Cube Core releases v0.34.0 thru v0.34.34 bring the support for Python and a plethora of updates to data modeling, APIs, and SDKs. It also delivers a fix to a recently discovered and fixed security issue.
Fixed: Denial of service attack on API instances
We've recently published a security advisory that discloses a vulnerability that allowed to make an API instance unavailable by submitting a specially crafted request. This issue was reported by y0d3n in our community Slack and promptly patched in Cube Core v0.34.34.
It's recommended that all users exposing Cube API instances to the public internet upgrade to the latest version to prevent service disruption.
Python for configuration and data modeling
In October, we've announced what looks like one of the most impactful updates to Cube in 2023. Finally, Cube has got support for Python that you can use for configuration and data modeling. Needless to say, you can install and use Python packages, including the all-new
cube_dbt package that enables the dbt integration with Cube.
Please feel free to watch these recent webinar recordings to accelerate your start:
meta in cubes and views
With these, now you can expose arbitrary metadata about your cubes and views to applications consuming Cube's REST API and its
Pass-through authentication in SQL API
We've extended the contract of the
check_sql_auth configuration option so that it now accepts both a user name and a password, providing the flexibility of authentication checks and enabling the support for pass-through authentication in the SQL API.
Please check this recipe for an example of using
check_sql_auth to verify the credentials for the SQL API using a LDAP catalog, e.g., Google Workspace.
castNumerics in front-end SDKs
By default, the REST API returns numeric values as strings because numbers more than
Number.MAX_SAFE_INTEGER or less than
Please see the documentation for details.
Ivy support in Angular SDK
We've also updated the Angular SDK to support Ivy, Angular's next-generation compilation and rendering pipeline. This enables the Angular SDK to be used with the most recent versions of Angular.
Thanks for tuning in as well as contributing to these updates. We're looking forward to bringing even more exciting updates to Cube Core in 2024.
Please upgrade and try v0.34.34 today in Cube Core with our Docker distribution. It's also available on the latest and stable release channels in Cube Cloud.