16715 Commits (main)

Author	SHA1	Message	Date
Yuri Tseretyan	5097dd5c7d	Alerting: Send templates from extra configuration to remote Alertmanager (#107981) ... * extract logging of MergedResult into method * convert GetMergedTemplateDefinitions to return PostableApiTemplate * update mergeExtracConfigs to return GrafanaAlertmanagerConfig * pass by value, not pointer * add template definition to payload * update tests * rename to Templates * log merge results * fix reference in workspace	1 day ago
Sarah Zinger	f34127c449	Query Service: Fix Time Bug (#108337)	1 day ago
Ashley Harrison	2d1fb94f2d	Playwright: Gate server start up with `GRAFANA_URL` env var (#108302) ... * refactor so server is created unless GRAFANA_URL is provided * update documentation * don't swallow errors from the server process	1 day ago
Misi	4669b586e9	Security: Fixes for CVE-2025-6197 and CVE-2025-6023 (#108330) ... apply security patch: main/439-202506251632.patch (cherry picked from commit 7f3977c54548dc82d9b2c44c125b30b3dbc2069a) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	1 day ago
Eric Leijonmarck	aa0f8caa35	`Authorizer`: rename and enforce only once for `NewGrafanaAuthorizer` (#108294) ... * renaming of GrafanaAuthorizer to make it less confusing * enforce only once by runtime * comment only	1 day ago
Kevin Yu	f009c2dcdd	CloudWatch: Handle log alerts queries where the time field is not the first field (#108277) ... CloudWatch: handle log alerts queries where the time field is not the first field	2 days ago
maicon	4b440cf45d	Remove timeout info from logs when shadow request to search succeeds (#108324) ... Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	2 days ago
maicon	2dba473015	Feature/unified storage search dual reader (#108291) ... * Add UnifiedStorageSearchDualReaderEnabled feature flag Signed-off-by: Maicon Costa <maiconscosta@gmail.com> * Refactor UniSearch Dual Reader Signed-off-by: Maicon Costa <maiconscosta@gmail.com> * Run make gen-feature-toggles Signed-off-by: Maicon Costa <maiconscosta@gmail.com> * fix: unit tests search_client Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com> * feat: cancels shadow search requests after 500ms Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com> --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com> Co-authored-by: Will Assis <william@williamassis.com> Co-authored-by: Bruno Abrantes <bruno@brunoabrantes.com>	2 days ago
Roberto Jiménez Sánchez	4847882ee7	Provisioning: handle .git extension more gracefully (#108213) ... * Move .git to repository packages * Bump nanogit 2025-07-17 This version handles `.git` extension internally so that the client doesn't have to worry about it * Put back mutation for Github * Mutate also git URL for clarity	2 days ago
Roberto Jiménez Sánchez	446054a61d	Provisioning: fix race condition in usage metrics collection (#108289) ... * Register usage stats after lister is created For enterprise where metrics are collected more frequently and in different ways the collection was happening before the listing was initialized. * Move usage to separate package	2 days ago
Roberto Jiménez Sánchez	e3422c415f	Provisioning: fix hack-introduced bug on repository updates (#108298) ... * Add log line to see which secret service we are using * Add hack to make test and create endpoint work until we have InLineSecureValues	2 days ago
Misi	d5f47d2a6b	IAM: Comment out DualWriter setup for Users (#108241) ... * Try 1 * Comment out DW setup for users	2 days ago
Roberto Jiménez Sánchez	5cf48294f7	Provisioning: fix authorized github client initialization (#108290) ... * Add logging * Fix the condition for the github token * Revert "Add logging" This reverts commit 71cbc675f6. * Fix condition	2 days ago
Sarah Zinger	3fad863fd1	Query Service: Combine SSE handling in single tenant and multi tenant paths (#108041) ... * parse via sse I need to figure out how to handle the pipeline.execute with our own client. I think this is important for MT reasons, just like using our own cache (via legacy) is important. parsing is done though! * WIP nonsense * horrible code but i think it works * Add support for sql expressions config settings * Cleanup: - remove spew from nodes.go - uncomment out plugin context and use in single tenant flow - make code more readable and add comments * Cleanup: - create separate file for mt ds client builder - ensure error handling is the same for both expressions and regular queries - other cleanup * not working but good thoughts * WIP, vector not working for non sse * super hacky but i think vectors work now * delete delete delete * Comments for future ref * break out query handling and start test * add prom debugger * clean up: remove comments and commented out bits * fix query_test * add prom debugger * create table-driven tests with testsdata files * Fix test * Add test * go mod?? * idk * Remove comment * go enterprise issue maybe * Fix codeowners * Delete * Remove test data * Clean up * logger * Remove go changes hopefully * idk go man * sad * idk i ran go mod tidy and this is what it wants * Fix readme, with much help from adam * some linting and testing errors * lint * fix lint * fix lint register.go * another lint * address lint in test * fix dead code and linters for query_test * Go mod? * Struggling with go mod * Fix test * Fix another test * Revert headers change * Its difficult to test this in OSS as it depends on functionality defined in enterprise, let's bring these tests back in some form in enterprise * Fix codeowners --------- Co-authored-by: Adam Simpson <adam@adamsimpson.net>	2 days ago
colin-stuart	08afd73c0c	SCIM: Add successful SCIM-provisioned user login usage stat (#108273) ... * SCIM: add usage stat boolean for successful login * revert unrelated change * rename scimSuccessfulLogins * clean up	2 days ago
Charandas	d9e099d480	Feature-Flag service: signing middleware for cloud usecase (#107745)	2 days ago
Will Browne	f6ed9e6ff0	Plugins: Introduce plugin asset provider (#108063) ... * introduce plugin asset provider * simply with PR feedback * fix linter	2 days ago
Santiago	8548530dc4	Alertmanager: Add MergeState method (#108242) ... * Alertmanager: Add MergeState method * remove RemoteState in favor of ExternalState * fix tests	2 days ago
Vadim Stepanov	bccc980b90	Alerting: Notifiication history (#107644) ... * Add unified_alerting.notification_history to ini files * Parse notification history settings * Move Loki client to a separate package * Loki client: add params for metrics and traces * add NotificationHistorian * rm writeDuration * remove RangeQuery stuff * wip * wip * wip * wip * pass notification historian in tests * unify loki settings * unify loki settings * add test * update grafana/alerting * make update-workspace * add feature toggle * fix configureNotificationHistorian * Revert "add feature toggle" This reverts commit de7af8f7 * add feature toggle * more tests * RuleUID * fix metrics test * met.Info.Set(0)	3 days ago
Roberto Jiménez Sánchez	810868c156	Provisioning: use new secure value client (#108227) ... * Use provider in Webhooks registration * First stab at using the new client * Simplify mock * Able to generate graph in OSS * Remove line already ensured by provider * Handle the K8s not found error as well * Commit regenerated wire file * Add the hack also for deletion * Fix secrets test util * Format file	3 days ago
Gabriel MABILLE	4b217c601a	AuthZ: Scope resolution (#107948) ... * AuthZ: Scope resolution * Account for PR feedback Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	3 days ago
Mihai Doarna	8dfb4cdfc9	SSO: Add prompt param to SSO settings (#107969) ... * add prompt param to AzureAD oauth config * yarn i18n-extract * validate auth prompt value * make login_prompt available for all SSO providers * use base authCodeURL for azure and google * add docs for the new field for azure and generic oauth * fix typo * fix frontend unit test * add prompt parameter to docs for the other providers * remove prompt from okta * add unit tests for the other providers * address feedback * add back translations for prompt labels	3 days ago
Matheus Macabu	f7891a27d2	Secrets: Add kms providers imports (#108210)	3 days ago
Misi	c6a6b9fdd2	IAM: Create and delete user from the legacy store (#107694) ... * Add Create for User + DualWriter setup * Add delete User * Fix delete + access check * Add tests for delete user * Add tests for create user * Fixes * Use sqlx session to fix database locked issues * wip authz checks * legacyAccessClient * Update legacyAccessClient, add tests for create user * Close rows before running other queries * Use ExecWithReturningId * Verify deletion in the tests * Add Validate and Mutate * Other changes * Address feedback * Update tests --------- Co-authored-by: Gabriel Mabille <gabriel.mabille@grafana.com>	3 days ago
Andres Martinez Gotor	8e663b50e9	Advisor: Allow to define enterprise checks (#108114)	3 days ago
Will Browne	54d6140e6d	Plugins: Stub logger method for backend plugin test mock (#108211) ... stub logger method for backend plugin test mock	3 days ago
Matheus Macabu	6c69ae244e	Secrets: Add single tenant SecureValueClient (#108099) ... * Secrets: Add single tenant SecureValueClient * SecureValueClient: Rename file * SecureValueClient: Move original type to contracts package and export it by aliasing	3 days ago
Roberto Jiménez Sánchez	ae4dc181d1	Provisioning: Add user token to git and bitbucket repository specs (#108186) ... * Add token user to git and bitbucket specs * Use token user if available in git type	3 days ago
Misi	a94647d5cc	Auth: Remove ssoSettingsSAML feature toggle (#108109) ... * Remove ssoSettingsSAML feature toggle * Remove from docs + align tests * Update workspace * revert go.mod go.sum change * make update-workspace without enterprise linked	3 days ago
Matthew Jacobson	2444fb1caf	Alerting: Update grafana/alerting to 8eef376f49f8 (#108190) ... Update grafana/alerting to 8eef376f49f8 Includes support for OAuth2 in most notifiers but does not enable that support yet in FE. Fixes tests related to the change.	3 days ago
Cory Forseth	a0085b6cab	skip auth check when server is running in insecure mode (#107820) ... * skip auth check when server is running in insecure mode * add some useful logs * lint	3 days ago
Sonia Aguilar	9c15662cf6	Alerting: Add AI buttons in some alerting workflows (#107754) ... * Add alerting ai buttons for cloud * add tracking for ai buttons usage * Empty commit to trigger GitHub Actions * add FrontendOnly in ff * update analytics folder * prettier * revert ff being frontend only * review comments * address some review comments * refactor * revert change and remove comment * prettier * update betterer * remove unused property * prettier * address review comments * prettier * update test * fix linter errors * add translations * prettier * update workspace --------- Co-authored-by: Gilles De Mey <gilles.de.mey@gmail.com>	3 days ago
Matias Chomicki	974103c6fa	OTel: Add experimental formatting for OTel identified log lines (#108170) ... * OTel: create formats service * LogListContext: use OTel service to resolve the default displayed fields * Create otelLogsFormatting feature flag * LogListContext: conditionally use otel format based on feature flag * OTel logs: reformat body and improve displayed fields * formats: remove duplicated scope name * Update formats.ts * format: use regex rules to exclude fields * Add tests * Formatting * LogsPanel: expose setDisplayedFields * LogListContext: refactor otel displayed fields * Prettier * format: optimize identifyOTelLanguages	3 days ago
Bruno	01692bc876	Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method (#108181) ... * Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method * remove unused struct: secureValueForDecrypt	3 days ago
Tania	7186aa4bd7	OpenFeature: Fix bulk evaluation request postprocessing (#108155)	4 days ago
Dominik Prokop	b4738c57e4	Dashboards API: Add v2alpha2 (#108121) ... * Dashboards API: Register v2alpha2 API * Prepare conversion functions * Fix test * Move to the bottom the v2aplha2 until is ready --------- Co-authored-by: Ivan Ortega <ivanortegaalba@gmail.com>	4 days ago
Todd Treece	10cbebf9c2	Data Plane Aggregator: Update README with more context (#108138)	4 days ago
Roberto Jiménez Sánchez	b232ba5396	Provisioning: Move provisioning extras to OSS extensions (#108167) ... * Move provisioning extensions to OSS * Fix the wire stuff * Move it to extras packages * Add hack to assert test differently for enterprise	4 days ago
Matheus Macabu	2c4bbf8b1d	Secrets: Reduce amount of feature toggle checks to only app entrypoint (#108110) ... * Secrets: Reduce amount of feature toggle checks to only app entrypoint * Wire: Fix merge conflict * Wire: Fix merge conflict	4 days ago
Matheus Macabu	3cda233468	Secrets: Remove temporary allowlist (#108118)	4 days ago
Roberto Jiménez Sánchez	56543db16a	Provisioning: delete secrets on repository deletion (#108113) ... - Add hooks to git, github and github webhooks to remove the. - Implement deletion in secrets package. - Add `Mutator` interface and hooks so that we can register any mutator. - Add unit test coverage to those mutators. - Move provider specific mutation from the massive `register.go` to the respective packages (e.g. `git` , `github`, etc). - Add integration test for removal. - Change the decryption fallback to simply check for the repository prefix.	4 days ago
Mustafa Sencer Özcan	4a779c4ccb	fix: unified resource server list queries order column (#108094)	4 days ago
Hugo Häggmark	5b82e05697	Plugins: replaces various plugin imports with pluginImporter (#108002) ... * Plugins: renames plugin_loader * Wip * chore: adds pluginImporter * chore: some small refactors * chore: better typings * chore: merge functions * chore: create a generic plugin cache * chore: adds comments * chore: change to const * chore: remove unused change * chore: put everything behind feature toggle * chore: rename test file and props * chore: adds sync cache as well * chore: fix the typings * chore: fix broken unit test * chore: small rename * chore: adds tests * chore: updates after PR feedback * chore: updates after PR feedback	4 days ago
Nathan Marrs	b691b3288d	Sharing: Export dashboard as image (#104207) ... Co-authored-by: AgnesToulet <35176601+AgnesToulet@users.noreply.github.com>	4 days ago
Bruno	6fa3c196d4	Secrets: add example based testing that tries to decrypt deleted secure value (#108140)	4 days ago
Michael Mandrus	ab51794bdb	SecretsManager: Unify KMS across OSS and Enterprise (#108085) ... * everything is compiling * tests passing * remove used object * write a test for secret key upgrades * misc cleanup * clean up some wording * lint issues * fix a typo * import hashicorp dependency explicitly * simplify oss kmsprovider package structure * consolidate current provider and available providers * add a new manager configuration test * fix hashivault import * fix import issue * fix unit tests * Update go.mod Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com> --------- Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>	4 days ago
Isabella Siu	da0f1d7b18	AWS Datasources: Update grafana assume role docs for GA (#107220) ... Co-authored-by: Larissa Wandzura <126723338+lwandz13@users.noreply.github.com> Co-authored-by: Kevin Yu <kevinwcyu@users.noreply.github.com>	4 days ago
Bruno Abrantes	c06c1b1e8a	fix: Makes created and updated by nullable strings for library panel migration (#108122) ... Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com>	5 days ago
maicon	b017f42278	Unistore: Fix dualwriter mode 3 (#108092) ... * Unistore: Fix dualwriter mode 3 Fallback to legacy if Unified is the main store and we get an error when reading from it Signed-off-by: Maicon Costa <maiconscosta@gmail.com> --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	5 days ago
Stephanie Hingtgen	d39a47a89b	Provisioning: Begin using secrets store (#108044) ... - Provisioning: Begin using secrets store - Refactor integration with secrets store - Add back the legacy service - Separate concerns for encrypt and decrypt - Handle update within Encrypt function - Add interface for secure value service - Add feature flag for using secrets service - Add the dual service for temporary solution. * Add first integration tests for encrypted tokens * Add integration test for app platform secrets * Validate it has the name or not * Create wire provider * Always save to the secret if provided secret --------- Co-authored-by: Roberto Jimenez Sanchez <roberto.jimenez@grafana.com> Co-authored-by: Roberto Jiménez Sánchez <jszroberto@gmail.com>	5 days ago