backport: Support both name & field ref-based column keys in viz settings on read and upgrade on write (#46383 ) (#48243 )

Fixes #48046 Manual backport of d3a515858a to fix customer escalation in Not renamed fields in a same table join inherit the renamed name in exports #48046. Conflicts: e2e/test/scenarios/dashboard-filters/temporal-unit-parameters.cy.spec.js frontend/src/metabase/static-viz/lib/settings.ts frontend/src/metabase/visualizations/lib/settings/column.js frontend/src/metabase/visualizations/lib/utils.js frontend/src/metabase/visualizations/shared/settings/column.ts frontend/src/metabase/visualizations/visualizations/Table.unit.spec.js src/metabase/query_processor/streaming/xlsx.clj
🤖 backported "Future-proof CSV uploads from next HoneySQL upgrade" (#48233 )
2024-10-02 08:26:04 -07:00 · 2024-10-01 23:45:48 +00:00 · 2024-10-01 22:49:33 +00:00 · 2024-10-01 22:14:27 +00:00 · 2024-10-01 21:56:06 +00:00 · 2024-10-01 17:55:26 +00:00
4810 changed files with 507293 additions and 222318 deletions
--- a/.clj-kondo/config.edn
+++ b/.clj-kondo/config.edn
@@ -107,6 +107,7 @@
   malli.core/explainer                               {:message "Use metabase.util.malli.registry/explainer instead of malli.core/explainer"}
   me.flowthing.pp/pprint                             {:message "Use metabase.util.log instead of me.flowthing.pp/pprint"}
   medley.core/random-uuid                            {:message "Use clojure.core/random-uuid instead of medley.core/random-uuid"}
+   metabase.driver/database-supports?                 {:message "Use metabase.driver.util/supports? instead of metabase.driver/database-supports?"}
   metabase.lib.equality/find-column-indexes-for-refs {:message "Use lib.equality/closest-matches-in-metadata or lib.equality/find-closest-matches-for-refs instead of lib.equality/find-column-indexes-for-refs"}
   metabase.test/with-temp*                           {:message "Use mt/with-temp instead of mt/with-temp*"}
   toucan2.tools.with-temp                            {:message "Use mt/with-temp instead of t2.with-temp/with-temp"}}
@@ -114,6 +115,7 @@
  :discouraged-namespace
  {camel-snake-kebab.core {:message "CSK is not Turkish-safe, use the versions in metabase.util instead."}
   clojure.tools.logging  {:message "Use metabase.util.log instead of clojure.tools.logging directly"}
+   grouper.core           {:message "Use metabase.util.grouper instead of grouper.core"}
   honeysql.core          {:message "Use Honey SQL 2. Honey SQL 1 is removed as a dependency in Metabase 49+."}
   honeysql.format        {:message "Use Honey SQL 2. Honey SQL 1 is removed as a dependency in Metabase 49+."}
   honeysql.helpers       {:message "Use Honey SQL 2. Honey SQL 1 is removed as a dependency in Metabase 49+."}
@@ -135,7 +137,7 @@
   ;;    namespace(s). This is mostly a temporary placeholder until we go in and create module namespaces, which means
   ;;    you should go create one.
   ;;
-   ;; 2. A set of namespace symbols. All namespaces in other modules will only be allowed ;; to use namespaces from
+   ;; 2. A set of namespace symbols. All namespaces in other modules will only be allowed to use namespaces from
   ;;    this set. Ideally this set should only have one namespace, but restricting it to a set of several is still
   ;;    better than `:any`.
   ;;
@@ -162,6 +164,7 @@
    metabase.async                 #{metabase.async.streaming-response
                                     metabase.async.streaming-response.thread-pool
                                     metabase.async.util}                                           ; TODO -- consolidate these into a real API namespace.
+    metabase.audit                 #{metabase.audit}
    metabase.bootstrap             #{metabase.bootstrap}
    metabase.cmd                   #{}                                                              ; there are no namespaces here since you shouldn't be using this in any other module.
    metabase.config                #{metabase.config}
@@ -266,6 +269,8 @@
    metabase.analyze               :any
    metabase.api                   :any
    metabase.async                 :any
+    metabase.audit                 :any
+    metabase.auth-provider         #{metabase.util}
    metabase.bootstrap             #{}
    metabase.cmd                   :any
    metabase.config                #{metabase.plugins}
@@ -284,7 +289,12 @@
    metabase.metabot               :any
    metabase.models                :any
    metabase.moderation            :any
-    metabase.native-query-analyzer :any
+    metabase.native-query-analyzer #{metabase.config
+                                     metabase.driver
+                                     metabase.lib
+                                     metabase.public-settings
+                                     metabase.query-processor
+                                     metabase.util}
    metabase.permissions           :any
    metabase.plugins               :any
    metabase.public-settings       :any
@@ -434,10 +444,6 @@
    metabase.driver.druid.js                                      druid.js
    metabase.driver.druid.query-processor                         druid.qp
    metabase.driver.druid.sync                                    druid.sync
-    metabase.driver.googleanalytics.client                        ga.client
-    metabase.driver.googleanalytics.execute                       ga.execute
-    metabase.driver.googleanalytics.metadata                      ga.metadata
-    metabase.driver.googleanalytics.query-processor               ga.qp
    metabase.driver.impl                                          driver.impl
    metabase.driver.mongo.execute                                 mongo.execute
    metabase.driver.mongo.parameters                              mongo.params
@@ -576,6 +582,7 @@
    metabase.util.encryption                                      encryption
    metabase.util.encryption-test                                 encryption-test
    metabase.util.files                                           u.files
+    metabase.util.grouper                                         grouper
    metabase.util.honey-sql-2                                     h2x
    metabase.util.i18n                                            i18n
    metabase.util.i18n.impl                                       i18n.impl
@@ -602,7 +609,9 @@
    toucan.models                                                 models}}}

 :lint-as
- {clojure.core.logic/defne                                                             clj-kondo.lint-as/def-catch-all
+ {cljs.cache/defcache                                                                  clojure.core/deftype
+  clojure.core.cache/defcache                                                          clojure.core/deftype
+  clojure.core.logic/defne                                                             clj-kondo.lint-as/def-catch-all
  clojure.test.check.clojure-test/defspec                                              clojure.test/deftest
  clojurewerkz.quartzite.jobs/defjob                                                   clojure.core/defn
  honeysql.helpers/defhelper                                                           clj-kondo.lint-as/def-catch-all
@@ -654,6 +663,7 @@
  metabase.test/with-temp-empty-app-db                                                 clojure.core/let
  metabase.test/with-temp-file                                                         clojure.core/let
  metabase.test/with-user-in-groups                                                    clojure.core/let
+  metabase.test/with-grouper-batches!                                                  clojure.core/fn
  metabase.upload-test/with-upload-table!                                              clojure.core/let
  metabase.util.files/with-open-path-to-resource                                       clojure.core/let
  metabase.util.malli.defn/defn                                                        schema.core/defn
@@ -693,6 +703,7 @@
   metabase.api.card-test/with-temp-native-card!                                                                             hooks.common/with-two-bindings
   metabase.api.card-test/with-temp-native-card-with-params!                                                                 hooks.common/with-two-bindings
   metabase.api.collection-test/with-french-user-and-personal-collection                                                     hooks.common/with-two-top-level-bindings
+   metabase.api.common.internal-test/with-jetty-server                                                                       hooks.common/with-one-binding
   metabase.api.dashboard-test/with-chain-filter-fixtures                                                                    hooks.common/let-one-with-optional-value
   metabase.api.dashboard-test/with-simple-dashboard-with-tabs                                                               hooks.common/with-one-binding
   metabase.api.card-test/with-card-param-values-fixtures                                                                    hooks.common/let-one-with-optional-value
@@ -785,8 +796,10 @@
   clojurewerkz.quartzite.schedule.simple/schedule                              macros.quartz/simple-schedule
   clojurewerkz.quartzite.triggers/build                                        macros.quartz/build-trigger
   metabase-enterprise.sandbox.test-util/with-gtaps!                            macros.metabase-enterprise.sandbox.test-util/with-gtaps!
+   metabase-enterprise.sandbox.test-util/with-gtaps-for-user!                   macros.metabase-enterprise.sandbox.test-util/with-gtaps!
   metabase-enterprise.serialization.test-util/with-world                       macros.metabase-enterprise.serialization.test-util/with-world
   metabase-enterprise.test/with-gtaps!                                         macros.metabase-enterprise.sandbox.test-util/with-gtaps!
+   metabase-enterprise.test/with-gtaps-for-user!                                macros.metabase-enterprise.sandbox.test-util/with-gtaps!
   metabase-enterprise.advanced-permissions.api.util-test/with-impersonations!  macros.metabase-enterprise.advanced-permissions.api.util-test/with-impersonations!
   metabase.api.card-test/with-ordered-items                                    macros.metabase.api.card-test/with-ordered-items
   metabase.api.collection-test/with-collection-hierarchy                       macros.metabase.api.collection-test/with-collection-hierarchy
@@ -845,7 +858,11 @@
  ;; `metabase.driver.*`, excluding `-test` namespaces.
  ;;
  {:pattern "metabase(?:(?:(?:-enterprise\\.sandbox)?\\.query-processor\\.)|(?:\\.driver\\.)).*(?<!-test)$"
-   :name    qp-and-driver-source-namespaces}]
+   :name    qp-and-driver-source-namespaces}
+
+  ;; driver namespaces
+  {:pattern "metabase\\.driver.*$"
+   :name    driver-namespaces}]

 :config-in-ns
 {test-namespaces
@@ -853,7 +870,9 @@
   {:inline-def                              {:level :off}
    :missing-docstring                       {:level :off}
    :private-call                            {:level :off}
-    :metabase/defsetting-must-specify-export {:level :off}}
+    :metabase/defsetting-must-specify-export {:level :off}
+    :discouraged-var                         {metabase.driver/database-supports? {:level :off}}}
+
   :hooks
   {:analyze-call
    {clojure.core/defmacro hooks.clojure.core/non-thread-safe-form-should-end-with-exclamation
@@ -903,6 +922,11 @@
     toucan.util.test           {:message "Don't use application database inside MLv2 code"}
     toucan2.core               {:message "Don't use application database inside MLv2 code"}}}}

+  driver-namespaces
+  {:linters
+   {:discouraged-var
+    {metabase.driver/database-supports? {:level :off}}}}
+
  qp-and-driver-source-namespaces
  {:linters
   {:discouraged-namespace
--- a/.clj-kondo/hooks/metabase/models/setting.clj
+++ b/.clj-kondo/hooks/metabase/models/setting.clj
@@ -162,7 +162,6 @@
     token-status
     toucan-name
     uncached-setting
-     uploads-table-prefix
     user-visibility
     version
     version-info
--- a/.clj-kondo/hooks/metabase/test/data.clj
+++ b/.clj-kondo/hooks/metabase/test/data.clj
@@ -11,6 +11,10 @@
  []
  (not-empty (set (keys (:clj (hooks/ns-analysis 'metabase.test.data.dataset-definitions))))))

+(defn- local-def?
+  [ns* sexpr]
+  (= ns* (:ns (hooks/resolve {:name sexpr}))))
+
 (defn- dataset-type
  "`dataset` can be one of:

@@ -21,7 +25,7 @@

  We can only determine if an unqualified symbol refers to something in the dataset definitions namespace if there are
  cached results available from [[global-dataset-symbols]]."
-  [dataset]
+  [this-ns dataset]
  (let [sexpr       (hooks/sexpr dataset)
        global-defs (global-dataset-symbols)]
    (cond
@@ -31,20 +35,19 @@
      (namespace sexpr)
      :qualified

-      (empty? global-defs)
-      :unqualified/unknown
-
      (contains? global-defs sexpr)
      :unqualified/from-dataset-defs-namespace

-      ;; either something defined in the current namespace or let-bound in the current scope.
+      (local-def? this-ns sexpr)
+      :unqualified/local-def
+
      :else
-      :unqualified/local-def)))
+      :unqualified/unknown)))

 (defn dataset
-  [{{[_ dataset & body] :children} :node}]
+  [{{[_ dataset & body] :children} :node this-ns :ns}]
  (let [noop (constantly nil)
-        body (case (dataset-type dataset)
+        body (case (dataset-type this-ns dataset)
               ;; non-symbol, qualified symbols, and unqualified symbols from the current namespace/let-bound can all
               ;; get converted from something like
               ;;
--- a/.cljfmt.edn
+++ b/.cljfmt.edn
@@ -1,31 +1,339 @@
-;; https://github.com/weavejester/cljfmt/blob/master/cljfmt/resources/cljfmt/indents/clojure.clj
-{:extra-indents
- {auto-parse                                                       [[:inner 0]]
-  cond->                                                           [[:inner 0]]
-  check                                                            [[:inner 0]]
-  deferred-tru                                                     [[:inner 0]]
-  defprotocol+                                                     [[:block 1] [:inner 1]]
-  potemkin/defprotocol+                                            [[:block 1] [:inner 1]]
-  let-404                                                          [[:block 1]]
-  metabase.legacy-mbql.util/match-one                              [[:inner 0]]
-  merge-with                                                       [[:inner 0]]
-  metabase.test/dataset                                            [[:inner 0]]
-  metabase.test/formatted-rows                                     [[:inner 0]]
-  metabase.test/mbql-query                                         [[:inner 0]]
-  metabase.test/test-drivers                                       [[:inner 0]]
-  metabase.test/with-temporary-setting-values                      [[:block 1]]
-  ;; If we just treat these as functions we can ignore this, despite some files not being consistent
-  ;metabase.models.permissions/set-has-full-permissions-for-set?    [[:inner 0]]
-  ;metabase.models.permissions/set-has-full-permissions?            [[:inner 0]]
-  ;metabase.models.permissions/set-has-partial-permissions?         [[:inner 0]]
-  metabase.models.permissions/set-has-partial-permissions-for-set? [[:inner 0]]
-  publish-event!                                                   [[:block 1]]
-  metabase.query-processor.streaming/streaming-response            [[:inner 0]]
-  metabase.util/prog1                                              [[:inner 0]]
-  metabase.util/select-keys-when                                   [[:inner 0]]
-  ;; This supports a lot of existing formatting, but these are functions so the
-  ;; existing formatting is probably wrong.
-  ;toucan2.core/select                                              [[:inner 0]]
-  ;toucan2.core/update!                                             [[:inner 0]]
-  }
- :sort-ns-references? true}
+;; Cljfmt config. See https://github.com/weavejester/cljfmt#formatting-options
+{:sort-ns-references?
+ true
+
+ :function-arguments-indentation
+ :community
+
+ :parallel?
+ true
+
+ :paths
+ ["src"
+  "test"
+  "enterprise/backend"
+  "bin/build"
+  "modules/drivers"
+  #_"dev"]
+
+ ;; See https://github.com/weavejester/cljfmt/blob/master/cljfmt/resources/cljfmt/indents/clojure.clj for the default
+ ;; definitions
+ ;;
+ ;;    [[:block 0]]
+ ;;             ^ number of special args
+ ;;
+ ;; `:block` indentation means format with all arguments indented 2 spaces except for the 'special' arguments which
+ ;; normally are supposed to go on the first line. e.g. `let` gets [[:block 1]] because it has one 'special' arg.
+ ;;
+ ;;    [[:inner 0]]
+ ;;             ^ depth
+ ;;    [[:inner 2 0]]
+ ;;               ^ argument index to restrict this rule to
+ ;;
+ ;; `:inner` indentation is like `:defn` indentation. `[[:inner 0]]` (default for `defn`) means all arguments at depth
+ ;; zero get indented 2 spaces if not on the first line regardless of number of elements on the first line.
+ :extra-indents
+ {;; clojure.core stuff
+  fn*                                                                                  [[:inner 0]]
+  let*                                                                                 [[:block 1]]
+  with-meta                                                                            [[:default]]
+  ;; library stuff. Libraries that specify their own `:style/indent` specs are included in the section after this
+  ;; since it is generated automatically.
+  clojure.core.logic/fresh                                                             [[:block 1]]
+  clojure.core.logic/matcha                                                            [[:block 1]]
+  clojure.core.logic/run                                                               [[:block 2]]
+  clojure.core.match/match                                                             [[:block 1]]
+  clojure.test.check.properties/for-all                                                [[:block 1]]
+  clojure.test.check.properties/for-all*                                               [[:block 1]]
+  clojure.test.check/quick-check                                                       [[:block 1]]
+  clojure.tools.macro/macrolet                                                         [[:block 1] [:inner 2 0]]
+  clojurewerkz.quartzite.jobs/build                                                    [[:default]]
+  clojurewerkz.quartzite.jobs/with-description                                         [[:default]]
+  clojurewerkz.quartzite.jobs/with-identity                                            [[:default]]
+  clojurewerkz.quartzite.schedule.cron/schedule                                        [[:default]]
+  clojurewerkz.quartzite.schedule.cron/with-misfire-handling-instruction-do-nothing    [[:default]]
+  clojurewerkz.quartzite.triggers/build                                                [[:default]]
+  clojurewerkz.quartzite.triggers/with-description                                     [[:default]]
+  clojurewerkz.quartzite.triggers/with-identity                                        [[:default]]
+  clojurewerkz.quartzite.triggers/with-priority                                        [[:default]]
+  clojurewerkz.quartzite.triggers/with-schedule                                        [[:default]]
+  def-map-type                                                                         [[:block 2] [:inner 1]]
+  defprotocol+                                                                         [[:block 1] [:inner 1]]
+  defrecord+                                                                           [[:block 2] [:inner 1]]
+  deftype+                                                                             [[:block 2] [:inner 1]]
+  net.cgrand.macrovich/case                                                            [[:block 0]]
+  potemkin.namespaces/import-vars                                                      [[:default]]
+  potemkin.types/def-map-type                                                          [[:block 2] [:inner 1]]
+  potemkin.types/defprotocol+                                                          [[:block 1] [:inner 1]]
+  potemkin.types/defrecord+                                                            [[:block 2] [:inner 1]]
+  potemkin.types/deftype+                                                              [[:block 2] [:inner 1]]
+  potemkin/def-map-type                                                                [[:block 2] [:inner 1]]
+  potemkin/defprotocol+                                                                [[:block 1] [:inner 1]]
+  potemkin/defrecord+                                                                  [[:block 2] [:inner 1]]
+  potemkin/deftype+                                                                    [[:block 2] [:inner 1]]
+  potemkin/import-vars                                                                 [[:default]]
+  taoensso.nippy/extend-freeze                                                         [[:inner 0]]
+  taoensso.nippy/extend-thaw                                                           [[:inner 0]]
+  throttle.core/with-throttling                                                        [[:block 1]]
+  ;; the rest of the stuff in this list is generated automatically based on `:style/indent` specs
+  ;; by running [[dev.generate-cljfmt-config/specs]]... use that code to update this list
+  metabase-enterprise.advanced-permissions.api.util-test/with-impersonations!          [[:inner 0]]
+  metabase-enterprise.cache.config-test/with-temp-persist-models                       [[:block 1]]
+  metabase-enterprise.sandbox.test-util/with-gtaps!                                    [[:inner 0]]
+  metabase-enterprise.sandbox.test-util/with-gtaps-for-user!                           [[:inner 0]]
+  metabase-enterprise.sandbox.test-util/with-user-attributes                           [[:block 2]]
+  metabase-enterprise.serialization.test-util/with-dbs                                 [[:inner 0]]
+  metabase-enterprise.serialization.test-util/with-random-dump-dir                     [[:block 1]]
+  metabase-enterprise.serialization.test-util/with-world                               [[:block 0]]
+  metabase-enterprise.sso.integrations.jwt-test/with-users-with-email-deleted          [[:block 1]]
+  metabase-enterprise.test/with-gtaps!                                                 [[:inner 0]]
+  metabase-enterprise.test/with-gtaps-for-user!                                        [[:inner 0]]
+  metabase-enterprise.test/with-user-attributes                                        [[:block 2]]
+  metabase.actions-test/with-actions-test-data-and-actions-permissively-enabled        [[:block 0]]
+  metabase.actions.test-util/with-actions                                              [[:block 1]]
+  metabase.actions.test-util/with-actions-disabled                                     [[:block 0]]
+  metabase.actions.test-util/with-actions-enabled                                      [[:block 0]]
+  metabase.actions.test-util/with-actions-test-data                                    [[:inner 0]]
+  metabase.actions.test-util/with-actions-test-data-and-actions-enabled                [[:block 0]]
+  metabase.actions.test-util/with-actions-test-data-tables                             [[:block 1]]
+  metabase.actions.test-util/with-empty-db                                             [[:inner 0]]
+  metabase.actions.test-util/with-temp-test-data                                       [[:inner 0]]
+  metabase.api.alert-test/with-alert-in-collection                                     [[:block 1]]
+  metabase.api.card-test/with-cards-in-readable-collection                             [[:block 1]]
+  metabase.api.card-test/with-cards-in-writeable-collection                            [[:block 1]]
+  metabase.api.card-test/with-ordered-items                                            [[:inner 0]]
+  metabase.api.card-test/with-temp-native-card!                                        [[:block 1]]
+  metabase.api.card-test/with-temp-native-card-with-params!                            [[:block 1]]
+  metabase.api.collection-test/with-collection-hierarchy                               [[:block 1]]
+  metabase.api.collection-test/with-french-user-and-personal-collection                [[:block 2]]
+  metabase.api.collection-test/with-some-children-of-collection                        [[:block 1]]
+  metabase.api.common/check                                                            [[:default]]
+  metabase.api.common/define-routes                                                    [[:block 0]]
+  metabase.api.common/let-404                                                          [[:block 1]]
+  metabase.api.common.internal/auto-coerce                                             [[:block 1]]
+  metabase.api.common.internal/auto-parse                                              [[:block 1]]
+  metabase.api.common.internal-test/no-route-regexes                                   [[:block 0]]
+  metabase.api.embed-test/do-response-formats                                          [[:block 1]]
+  metabase.api.embed-test/with-embedding-enabled-and-new-secret-key                    [[:block 0]]
+  metabase.api.embed-test/with-embedding-enabled-and-temp-card-referencing             [[:block 3]]
+  metabase.api.embed-test/with-embedding-enabled-and-temp-dashcard-referencing         [[:block 3]]
+  metabase.api.embed-test/with-new-secret-key                                          [[:block 0]]
+  metabase.api.embed-test/with-temp-card                                               [[:block 1]]
+  metabase.api.embed-test/with-temp-dashcard                                           [[:block 1]]
+  metabase.api.preview-embed-test/with-embedding-enabled-and-new-secret-key            [[:block 0]]
+  metabase.api.preview-embed-test/with-new-secret-key                                  [[:block 0]]
+  metabase.api.public-test/with-sharing-enabled-and-temp-card-referencing              [[:block 3]]
+  metabase.api.public-test/with-sharing-enabled-and-temp-dashcard-referencing          [[:block 3]]
+  metabase.api.public-test/with-temp-public-card                                       [[:block 1]]
+  metabase.api.public-test/with-temp-public-dashboard                                  [[:block 1]]
+  metabase.api.public-test/with-temp-public-dashboard-and-card                         [[:block 1]]
+  metabase.api.search-test/do-test-users                                               [[:block 1]]
+  metabase.api.session/http-401-on-error                                               [[:block 0]]
+  metabase.async.streaming-response/streaming-response                                 [[:block 2]]
+  metabase.async.streaming-response-test/with-streaming-response-thread-pool           [[:block 0]]
+  metabase.async.streaming-response-test/with-test-driver-db!                          [[:block 0]]
+  metabase.async.util/cancelable-thread                                                [[:block 0]]
+  metabase.cmd.copy/step                                                               [[:block 1]]
+  metabase.cmd.copy/with-connection-rollback-only                                      [[:block 1]]
+  metabase.cmd.copy/with-disabled-db-constraints                                       [[:block 2]]
+  metabase.config/build-type-case                                                      [[:block 0]]
+  metabase.dashboard-subscription-test/with-link-card-fixture-for-dashboard            [[:block 2]]
+  metabase.db.liquibase/with-liquibase                                                 [[:block 1]]
+  metabase.db.liquibase/with-scope-locked                                              [[:block 1]]
+  metabase.db.schema-migrations-test.impl/test-migrations                              [[:block 2]]
+  metabase.db/with-application-db                                                      [[:inner 0]]
+  metabase.driver.bigquery-cloud-sdk.query-processor/with-temporal-type                [[:default]]
+  metabase.driver.druid.client/DELETE                                                  [[:default]]
+  metabase.driver.druid.client/GET                                                     [[:default]]
+  metabase.driver.druid.client/POST                                                    [[:default]]
+  metabase.driver.druid.query-processor-test/druid-query                               [[:block 0]]
+  metabase.driver.druid.query-processor-test/druid-query-returning-rows                [[:block 0]]
+  metabase.driver.mongo.query-processor/mongo-let                                      [[:block 1]]
+  metabase.driver.sql-jdbc.actions/with-jdbc-transaction                               [[:block 1]]
+  metabase.driver.sql-jdbc.connection/with-connection-spec-for-testing-connection      [[:block 1]]
+  metabase.driver.sql-jdbc.execute.diagnostic/capturing-diagnostic-info                [[:block 1]]
+  metabase.driver.sql.query-processor/apply-top-level-clause                           [[:default]]
+  metabase.driver/with-driver                                                          [[:block 1]]
+  metabase.lib.binning/with-binning                                                    [[:default]]
+  metabase.lib.core/with-binning                                                       [[:default]]
+  metabase.lib.core/with-join-alias                                                    [[:default]]
+  metabase.lib.core/with-join-conditions                                               [[:default]]
+  metabase.lib.join/with-join-alias                                                    [[:default]]
+  metabase.lib.join/with-join-conditions                                               [[:default]]
+  metabase.lib.test-util.macros/$ids                                                   [[:inner 0]]
+  metabase.lib.test-util.macros/mbql-query                                             [[:inner 0]]
+  metabase.lib.util.match/match                                                        [[:inner 0]]
+  metabase.lib.util.match/match-one                                                    [[:inner 0]]
+  metabase.lib.util.match/replace                                                      [[:inner 0]]
+  metabase.lib.util.match/replace-in                                                   [[:inner 0]]
+  metabase.models.collection-test/with-collection-hierarchy                            [[:block 1]]
+  metabase.models.collection-test/with-current-user-perms-for-collections              [[:block 1]]
+  metabase.models.collection-test/with-personal-and-impersonal-collections             [[:block 1]]
+  metabase.models.dashboard-test/with-dash-in-collection                               [[:inner 0]]
+  metabase.models.interface/define-batched-hydration-method                            [[:inner 0]]
+  metabase.models.interface/define-simple-hydration-method                             [[:inner 0]]
+  metabase.models.params.chain-filter-test/with-clean-field-values-for-field           [[:block 1]]
+  metabase.models.params.chain-filter-test/with-fk-field-to-field-remapping            [[:block 0]]
+  metabase.models.params.chain-filter-test/with-human-readable-values-remapping        [[:block 0]]
+  metabase.models.pulse-test/with-dashboard-subscription-in-collection                 [[:block 1]]
+  metabase.models.pulse-test/with-pulse-in-collection                                  [[:inner 0]]
+  metabase.models.setting/defsetting                                                   [[:block 1]]
+  metabase.models.setting.multi-setting/define-multi-setting                           [[:inner 0]]
+  metabase.models.task-history/with-task-history                                       [[:block 1]]
+  metabase.query-processor-test.pipeline-queries-test/pmbql-query                      [[:block 1]]
+  metabase.query-processor-test.pipeline-queries-test/run-pmbql-query                  [[:block 1]]
+  metabase.query-processor.debug/debug>                                                [[:block 0]]
+  metabase.query-processor.error-type/deferror                                         [[:block 1]]
+  metabase.query-processor.middleware.cache-backend.interface/with-cached-results      [[:block 4]]
+  metabase.query-processor.middleware.process-userland-query-test/with-query-execution [[:block 1]]
+  metabase.query-processor.store/cached                                                [[:block 1]]
+  metabase.query-processor.store/with-metadata-provider                                [[:inner 0]]
+  metabase.query-processor.streaming/streaming-response                                [[:block 1]]
+  metabase.query-processor.test-util/format-rows-by                                    [[:default]]
+  metabase.sample-data-test/with-temp-sample-database-db                               [[:block 1]]
+  metabase.server.middleware.session/as-admin                                          [[:block 0]]
+  metabase.server.middleware.session/with-current-user                                 [[:inner 0]]
+  metabase.shared.util.i18n/trs                                                        [[:default]]
+  metabase.shared.util.i18n/trsn                                                       [[:default]]
+  metabase.shared.util.i18n/tru                                                        [[:default]]
+  metabase.shared.util.i18n/trun                                                       [[:default]]
+  metabase.shared.util.namespaces/import-fns                                           [[:default]]
+  metabase.sync.fetch-metadata/log-if-error                                            [[:block 1]]
+  metabase.sync.sync-metadata.fields-test/with-test-db                                 [[:block 0]]
+  metabase.sync.util/do-with-start-and-finish-debug-logging                            [[:default]]
+  metabase.sync.util/sum-for                                                           [[:block 1]]
+  metabase.sync.util/sync-operation                                                    [[:block 3]]
+  metabase.sync.util/with-db-logging-disabled                                          [[:default]]
+  metabase.sync.util/with-duplicate-ops-prevented                                      [[:default]]
+  metabase.sync.util/with-emoji-progress-bar                                           [[:block 1]]
+  metabase.sync.util/with-error-handling                                               [[:block 1]]
+  metabase.sync.util/with-start-and-finish-logging                                     [[:default]]
+  metabase.sync.util/with-start-and-finish-logging*                                    [[:default]]
+  metabase.sync.util/with-sync-events                                                  [[:default]]
+  metabase.test/$ids                                                                   [[:inner 0]]
+  metabase.test/as-admin                                                               [[:inner 0]]
+  metabase.test/dataset                                                                [[:inner 0]]
+  metabase.test/discard-setting-changes                                                [[:block 1]]
+  metabase.test/format-rows-by                                                         [[:default]]
+  metabase.test/let-url                                                                [[:block 1]]
+  metabase.test/mbql-query                                                             [[:inner 0]]
+  metabase.test/native-query                                                           [[:block 0]]
+  metabase.test/query                                                                  [[:block 1]]
+  metabase.test/run-mbql-query                                                         [[:inner 0]]
+  metabase.test/test-driver                                                            [[:inner 0]]
+  metabase.test/test-drivers                                                           [[:inner 0]]
+  metabase.test/test-helpers-set-global-values!                                        [[:block 0]]
+  metabase.test/throw-if-called!                                                       [[:block 1]]
+  metabase.test/with-actions                                                           [[:block 1]]
+  metabase.test/with-actions-disabled                                                  [[:block 0]]
+  metabase.test/with-actions-enabled                                                   [[:block 0]]
+  metabase.test/with-actions-test-data                                                 [[:inner 0]]
+  metabase.test/with-actions-test-data-and-actions-enabled                             [[:block 0]]
+  metabase.test/with-actions-test-data-tables                                          [[:block 1]]
+  metabase.test/with-additional-premium-features                                       [[:block 1]]
+  metabase.test/with-current-user                                                      [[:inner 0]]
+  metabase.test/with-driver                                                            [[:block 1]]
+  metabase.test/with-empty-db                                                          [[:inner 0]]
+  metabase.test/with-empty-h2-app-db                                                   [[:block 0]]
+  metabase.test/with-metadata-provider                                                 [[:inner 0]]
+  metabase.test/with-premium-features                                                  [[:block 1]]
+  metabase.test/with-temp                                                              [[:inner 0]]
+  metabase.test/with-temp-copy-of-db                                                   [[:block 0]]
+  metabase.test/with-temp-scheduler                                                    [[:block 0]]
+  metabase.test/with-temp-test-data                                                    [[:inner 0]]
+  metabase.test/with-temp-vals-in-db                                                   [[:block 3]]
+  metabase.test/with-test-user                                                         [[:inner 0]]
+  metabase.test/with-user-in-groups                                                    [[:inner 0]]
+  metabase.test.data/$ids                                                              [[:inner 0]]
+  metabase.test.data/dataset                                                           [[:inner 0]]
+  metabase.test.data/mbql-query                                                        [[:inner 0]]
+  metabase.test.data/native-query                                                      [[:block 0]]
+  metabase.test.data/query                                                             [[:block 1]]
+  metabase.test.data/run-mbql-query                                                    [[:inner 0]]
+  metabase.test.data/with-empty-h2-app-db                                              [[:block 0]]
+  metabase.test.data/with-temp-copy-of-db                                              [[:block 0]]
+  metabase.test.data.datasets/test-driver                                              [[:inner 0]]
+  metabase.test.data.datasets/test-drivers                                             [[:inner 0]]
+  metabase.test.data.one-off-dbs/with-blank-db                                         [[:block 0]]
+  metabase.test.data.one-off-dbs/with-blueberries-db                                   [[:block 0]]
+  metabase.test.data.users/with-test-user                                              [[:inner 0]]
+  metabase.test.util/discard-setting-changes                                           [[:block 1]]
+  metabase.test.util/let-url                                                           [[:block 1]]
+  metabase.test.util/throw-if-called!                                                  [[:block 1]]
+  metabase.test.util/with-temp-scheduler                                               [[:block 0]]
+  metabase.test.util/with-temp-vals-in-db                                              [[:block 3]]
+  metabase.test.util/with-user-in-groups                                               [[:inner 0]]
+  metabase.test.util.public-settings/with-additional-premium-features                  [[:block 1]]
+  metabase.test.util.public-settings/with-premium-features                             [[:block 1]]
+  metabase.test.util.thread-local/test-helpers-set-global-values!                      [[:block 0]]
+  metabase.timeseries-query-processor-test.util/test-timeseries-drivers                [[:block 0]]
+  metabase.timeseries-query-processor-test/run-mbql-query                              [[:inner 0]]
+  metabase.upload-test/with-upload-table!                                              [[:inner 0]]
+  metabase.upload.types/with-currency                                                  [[:default]]
+  metabase.upload.types/with-parens                                                    [[:default]]
+  metabase.util/auto-retry                                                             [[:block 1]]
+  metabase.util/ignore-exceptions                                                      [[:block 0]]
+  metabase.util/or-with                                                                [[:block 1]]
+  metabase.util/profile                                                                [[:block 1]]
+  metabase.util/prog1                                                                  [[:inner 0]]
+  metabase.util/varargs                                                                [[:inner 0]]
+  metabase.util/with-us-locale                                                         [[:block 0]]
+  metabase.util.date-2/with-time-zone-same-instant                                     [[:default]]
+  metabase.util.encryption-test/with-secret-key                                        [[:block 1]]
+  metabase.util.honey-sql-2/with-database-type-info                                    [[:default]]
+  metabase.util.i18n/deferred-trs                                                      [[:default]]
+  metabase.util.i18n/deferred-tru                                                      [[:default]]
+  metabase.util.i18n/trs                                                               [[:default]]
+  metabase.util.i18n/tru                                                               [[:default]]
+  metabase.util.jvm/auto-retry                                                         [[:block 1]]
+  metabase.util.jvm/varargs                                                            [[:block 1]]
+  metabase.util.jvm/with-us-locale                                                     [[:block 0]]
+  metabase.util.malli/disable-enforcement                                              [[:block 0]]
+  metabase.util.malli/with                                                             [[:default]]
+  metabase.util.malli/with-api-error-message                                           [[:default]]
+  metabuild-common.core/exit-when-finished-nonzero-on-exception                        [[:block 0]]
+  metabuild-common.core/step                                                           [[:block 1]]
+  metabuild-common.entrypoint/exit-when-finished-nonzero-on-exception                  [[:block 0]]
+  metabuild-common.steps/step                                                          [[:block 1]]
+  methodical.core/defmethod                                                            [[:inner 0]]
+  methodical.core/defmulti                                                             [[:inner 0]]
+  methodical.core/with-dispatcher                                                      [[:default]]
+  methodical.core/with-method-table                                                    [[:default]]
+  methodical.core/with-prefers                                                         [[:default]]
+  methodical.interface/with-dispatcher                                                 [[:default]]
+  methodical.interface/with-method-table                                               [[:default]]
+  methodical.interface/with-prefers                                                    [[:default]]
+  methodical.macros/defmethod                                                          [[:inner 0]]
+  methodical.macros/defmulti                                                           [[:inner 0]]
+  saml20-clj.sp.response/validate-confirmation-datas                                   [[:block 1]]
+  toucan2.connection/with-transaction                                                  [[:block 1]]
+  toucan2.core/build                                                                   [[:block 0]]
+  toucan2.core/compile                                                                 [[:block 0]]
+  toucan2.core/debug                                                                   [[:block 0]]
+  toucan2.core/define-after-insert                                                     [[:inner 0]]
+  toucan2.core/define-after-select                                                     [[:inner 0]]
+  toucan2.core/define-after-update                                                     [[:inner 0]]
+  toucan2.core/define-before-delete                                                    [[:inner 0]]
+  toucan2.core/define-before-insert                                                    [[:inner 0]]
+  toucan2.core/define-before-select                                                    [[:inner 0]]
+  toucan2.core/define-default-fields                                                   [[:inner 0]]
+  toucan2.core/define-named-query                                                      [[:block 1]]
+  toucan2.core/deftransforms                                                           [[:block 1]]
+  toucan2.core/with-transaction                                                        [[:block 1]]
+  toucan2.tools.after/define-after-impl                                                [[:default]]
+  toucan2.tools.after-insert/define-after-insert                                       [[:inner 0]]
+  toucan2.tools.after-select/define-after-select                                       [[:inner 0]]
+  toucan2.tools.after-update/define-after-update                                       [[:inner 0]]
+  toucan2.tools.before-delete/define-before-delete                                     [[:inner 0]]
+  toucan2.tools.before-insert/define-before-insert                                     [[:inner 0]]
+  toucan2.tools.before-select/define-before-select                                     [[:inner 0]]
+  toucan2.tools.compile/build                                                          [[:block 0]]
+  toucan2.tools.compile/compile                                                        [[:block 0]]
+  toucan2.tools.compile/resolved                                                       [[:block 0]]
+  toucan2.tools.debug/debug                                                            [[:block 0]]
+  toucan2.tools.default-fields/define-default-fields                                   [[:inner 0]]
+  toucan2.tools.named-query/define-named-query                                         [[:block 1]]
+  toucan2.tools.simple-out-transform/define-out-transform                              [[:inner 0]]
+  toucan2.tools.transformed/deftransforms                                              [[:block 1]]
+  toucan2.tools.with-temp/with-temp                                                    [[:inner 0]]
+  toucan2.util/try-with-error-context                                                  [[:inner 0]]}}
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -62,6 +62,13 @@ module.exports = {
        warnOnUnassignedImports: false,
      },
    ],
+    "sort-imports": [
+      "error",
+      {
+        // allows this rule to work with import/order
+        ignoreDeclarationSort: true,
+      },
+    ],
    "no-console": [2, { allow: ["warn", "error", "errorBuffer"] }],
    "react/no-is-mounted": 2,
    "react/prefer-es6-class": 2,
@@ -81,6 +88,7 @@ module.exports = {
      { additionalHooks: "(useSyncedQueryString|useSafeAsyncFunction)" },
    ],
    "prefer-const": [1, { destructuring: "all" }],
+    "no-restricted-globals": ["error", "close"],
    "no-useless-escape": 0,
    "no-only-tests/no-only-tests": [
      "error",
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -10,5 +10,7 @@ enterprise/backend/src/metabase_enterprise/audit_app @noahmoss
 enterprise/backend/src/metabase_enterprise/sso @noahmoss
 enterprise/backend/src/metabase_enterprise/task/truncate_audit_table.clj @noahmoss
 enterprise/backend/src/metabase_enterprise/internal_user.clj @noahmoss
+frontend/src/metabase/ui @metabase/core-frontend-admin-webapp
 src/metabase/**/*permissions* @noahmoss
 src/metabase/integrations @noahmoss
+snowplow/* @metabase/data
--- a/.github/actions/build-e2e-matrix/action.yml
+++ b/.github/actions/build-e2e-matrix/action.yml
@@ -36,6 +36,7 @@ runs:
            ["dashboard-filters", {} ],
            ["embedding", {} ],
            ["filters", {} ],
+            ["filters-reproductions", {}],
            ["joins", {} ],
            ["models", {} ],
            ["native", {} ],
@@ -44,6 +45,8 @@ runs:
            ["organization", {} ],
            ["permissions", {} ],
            ["question", {} ],
+            ["question-reproductions", {} ],
+            ["search", {}],
            ["sharing", {} ],
            ["visualizations-charts", {} ],
            ["visualizations-tabular", {} ],
--- a/.github/actions/prepare-cypress/action.yml
+++ b/.github/actions/prepare-cypress/action.yml
@@ -1,12 +1,20 @@
 name: Prepare cypress environment
 description: Cypress preparation steps

+outputs:
+  chrome-path:
+    description: Path to the custom Chrome executable
+    value: ${{ steps.setup-chrome.outputs.chrome-path }}
+
 runs:
  using: "composite"
  steps:
-    - name: Install Replay.io browser
-      run: npx @replayio/cypress install
-      shell: bash
+    - name: Install Chrome v111
+      uses: browser-actions/setup-chrome@v1
+      with:
+        # https://chromium.cypress.io/linux/stable/111.0.5563.146
+        chrome-version: 1097615
+      id: setup-chrome

    - name: Check to see if dependencies should be cached
      if: ${{ contains(github.event.head_commit.message, '[ci nocache]') }}
--- a/.github/actions/prepare-frontend/action.yml
+++ b/.github/actions/prepare-frontend/action.yml
@@ -1,10 +1,15 @@
 name: Prepare front-end environment
+inputs:
+  node-version:
+    description: "The version of Node.js to use, overriding .nvmrc"
+    required: false
 runs:
  using: "composite"
  steps:
    - name: Prepare Node.js
      uses: actions/setup-node@v4
      with:
+        node-version: ${{ inputs.node-version }} # this overrides, if present
        node-version-file: ".nvmrc"
    - name: Check to see if dependencies should be cached
      if: ${{ contains(github.event.head_commit.message, '[ci nocache]') }}
@@ -23,6 +28,6 @@ runs:
      if: ${{ !contains(github.event.head_commit.message, '[ci nocache]') }}
      with:
        path: node_modules
-        key: ${{ runner.os }}-node-modules-${{ hashFiles('**/yarn.lock') }}
+        key: ${{ runner.os }}-node-modules-${{ hashFiles('**/yarn.lock', '**/patches/*.patch') }}
    - run: yarn install --frozen-lockfile --prefer-offline
      shell: bash
--- a/.github/actions/test-driver/action.yml
+++ b/.github/actions/test-driver/action.yml
@@ -2,7 +2,7 @@ name: Test database driver
 inputs:
  junit-name:
    required: true
-    default: 'driver'
+    default: "driver"
  test-args:
    required: false

@@ -14,7 +14,7 @@ runs:
    - name: Prepare back-end environment
      uses: ./.github/actions/prepare-backend
      with:
-        m2-cache-key: driver-${{ inputs.junit-name }}
+        m2-cache-key: driver
    - name: Build static viz frontend
      run: yarn build-static-viz
      shell: bash
@@ -25,7 +25,7 @@ runs:
      uses: dorny/test-reporter@v1
      if: failure()
      with:
-        path: 'target/junit/**/*_test.xml'
+        path: "target/junit/**/*_test.xml"
        name: JUnit Test Report ${{ inputs.junit-name }}
        reporter: java-junit
        list-suites: failed
--- a/.github/auto_request_review.yml
+++ b/.github/auto_request_review.yml
@@ -0,0 +1,17 @@
+# The reviewers configuration for the auto_request_review workflow
+# See https://github.com/necojackarc/auto-request-review/tree/master?tab=readme-ov-file#reviewers-configuration
+# for the spec
+
+files:
+  # migrations related files
+  'resources/migrations/**':
+    - team:core-backend-components
+  'src/metabase/db/custom_migrations.clj':
+    - team:core-backend-components
+
+options:
+  ignore_draft: true
+  ignored_keywords:
+    - DO NOT REVIEW
+    - WIP
+  enable_group_assignment: false
--- a/.github/file-paths.yaml
+++ b/.github/file-paths.yaml
@@ -43,6 +43,11 @@ frontend_all: &frontend_all
  - *frontend_sources
  - *frontend_specs

+frontend_loki_ci: &frontend_loki_ci
+  - ".github/workflows/loki.yml"
+  - ".loki/**"
+  - ".storybook/**"
+
 backend_ci: &backend_ci
  - ".github/actions/prepare-frontend/**"
  - ".github/actions/prepare-backend/**"
@@ -53,6 +58,7 @@ backend_ci: &backend_ci
 backend_presto_kerberos:
  - "**/presto_jdbc/**"
  - "**/presto_jdbc.clj"
+  - ".github/workflows/presto-kerberos-integration-test.yml"

 backend_sources: &backend_sources
  - *shared_sources
@@ -71,6 +77,7 @@ backend_specs: &backend_specs
  - "modules/drivers/*/test/**"
  - "test_config/**"
  - "dev/**"
+  - "test_resources/**"

 backend_all: &backend_all
  - *default
--- a/.github/team.json
+++ b/.github/team.json
@@ -14,6 +14,7 @@
    {
      "name": "Embedding",
      "label": ".Team/Embedding",
+      "projectUrl": "https://github.com/orgs/metabase/projects/88/views/1",
      "members": ["WiNloSt", "deniskaber", "oisincoveney", "npretto", "heypoom"]
    },
    {
--- a/.github/workflows/auto-backport.yml
+++ b/.github/workflows/auto-backport.yml
@@ -11,11 +11,7 @@ jobs:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
-      - uses: tibdex/github-app-token@v2.1.0
-        id: generate-token
-        with:
-          app_id: ${{ secrets.METABASE_BOT_APP_ID }}
-          private_key: ${{ secrets.METABASE_BOT_APP_PRIVATE_KEY }}
+          token: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
      - uses: ./.github/actions/find-squashed-commit
        name: Find commit
        id: find_commit
@@ -82,7 +78,7 @@ jobs:
          TARGET_BRANCH: ${{ steps.get_latest_release_branch.outputs.branch-name }}
          ORIGINAL_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
          ORIGINAL_TITLE: ${{ github.event.pull_request.title }}
-          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
          COMMIT: ${{ steps.find_commit.outputs.commit }}

      - name: Auto approve backport PR
@@ -96,7 +92,7 @@ jobs:
        if: ${{ steps.create_backport_pull_request.outputs.has-conflicts == 'false' }}
        uses: peter-evans/enable-pull-request-automerge@v2
        with:
-          token: ${{ steps.generate-token.outputs.token }}
+          token: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
          pull-request-number: ${{ steps.create_backport_pull_request.outputs.backport_pr_number }}
          merge-method: squash

--- a/.github/workflows/auto-request-review.yml
+++ b/.github/workflows/auto-request-review.yml
@@ -0,0 +1,21 @@
+# Config is in .github/auto_request_review.yml
+name: Auto Request Review
+
+on:
+  pull_request:
+    types: [opened, ready_for_review, reopened, synchronize]
+
+jobs:
+  auto-request-review:
+    # Don't run on forked repos
+    if: ${{ !github.event.pull_request.head.repo.fork }}
+    permissions:
+      contents: read
+      pull-requests: write
+    name: Auto Request Review
+    runs-on: ubuntu-latest
+    steps:
+      - name: Request review based on files changes and/or groups the author belongs to
+        uses: necojackarc/auto-request-review@v0.13.0
+        with:
+          token: '${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}'
--- a/.github/workflows/check-milestone.yml
+++ b/.github/workflows/check-milestone.yml
@@ -1,80 +1,41 @@
-name: Milestone Reminder
+name: Automatically set milestone
+run-name: Set milestone for ${{ github.event.head_commit.message }}

 on:
-  pull_request:
-    types: [closed]
+  push:
    branches:
-      - "master"
+      - release-x.**

 jobs:
-  milestone-reminder:
-    if: github.event.pull_request.merged == true
-    name: Remind to set milestone
+  set-milestone:
+    name: Automatically set milestone
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    permissions:
      pull-requests: write
-      issues: read
+      issues: write
+      contents: read
    steps:
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: release
+          ref: master # we want the logic from master, even though we're triggering on a release branch
+      - name: Prepare build scripts
+        run: cd ${{ github.workspace }}/release && yarn && yarn build
      - uses: actions/github-script@v7
        with:
          script: | # js
+            const { setMilestoneForCommits } = require('${{ github.workspace }}/release/dist/index.cjs');
            const owner = context.repo.owner;
            const repo = context.repo.repo;

-            const pullNumber = '${{ github.event.pull_request.number }}';
+            const branchName = `${{ github.ref }}`;
+            const commitMessage = context?.payload?.head_commit?.message ?? '';

-            // the github API doesn't expose linked issues, so we have to parse the body ourselves
-            function getLinkedIssueId(pull) {
-              // https://regexr.com/7sk94
-              const match = pull.data.body.match(/(close(s|d)?|fixe?(s|d)?|resolve(s|d)?) (#|https?:\/\/github.com\/.+\/issues\/)(\d+)/i);
-              return match && match?.[2];
-            }
-
-            function getMilestone(pullOrIssue) {
-              // pull has pull.data.milestone, issue has issue.milestone
-              return pullOrIssue?.data?.milestone || pullOrIssue?.milestone;
-            }
-
-            const pull = await github.rest.pulls.get({
+            await setMilestoneForCommits({
+              github,
              owner,
              repo,
-              pull_number: pullNumber,
-            });
-
-            if (getMilestone(pull)) {
-              console.log("Pull request has milestone", pull.data.milestone?.title);
-              process.exit(0);
-            }
-
-            const issueId = getLinkedIssueId(pull);
-
-            if (issueId) {
-              console.log('linked issue found', issueId);
-
-              const issue = await github.rest.issues.get({
-                owner,
-                repo,
-                issue_number: issueId,
-              });
-
-              const milestone = getMilestone(issue);
-
-              if (milestone) {
-                console.log("Linked issue has milestone", milestone.title);
-                process.exit(0);
-              }
-            }
-
-            console.log("No milestone found");
-
-            const author = pull.data.user.login;
-            const guideLink = "https://www.notion.so/metabase/Metabase-Branching-Strategy-6eb577d5f61142aa960a626d6bbdfeb3?pvs=4#3dea255ffa3b4f74942a227844e889fa";
-            const message = `@${author} Did you forget to add a milestone to the issue for this PR? _[When and where should I add a milestone?](${guideLink})_`;
-
-            await github.rest.issues.createComment({
-              owner,
-              repo,
-              issue_number: pullNumber,
-              body: message,
+              branchName,
+              commitMessages: [commitMessage],
            });
--- a/.github/workflows/conventional-commit-pr-title-reminder.yml
+++ b/.github/workflows/conventional-commit-pr-title-reminder.yml
@@ -0,0 +1,57 @@
+name: Conventional commit PR Title Reminder
+
+on:
+  pull_request:
+    branches:
+      - master
+    paths:
+      - enterprise/frontend/src/embedding-sdk/**
+
+jobs:
+  pr-title-reminder:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 5
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Check if the PR title is already following Conventional Commits style
+        uses: actions/github-script@v7
+        id: is-conventional-commit
+        with:
+          result-encoding: string
+          script: | # js
+            const pullRequestTitle = context.payload.pull_request.title
+            const conventionalCommitRegex = /^(?<type>\w+)\((?<scope>\w+)\):/
+            const match = pullRequestTitle.match(conventionalCommitRegex)
+            if (match) {
+              const { type, scope } = match.groups
+              return ['feat', 'fix', 'perf', 'docs', 'style', 'refactor', 'test', 'build', 'ci'].includes(type) && scope === 'sdk'
+            }
+
+      - name: Checkout repository so `gh` CLI works
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+
+      - name: Remind PR authors to use conventional commit in the title
+        if: ${{ steps.is-conventional-commit.outputs.result != 'true' }}
+        run: |
+          comment='@${{ github.event.pull_request.user.login }} You have modified embedding SDK code. Please make sure the PR title follows [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) style.
+
+          Here are all the supported types that will be shown in the changelog:
+          - `feat`
+          - `fix`
+          - `perf`
+
+          These types `docs`, `style`, `refactor`, `test`, `build`, and `ci` are also encouraged for non-changelog related tasks.
+
+          Please also make sure to include `sdk` scope, otherwise, the changelog will not include this task.
+
+          For example, these are valid PR titles:
+          - `feat(sdk): Add interactive dashboard component`
+          - `feat(sdk): Support theming pie chart`
+          - `fix(sdk): Fix static dashboard crash`'
+
+          gh pr comment -b "$comment" --edit-last || gh pr comment -b "$comment"
+        env:
+          GH_TOKEN: ${{ github.token }}
--- a/.github/workflows/drivers-stress-test.yml
+++ b/.github/workflows/drivers-stress-test.yml
@@ -21,7 +21,6 @@ on:
          - Athena
          - BigQuery
          - Druid
-          - Google Analytics
          - Google Classpath Test
          - Maria DB
          - Maria DB (latest)
@@ -109,42 +108,6 @@ jobs:
        junit-name: 'be-tests-druid-ee'
        test-args: ":only ${{ inputs.test }} :times ${{ inputs.times }}"

-  be-tests-googleanalytics-ee:
-    if: inputs.driver == 'Google Analytics'
-    runs-on: ubuntu-22.04
-    timeout-minutes: 90
-    env:
-      CI: 'true'
-      DRIVERS: googleanalytics
-    steps:
-    - uses: actions/checkout@v4
-    - name: Test Google Analytics driver
-      uses: ./.github/actions/test-driver
-      with:
-        junit-name: 'be-tests-googleanalytics-ee'
-        test-args: ":only ${{ inputs.test }} :times ${{ inputs.times }}"
-
-  be-google-related-drivers-classpath-test:
-    if: inputs.driver == 'Google Classpath Test'
-    runs-on: ubuntu-22.04
-    timeout-minutes: 90
-    env:
-      CI: 'true'
-      DRIVERS: 'googleanalytics,bigquery-cloud-sdk'
-      MB_BIGQUERY_TEST_PROJECT_ID: ${{ secrets.BIGQUERY_TEST_PROJECT_ID }}
-      MB_BIGQUERY_TEST_CLIENT_ID: ${{ secrets.MB_BIGQUERY_TEST_CLIENT_ID }}
-      MB_BIGQUERY_TEST_CLIENT_SECRET: ${{ secrets.MB_BIGQUERY_TEST_CLIENT_SECRET }}
-      MB_BIGQUERY_TEST_ACCESS_TOKEN: ${{ secrets.MB_BIGQUERY_TEST_ACCESS_TOKEN }}
-      MB_BIGQUERY_TEST_REFRESH_TOKEN: ${{ secrets.MB_BIGQUERY_TEST_REFRESH_TOKEN }}
-      MB_BIGQUERY_CLOUD_SDK_TEST_SERVICE_ACCOUNT_JSON: ${{ secrets.MB_BIGQUERY_CLOUD_SDK_TEST_SERVICE_ACCOUNT_JSON }}
-    steps:
-    - uses: actions/checkout@v4
-    - name: Test Google Related Drivers Classpath
-      uses: ./.github/actions/test-driver
-      with:
-        junit-name: 'be-google-related-drivers-classpath-test'
-        test-args: ':only "[metabase.query-processor-test.expressions-test metabase.driver.google-test metabase.driver.googleanalytics-test ${{ inputs.test }}] :times ${{ inputs.times }}"'
-
  be-tests-mariadb-10-2-ee:
    if: inputs.driver == 'Maria DB'
    runs-on: ubuntu-22.04
--- a/.github/workflows/drivers.yml
+++ b/.github/workflows/drivers.yml
@@ -40,6 +40,9 @@ jobs:
      MB_ATHENA_TEST_ACCESS_KEY: ${{ secrets.MB_ATHENA_TEST_ACCESS_KEY }}
      MB_ATHENA_TEST_SECRET_KEY: ${{ secrets.MB_ATHENA_TEST_SECRET_KEY }}
      MB_ATHENA_TEST_S3_STAGING_DIR: ${{ secrets.MB_ATHENA_TEST_S3_STAGING_DIR }}
+      # These credentials are used to test the driver when the user does not have the athena:GetTableMetadata permission
+      MB_ATHENA_TEST_WITHOUT_GET_TABLE_METADATA_ACCESS_KEY: ${{ secrets.MB_ATHENA_TEST_WITHOUT_GET_TABLE_METADATA_ACCESS_KEY }}
+      MB_ATHENA_TEST_WITHOUT_GET_TABLE_METADATA_SECRET_KEY: ${{ secrets.MB_ATHENA_TEST_WITHOUT_GET_TABLE_METADATA_SECRET_KEY }}
    steps:
    - uses: actions/checkout@v4
    - name: Test Athena driver
@@ -160,66 +163,6 @@ jobs:
        aws-region: ${{ vars.AWS_REGION }}
        trunk-api-token: ${{ secrets.TRUNK_API_TOKEN }}

-  be-tests-googleanalytics-ee:
-    needs: files-changed
-    if: github.event.pull_request.draft == false && needs.files-changed.outputs.backend_all == 'true'
-    runs-on: ubuntu-22.04
-    timeout-minutes: 90
-    env:
-      CI: 'true'
-      DRIVERS: googleanalytics
-    steps:
-    - uses: actions/checkout@v4
-    - name: Test Google Analytics driver
-      uses: ./.github/actions/test-driver
-      with:
-        junit-name: 'be-tests-googleanalytics-ee'
-        test-args: ":exclude-tags '[:mb/once]'"
-    - name: Upload Test Results
-      uses: ./.github/actions/upload-test-results
-      if: always()
-      with:
-        input-path: ./target/junit/
-        output-name: ${{ github.job }}
-        bucket: ${{ vars.AWS_S3_TEST_RESULTS_BUCKET }}
-        aws-access-key-id: ${{ secrets.AWS_TEST_RESULTS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_TEST_RESULTS_SECRET_ACCESS_KEY }}
-        aws-region: ${{ vars.AWS_REGION }}
-        trunk-api-token: ${{ secrets.TRUNK_API_TOKEN }}
-
-  be-google-related-drivers-classpath-test:
-    needs: files-changed
-    if: github.event.pull_request.draft == false && needs.files-changed.outputs.backend_all == 'true'
-    runs-on: ubuntu-22.04
-    timeout-minutes: 90
-    env:
-      CI: 'true'
-      DRIVERS: 'googleanalytics,bigquery-cloud-sdk'
-      MB_BIGQUERY_TEST_PROJECT_ID: ${{ secrets.BIGQUERY_TEST_PROJECT_ID }}
-      MB_BIGQUERY_TEST_CLIENT_ID: ${{ secrets.MB_BIGQUERY_TEST_CLIENT_ID }}
-      MB_BIGQUERY_TEST_CLIENT_SECRET: ${{ secrets.MB_BIGQUERY_TEST_CLIENT_SECRET }}
-      MB_BIGQUERY_TEST_ACCESS_TOKEN: ${{ secrets.MB_BIGQUERY_TEST_ACCESS_TOKEN }}
-      MB_BIGQUERY_TEST_REFRESH_TOKEN: ${{ secrets.MB_BIGQUERY_TEST_REFRESH_TOKEN }}
-      MB_BIGQUERY_CLOUD_SDK_TEST_SERVICE_ACCOUNT_JSON: ${{ secrets.MB_BIGQUERY_CLOUD_SDK_TEST_SERVICE_ACCOUNT_JSON }}
-    steps:
-    - uses: actions/checkout@v4
-    - name: Test Google Related Drivers Classpath
-      uses: ./.github/actions/test-driver
-      with:
-        junit-name: 'be-google-related-drivers-classpath-test'
-        test-args: ':only "[metabase.query-processor-test.expressions-test metabase.driver.google-test metabase.driver.googleanalytics-test]"'
-    - name: Upload Test Results
-      uses: ./.github/actions/upload-test-results
-      if: always()
-      with:
-        input-path: ./target/junit/
-        output-name: ${{ github.job }}
-        bucket: ${{ vars.AWS_S3_TEST_RESULTS_BUCKET }}
-        aws-access-key-id: ${{ secrets.AWS_TEST_RESULTS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_TEST_RESULTS_SECRET_ACCESS_KEY }}
-        aws-region: ${{ vars.AWS_REGION }}
-        trunk-api-token: ${{ secrets.TRUNK_API_TOKEN }}
-
  be-tests-mariadb-10-2-ee:
    needs: files-changed
    if: github.event.pull_request.draft == false && needs.files-changed.outputs.backend_all == 'true'
@@ -866,6 +809,11 @@ jobs:
      MB_SNOWFLAKE_TEST_WAREHOUSE: ${{ secrets.MB_SNOWFLAKE_TEST_WAREHOUSE }}
      MB_SNOWFLAKE_TEST_PK_USER: METABASE PK
      MB_SNOWFLAKE_TEST_PK_PRIVATE_KEY: ${{ secrets.MB_SNOWFLAKE_TEST_PK_PRIVATE_KEY }}
+      # RSA Role testing:
+      MB_SNOWFLAKE_TEST_RSA_ROLE_TEST_DEFAULT_USER: RSA_ROLE_TEST_DEFAULT_USER
+      MB_SNOWFLAKE_TEST_RSA_ROLE_TEST_CUSTOM_USER: RSA_ROLE_TEST_CUSTOM_USER
+      MB_SNOWFLAKE_TEST_RSA_ROLE_TEST_ROLE: RSA_ROLE_TEST_ROLE
+      MB_SNOWFLAKE_TEST_RSA_ROLE_TEST_DB: RSA_ROLE_TEST_DB
    steps:
    - uses: actions/checkout@v4
    - name: Test Snowflake driver
@@ -947,7 +895,7 @@ jobs:
  be-tests-sqlserver-2017-ee:
    needs: files-changed
    if: github.event.pull_request.draft == false && needs.files-changed.outputs.backend_all == 'true'
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-20.04
    timeout-minutes: 90
    env:
      CI: 'true'
--- a/.github/workflows/e2e-cross-version.yml
+++ b/.github/workflows/e2e-cross-version.yml
@@ -52,11 +52,12 @@ jobs:
    - name: Wait for Metabase to start on port 3000
      run: while ! curl -s 'http://localhost:3000/api/health' | grep '{"status":"ok"}'; do sleep 1; done
    - name: Prepare Cypress environment
+      id: cypress-prep
      uses: ./.github/actions/prepare-cypress
    - name: Run Cypress on the source
      run: |
        yarn cypress run \
-          --browser chrome \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }} \
          --config-file e2e/test/scenarios/cross-version/source/shared/cross-version-source.config.js \
          --spec e2e/test/scenarios/cross-version/source/**/*.cy.spec.js
    - name: Stop Metabase ${{ matrix.version.source }}
@@ -84,7 +85,7 @@ jobs:
    - name: Run Cypress on the target
      run: |
        yarn cypress run \
-          --browser chrome \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }} \
          --config-file e2e/test/scenarios/cross-version/target/shared/cross-version-target.config.js \
          --spec e2e/test/scenarios/cross-version/target/**/*.cy.spec.js
    - name: Upload Cypress Artifacts upon failure
--- a/.github/workflows/e2e-stress-test-flake-fix.yml
+++ b/.github/workflows/e2e-stress-test-flake-fix.yml
@@ -46,7 +46,6 @@ jobs:
      DISPLAY: ""
      QA_DB_ENABLED: true
      CYPRESS_QA_DB_MONGO: true
-      CYPRESS_REPLAYIO_ENABLED: 1
      CYPRESS_ALL_FEATURES_TOKEN: ${{ secrets.ENTERPRISE_TOKEN }}
      CYPRESS_NO_FEATURES_TOKEN: ${{ secrets.E2E_STARTER_TOKEN }}
      MB_SNOWPLOW_AVAILABLE: true
@@ -84,6 +83,7 @@ jobs:
          java-version: 11
          distribution: "temurin"
      - name: Prepare Cypress environment
+        id: cypress-prep
        uses: ./.github/actions/prepare-cypress
      - name: Run Snowplow micro
        uses: ./.github/actions/run-snowplow-micro
@@ -96,7 +96,7 @@ jobs:
          --spec '${{ github.event.inputs.spec }}' \
          --env burn=${{ github.event.inputs.burn_in }},grep='${{ github.event.inputs.grep }}' \
          --config-file e2e/support/cypress-stress-test.config.js \
-          --browser 'replay-chromium'
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Upload Cypress Artifacts upon failure
        uses: actions/upload-artifact@v4
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -39,8 +39,39 @@ jobs:
        id: e2e-matrix
        uses: ./.github/actions/build-e2e-matrix

+  # if this is a test on a release branch, we need to check the build requirements
+  get-build-requirements:
+    if: |
+      !cancelled() &&
+      contains(github.ref, 'release-x')
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    outputs:
+      java_version: ${{ fromJson(steps.dependencies.outputs.result).java_version }}
+      node_version: ${{ fromJson(steps.dependencies.outputs.result).node_version }}
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        sparse-checkout: release
+    - name: Prepare build scripts
+      run: cd ${{ github.workspace }}/release && yarn && yarn build
+    - name: Get build dependencies
+      uses: actions/github-script@v7
+      id: dependencies
+      with:
+        script: | # js
+          const { getBuildRequirements, getVersionFromReleaseBranch } = require('${{ github.workspace }}/release/dist/index.cjs');
+
+          const version = getVersionFromReleaseBranch('${{ github.ref }}');
+          const requirements = getBuildRequirements(version);
+
+          return {
+            java_version: requirements.java,
+            node_version: requirements.node,
+          };
+
  build:
-    needs: [files-changed, e2e-matrix-builder]
+    needs: [files-changed, e2e-matrix-builder, get-build-requirements]
    if: |
      !cancelled() &&
      github.event.pull_request.draft == false &&
@@ -54,14 +85,19 @@ jobs:
    env:
      MB_EDITION: ${{ matrix.edition }}
      INTERACTIVE: false
+      # make sure that builds on release branches get licenses, because we use them for releases
+      SKIP_LICENSES: ${{ github.event_name == 'pull_request' }}
    steps:
      - uses: actions/checkout@v4
      - name: Prepare front-end environment
        uses: ./.github/actions/prepare-frontend
+        with:
+          node-version: '${{ needs.get-build-requirements.outputs.node_version }}'
      - name: Prepare back-end environment
        uses: ./.github/actions/prepare-backend
        with:
          m2-cache-key: e2e-tests
+          java-version: '${{ needs.get-build-requirements.outputs.java_version || 11 }}'

      - name: Build uberjar with ./bin/build.sh
        run: ./bin/build.sh
@@ -90,11 +126,6 @@ jobs:
      COMMIT_INFO_MESSAGE: ${{ github.event.pull_request.title || github.event.head_commit.message || github.even.head.sha }}
      MB_SNOWPLOW_AVAILABLE: true
      MB_SNOWPLOW_URL: "http://localhost:9090" # Snowplow micro
-      CYPRESS_REPLAYIO_ENABLED: 1
-      CYPRESS_REPLAYIO_ENABLE_UPLOAD: 1
-      RECORD_REPLAY_METADATA_FILE: /tmp/replay-metadata.json
-      RECORD_REPLAY_METADATA_TEST_RUN_ID: ${{ github.run_id }}
-      REPLAY_API_KEY: ${{ secrets.REPLAY_IO_TOKEN }}
      TZ: US/Pacific # to make node match the instance tz
    strategy:
      fail-fast: false
@@ -134,6 +165,7 @@ jobs:
          distribution: "temurin"

      - name: Prepare Cypress environment
+        id: cypress-prep
        uses: ./.github/actions/prepare-cypress

      - name: Run Snowplow micro
@@ -144,24 +176,24 @@ jobs:
        run: |
          yarn run test-cypress-run \
          --env grepTags=@OSS,grepOmitFiltered=true \
-          --spec './e2e/test/scenarios/**/*.cy.spec.js' \
-          --browser 'replay-chromium'
+          --spec './e2e/test/scenarios/**/*.cy.spec.(js|ts)' \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Run slow and resource-intensive Cypress tests
        if: matrix.name == 'slow' && github.event_name != 'schedule'
        run: |
          yarn run test-cypress-run \
          --env grepTags="@slow",grepOmitFiltered=true \
-          --spec './e2e/test/scenarios/**/*.cy.spec.js' \
-          --browser 'replay-chromium'
+          --spec './e2e/test/scenarios/**/*.cy.spec.(js|ts)' \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Run Flaky Cypress tests
        if: matrix.name == 'flaky' && github.event_name != 'schedule'
        run: |
          yarn run test-cypress-run \
          --env grepTags="@flaky --@quarantine",grepOmitFiltered=true \
-          --spec './e2e/test/scenarios/**/*.cy.spec.js' \
-          --browser 'replay-chromium'
+          --spec './e2e/test/scenarios/**/*.cy.spec.(js|ts)' \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Run EE Cypress tests on ${{ matrix.name }}
        if: matrix.context == 'folder' && github.event_name != 'schedule'
@@ -169,15 +201,15 @@ jobs:
          yarn run test-cypress-run \
          --env grepTags="-@slow+-@mongo+-@flaky --@quarantine",grepOmitFiltered=true \
          --folder ${{ matrix.name }} \
-          --browser 'replay-chromium'
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Run E2E tests that depend on Mongo
        if: matrix.name == 'mongo'
        run: |
          yarn run test-cypress-run \
          --env grepTags="@mongo --@quarantine",grepOmitFiltered=true \
-          --spec './e2e/test/scenarios/**/*.cy.spec.js' \
-          --browser 'replay-chromium'
+          --spec './e2e/test/scenarios/**/*.cy.spec.(js|ts)' \
+          --browser ${{ steps.cypress-prep.outputs.chrome-path }}
        env:
          CYPRESS_QA_DB_MONGO: true

--- a/.github/workflows/frontend-unit-test-stress-test-flake-fix.yml
+++ b/.github/workflows/frontend-unit-test-stress-test-flake-fix.yml
@@ -4,15 +4,15 @@ on:
  workflow_dispatch:
    inputs:
      spec:
-        description: 'Relative path of the target spec'
+        description: "Relative path of the target spec"
        type: string
        required: true
      burn_in:
-        description: 'Number of times to run the test (e.g. 20)'
+        description: "Number of times to run the test (e.g. 20)"
        type: string
        required: true
      grep:
-        description: 'Grep and filter tests to run in isolation'
+        description: "Grep and filter tests to run in isolation"
        type: string
        required: false

@@ -45,10 +45,12 @@ jobs:
        uses: ./.github/actions/prepare-backend
        with:
          m2-cache-key: "cljs"
+      - name: Build cljs
+        run: yarn build:cljs
      - name: Stress-test ${{ github.event.inputs.spec }} ${{ github.event.inputs.burn_in }} times
        run: |
          for i in {1..${{ github.event.inputs.burn_in }}}; do
-            yarn test-unit \
+            yarn jest --runInBand --ci --silent --no-cache \
              --testPathPattern '${{ github.event.inputs.spec }}' \
              --testNamePattern '${{ github.event.inputs.grep }}'
            if [[ "$?" != 0 ]]; then
--- a/.github/workflows/loki-update.yml
+++ b/.github/workflows/loki-update.yml
@@ -12,6 +12,7 @@ jobs:
      - name: Checkout Repository
        uses: actions/checkout@v3
        with:
+          token: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
          ref: ${{ github.head_ref }}

      - name: Prepare frontend environment
@@ -26,7 +27,9 @@ jobs:
        run: yarn build-pure:cljs

      - name: Build Storybook
-        run: yarn build-storybook
+        # We won't be able to use Storybook play's `userEvent` with production build
+        # see https://github.com/storybookjs/storybook/issues/19758
+        run: NODE_ENV=development yarn build-storybook

      - name: Serve Storybook
        run: yarn http-server storybook-static -p 6006 &
@@ -44,25 +47,19 @@ jobs:
      - name: Update Loki Snapshots
        run: yarn test-visual:loki-update

-      - uses: tibdex/github-app-token@v2.1.0
-        id: generate-token
-        with:
-          app_id: ${{ secrets.METABASE_BOT_APP_ID }}
-          private_key: ${{ secrets.METABASE_BOT_APP_PRIVATE_KEY }}
-
      - name: Commit and Push Changes
        run: |
-          git config --global user.name "Metabase bot"
-          git config --global user.email "metabase-bot@metabase.com"
+          git config --global user.name "Metabase Automation"
+          git config --global user.email "github-automation@metabase.com"
          git add .loki/**
          git commit -m "Update Loki Snapshots"
          git push
        env:
-          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
      - name: Remove 'loki-update' label
        uses: actions/github-script@v3
        with:
-          github-token: ${{secrets.GITHUB_TOKEN}}
+          github-token: ${{secrets.METABASE_AUTOMATION_USER_TOKEN}}
          script: |
            github.issues.removeLabel({
              issue_number: context.issue.number,
--- a/.github/workflows/loki.yml
+++ b/.github/workflows/loki.yml
@@ -3,7 +3,26 @@ name: Loki Visual Regression Testing
 on: [pull_request]

 jobs:
+  files-changed:
+    name: Check which files changed
+    runs-on: ubuntu-22.04
+    timeout-minutes: 3
+    outputs:
+      frontend_ci: ${{ steps.changes.outputs.frontend_ci }}
+      frontend_sources: ${{ steps.changes.outputs.frontend_sources }}
+      frontend_loki_ci: ${{ steps.changes.outputs.frontend_loki_ci }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Test which files changed
+        uses: dorny/paths-filter@v3.0.0
+        id: changes
+        with:
+          token: ${{ github.token }}
+          filters: .github/file-paths.yaml
+
  visual-test:
+    needs: files-changed
+    if: needs.files-changed.outputs.frontend_ci == 'true' || needs.files-changed.outputs.frontend_sources == 'true' || needs.files-changed.outputs.frontend_loki_ci == 'true'
    runs-on: ubuntu-latest
    services:
      docker:
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -110,7 +110,7 @@ jobs:
  run-sanity-check:
    runs-on: ubuntu-22.04
    timeout-minutes: 30
-    needs: [release-artifact, check-uberjar-health]
+    needs: [release-artifact]
    strategy:
      matrix:
        edition: [oss, ee]
@@ -147,6 +147,7 @@ jobs:
          java-version: 11
          distribution: "temurin"
      - name: Prepare Cypress environment
+        id: cypress-prep
        uses: ./.github/actions/prepare-cypress
      - name: Run Snowplow micro
        uses: ./.github/actions/run-snowplow-micro
@@ -161,7 +162,10 @@ jobs:
      - name: Run a few important Cypress tests as sanity check
        run: |
          mkdir -p ./target/uberjar && cp metabase.jar ./target/uberjar/metabase.jar
-          yarn test-cypress-run --folder onboarding
+          yarn test-cypress-run \
+            --env grepTags="@smoke",grepOmitFiltered=true \
+            --spec './e2e/test/scenarios/**/*.cy.spec.(js|ts)' \
+            --browser ${{ steps.cypress-prep.outputs.chrome-path }}

      - name: Upload Cypress Artifacts upon failure
        uses: actions/upload-artifact@v4
@@ -174,7 +178,7 @@ jobs:
          if-no-files-found: ignore

  containerize:
-    needs: [release-artifact, run-sanity-check]
+    needs: [release-artifact]
    runs-on: ubuntu-22.04
    timeout-minutes: 15
    strategy:
--- a/.github/workflows/presto-kerberos-integration-test.yml
+++ b/.github/workflows/presto-kerberos-integration-test.yml
@@ -1,3 +1,8 @@
+# this file uses MBA https://github.com/metabase/mba to spin up a Metabase
+# instance then runs the test script in the MBA instance sharing the same
+# network to interact with presto container
+# TODO: get rid of MBA and use actions/prepare-backend instead
+
 name: Kerberized Presto Integration Test

 on:
@@ -5,10 +10,10 @@ on:
  push:
    branches:
      - master
-      - 'release**'
-      - 'feature**'
+      - "release**"
+      - "feature**"
    tags:
-      - '**'
+      - "**"

 jobs:
  files-changed:
@@ -52,7 +57,7 @@ jobs:
          token: ${{ secrets.GITHUB_TOKEN }}
          path: presto-kerberos-docker
      - name: Bring up Presto+Kerberos cluster
-        run: cd presto-kerberos-docker && docker-compose up -d && cd ..
+        run: cd presto-kerberos-docker && docker compose up -d && cd ..
      - name: Run Presto test query from command line (sanity check)
        run: cd presto-kerberos-docker && ./test.sh && cd ..
      # Since we are managing the Docker containers from the GitHub action container, we need to copy all the
@@ -63,6 +68,7 @@ jobs:
        run: docker cp presto-kerberos:/etc/krb5.conf resources
      - name: Copy client.keytab file to resources
        run: docker cp presto-kerberos:/home/presto/client.keytab resources
+
      - name: Checkout mba
        uses: actions/checkout@v4
        with:
@@ -74,11 +80,30 @@ jobs:
        run: ls -latr mba-src
      - name: Symlink mba
        run: cd mba-src && sudo ln -s $(pwd)/src/main.clj /usr/local/bin/mba && chmod +x /usr/local/bin/mba && cd ..
+
      - name: Ensure mba
        run: which mba
+
      - name: Run Metabase via MBA
-        run: /home/runner/work/metabase/metabase/mba-src/src/main.clj --mb . --data-db postgres-data -n example.com up
+        run: mba --mb . --data-db postgres-data -n example.com compose config > mba-compose.yml
+
+      - name: Adjust generated docker-compose config
+        uses: actions/github-script@v7
+        with:
+          script: | #js
+            const fs = require("fs");
+            const config = fs.readFileSync("mba-compose.yml", "utf8");
+            const newConfig = config.replace(
+              /name:\s+example.com/,
+              "name: example.com\n    external: true",
+            );
+            fs.writeFileSync("mba-compose.yml", newConfig);
+
+      - name: Print compose config
+        run: cat mba-compose.yml
+
+      - name: Run mba
+        run: docker compose -f mba-compose.yml up -d
+
      - name: Run test script in MBA instance
-        run: >
-          mba --mb . --data-db postgres-data -n example.com \
-           run .github/scripts/run-presto-kerberos-integration-test.sh
+        run: docker compose -f mba-compose.yml exec metabase .github/scripts/run-presto-kerberos-integration-test.sh
--- a/.github/workflows/release-embedding-sdk.yml
+++ b/.github/workflows/release-embedding-sdk.yml
@@ -9,7 +9,7 @@ on:
        type: string
        required: true
      git_ref:
-        description: 'Valid git reference e.g. branches, tags, hashes'
+        description: 'A git commit hash that will be used to build the SDK'
        type: string
        required: true

@@ -20,7 +20,7 @@ concurrency:
  cancel-in-progress: true

 jobs:
-  git-tag:
+  check-git-tag:
    runs-on: ubuntu-22.04
    timeout-minutes: 20
    env:
@@ -30,25 +30,21 @@ jobs:
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.git_ref }}
+          fetch-depth: 0
+          fetch-tags: true

-      - name: Setup git user
+      - name: check tags
        run: |
-          git config --global user.email "metabase-bot@metabase.com"
-          git config --global user.name "Metabase bot"
-
-      - name: Create a new git tag
-        run: |
-          git tag ${{ env.tag }}
-
-      - name: Push the new tag
-        id : push-tag
-        run: |
-          git push origin ${{ env.tag }}
-      - if: ${{ failure() && steps.push-tag.outcome == 'failure' }}
-        run: echo "Tag '${{ env.tag }}' already exists. If you expect to run this workflow with the same tag, please remove the tag first and rerun this workflow again."
+          if [ $(git tag -l | grep $tag$) ]
+          then
+            echo "::error::Tag '${{ env.tag }}' already exists. If you expect to run this workflow with the same tag, please remove the tag first and rerun this workflow again."
+            exit 1
+          else
+            exit 0
+          fi

  test:
-    needs: git-tag
+    needs: check-git-tag
    runs-on: ubuntu-22.04
    timeout-minutes: 20
    steps:
@@ -77,6 +73,8 @@ jobs:
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.git_ref }}
+          fetch-depth: 0
+          fetch-tags: true

      - name: Prepare front-end environment
        uses: ./.github/actions/prepare-frontend
@@ -86,9 +84,17 @@ jobs:
        with:
          m2-cache-key: "release-sdk"

+      - name: Update readme
+        run: |
+          ./bin/embedding-sdk/release_utils.bash update_readme ${{ inputs.sdk_version }}
+
      - name: Bump published npm package version
        run: |
-          sed -i -E 's/("version": ").*"/\1${{ inputs.sdk_version }}"/' enterprise/frontend/src/embedding-sdk/package.template.json
+          ./bin/embedding-sdk/release_utils.bash update_package_json_template ${{ inputs.sdk_version }}
+
+      - name: Update changelog
+        run: |
+          yarn embedding-sdk:generate-changelog -o changelog-diff

      - name: Build SDK bundle
        run: yarn run build-embedding-sdk
@@ -102,6 +108,12 @@ jobs:
          name: metabase-sdk
          path: ./resources/embedding-sdk

+      - name: Upload changelog diff
+        uses: actions/upload-artifact@v4
+        with:
+          name: sdk-changelog-diff
+          path: ./changelog-diff
+
  build-jar:
    needs: test
    uses: ./.github/workflows/uberjar-sdk.yml
@@ -136,7 +148,6 @@ jobs:
        run: |
          aws s3 cp $FILE s3://$BUCKET/$BUCKET_PATH

-
  publish-npm:
    needs: [build-sdk, upload-jar]
    runs-on: ubuntu-22.04
@@ -150,25 +161,28 @@ jobs:

      - name: Setup git user
        run: |
-          git config --global user.email "metabase-bot@metabase.com"
-          git config --global user.name "Metabase bot"
+          git config --global user.email "github-automation@metabase.com"
+          git config --global user.name "Metabase Automation"

      - name: Update readme
        run: |
-          sed -i -E 's|(embedding-sdk-)[0-9.]+|\1${{ inputs.sdk_version }}|' enterprise/frontend/src/embedding-sdk/README.md
-          sed -i -E 's|(http://downloads.metabase.com/sdk/v)[0-9.]+|\1${{ inputs.sdk_version }}|' enterprise/frontend/src/embedding-sdk/README.md
+          bash ./bin/embedding-sdk/release_utils.bash update_readme ${{ inputs.sdk_version }}

      - name: Bump published npm package version
        run: |
-          sed -i -E 's/("version": ").*"/\1${{ inputs.sdk_version }}"/' enterprise/frontend/src/embedding-sdk/package.template.json
+          bash ./bin/embedding-sdk/release_utils.bash update_package_json_template ${{ inputs.sdk_version }}

-      - uses: actions/create-github-app-token@v1
-        id: app-token
+      - name: Retrieve SDK changelog diff
+        uses: actions/download-artifact@v4
        with:
-          app-id: ${{ secrets.METABASE_BOT_APP_ID }}
-          private-key: ${{ secrets.METABASE_BOT_APP_PRIVATE_KEY }}
+          name: sdk-changelog-diff

-      - name: Create a PR updating readme + published version
+      - name: Update changelog
+        run: |
+          cat changelog-diff enterprise/frontend/src/embedding-sdk/CHANGELOG.md > new-changelog
+          mv new-changelog enterprise/frontend/src/embedding-sdk/CHANGELOG.md
+
+      - name: Create a PR updating readme + published version, and changelog (using GitHub Metabase Automation account)
        run: |
          git checkout -b update-sdk-version-${{ inputs.sdk_version }}
          git commit -a -m 'Update Readme version references and published npm version to ${{ inputs.sdk_version }}'
@@ -177,9 +191,33 @@ jobs:
                       --assignee "${GITHUB_ACTOR}"\
                       --title "Update SDK version to ${{ inputs.sdk_version }}"\
                       --body "Update Readme version references and published npm package version to ${{ inputs.sdk_version }}"
+        env:
+          GH_TOKEN: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
+
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.METABASE_BOT_APP_ID }}
+          private-key: ${{ secrets.METABASE_BOT_APP_PRIVATE_KEY }}
+
+      - name: Edit PR adding useful information (using Metabase bot app)
+        run: |
+          gh pr edit --add-reviewer @metabase/embedding --add-label no-backport
        env:
          GH_TOKEN: ${{ steps.app-token.outputs.token }}

+      - name: Auto approve PR (using GitHub Actions account)
+        run: |
+          gh pr review --approve
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Enable Pull request auto-merge (using GitHub Metabase Automation account)
+        run: |
+          gh pr merge --auto --squash
+        env:
+          GH_TOKEN: ${{ secrets.METABASE_AUTOMATION_USER_TOKEN }}
+
      - name: Retrieve build SDK package artifact
        uses: actions/download-artifact@v4
        with:
@@ -191,3 +229,25 @@ jobs:
          cd sdk
          echo //registry.npmjs.org/:_authToken=${{ secrets.NPM_RELEASE_TOKEN }} > .npmrc
          npm publish
+
+  git-tag:
+    needs: publish-npm
+    runs-on: ubuntu-22.04
+    timeout-minutes: 20
+    env:
+      tag: embedding-sdk-${{ inputs.sdk_version }}
+    steps:
+      - name: Check out the code using the provided ref
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.git_ref }}
+
+      # Lightweight tags don't need committer name and email
+      - name: Create a new git tag
+        run: |
+          git tag ${{ env.tag }}
+
+      - name: Push the new tag
+        id : push-tag
+        run: |
+          git push origin ${{ env.tag }}
--- a/.github/workflows/rerun-workflows.yml
+++ b/.github/workflows/rerun-workflows.yml
@@ -10,7 +10,7 @@ jobs:
  rerun-on-failure:
    name: 'Re-run ''${{ github.event.workflow_run.name }}'' workflow'
    runs-on: ubuntu-22.04
-    # Do not re-run scheduled workflow runs. That's only Replay.io E2E tests for now.
+    # Do not re-run scheduled workflow runs
    if: github.event.workflow_run.conclusion == 'failure' && github.event.workflow_run.event != 'schedule'
    env:
      BRANCH_NAME: ${{ github.event.workflow_run.head_branch }}
--- a/.github/workflows/tag-for-release.yml
+++ b/.github/workflows/tag-for-release.yml
@@ -0,0 +1,251 @@
+name: Release 1a - Tag Release Artifact
+run-name: Tag ${{ inputs.version }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Metabase version (e.g. v0.46.3)'
+        type: string
+        required: true
+      commit:
+        description: 'A full-length commit SHA-1 hash'
+        required: true
+
+jobs:
+  start-message:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: release
+      - name: Prepare build scripts
+        run: cd ${{ github.workspace }}/release && yarn && yarn build
+      - name: Send build start message
+        uses: actions/github-script@v6
+        env:
+          SLACK_RELEASE_CHANNEL: ${{ vars.SLACK_RELEASE_CHANNEL }}
+          SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+        with:
+          script: | # js
+            const { sendReleaseMessage } = require('${{ github.workspace }}/release/dist/index.cjs');
+
+            await sendReleaseMessage({
+              stage: 'build-start',
+              github,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              version: '${{ inputs.version }}',
+              runId: '${{ github.run_id }}',
+              releaseSha: '${{ inputs.commit }}',
+            }).catch(console.error);
+
+  check-version:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    outputs:
+      ee: ${{ fromJson(steps.canonical_version.outputs.result).ee }}
+      oss: ${{ fromJson(steps.canonical_version.outputs.result).oss }}
+    steps:
+    - name: Fail early on the incorrect version format
+      if: ${{ !(startsWith(inputs.version,'v0.') || startsWith(inputs.version,'v1.')) }}
+      run: |
+        echo "The version format is invalid!"
+        echo "It must start with either 'v0.' or 'v1.'."
+        echo "Please, try again."
+        exit 1
+    - uses: actions/checkout@v4
+      with:
+        sparse-checkout: release
+    - name: Prepare build scripts
+      run: cd ${{ github.workspace }}/release && yarn && yarn build
+    - name: Get Release Version
+      uses: actions/github-script@v7
+      id: canonical_version
+      with:
+        script: | # js
+          const { isValidVersionString, getCanonicalVersion, hasBeenReleased } = require('${{ github.workspace }}/release/dist/index.cjs');
+
+          const version = '${{ inputs.version }}';
+
+          if (!isValidVersionString(version)) {
+            throw new Error("The version format is invalid! It must start with either 'v0.' or 'v1.'.");
+          }
+
+          const versions = {
+            ee: getCanonicalVersion(version, 'ee'),
+            oss: getCanonicalVersion(version, 'oss'),
+          };
+
+          const ossReleased = await hasBeenReleased({
+            github,
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            version: versions.oss,
+          });
+
+          const eeReleased = await hasBeenReleased({
+            github,
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            version: versions.ee,
+          });
+
+          if (ossReleased || eeReleased) {
+            throw new Error("This version has already been released!", version);
+          }
+
+          return versions;
+
+  check-commit:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    steps:
+    - name: Check out the code to verify the release branch
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0  # IMPORTANT! to get all the branches
+        sparse-checkout: release
+    - name: Prepare build scripts
+      run: cd ${{ github.workspace }}/release && yarn && yarn build
+    - name: Get Release Branch
+      uses: actions/github-script@v7
+      id: release_branch
+      with:
+        result_encoding: string
+        script: | # js
+          const { getReleaseBranch } = require('${{ github.workspace }}/release/dist/index.cjs');
+          const version = '${{ inputs.version }}';
+          const releaseBranch = getReleaseBranch(version);
+          return releaseBranch;
+    - name: Ensure that the specified commit exists in the ${{ steps.release_branch.outputs.result }} release branch
+      run: |
+        RELEASE_BRANCH=${{ steps.release_branch.outputs.result }}
+        git checkout $RELEASE_BRANCH
+        git branch --contains ${{ inputs.commit }} | grep -q $RELEASE_BRANCH \
+          && echo "Commit found in correct release branch" \
+          || (echo "Commit not found in correct release branch" && exit 1)
+
+  tag-uberjar-for-release:
+    needs: [check-version, check-commit]
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    strategy:
+      matrix:
+        edition: [oss, ee]
+    env:
+      INTERACTIVE: false
+    steps:
+    - name: Get correct version number
+      run: | # bash
+        if [ '${{matrix.edition}}' == 'ee' ]; then
+          version='${{ needs.check-version.outputs.ee }}'
+        else
+          version='${{ needs.check-version.outputs.oss }}'
+        fi
+
+        echo "VERSION=$version" >> $GITHUB_ENV
+    - name: Setup Java
+      uses: actions/setup-java@v4
+      with:
+        distribution: 'temurin'
+        java-version: 17 # 11 throws an error on jar uf
+
+    - name: Retrieve test build uberjar artifact for ${{ matrix.edition }}
+      id: find_release_artifact
+      uses: actions/github-script@v7
+      with:
+        result-encoding: string
+        script: | # js
+          const fs = require('fs');
+
+          const artifacts = await github.rest.actions.listArtifactsForRepo({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            name: `metabase-${{ matrix.edition }}-${{ inputs.commit }}-uberjar`,
+            per_page: 1,
+          });
+
+          if (!artifacts.data?.artifacts?.[0]?.id) {
+            console.warn(`No existing artifacts found for ${{ inputs.commit }}, need to build jar`);
+
+            if ("${{matrix.edition}}" === 'oss') {
+              // only trigger the build job on OSS, otherwise we'll get double builds
+              github.rest.actions.createWorkflowDispatch({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                workflow_id: 'build-for-release.yml',
+                ref: 'refs/heads/master',
+                inputs: {
+                  commit: '${{ inputs.commit }}',
+                  version: '${{ inputs.version }}',
+                }
+              });
+            }
+
+            throw new Error('aborting in favor of build script');
+          }
+
+          const artifact_id = artifacts.data.artifacts[0].id;
+
+          const download = await github.rest.actions.downloadArtifact({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            artifact_id: artifact_id,
+            archive_format: 'zip',
+          });
+
+          fs.writeFileSync(`${process.env.GITHUB_WORKSPACE}/mb.zip`, Buffer.from(download.data));
+    - name: Unzip Metabase artifact containing an uberjar
+      run: |
+        unzip mb.zip
+        mv target/uberjar/metabase.jar metabase.jar
+
+    - name: Update version.properties in jar
+      run: | # sh
+        jar xf metabase.jar version.properties
+        echo "Old version.properties:"
+        cat version.properties
+        sed -i "s/^tag=.*/tag=$VERSION/" version.properties
+        echo "\n\nNew version.properties:"
+        cat version.properties
+        echo "\n\nUpdating metabase.jar with new version.properties"
+        jar uf metabase.jar version.properties
+
+    - name: Store commit's SHA-1 hash
+      run:  echo ${{ inputs.commit }} > COMMIT-ID
+      shell: bash
+    - name: Calculate SHA256 checksum
+      run: sha256sum ./metabase.jar > SHA256.sum
+      shell: bash
+    - name: Upload JARs as artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: metabase-release-${{ matrix.edition }}-${{ inputs.commit }}-uberjar
+        path: |
+          ./metabase.jar
+          ./COMMIT-ID
+          ./SHA256.sum
+
+  trigger-tests:
+    needs: [tag-uberjar-for-release]
+    permissions:
+      actions: write
+    runs-on: ubuntu-22.04
+    timeout-minutes: 5
+    steps:
+      - name: trigger pre-release testing
+        uses: actions/github-script@v7
+        with:
+          script: | # js
+            github.rest.actions.createWorkflowDispatch({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              workflow_id: 'pre-release.yml',
+              ref: '${{ github.ref }}',
+              inputs: {
+                commit: '${{ inputs.commit }}',
+                version: '${{ inputs.version }}',
+              }
+            });
--- a/.gitignore
+++ b/.gitignore
@@ -77,6 +77,7 @@ target/checksum.txt
 xcshareddata
 xcuserdata
 dev/src/dev/nocommit/
+dev/serialization_deltas/
 *~
 **/cypress_sample_database.json
 **/cypress_sample_instance_data.json
@@ -111,3 +112,6 @@ modules/drivers/*/.lsp/*

 # airgap
 /resources/airgap/
+
+# swc
+.swc/
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_No_Background_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_No_Background_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_No_Background_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_No_Background_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Dark_Theme_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_No_Background_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_No_Background_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_No_Background_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_No_Background_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Light_Theme_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_No_Background_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_No_Background_Default.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_No_Background_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_No_Background_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_Scroll.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedDashboardView_Transparent_Theme_Scroll.png
--- a/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedQuestionView_Light_Theme_Default.png
+++ b/.loki/reference/chrome_laptop_embed_PublicOrEmbeddedQuestionView_Light_Theme_Default.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Chart_Stepped_Nulls_Interpolated.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Chart_Stepped_Nulls_Interpolated.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Chart_Stepped_Nulls_Skipped.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Chart_Stepped_Nulls_Skipped.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_All_Series_Without_Interpolation.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_All_Series_Without_Interpolation.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_Interpolate_Missing_Values.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_Interpolate_Missing_Values.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_Linear_X_Axis.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stack_Linear_X_Axis.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stacked_Auto_Data_Labels.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Area_Stacked_Auto_Data_Labels.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Auto_Formatting_Compact.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Auto_Formatting_Compact.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Auto_Formatting_Full.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Auto_Formatting_Full.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Breakout_With_Line_Series_Stacked_Right_Axis_Only.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Breakout_With_Line_Series_Stacked_Right_Axis_Only.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Correct_Width_When_Two_Y_Axes.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Correct_Width_When_Two_Y_Axes.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Data_Labels_Negatives.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Data_Labels_Negatives.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Formatting_Full.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Formatting_Full.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Histogram_Stacked.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Histogram_Stacked.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Histogram_Stacked_Normalized.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Histogram_Stacked_Normalized.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Log_Y_Scale_Stacked.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Log_Y_Scale_Stacked.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Log_Y_Scale_Stacked_Negative.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Log_Y_Scale_Stacked_Negative.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Min_Height_Limit.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Min_Height_Limit.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stack_Display_Overrides_Series_Displays.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stack_Display_Overrides_Series_Displays.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stack_Linear_X_Axis.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stack_Linear_X_Axis.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_All_Labels_Timeseries_With_Gap_45717.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_All_Labels_Timeseries_With_Gap_45717.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Labels_Null_Vs_Zero.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Labels_Null_Vs_Zero.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Normalized_Empty_Space_37880.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Normalized_Empty_Space_37880.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Normalized_Series_Labels.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Normalized_Series_Labels.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Pow_Y_Axis.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Pow_Y_Axis.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Pow_Y_Axis_Negatives.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Pow_Y_Axis_Negatives.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_And_Totals.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_And_Totals.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_And_Totals_Ordinal.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_And_Totals_Ordinal.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Auto_Compactness.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Auto_Compactness.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_No_Totals.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_No_Totals.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Normalized_Auto_Compactness.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Normalized_Auto_Compactness.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Rotated.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Series_Labels_Rotated.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Total_Formatted_Values.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Stacked_Total_Formatted_Values.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Two_Axes_Stacked_With_Negative_Values.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bar_Two_Axes_Stacked_With_Negative_Values.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Bars_Breakout_Sorted_With_Negative_Values_Power_Y_Axis.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Bars_Breakout_Sorted_With_Negative_Values_Power_Y_Axis.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combined_Bar_Time_Series_Different_Granularity_With_Breakout.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combined_Bar_Time_Series_Different_Granularity_With_Breakout.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combined_With_Invalid_Settings.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combined_With_Invalid_Settings.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Data_Labels_Auto_Compactness_Propagates_From_Line.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Data_Labels_Auto_Compactness_Propagates_From_Line.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Data_Labels_Auto_Compactness_Propagates_From_Totals.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Data_Labels_Auto_Compactness_Propagates_From_Totals.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Stacked_Bars_Areas.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Stacked_Bars_Areas.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Stacked_Bars_Areas_Normalized.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Combo_Stacked_Bars_Areas_Normalized.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Custom_Y_Axis_Range_With_Column_Scaling.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Custom_Y_Axis_Range_With_Column_Scaling.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Data_Labels_Under_Trend_Goal_Lines_41280.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Data_Labels_Under_Trend_Goal_Lines_41280.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Between_Extent_And_Chart_Bound.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Between_Extent_And_Chart_Bound.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Disabled.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Disabled.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Log_Y_Scale.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Log_Y_Scale.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Out_Of_Bounds_37848.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Out_Of_Bounds_37848.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Pow_Y_Scale.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Line_Pow_Y_Scale.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Very_Small.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Goal_Very_Small.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Histogram_Ticks_45_Degrees.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Histogram_Ticks_45_Degrees.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Histogram_Ticks_90_Degrees.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Histogram_Ticks_90_Degrees.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Incorrect_Label_Y_Axis_Split_41285.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Incorrect_Label_Y_Axis_Split_41285.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Chart_Broken_Dimensions_Metrics_Settings.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Chart_Broken_Dimensions_Metrics_Settings.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Custom_Y_Axis_Range_Equals_Extents.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Custom_Y_Axis_Range_Equals_Extents.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Log_Y_Scale.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Log_Y_Scale.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Settings.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Settings.png
--- a/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Show_Dots_Auto.png
+++ b/.loki/reference/chrome_laptop_static_viz_ComboChart_Line_Show_Dots_Auto.png
--- a/Show More
+++ b/Show More