grafana

Commit Graph

Author	SHA1	Message	Date
Serge Zaitsev	056fa65944	apply 447-202507012230 manually	3 weeks ago
github-actions[bot]	5a2b1c3d26	apply security patch: release-11.4.6/433-202505231801.patch	1 month ago
Matheus Macabu	2fdda12414	[release-11.4.6] Dependencies: Bump Go to v1.24.4 (#106569 ) Dependencies: Bump Go to v1.24.4	1 month ago
Vadim Stepanov	49f3fa91b3	[release-11.4.6] Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106484 ) Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106409) (cherry picked from commit `1df888c517`)	1 month ago
Matheus Macabu	3112d75a5b	[release-11.4.6] Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 (#106119 ) * Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 * Static: Add unit tests for security fix	1 month ago
Sofia Papagiannaki	2edf712e9c	[release-11.4.6]: Add static tests (#106132 )	2 months ago
github-actions[bot]	316ea68268	Release: 11.4.5 (#105906 ) * Update changelog * Update version to 11.4.5 * Update CHANGELOG.md update wirh sec fixes --------- Co-authored-by: grafana-delivery-bot[bot] <grafana-delivery-bot[bot]@users.noreply.github.com> Co-authored-by: Jev Forsberg <46619047+baldm0mma@users.noreply.github.com>	2 months ago
github-actions[bot]	5b00e21638	apply security patch: release-11.4.5/security-patch-202505051005.patch	2 months ago
github-actions[bot]	fbc9904360	apply security patch: release-11.4.5/404-202504151210.patch	2 months ago
Matheus Macabu	e4d00a3251	[release-11.4.5] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace (#105466 ) Dependencies: Bump golang.org/x to latest	2 months ago
Matheus Macabu	323e20a011	[release-11.4.5] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0 (#105445 ) Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0	2 months ago
Matheus Macabu	9465bbea7e	[release-11.4.5] Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 (#105375 ) Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12	2 months ago
William Wernert	998dcbea5d	[release-11.4.5] Alerting: Ensure field validators return the proper type (#105282 ) Alerting: Ensure field validators return the proper type (#104050) * Ensure field validators return the proper type This ensures correct error propagation through services up to the API layer. * Move error wrapping up to call site (cherry picked from commit `820c338414`)	2 months ago
Matheus Macabu	38b98323a6	[release-11.4.5] Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0 (#105253 ) Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0	2 months ago
Matheus Macabu	8eefb0dd8f	[release-11.4.5] Chore: Bump Go version to 1.24.3 (#105110 ) Chore: Bump Go version to 1.24.3	2 months ago
Kevin Minehart	d62a0a23ed	[release-11.4.5] Backport workflow fixes (#104696 ) * Copy workflows and actions from main * add zizmor.yml	3 months ago
github-actions[bot]	05675bd910	apply security patch: release-11.4.4/366-202504020732.patch commit 69b820f274911812ffe5cbcca422ee0c16de44d4 Author: Andres Martinez Gotor <andres.martinez@grafana.com> Date: Mon Mar 31 12:15:52 2025 +0200 Sanitize paths before evaluating access to route	3 months ago
xavi	1285f8ca5a	[release-11.4.4] [IAM] Prepend AppSubURL to redirectURI before validating it (#104084 ) [IAM] Prepend AppSubURL to redirectURI before validating it (#103475) (cherry picked from commit `5053aa576d`)	3 months ago
Mariell Hoversholm	ef39d1ec35	[release-11.4.4] Go: Bump to 1.24.2 (#103527 ) * Go: Bump to 1.24.2 It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless. Fixes: CVE-2025-22871 Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311 * CI: Update golangci-lint	3 months ago
Misi	182fd8388f	[release-11.4.4] Auth: Fix SAML user IsExternallySynced not being set correctly (#103098 ) Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) (cherry picked from commit `345757c3ae`) Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com>	4 months ago
Misi	4d8e491fef	[release-11.4.4] Auth: Introduce authn.SSOClientConfig to get client config from SSOSettings service (#103009 ) Auth: Introduce authn.SSOClientConfig to get client config from SSOSettings service (#94618) * wip * possible solution * Separate interface for SSO settings clients * Rename interface * Fix tests * Rename * Change GetClientConfig to comma ok idiom (cherry picked from commit `50a635bc7e`)	4 months ago
Denis Vodopianov	6e612a368c	Chore: Revert [release-11.4.4] Replace bingo-managed tools with go tool directive. (#102691 ) (#102861 ) Revert "[release-11.4.3] Chore: Replace bingo-managed tools with go tool directive. (#102691)" This reverts commit `046295c54e`.	4 months ago
Denis Vodopianov	046295c54e	[release-11.4.3] Chore: Replace bingo-managed tools with go tool directive. (#102691 ) * Chore: Replace bingo-managed tools with go tool directive. (#101890) (cherry picked from commit `de6a48a233`) * running go mod tidy * updating go to silence trivy * downgrade cue to the version defined in branch * remove cog cue and drone from go tools * add cue back to makefile * remove junk from go workspace * remove junk from go workspace	4 months ago
Denis Vodopianov	8ab24bb196	Chore: Update CVE-affected golang-gwt dependencies (#102704 )	4 months ago
Denis Vodopianov	0eade5207c	[release-11.4.3] Chore: Revert golangci PR + bump golangic version (#102238 ) Chore: Revert golangci PR + bump golangic version (#96326) * Chore: Clean up some excludes and fix makefile (#96052) clean up some excludes and fix makefile * Chore: Enable cache on golangci linter (#95471) * try to enable cache on golangci linter * bump version * exclude G115 * reduce timeout * remove deprecated linter * bump linter version in bingo * try a different syntax for workspace modules * try another command * add apps to linter path * try disabling cue codegen * skip some linting in devenv * exclude dirs and try again * try workaround for pkg * try path instead of dir * make it one line * replace package prefix * exclude xorm * exclude wire * file-based aproach to nolint in workspaces * missing quote * simplify command line * change ownership * upgrade linter * revert bingo readme * revert devenv changes * upgrade golint * use dashes to stay consistent with other workflows * also change name in its own workflow file * rename in codeowners (cherry picked from commit `3dbd3a7a81`) Co-authored-by: Serge Zaitsev <serge.zaitsev@grafana.com>	4 months ago
Matthew Jacobson	e824a602e0	[release-11.4.3] Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101841 ) * Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101263) * Test covering Get+Save interaction for newly secret fields * Alerting: Re-encrypt existing contact points before get and patch (cherry picked from commit `b73c59547c`) * googlechat url test fix (cherry picked from commit `0f4af56177`)	4 months ago
Ieva	3d185ab56c	[release-11.4.3] Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows (#101790 ) * Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows (#101679) don't show error pop-ups for SAs and renderer (cherry picked from commit `f0d260ba5b`) * Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows (#101776) * don't show error pop-ups for SAs and renderer * only hide non 4xx error pop'ups * linting (cherry picked from commit `392124de00`)	4 months ago
Robby Milo	2b9a49a63e	[v11.4] Remove relref shortcodes (#101716 ) * manually replce all shared relrefs * relref replace - previous grafana versions * Merge branch 'master' into robbymilo/relref-replace-grafana-previous * update test * prettier	4 months ago
Matheus Macabu	43fe75f8a7	[release-11.4.3] Chore: Bump dependencies to address security issues (#101636 ) * Chore: Bump golang.org/x/net to v0.36.0 * Chore: Bump filippo.io/age to v1.2.1 * Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90 * Chore: Bump github.com/moby/moby to v27.5.1 * Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4 * Zanzana: bump openfga version (#94485) * Bump openfga * Remove internall sqlite implementation for openfga * Use sqlite implementation from openfga (cherry picked from commit `9ece88d585`) * Chore: Bump github.com/openfga/openfga to v1.8.5 * Chore: Bump github.com/elazarl/goproxy to v1.7.1 * Chore: Pin Prometheus to v1.20.3 for ngalert --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	5 months ago
Matheus Macabu	d1354c6c6f	[release-11.4.3] Chore: Bump Go to 1.23.7 (#101582 ) Chore: Bump Go to 1.23.7	5 months ago
Matheus Macabu	00b587d44b	[release-11.4.3] Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues (#101279 ) Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues (#101268) - CVE-2025-22869 and Go issue https://go.dev/issue/71931. - CVE-2025-22868 and Go issue https://go.dev/issue/71490. (cherry picked from commit `3aedb9159e`)	5 months ago
Witek Bedyk	18103b650f	[release-11.4.3] Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#100593 ) [release-11.4.2] Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 Backport from #95807 Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com>	5 months ago
Kevin Minehart	5f52372e57	[release-11.4.3] CI: Remove unused release_publisher scripts (#101157 ) * CI: Remove unused release_publisher scripts (#101019) * Remove the unused `release_publisher` script. * Remove the "whats new check" in Drone. * Automatically set the What's New URL in releases based on the tagged version. (cherry picked from commit `49e5f77dd1`) * Update package.json * rerun?	5 months ago
xavi	05e182cd49	[release-11.4.3] IAM: fix grafana_com OAuth connector config overriding (#101073 )	5 months ago
Jev Forsberg	24b72cc7b3	Chore: Fix linting error in release branch [11.4.3] (#101093 ) balm0mma/ run goimports -w pkg/services/dashboards/service/dashboard_service.go	5 months ago
github-actions[bot]	13945ba51b	apply security patch: release-11.4.2/318-202502130514.patch commit a9340d4a6e697441c1bf8353b81c273b48bf3916 Author: AgnesToulet <35176601+AgnesToulet@users.noreply.github.com> Date: Tue Feb 11 10:57:05 2025 +0100 Dashboards: Prevent title longer than 5 000 characters (cherry picked from commit f9e0789210004b0bd7902255644ef348ae7b3aa8)	5 months ago
Todd Treece	a3a4c2565a	[release-11.4.2] Metrics: Use correct gatherer in graphite bridge (#100677 ) Metrics: Use correct gatherer in graphite bridge (#100624) (cherry picked from commit `5a74a1a0f6`)	5 months ago
Misi	2451837fb8	[release-11.4.2] IAM: log error when malformed json arrays are found in SSO configs (#100651 ) IAM: Log error when malformed json arrays are found in SSO configs (#99896) (cherry picked from commit `eeadb7e771`) Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com>	5 months ago
Karl Persson	bc6beda11e	[release-11.4.2] AuthN: Refetch user on "ErrUserAlreadyExists" (#100585 ) * AuthN: Refetch user on "ErrUserAlreadyExists" (#100346) * AuthN: Refetch user on "ErrUserAlreadyExists" (cherry picked from commit `0b4c622df8`) * Fix test	5 months ago
grafana-delivery-bot[bot]	e1cde0f2d9	[v11.4.x] Plugin Metrics: Eliminate data race in plugin metrics middleware (#100077 ) Plugin Metrics: Eliminate data race in plugin metrics middleware (#99396) fix: eliminate data race in plugin metrics middleware A data race was detected when multiple goroutines accessed the `MetricsMiddleware` simultaneously. The race occurred because a single `MetricsMiddleware` instance was being shared across goroutines while its `BaseHandler` field was being modified during middleware chain setup. Fix by creating a new `MetricsMiddleware` instance for each middleware chain, while safely sharing the thread-safe Prometheus metrics and plugin registry. This maintains proper metrics collection while eliminating the mutable shared state that caused the race condition. Original error was detected here: ``` WARNING: DATA RACE Read at 0x00c0039c0790 by goroutine 4486: github.com/grafana/grafana-plugin-sdk-go/backend.(*ErrorSourceMiddleware).CallResource() /Users/clord/src/grafana/irm-devstack/.devenv/state/go/pkg/mod/github.com/grafana/grafana-plugin-sdk-go@v0.261.0/backend/error_source_middleware.go:93 +0x40 github.com/grafana/grafana-plugin-sdk-go/backend.BaseHandler.CallResource() ... ``` (cherry picked from commit `e74cf72d99`) Co-authored-by: Christopher Lord <christopher.lord@grafana.com>	6 months ago
Yuri Tseretyan	47c6551b50	[v11.4.x] Alerting: k8s receivers api encrypt existing unencrypted secureFields on update (#99848 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	6 months ago
grafana-delivery-bot[bot]	3e2b2f35af	[v11.4.x] Azure: Correctly set application insights resource values (#99598 ) * Azure: Correctly set application insights resource values (#99214) Correctly set resource values (cherry picked from commit `30ee8b9813`) * Fix test --------- Co-authored-by: Andreas Christou <andreas.christou@grafana.com>	6 months ago
grafana-delivery-bot[bot]	ccb40e3bba	[v11.4.x] MSSQL: Correctly type `UDPConnectionLimit` (#99583 ) MSSQL: Correctly type `UDPConnectionLimit` (#99011) * Correctly type UDPConnectionLimit * Update tests * Handle legacy case (cherry picked from commit `cc09f38421`) Co-authored-by: Andreas Christou <andreas.christou@grafana.com>	6 months ago
grafana-delivery-bot[bot]	227c8392e0	[v11.4.x] OAuth: Return SocialError on membership check failure (#98861 ) OAuth: Return SocialError on membership check failure (#98330) use socialerror (cherry picked from commit `ddca09fb02`) Co-authored-by: Daniel-Davies <33356828+Daniel-Davies@users.noreply.github.com>	6 months ago
grafana-delivery-bot[bot]	a13443ad11	[v11.4.x] ContactPoints: Remove blank lines prefixes in contact point types (#98766 ) ContactPoints: Remove blank lines prefixes in contact point types (#98590) Remove blank lines prefixes in contact point types (cherry picked from commit `7cad430ca7`) Co-authored-by: Selene <selenepinillos@gmail.com>	6 months ago
Ivan Ortega Alba	ede278c767	[v11.4.x] Dashboards: Fixes issue with panel header showing even when hide time override was enabled (#98747 ) Dashboards: Fixes issue with panel header showing even when hide time override was enabled (#95814) * Dashboards: Fixes issue with panel header showing even when hide time override was enabled (cherry picked from commit `6fd3620d50`) Co-authored-by: Torkel Ödegaard <torkel@grafana.com>	6 months ago
grafana-delivery-bot[bot]	ed927a143c	[v11.4.x] Alerting: Fix label escaping in rule export (#98649 ) Alerting: Fix label escaping in rule export (#97985) (cherry picked from commit `25538bcfdf`) Co-authored-by: Moustafa Baiou <moustafa.baiou@grafana.com>	6 months ago
Mariell Hoversholm	72acd7f000	Backport `0a390cc069` from #97823 (#97861 )	7 months ago
grafana-delivery-bot[bot]	626c15c1a5	[v11.4.x] Azure/GCM: Improve error display (#97594 ) * Azure/GCM: Improve error display (#96921) Improve handling of errors (cherry picked from commit `9f75a448d4`) * Update var name and import --------- Co-authored-by: Andreas Christou <andreas.christou@grafana.com>	8 months ago
grafana-delivery-bot[bot]	ac481509c7	[v11.4.x] Alerting: Fix alert rules unpausing after moving rule to different folder (#97583 ) Alerting: Fix alert rules unpausing after moving rule to different folder (#97580) Alerting: Fix alert rules unpaused after moving rule to different folder (cherry picked from commit `f60caf6932`) Co-authored-by: Santiago <santiagohernandez.1997@gmail.com>	8 months ago

1 2 3 4 5 ...

14303 Commits (v11.4.6+security-01)