82 Commits (v11.4.6+security-01)

Author	SHA1	Message	Date
Matheus Macabu	2fdda12414	[release-11.4.6] Dependencies: Bump Go to v1.24.4 (#106569) ... Dependencies: Bump Go to v1.24.4	1 month ago
Matheus Macabu	3112d75a5b	[release-11.4.6] Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 (#106119) ... * Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 * Static: Add unit tests for security fix	1 month ago
Matheus Macabu	e4d00a3251	[release-11.4.5] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace (#105466) ... Dependencies: Bump golang.org/x to latest	2 months ago
Matheus Macabu	323e20a011	[release-11.4.5] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0 (#105445) ... Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0	2 months ago
Matheus Macabu	9465bbea7e	[release-11.4.5] Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 (#105375) ... Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12	2 months ago
Matheus Macabu	8eefb0dd8f	[release-11.4.5] Chore: Bump Go version to 1.24.3 (#105110) ... Chore: Bump Go version to 1.24.3	2 months ago
Mariell Hoversholm	ef39d1ec35	[release-11.4.4] Go: Bump to 1.24.2 (#103527) ... * Go: Bump to 1.24.2 It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless. Fixes: CVE-2025-22871 Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311 * CI: Update golangci-lint	3 months ago
Denis Vodopianov	6e612a368c	Chore: Revert [release-11.4.4] Replace bingo-managed tools with go tool directive. (#102691) (#102861) ... Revert "[release-11.4.3] Chore: Replace bingo-managed tools with go tool directive. (#102691)" This reverts commit 046295c54e.	4 months ago
Denis Vodopianov	046295c54e	[release-11.4.3] Chore: Replace bingo-managed tools with go tool directive. (#102691) ... * Chore: Replace bingo-managed tools with go tool directive. (#101890) (cherry picked from commit de6a48a233) * running go mod tidy * updating go to silence trivy * downgrade cue to the version defined in branch * remove cog cue and drone from go tools * add cue back to makefile * remove junk from go workspace * remove junk from go workspace	4 months ago
Matheus Macabu	43fe75f8a7	[release-11.4.3] Chore: Bump dependencies to address security issues (#101636) ... * Chore: Bump golang.org/x/net to v0.36.0 * Chore: Bump filippo.io/age to v1.2.1 * Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90 * Chore: Bump github.com/moby/moby to v27.5.1 * Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4 * Zanzana: bump openfga version (#94485) * Bump openfga * Remove internall sqlite implementation for openfga * Use sqlite implementation from openfga (cherry picked from commit 9ece88d585) * Chore: Bump github.com/openfga/openfga to v1.8.5 * Chore: Bump github.com/elazarl/goproxy to v1.7.1 * Chore: Pin Prometheus to v1.20.3 for ngalert --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	5 months ago
Matheus Macabu	d1354c6c6f	[release-11.4.3] Chore: Bump Go to 1.23.7 (#101582) ... Chore: Bump Go to 1.23.7	5 months ago
Matheus Macabu	00b587d44b	[release-11.4.3] Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues (#101279) ... Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues (#101268) - CVE-2025-22869 and Go issue https://go.dev/issue/71931. - CVE-2025-22868 and Go issue https://go.dev/issue/71490. (cherry picked from commit 3aedb9159e)	5 months ago
Mariell Hoversholm	72acd7f000	Backport 0a390cc069 from #97823 (#97861)	7 months ago
grafana-delivery-bot[bot]	48d083d495	[v11.3.x] Chore: Fix population of details when converting from errutil errors to K8s error (#94998) ... Chore: Fix population of details when converting from errutil errors to K8s error (#94996) (cherry picked from commit 672d5f92f2) Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>	9 months ago
Todd Treece	a4d919c157	Chore: Update k8s.io dependencies to v0.31.1 (#93696)	10 months ago
Santiago	aa77023008	Alerting: Fix panics when attempting to create an Alertmanager after failing (#94023)	10 months ago
Karl Persson	0160f4f72c	RBAC: Add legacy authorization checks to service accounts (#93753) ... * Extract a helper funtion to perform list with authorization checks * Add k8s verb to utils package * Construct default mapping when no custom mapping is passed * Configure authorization checks for service accounts * Fix helper and add filtering to service accounts	10 months ago
Gabriel MABILLE	6b89e3f711	go.mod: Authlib update (#93642)	10 months ago
Claudiu Dragalina-Paraipan	a8b07b0c81	[authn] use authlib client+interceptors for in-proc mode (#93124) ... * Add authlib gRPC authenticators for in-proc mode * implement `StaticRequester` signing in the unified resource client - [x] when the `claims.AuthInfo` value type is `identity.StaticRequester`, and there's no ID token set, create an internal token and sign it with symmetrical key. This is a workaround for `go-jose` not offering the possibility to create an unsigned token. - [x] update `IDClaimsWrapper` to support the scenario above - [x] Switch to using `claims.From()` in `dashboardSqlAccess.SaveDashboard()` --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Karl Persson	2e38329026	RBAC: Add required component to perform access control checks for user api when running single tenant (#93104) ... * Unexport store and create new constructor function * Add ResourceAuthorizer and LegacyAccessClient * Configure checks for user store * List with checks if AccessClient is configured * Allow system user service account to read all users --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	10 months ago
Todd Treece	d1ffcc22d9	Playlists: Migrate to App SDK codegen (#93246)	10 months ago
Ryan McKinley	9210414782	K8s: support unstructured spec+status mutation with GrafanaMetaAccessor (#92970)	10 months ago
Claudiu Dragalina-Paraipan	3aeb8d390e	[authn] update `authlib` and `claims` versions (#93098) ... * update authlib version to latest * make update-workspace -- 2nd run * manual cleanup of old version	10 months ago
ismail simsek	6548ea377d	Chore: Bump grafana-plugin-sdk-go version to v0.247.0 (#93095) ... * Bump grafana-plugin-sdk-go version to v0.247.0 * make update-workspace * make update-workspace	10 months ago
Dave Henderson	e1090db5d9	Chore: Bump Go to 1.23.1 (#93007) ... Signed-off-by: Dave Henderson <dave.henderson@grafana.com>	11 months ago
Claudiu Dragalina-Paraipan	1ce43b4c42	[authn] update `authlib` and `claims` versions (#92987) ... * update authlib and claims versions * 2nd make update-workspace * manual fix	11 months ago
Santiago	87f4df4bc3	Remote Alertmanager: update github.com/go-openapi/runtime (v0.27.1 -> v0.28.0) (#92951)	11 months ago
Marcus Efraimsson	0a337ff3b3	Chore: Update SDK to v0.246.0 (#92938)	11 months ago
Ryan McKinley	cb484f9883	K8s: Move ResourceInfo from common to utils (#92924)	11 months ago
Todd Treece	85ef26a85d	K8s: Add generic support for status (#92378)	11 months ago
Charandas	af2e79aa83	K8s: namespace mapper should use authlib's util (#92332)	11 months ago
Todd Treece	2f01286034	Storage: Add go.mod for apistore (#92224)	11 months ago
Dave Henderson	df3d8915ba	Chore: Bump Go to 1.23.0 (#92105) ... * chore: Bump Go to 1.23.0 Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * update swagger files Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * chore: update .bingo/README.md formatting to satisfy prettier Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * chore(lint): Fix new lint errors found by golangci-lint 1.60.1 and Go 1.23 Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * keep golden file * update openapi * add name to expected output * chore(lint): rearrange imports to a sensible order Signed-off-by: Dave Henderson <dave.henderson@grafana.com> --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	11 months ago
Ryan McKinley	2e60f28044	Auth: remove id token flag (#92209)	11 months ago
Karl Persson	b6540e2a18	SSOSettings: Add api:s (#92018) ... * apis: add sso setting resource * Implement Storage for sso * Rename packages * Merge identity and sso package * Update table format and expose GetNestedBool * Restructure identity api package	11 months ago
Will Browne	704b07b3f0	Plugins: Bump plugin SDK to latest (0.244.0) (#92057) ... bump SDK	11 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	11 months ago
Karl Persson	5105fb7f3a	Identity: remove GetIDClaims (#91901) ... remove GetIDClaims	11 months ago
Todd Treece	da6b02a2b0	K8s: Add k8s codegen PR check (#91903)	11 months ago
Karl Persson	8d36111420	IDForwarding: Set identity type and uid (#91830) ... * Set identity type and uid * Set uid without prefix * Update authlib version * Update to new claim name	11 months ago
Todd Treece	4ce82d3f14	Chore: Update k8s.io dependencies to v0.30.0 (#91851)	11 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	11 months ago
Karl Persson	7f1ae1cd54	Identity: Update authlib to version that has correct commit to claims (#91784) ... * Update authlib to version that has correct commit to claims	11 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	11 months ago
Andreas Christou	24c9aad5bb	Bump grafana-azure-sdk-go and related dependencies (#91124) ... * Bump Azure SDK and related dependencies * Update go.mods * update-workspace * Update go files	11 months ago
Ryan McKinley	243c0935fc	Auth: Use claims.AuthInfo in requester (#91739)	11 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	11 months ago
Todd Treece	7f155b2b6f	Chore: Add go workspace scripts (#91707)	12 months ago
Todd Treece	b4126d3bce	Chore: Update k8s.io dependencies (#91692)	12 months ago
Ryan McKinley	a223c46506	APIServer: Make TableConverter part of ResourceInfo (#91520)	12 months ago