Skip to content

Seshat BI v0.5.2

Choose a tag to compare

View all tags
@Kemetra Kemetra released this 20 Jul 11:16
· 809 commits to main since this release
v0.5.2
f7aa26c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Seshat BI v0.5.2 — a new dashboard capability plus a batch of security and hardening fixes.

Highlights

  • seshat dashboard (#358): writes a self-contained, static HTML readiness view of the workspace — a Home page with portfolio KPIs and one card per table showing the seven-stage readiness track — from the recomputed readiness-status.yaml. No server, no external assets, theme CSS inlined, every value HTML-escaped; can write-and-auto-open. A read-only view of already-computed state — it fabricates no evidence or approvals.
  • Three credential-leak paths closed in dagster/portfolio redaction (#362, #364): a reformatted, schemeless driver error naming only the host/user of a DATABASE_URL-shaped secret could survive the whole-value replace — URI-component decomposition now scrubs each part.
  • Explicit secret-key set for dagster redaction (#357, #363): a POSITIVE ANALYTICS_DB_* credential set replaces the prefix scan, so config words (e.g. ENGINE=postgres) are no longer over-redacted while credentials stay scrubbed.
  • seshat-init writer hardening + init-project layout (#356) and the scaffold-source TOCTOU race (#345) — the follow-up tracked from v0.5.1 — are closed. The dagster command family now loads the workspace .env (#354).

Internal

  • One shared URI-redaction core (seshat/redaction_core.py) imported by the dbt, dagster, and portfolio redactors — pure refactor, no behavior change (#365).

Full detail: docs/releases/v0.5.2.md and CHANGELOG.md.

Install: pip install seshat-bi==0.5.2

Assets 2
Loading