15493 Commits (2187e5a58be60393219b4052f33dab22fffa8158)

Author	SHA1	Message	Date
github-actions[bot]	2187e5a58b	apply security patch: release-11.6.3/431-202505231801.patch	2 weeks ago
Josh Hunt	2a29e10117	[release-11.6.3] Provisioning: Move OSS provisioning to Run step (#106673) ... Provisioning: Move OSS provisioning to Run step (#105428) * Provisioning: Move OSS provisioning to Run step --------- (cherry picked from commit 1435eedbc4) Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: maicon <maiconscosta@gmail.com>	2 weeks ago
Josh Hunt	f9c96337cd	[release-11.6.3] Run Init Provisioners at Server Initialization (#106644) ... Run Init Provisioners at Server Initialization (#105080) * Run Init Provisioners at Server Initialization --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: maicon <maiconscosta@gmail.com>	2 weeks ago
grafana-delivery-bot[bot]	0a757fae39	[release-11.6.3] CloudMigrations: Omit autoincremented id for alert snapshots (#106638) ... CloudMigrations: Omit autoincremented id for alert snapshots (#106598) If you tried to migrate alerts from two differente sources/on-prem instances, the autoincremented numeric id would be the same, and since we were creating the resource in cloud with that same id (the API accepts it), it would return an error "conflicting alert rule found" because that id is the primary key on the table. We simply omit the numeric id now and let the API for the cloud instance generate it. (cherry picked from commit a1f2693fd8) Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>	2 weeks ago
Matheus Macabu	e35e880e89	[release-11.6.3] Dependencies: Bump Go to v1.24.4 (#106567) ... Dependencies: Bump Go to v1.24.4	2 weeks ago
Vadim Stepanov	f20d489540	[release-11.6.3] Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106487) ... Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106409) (cherry picked from commit 1df888c517)	2 weeks ago
grafana-delivery-bot[bot]	1c29264558	[release-11.6.3] SQLStore: Add index on is_service_account and last_seen_at columns in user table. (#106233)	3 weeks ago
Matheus Macabu	0ff65f349a	[release-11.6.3] Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 (#106117) ... Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371	4 weeks ago
Alexander Zobnin	e0ca1e5b1c	[release-11.6.3] RBAC: Dont additionally cache all users permissions (#106146) ... RBAC: Don't additionally cache all users permissions (#105607) * RBAC: Don't additionally cache all users permissions * remove unused tests (cherry picked from commit cfba630f5c)	4 weeks ago
Sofia Papagiannaki	1748a14f54	[release-11.6.3]: Fix static tests (#106136)	4 weeks ago
grafana-delivery-bot[bot]	28e6d9767d	[release-11.6.2] Storage: Take `migration_locking` setting into account (#105950) ... Storage: Take `migration_locking` setting into account (#105938) (cherry picked from commit 392c1a71c9) Co-authored-by: Jean-Philippe Quéméner <JohnnyQQQQ@users.noreply.github.com>	1 month ago
github-actions[bot]	e0ba4b4809	apply security patch: release-11.6.2/security-patch-202505051005.patch	1 month ago
github-actions[bot]	679039d525	apply security patch: release-11.6.2/404-202504151210.patch	1 month ago
Michael Mandrus	afacebf16e	CloudMigrations: Fix issues with snapshot resource limits (#105425) (#105624) ... * CloudMigrations: Fix issues with snapshot resource limits (#105425) * fix bulk inserts * commit progress so cursor doesn't sabotage me * add more tests * get everything working * rename variable * update comment * regen mocks, fix k8s list method maybe * fix bug with duplicate entries * lint * Snapshots: Use slices.Chunk for batching inserts * remove extra linebreak --------- Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com> * manually add unit tests * make postgres integration tests happy --------- Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com>	1 month ago
Artur Wierzbicki	59cdce6127	[release-11.6.2] Live: bump centrifuge (#105471) ... * Live: bump centrifuge (#105214) * bump centrifuge * make update-workspace (cherry picked from commit d91e4b0582) * fix compilation error	1 month ago
Matheus Macabu	c2ebce9fa4	[release-11.6.2] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace (#105458) ... * Dependencies: Bump github.com/getkin/kin-openapi from v0.131.0 to v0.132.0 * Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 * Dependencies: Bump golang.org/x to latest	1 month ago
Matheus Macabu	bdcc804ca5	[release-11.6.2] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0 (#105443) ... Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0	1 month ago
Matheus Macabu	fda0a9a32c	[release-11.6.2] Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 (#105369) ... Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12	1 month ago
William Wernert	df92cf28cd	[release-11.6.2] Alerting: Ensure field validators return the proper type (#105284) ... Alerting: Ensure field validators return the proper type (#104050) * Ensure field validators return the proper type This ensures correct error propagation through services up to the API layer. * Move error wrapping up to call site (cherry picked from commit 820c338414)	1 month ago
Matheus Macabu	28a2c941cc	[release-11.6.2] Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 (#105251) ... Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0	2 months ago
Matheus Macabu	dbf8ab9182	[release-11.6.2] Chore: Bump Go version to 1.24.3 (#105103) ... Chore: Bump Go version to 1.24.3	2 months ago
Artur Wierzbicki	d62e13f9d0	[release-11.6.2] Live: logging fix (#105075) ... Live: logging fix (#105054) logg fix (cherry picked from commit c781b0922e)	2 months ago
beejeebus	e876303a5e	Plugins: Fix support for adhoc filters with raw queries in InfluxDB (#105007) ... Plugins: Fix support for adhoc filters with raw queries in InfluxDB (#101966) Plugins: Fix support for adhoc filters with raw queries in InfluxDB Fixes #101635.	2 months ago
Kevin Minehart	c28ee853ef	[release-11.6.2] Backport workflow fixes (#104695) ... * Copy workflows and actions from main * add zizmor.yml	2 months ago
Todd Treece	2dcbe0b215	Dashboards: Fix lint issue (#104498)	2 months ago
github-actions[bot]	cb147983f2	apply security patch: release-11.6.1/394-202504041254.patch ... commit 062c1375784db35ff03d410113d104a9eea46475 Author: Stephanie Hingtgen <stephanie.hingtgen@grafana.com> Date: Fri Apr 4 13:50:50 2025 +0100 APIs: Remove dashboard and folder registration	2 months ago
github-actions[bot]	5e30a9ec08	apply security patch: release-11.6.1/364-202504020728.patch ... commit 5697757c8006732776de7f4385c2029bb01f67c6 Author: Andres Martinez Gotor <andres.martinez@grafana.com> Date: Mon Mar 31 12:15:52 2025 +0200 Sanitize paths before evaluating access to route	2 months ago
Kevin Yu	760b9176fc	[release-11.6.1] Prometheus: Add support for cloud partners Prometheus data sources (#103941) ... Prometheus: Add support for cloud partners Prometheus data sources (#103482) * wip * Add prom flavor support for data source variables and export/import dashboards (#103321) * add dashboard and data source var selection * use match plugin id instead * use updated matchpluginid * formatting * cleanup * regex anchor * update error msg * Alerting: Clean up prometheus-flavored types and functions (#103703) * clean up types and utility functions for dealing with prometheus-flavored data sources * Refactor alerting datasource types to use constants as source of truth * Alerting: Clean up prometheus-flavored types and functions on the bac… (#103716) Alerting: Clean up prometheus-flavored types and functions on the backend * add matchPluginId tests * Update matchPluginId func to bidirectional (#103746) * update matchpluginid func to bidirectional * lint * formatting * use actual isSupportedExternalRulesSourceType in test * add tests in datasource_srv * betterer * remove type assertion * remove unnecessary case * use satisifies to not have to convert tuple to an array of string * add prometheus_flavor test --------- Co-authored-by: Andrew Hackmann <5140848+bossinc@users.noreply.github.com> Co-authored-by: Gilles De Mey <gilles.de.mey@gmail.com> Co-authored-by: Alexander Akhmetov <me@alx.cx> (cherry picked from commit fd6fd91115)	2 months ago
xavi	f393fb76e4	[release-11.6.1] [IAM] Prepend AppSubURL to redirectURI before validating it (#103875) ... [IAM] Prepend AppSubURL to redirectURI before validating it (#103475) (cherry picked from commit 5053aa576d)	3 months ago
Mariell Hoversholm	7a8ca707f9	[release-11.6.1] Go: Bump to 1.24.2 (#103523) ... * Go: Bump to 1.24.2 It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless. Fixes: CVE-2025-22871 Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311 * CI: Update golangci-lint * feat: update swagger * feat: update swagger * fix: remove enterprise imports	3 months ago
grafana-delivery-bot[bot]	7b6db626ad	[release-11.6.1] unistore: use the same connection string as grafana (#103089) ... unistore: use the same connection string as grafana (#102387) (cherry picked from commit 4927376f32) Co-authored-by: Georges Chaudy <chaudyg@gmail.com>	3 months ago
Ashley Harrison	afa4843796	[release-11.6.1] Org redirection: Fix linking between orgs (#102870) ... Org redirection: Fix linking between orgs (#102021) * don't trim path * add unit test (cherry picked from commit f3fb9592da)	3 months ago
Matheus Macabu	798a546f24	[release-11.6.1] Dependencies: Bump github.com/redis/go-redis/v9 to 9.7.3 to address CVE-2025-29923 (#102863) ... Dependencies: Bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3	3 months ago
Denis Vodopianov	b2605ed292	Chore: Update JWT library (CVE-2025-30204) (#102727) ... * Chore: Update JWT library (CVE-2025-30204) * Chore: Update JWT library (CVE-2025-30204)	3 months ago
Yuri Tseretyan	b6bc0eeb3f	[release-11.6.0] Alerting: Add migration to clean up rule versions table (#102562) ... Alerting: Add migration to clean up rule versions table (#102484) * add migration to clean up rule versions * drop index right before creating a new one. * fetch only rules which version greater than toKeep (cherry picked from commit 24ebacb10b)	3 months ago
Matheus Macabu	fef74521e9	Chore: Bump github.com/expr-lang/expr to v1.17.0 to address CVE-2025-29786 (#102533)	3 months ago
Mariell Hoversholm	5c0ee5cfcc	[v11.6] App Platform: Pin bleve to fix CVE-2022-31022 (#102531) ... App Platform: Pin bleve to fix CVE-2022-31022 This pins Bleve to a soon-to-be v2.5.0 commit. Fixes CVE-2022-31022. We can unpin when v2.5.0 releases (likely March 25th). We do not need any new features or similar, though there are some fixes that are nice to receive. We will **not** backport this fix farther as we aren't actually vulnerable to anything via CVE-2022-31022; we never use its code, nor does Bleve. The reason we are fixing this is to get Trivy to stop complaining.	3 months ago
Alexander Akhmetov	07698ebbaa	Revert "[release-11.6.0] Alerting: Add an index to alert_rule_versiontable on (rule_org_id, rule_uid) (#102353)" (#102367) ... Revert "[release-11.6.0] Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102353)" This reverts commit c3a547e1c9.	3 months ago
Alexander Akhmetov	c3a547e1c9	[release-11.6.0] Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102353) ... Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102347) (cherry picked from commit 9491fa1895)	3 months ago
Karl Persson	9a3864e603	Auth: Update to authlib (#101863) ... Update to latest authlib	4 months ago
Stephanie Hingtgen	b56db69b32	K8s: Dashboard History: Improve Error Handling (#101816)	4 months ago
Stephanie Hingtgen	9651505cb7	K8s: Dashboards: Fix provisioning (#101844)	4 months ago
Stephanie Hingtgen	473c0b5e89	K8s: Fix plugin updater (#101843)	4 months ago
Stephanie Hingtgen	bd0c645ff0	K8s: Schema v2: Return 406 in /api (#101842)	4 months ago
Matthew Jacobson	19b878ce66	Alerting: Include time range in template dashboard and panel urls (#101095) ... Alerting: Include time range in templated dashboard and panel urls Time range: from=Alert.StartsAt-1hr Firing Alerts: to=Current Timestamp Resolved Alerts: to=Alert.EndsAt	4 months ago
Juan Cabanas	5e21b9e2d1	Invite User: Add invite user button in top bar (#101809)	4 months ago
Matthew Jacobson	b73c59547c	Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101263) ... * Test covering Get+Save interaction for newly secret fields * Alerting: Re-encrypt existing contact points before get and patch	4 months ago
Yuri Tseretyan	dc75b454f5	Alerting: Improve performance of the setting GUID during migration (#101800)	4 months ago
maicon	8c22459e1f	Add debug info for encodeIdentityInMetadata (#101801) ... Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	4 months ago
Alexander Akhmetov	48ea9b08a2	Alerting: Add recording rule target datasource support to Prometheus conversion API (#101799) ... What is this feature? Adds target datasource UID to the recording rules so that they write to the same datasource used for alerting rule queries after the import. Why do we need this feature? Target datasourse support was added in #101678, and under a feature flag grafanaManagedRecordingRulesDatasources (#101778). This PR makes the importing process: Check if the import contains recording rules Verify both recording rules and the grafanaManagedRecordingRulesDatasources feature flag are enabled If either check fails, return an error If both checks pass, create recording rules with the provided datasource UID set as both the query and target datasource	4 months ago