Saiku 4.7.0

Saiku 4.7.0

Two downloads attached:

• saiku-dist-4.7.0.zip — recommended. Runnable bundle:
  JAR + README + run.sh/run.bat. Unzip and ./run.sh.
• saiku-4.7.0.jar — bare fat JAR for users who want to
  wire the launcher into their own startup script. java -jar saiku-*.jar serve.

Docker image (multi-arch): ghcr.io/spiculedata/saiku:4.7.0

Auto-generated changelog

What's Changed

• #1516 - deny admin on null roles, and fix the race that made it reachable by @juanresendiz813 in #1531
• build(deps-dev): bump org.hamcrest:hamcrest from 2.2 to 3.0 by @dependabot[bot] in #1383
• build(deps): bump apache-arrow from 15.0.2 to 21.1.0 in /saiku-ui by @dependabot[bot] in #1526
• build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #1520
• #1514 - refuse admin-panel password changes instead of reporting success by @juanresendiz813 in #1533
• #1527 - bound dependabot npm dev groups to minor/patch, split by blast radius by @juanresendiz813 in #1534
• build(deps): bump jakarta.annotation:jakarta.annotation-api from 2.1.1 to 3.0.0 by @dependabot[bot] in #1523
• build(deps): bump org.apache.hive:hive-cli from 2.3.9 to 4.2.0 by @dependabot[bot] in #1524
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1381
• build(deps): bump jakarta.servlet:jakarta.servlet-api from 6.0.0 to 6.1.0 by @dependabot[bot] in #1535
• build(deps-dev): bump @types/node from 25.8.0 to 26.1.1 in /saiku-ui by @dependabot[bot] in #1543
• build(deps): bump org.apache.calcite.avatica:avatica-server from 1.27.0 to 1.28.0 by @dependabot[bot] in #1537
• build(deps): bump the production-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #1542
• build(deps-dev): bump vitest from 3.2.6 to 4.1.10 in /saiku-ui by @dependabot[bot] in #1546
• build(deps-dev): bump the dev-tooling group across 1 directory with 14 updates by @dependabot[bot] in #1548
• Fix production frontend build: load Monaco editor worker without the Vite ?worker suffix by @juanresendiz813 in #1552
• Gate LLM egress of cell data and enforce embed PII inspection by @juanresendiz813 in #1555
• Add a mail-sending SPI with an SMTP implementation by @juanresendiz813 in #1556
• Add the self-send email endpoint and health check by @juanresendiz813 in #1557
• Add the Email me this button and composer modal by @juanresendiz813 in #1558
• Generate an email summary from the on-screen analysis by @juanresendiz813 in #1559
• Draft an email from a natural-language ask and open the composer by @juanresendiz813 in #1560
• Add a server-side agentic ask loop (build query, run it, write the report) by @juanresendiz813 in #1561
• Make the chained ask resilient on rate-limited LLM tiers by @juanresendiz813 in #1562
• Harden the email path and make the LLM timeout configurable by @juanresendiz813 in #1563
• Build a real multi-tile dashboard from a single AI request by @juanresendiz813 in #1564
• Add loading screens for the AI dashboard and email flows by @juanresendiz813 in #1565
• Bind the self-send recipient and add request/loop safety limits by @juanresendiz813 in #1566
• Fix the Ask the AI button becoming unreadable on hover by @juanresendiz813 in #1567
• feat(test): Hegel property-based testing (saiku-proptest) by @buggtb in #1568
• test(proptest): 9 more Hegel properties (k-anon egress, AES-GCM, MDX + CSV injection) by @buggtb in #1569
• Show the Save dialog name field above the folder browser by @juanresendiz813 in #1572
• Rename / duplicate a query from its workspace tab by @juanresendiz813 in #1573
• #1512 - bump jackson to 2.19.4 to clear GHSA-5jmj-h7xm-6q6v by @juanresendiz813 in #1582
• build(deps-dev): bump svelte from 5.56.7 to 5.56.8 in /saiku-ui in the build-toolchain group by @dependabot[bot] in #1576
• build(deps-dev): bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 by @dependabot[bot] in #1578
• build(deps-dev): bump the dev-tooling group in /saiku-ui with 5 updates by @dependabot[bot] in #1581
• build(deps): bump org.apache.maven.plugins:maven-checkstyle-plugin from 2.1 to 3.6.0 by @dependabot[bot] in #1575
• build(deps-dev): bump storybook from 10.5.4 to 10.5.5 in /saiku-ui in the storybook group across 1 directory by @dependabot[bot] in #1579
• #1551 - run vite build in the ui CI job so a broken prod build fails fast by @juanresendiz813 in #1583
• #1554 - gate AI egress on ossie/ask + schema-gen enrichment by @juanresendiz813 in #1584
• build(deps-dev): bump org.owasp:dependency-check-maven from 10.0.4 to 12.2.2 by @dependabot[bot] in #1577
• #1553 - gate history + currentQuery egress on /ai/ask at send-time by @juanresendiz813 in #1585
• bump brace-expansion + postcss to clear npm advisories (Dependabot alerts #504, #509) by @juanresendiz813 in #1587
• bump jackson to 2.21.5 to clear GHSA advisories (Dependabot alerts 510-516) by @juanresendiz813 in #1588
• bump postgresql + owasp-java-html-sanitizer to clear HIGH advisories (alerts 505, 508) by @juanresendiz813 in #1586
• feat(ui/ossie): info tooltip explaining the fact-dataset picker by @buggtb in #1589
• docs: App Builder — Phase 1 (app shell + navigation) design spec by @buggtb in #1590
• feat: App Builder — Phase 1 (branded multi-page app shell) by @buggtb in #1591
• #1600 - resize dashboard chart tiles to fit (no inner scrollbar) by @juanresendiz813 in #1614
• #1595 - give chart titles their own band so they don't overlap the plot by @juanresendiz813 in #1613
• #1605 - show dashboard titles (not raw .saikudash paths) in the list by @juanresendiz813 in #1612
• import jackson-bom to align the stray transitive jackson-module and retire the manual annotations pin by @juanresendiz813 in #1594
• fix(dashboard): give the editor title room to show the full name by @juanresendiz813 in #1615
• fix(dashboard): render markdown in text tiles instead of raw source by @juanresendiz813 in #1616
• polish(analyze): styled hover tooltips on icon-only query toolbar buttons by @juanresendiz813 in #1618
• #1606 - show one consistent dashboard title everywhere by @juanresendiz813 in #1619
• polish(charts): render axis titles from the query (#1596) by @juanresendiz813 in #1620
• feat(analyze): double-click a measure/level in the sidebar tree to add it by @juanresendiz813 in #1617
• polish(analyze): rename "Email me this" toolbar action to "Email" by @juanresendiz813 in #1621
• polish(dashboards): move inline Delete into a row overflow menu by @juanresendiz813 in #1623
• polish(dashboard): default new text tiles to a single row tall by @juanresendiz813 in #1624
• polish(charts): reserve grid.bottom for rotated category labels so they don't clip by @juanresendiz813 in #1626
• polish(charts): readable value-axis tick density on bar/line charts (#1599) by @juanresendiz813 in #1628
• polish(dashboards): move tree-view Delete into the row overflow menu by @juanresendiz813 in #1629
• fix(charts): drop the top legend below the title band on titled charts by @juanresendiz813 in #1630
• polish(dashboard): declutter the toolbar behind a "⋯ More" overflow menu by @juanresendiz813 in #1627
• #1441 - App Builder Phase 2: renderer/plugin framework + FoodMart Ops reference demo by @buggtb in #1631
• feat: migrate the visual cube/schema designer into Saiku (admin + backend + AI) by @buggtb in #1632

Full Changelog: v4.6.4...v4.7.0