blazer 3.4.0 → 3.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 717cf6259ae43cc9f32cdba44075ae8d32bb76897a523d732337d7803ae408e2
-  data.tar.gz: b9acca30cc99232f081f11481c107fbdb50b3b33927b4d36342dc2e993d28304
+  metadata.gz: ec2b494fc5ea15a06d18125d5c9d9173ee84adedb30016f935225904b31dbd65
+  data.tar.gz: a6ea63deaff42cce760843f2171ef125e946b5a1f68f14f49ed2051b94f4d4d1
 SHA512:
-  metadata.gz: 9980122da968eae04e713274b18703b128da6c3d0c928a4661289970fe0b6e6e1ea01eac4080c67ab8e0b2eb9d6167f8fae0b2416202a5eef3f021828425adef
-  data.tar.gz: ae4d1efc051458f6b3d9626ecee5414ebcc0bd39749d4518a834332348c5c914da4c6c7bc68328a95af070eddc323251fd9c0f1371cb53ebded19d5184ae08e8
+  metadata.gz: a777e72613329d828de10a17d6e43f2edeaf0ac9c84cc757372b19f8f63586c67866801e215aa67507a34c06b41c0e53c1c7316a5472d3a390addbec0c4259be
+  data.tar.gz: 43621f36af5f8069184ace5f0519c051de42fa5b367353614c34a3344203984221909aeb4f36852247e8ac909c2f03e7d9269cca493c669b0dcaef254b741946

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 3.5.0 (2026-07-27)
+
+- Fixed stored XSS vulnerability - [more info](https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f)
+- Added materialized views to table preview and schema page for Postgres
+- Added support for ClickHouse
+- Added `catalog` setting for Amazon Athena
+- Improved support for Snowflake
+
 ## 3.4.0 (2026-04-20)
 
 - Dropped support for Ruby < 3.3 and Rails < 7.2

data/README.md

@@ -172,7 +172,7 @@ CREATE ROLE blazer LOGIN PASSWORD 'secret';
 GRANT CONNECT ON DATABASE dbname TO blazer;
 GRANT USAGE ON SCHEMA public TO blazer;
 GRANT SELECT ON ALL TABLES IN SCHEMA public TO blazer;
-ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO blazer;
+ALTER DEFAULT PRIVILEGES FOR ROLE migrations_role IN SCHEMA public GRANT SELECT ON TABLES TO blazer;
 COMMIT;
 ```
 
@@ -483,7 +483,7 @@ anomaly_checks: anomaly_detection
 
 ## Forecasting
 
-Blazer supports for two different forecasting methods. [Example](https://blazer.dokkuapp.com/queries/18-forecast?forecast=t)
+Blazer supports for two different forecasting methods.
 
 A forecast link will appear for queries that return 2 columns with types timestamp and numeric.
 
@@ -575,6 +575,7 @@ data_sources:
 - [Apache Ignite](#apache-ignite)
 - [Apache Spark](#apache-spark)
 - [Cassandra](#cassandra)
+- [ClickHouse](#clickhouse)
 - [Druid](#druid)
 - [Elasticsearch](#elasticsearch)
 - [Google BigQuery](#google-bigquery)
@@ -615,6 +616,7 @@ data_sources:
     # optional settings
     output_location: s3://some-bucket/
     workgroup: primary
+    catalog: s3tablescatalog/some-bucket
     access_key_id: ...
     secret_access_key: ...
     region: ...
@@ -730,6 +732,18 @@ data_sources:
 
 Use a [read-only role](https://docs.datastax.com/en/cql-oss/3.3/cql/cql_using/useSecurePermission.html).
 
+### ClickHouse
+
+Set:
+
+```yml
+data_sources:
+  my_source:
+    adapter: clickhouse
+    url: https://user:password@hostname:8443
+    database: default
+```
+
 ### Druid
 
 Enable [SQL support](https://druid.apache.org/docs/latest/querying/sql) on the broker and set:
@@ -894,34 +908,16 @@ Use a read-only user. Supports [SOQL](https://developer.salesforce.com/docs/atla
 
 ### Snowflake
 
-First, install ODBC. For Homebrew, use:
-
-```sh
-brew install unixodbc
-```
-
-For Ubuntu, use:
-
-```sh
-sudo apt-get install unixodbc-dev
-```
-
-For Heroku, use the [Apt buildpack](https://github.com/heroku/heroku-buildpack-apt) and create an `Aptfile` with:
-
-```text
-unixodbc-dev
-https://sfc-repo.snowflakecomputing.com/odbc/linux/2.21.5/snowflake-odbc-2.21.5.x86_64.deb
-```
-
-> This installs the driver at `/app/.apt/usr/lib/snowflake/odbc/lib/libSnowflake.so`
-
-Then, download the [Snowflake ODBC driver](https://docs.snowflake.com/developer-guide/odbc/odbc-download). Add [odbc_adapter](https://github.com/localytics/odbc_adapter) to your Gemfile and set:
+Set:
 
 ```yml
 data_sources:
   my_source:
-    adapter: snowflake
-    conn_str: Driver=/path/to/libSnowflake.so;uid=user;pwd=password;server=host.snowflakecomputing.com
+    adapter: snowflake2
+    account_id: ...
+    database: ...
+    schema: PUBLIC
+    access_token: ...
 ```
 
 Use a [read-only role](https://docs.snowflake.com/en/user-guide/security-access-control-configure.html).
@@ -1038,7 +1034,7 @@ View the [changelog](https://github.com/ankane/blazer/blob/master/CHANGELOG.md)
 
 ## Thanks
 
-Blazer uses a number of awesome open source projects, including [Rails](https://github.com/rails/rails/), [Vue.js](https://github.com/vuejs/vue), [jQuery](https://github.com/jquery/jquery), [Bootstrap](https://github.com/twbs/bootstrap), [Selectize](https://github.com/brianreavis/selectize.js), [StickyTableHeaders](https://github.com/jmosbech/StickyTableHeaders), [Stupid jQuery Table Sort](https://github.com/joequery/Stupid-Table-Plugin), and [Date Range Picker](https://github.com/dangrossman/bootstrap-daterangepicker).
+Blazer uses a number of awesome open source projects, including [Rails](https://github.com/rails/rails), [Bootstrap](https://github.com/twbs/bootstrap), [Ace](https://github.com/ajaxorg/ace), [Chart.js](https://github.com/chartjs/Chart.js), [Moment.js](https://github.com/moment/moment), [Sortable](https://github.com/SortableJS/Sortable), [Tom Select](https://github.com/orchidjs/tom-select), and [Date Range Picker](https://github.com/dangrossman/daterangepicker).
 
 Demo data from [MovieLens](https://grouplens.org/datasets/movielens/).