5026e5ccca4e618
+  metadata.gz: a777e72613329d828de10a17d6e43f2edeaf0ac9c84cc757372b19f8f63586c67866801e215aa67507a34c06b41c0e53c1c7316a5472d3a390addbec0c4259be
+  data.tar.gz: 43621f36af5f8069184ace5f0519c051de42fa5b367353614c34a3344203984221909aeb4f36852247e8ac909c2f03e7d9269cca493c669b0dcaef254b741946

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 3.5.0 (2026-07-27)
+
+- Fixed stored XSS vulnerability - [more info](https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f)
+- Added materialized views to table preview and schema page for Postgres
+- Added support for ClickHouse
+- Added `catalog` setting for Amazon Athena
+- Improved support for Snowflake
+
+## 3.4.0 (2026-04-20)
+
+- Dropped support for Ruby < 3.3 and Rails < 7.2
+
 ## 3.3.0 (2025-04-12)
 
 - Fixed error with forecasting with Rails 7.2+

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2014-2025 Andrew Kane
+Copyright (c) 2014-2026 Andrew Kane
 
 MIT License
 

data/README.md

@@ -172,7 +172,7 @@ CREATE ROLE blazer LOGIN PASSWORD 'secret';
 GRANT CONNECT ON DATABASE dbname TO blazer;
 GRANT USAGE ON SCHEMA public TO blazer;
 GRANT SELECT ON ALL TABLES IN SCHEMA public TO blazer;
-ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO blazer;
+ALTER DEFAULT PRIVILEGES FOR ROLE migrations_role IN SCHEMA public GRANT SELECT ON TABLES TO blazer;
 COMMIT;
 ```
 
@@ -483,7 +483,7 @@ anomaly_checks: anomaly_detection
 
 ## Forecasting
 
-Blazer supports for two different forecasting methods. [Example](https://blazer.dokkuapp.com/queries/18-forecast?forecast=t)
+Blazer supports for two different forecasting methods.
 
 A forecast link will appear for queries that return 2 columns with types timestamp and numeric.
 
@@ -575,6 +575,7 @@ data_sources:
 - [Apache Ignite](#apache-ignite)
 - [Apache Spark](#apache-spark)
 - [Cassandra](#cassandra)
+- [ClickHouse](#clickhouse)
 - [Druid](#druid)
 - [Elasticsearch](#elasticsearch)
 - [Google BigQuery](#google-bigquery)
@@ -615,6 +616,7 @@ data_sources:
     # optional settings
     output_location: s3://some-bucket/
     workgroup: primary
+    catalog: s3tablescatalog/some-bucket
     access_key_id: ...
     secret_access_key: ...
     region: ...
@@ -730,6 +732,18 @@ data_sources:
 
 Use a [read-only role](https://docs.datastax.com/en/cql-oss/3.3/cql/cql_using/useSecurePermission.html).
 
+### ClickHouse
+
+Set:
+
+```yml
+data_sources:
+  my_source:
+    adapter: clickhouse
+    url: https://user:password@hostname:8443
+    database: default
+```
+
 ### Druid
 
 Enable [SQL support](https://druid.apache.org/docs/latest/querying/sql) on the broker and set:
@@ -894,34 +908,16 @@ Use a read-only user. Supports [SOQL](https://developer.salesforce.com/docs/atla
 
 ### Snowflake
 
-First, install ODBC. For Homebrew, use:
-
-```sh
-brew install unixodbc
-```
-
-For Ubuntu, use:
-
-```sh
-sudo apt-get install unixodbc-dev
-```
-
-For Heroku, use the [Apt buildpack](https://github.com/heroku/heroku-buildpack-apt) and create an `Aptfile` with:
-
-```text
-unixodbc-dev
-https://sfc-repo.snowflakecomputing.com/odbc/linux/2.21.5/snowflake-odbc-2.21.5.x86_64.deb
-```
-
-> This installs the driver at `/app/.apt/usr/lib/snowflake/odbc/lib/libSnowflake.so`
-
-Then, download the [Snowflake ODBC driver](https://docs.snowflake.com/developer-guide/odbc/odbc-download). Add [odbc_adapter](https://github.com/localytics/odbc_adapter) to your Gemfile and set:
+Set:
 
 ```yml
 data_sources:
   my_source:
-    adapter: snowflake
-    conn_str: Driver=/path/to/libSnowflake.so;uid=user;pwd=password;server=host.snowflakecomputing.com
+    adapter: snowflake2
+    account_id: ...
+    database: ...
+    schema: PUBLIC
+    access_token: ...
 ```
 
 Use a [read-only role](https://docs.snowflake.com/en/user-guide/security-access-control-configure.html).
@@ -1032,19 +1028,13 @@ If views are stuck with a `Loading...` message, there might be a problem with st
 override_csp: true
 ```
 
-## Upgrading
-
-### 3.0
-
-Maps now use Mapbox GL JS v1 instead of Mapbox.js, which affects Mapbox billing.
-
 ## History
 
 View the [changelog](https://github.com/ankane/blazer/blob/master/CHANGELOG.md)
 
 ## Thanks
 
-Blazer uses a number of awesome open source projects, including [Rails](https://github.com/rails/rails/), [Vue.js](https://github.com/vuejs/vue), [jQuery](https://github.com/jquery/jquery), [Bootstrap](https://github.com/twbs/bootstrap), [Selectize](https://github.com/brianreavis/selectize.js), [StickyTableHeaders](https://github.com/jmosbech/StickyTableHeaders), [Stupid jQuery Table Sort](https://github.com/joequery/Stupid-Table-Plugin), and [Date Range Picker](https://github.com/dangrossman/bootstrap-daterangepicker).
+Blazer uses a number of awesome open source projects, including [Rails](https://github.com/rails/rails), [Bootstrap](https://github.com/twbs/bootstrap), [Ace](https://github.com/ajaxorg/ace), [Chart.js](https://github.com/chartjs/Chart.js), [Moment.js](https://github.com/moment/moment), [Sortable](https://github.com/SortableJS/Sortable), [Tom Select](https://github.com/orchidjs/tom-select), and [Date Range Picker](https://github.com/dangrossman/daterangepicker).
 
 Demo data from [MovieLens](https://grouplens.org/datasets/movielens/).