grafana

Commit Graph

Author	SHA1	Message	Date
github-actions[bot]	5a2b1c3d26	apply security patch: release-11.4.6/433-202505231801.patch	1 month ago
Vadim Stepanov	49f3fa91b3	[release-11.4.6] Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106484 ) Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106409) (cherry picked from commit `1df888c517`)	1 month ago
github-actions[bot]	fbc9904360	apply security patch: release-11.4.5/404-202504151210.patch	2 months ago
William Wernert	998dcbea5d	[release-11.4.5] Alerting: Ensure field validators return the proper type (#105282 ) Alerting: Ensure field validators return the proper type (#104050) * Ensure field validators return the proper type This ensures correct error propagation through services up to the API layer. * Move error wrapping up to call site (cherry picked from commit `820c338414`)	2 months ago
xavi	1285f8ca5a	[release-11.4.4] [IAM] Prepend AppSubURL to redirectURI before validating it (#104084 ) [IAM] Prepend AppSubURL to redirectURI before validating it (#103475) (cherry picked from commit `5053aa576d`)	3 months ago
Mariell Hoversholm	ef39d1ec35	[release-11.4.4] Go: Bump to 1.24.2 (#103527 ) * Go: Bump to 1.24.2 It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless. Fixes: CVE-2025-22871 Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311 * CI: Update golangci-lint	3 months ago
Misi	182fd8388f	[release-11.4.4] Auth: Fix SAML user IsExternallySynced not being set correctly (#103098 ) Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) (cherry picked from commit `345757c3ae`) Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com>	4 months ago
Misi	4d8e491fef	[release-11.4.4] Auth: Introduce authn.SSOClientConfig to get client config from SSOSettings service (#103009 ) Auth: Introduce authn.SSOClientConfig to get client config from SSOSettings service (#94618) * wip * possible solution * Separate interface for SSO settings clients * Rename interface * Fix tests * Rename * Change GetClientConfig to comma ok idiom (cherry picked from commit `50a635bc7e`)	4 months ago
Matthew Jacobson	e824a602e0	[release-11.4.3] Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101841 ) * Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101263) * Test covering Get+Save interaction for newly secret fields * Alerting: Re-encrypt existing contact points before get and patch (cherry picked from commit `b73c59547c`) * googlechat url test fix (cherry picked from commit `0f4af56177`)	4 months ago
Robby Milo	2b9a49a63e	[v11.4] Remove relref shortcodes (#101716 ) * manually replce all shared relrefs * relref replace - previous grafana versions * Merge branch 'master' into robbymilo/relref-replace-grafana-previous * update test * prettier	5 months ago
Matheus Macabu	43fe75f8a7	[release-11.4.3] Chore: Bump dependencies to address security issues (#101636 ) * Chore: Bump golang.org/x/net to v0.36.0 * Chore: Bump filippo.io/age to v1.2.1 * Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90 * Chore: Bump github.com/moby/moby to v27.5.1 * Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4 * Zanzana: bump openfga version (#94485) * Bump openfga * Remove internall sqlite implementation for openfga * Use sqlite implementation from openfga (cherry picked from commit `9ece88d585`) * Chore: Bump github.com/openfga/openfga to v1.8.5 * Chore: Bump github.com/elazarl/goproxy to v1.7.1 * Chore: Pin Prometheus to v1.20.3 for ngalert --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	5 months ago
Jev Forsberg	24b72cc7b3	Chore: Fix linting error in release branch [11.4.3] (#101093 ) balm0mma/ run goimports -w pkg/services/dashboards/service/dashboard_service.go	5 months ago
github-actions[bot]	13945ba51b	apply security patch: release-11.4.2/318-202502130514.patch commit a9340d4a6e697441c1bf8353b81c273b48bf3916 Author: AgnesToulet <35176601+AgnesToulet@users.noreply.github.com> Date: Tue Feb 11 10:57:05 2025 +0100 Dashboards: Prevent title longer than 5 000 characters (cherry picked from commit f9e0789210004b0bd7902255644ef348ae7b3aa8)	5 months ago
Karl Persson	bc6beda11e	[release-11.4.2] AuthN: Refetch user on "ErrUserAlreadyExists" (#100585 ) * AuthN: Refetch user on "ErrUserAlreadyExists" (#100346) * AuthN: Refetch user on "ErrUserAlreadyExists" (cherry picked from commit `0b4c622df8`) * Fix test	5 months ago
grafana-delivery-bot[bot]	e1cde0f2d9	[v11.4.x] Plugin Metrics: Eliminate data race in plugin metrics middleware (#100077 ) Plugin Metrics: Eliminate data race in plugin metrics middleware (#99396) fix: eliminate data race in plugin metrics middleware A data race was detected when multiple goroutines accessed the `MetricsMiddleware` simultaneously. The race occurred because a single `MetricsMiddleware` instance was being shared across goroutines while its `BaseHandler` field was being modified during middleware chain setup. Fix by creating a new `MetricsMiddleware` instance for each middleware chain, while safely sharing the thread-safe Prometheus metrics and plugin registry. This maintains proper metrics collection while eliminating the mutable shared state that caused the race condition. Original error was detected here: ``` WARNING: DATA RACE Read at 0x00c0039c0790 by goroutine 4486: github.com/grafana/grafana-plugin-sdk-go/backend.(*ErrorSourceMiddleware).CallResource() /Users/clord/src/grafana/irm-devstack/.devenv/state/go/pkg/mod/github.com/grafana/grafana-plugin-sdk-go@v0.261.0/backend/error_source_middleware.go:93 +0x40 github.com/grafana/grafana-plugin-sdk-go/backend.BaseHandler.CallResource() ... ``` (cherry picked from commit `e74cf72d99`) Co-authored-by: Christopher Lord <christopher.lord@grafana.com>	6 months ago
Yuri Tseretyan	47c6551b50	[v11.4.x] Alerting: k8s receivers api encrypt existing unencrypted secureFields on update (#99848 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	6 months ago
grafana-delivery-bot[bot]	a13443ad11	[v11.4.x] ContactPoints: Remove blank lines prefixes in contact point types (#98766 ) ContactPoints: Remove blank lines prefixes in contact point types (#98590) Remove blank lines prefixes in contact point types (cherry picked from commit `7cad430ca7`) Co-authored-by: Selene <selenepinillos@gmail.com>	6 months ago
grafana-delivery-bot[bot]	ed927a143c	[v11.4.x] Alerting: Fix label escaping in rule export (#98649 ) Alerting: Fix label escaping in rule export (#97985) (cherry picked from commit `25538bcfdf`) Co-authored-by: Moustafa Baiou <moustafa.baiou@grafana.com>	6 months ago
grafana-delivery-bot[bot]	ac481509c7	[v11.4.x] Alerting: Fix alert rules unpausing after moving rule to different folder (#97583 ) Alerting: Fix alert rules unpausing after moving rule to different folder (#97580) Alerting: Fix alert rules unpaused after moving rule to different folder (cherry picked from commit `f60caf6932`) Co-authored-by: Santiago <santiagohernandez.1997@gmail.com>	8 months ago
grafana-delivery-bot[bot]	4428bf7025	[v11.3.x] Alerting: Fix incorrect 500 code on missing alert rule dashboardUID / panelID (#96775 ) Alerting: Fix incorrect 500 code on missing alert rule dashboardUID / panelID (#96491) (cherry picked from commit `64c93217ff`) Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com>	8 months ago
Alexander Akhmetov	98be4ac047	[v11.3.x] Alerting: Update state manager to have immutable state in cache (#96843 ) * Alerting: Update state manager to have immutable state in cache (#95985) * create a new state and set at the end * propagate labels datasource_uid and ref_id from current state if it's error * copy the state when apply to all (cherry picked from commit `420db99d16`) * Remove unused states variables --------- Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>	8 months ago
grafana-delivery-bot[bot]	a09dcda92d	[v11.3.x] Alerting: Fix per-receiver RBAC for receivers with long names (#95165 ) Alerting: Fix per-receiver RBAC for receivers with long names (#95084) * Implement uidToResourceID * add middleware * Move uidToResourceID to alerting package * Only hash uid if it's too long * Use hashed uid in access control * Move ReceiverUidToResourceId to ScopeProvider * resolve uid in middleware only if param exists * Tests * Linting --------- Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com> (cherry picked from commit `4aad44e848`) Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com>	8 months ago
lean.dev	9241bc5f5c	[v11.3.x] MigrationAssistant: Restrict dashboards, folders and datasources by the org id of the signed in user (#96345 ) apply security patch: v11.3.x/194-202410181505.patch	8 months ago
Fayzal Ghantiwala	8bc0014845	[v11.3.x] Alerting: Make context deadline on AlertNG service startup configurable (#96135 ) Alerting: Make context deadline on AlertNG service startup configurable (#96053) * Make alerting context deadline configurable * Remove debug logs * Change default timeout * Update tests (cherry picked from commit `1fdc48faba`)	8 months ago
grafana-delivery-bot[bot]	0e0a2c0371	[v11.3.x] Alerting: Fix saving advanced mode toggle state in the alert rule editor (#95981 ) Alerting: Fix saving advanced mode toggle state in the alert rule editor (#95924) (cherry picked from commit `4ce1abc6f9`) Co-authored-by: Alexander Akhmetov <me@alx.cx>	9 months ago
grafana-delivery-bot[bot]	855dcd7b7b	[v11.3.x] Migration: Remove table aliasing in delete statement to make it work for mariadb (#95232 ) Migration: Remove table aliasing in delete statement to make it work for mariadb (#95226) Migration: remove table aliasing in delete statement to make it work in mariadb (cherry picked from commit `6f7528f896`) Co-authored-by: Karl Persson <kalle.persson@grafana.com>	9 months ago
grafana-delivery-bot[bot]	d763aae5f2	[v11.3.x] Service Accounts: Run service account creation in transaction (#94803 ) Service Accounts: Run service account creation in transaction (#94744) * run service account creation DB queries in transaction * extract the signed in user from the context * undo unneeded change * don't error out if a user is not found * Update pkg/services/serviceaccounts/manager/service.go Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update pkg/services/serviceaccounts/manager/service.go Co-authored-by: Karl Persson <kalle.persson@grafana.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com> (cherry picked from commit `ca1fd028a2`) Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	9 months ago
grafana-delivery-bot[bot]	5889d680e9	[v11.3.x] Folders: Add admin permissions upon creation of a folder w. SA (#95365 ) Folders: Add admin permissions upon creation of a folder w. SA (#95072) * add admin permissions upon creation of a folder w. SA * Update pkg/services/folder/folderimpl/folder.go Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Grant service account permissions for creation of dashboards * Grant service account admin permissions upon creating a datasource * fetch user using the userservice with the userid * Revert "fetch user using the userservice with the userid" This reverts commit `23cba78752`. * revert back to original datasource creation --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com> (cherry picked from commit `9ab064bfc5`) Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	9 months ago
grafana-delivery-bot[bot]	86deb2b4c4	[v11.3.x] Auth: Increase name_id and session_id length to 1024 in user_external_session (#95360 ) Auth: Increase name_id and session_id length to 1024 in user_external_session (#95352) Increase name_id and session_id length to 1024 (cherry picked from commit `b8b7c7901c`) Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	9 months ago
grafana-delivery-bot[bot]	2e81653b68	[v11.3.x] Anonymous User: Adds validator service for anonymous users (#94994 ) Anonymous User: Adds validator service for anonymous users (#94700) (cherry picked from commit `3438196010`) Co-authored-by: lean.dev <34773040+leandro-deveikis@users.noreply.github.com>	9 months ago
grafana-delivery-bot[bot]	bdf41feda9	[v11.3.x] Alerting: Fix remote Alertmanager readiness check path (#95066 ) Alerting: Fix remote Alertmanager readiness check path (#95063) (cherry picked from commit `4f8f82f5f1`) Co-authored-by: Santiago <santiagohernandez.1997@gmail.com>	9 months ago
grafana-delivery-bot[bot]	2a7d8279a2	[v11.3.x] OrgSync: Do not set default Organization for a user to a non-existent Organization (#94613 ) OrgSync: Do not set default Organization for a user to a non-existent Organization (#94537) Do not set default org for a user to a missing org Co-authored-by: Karl Persson <kalle.persson@grafana.com> (cherry picked from commit `c872cad879`) Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	9 months ago
Karl Persson	2d0ea60017	ServiceAccounts: Run migration in batches (#94429 ) * ServiceAccounts: Run migration in batches	9 months ago
Scott Lepper	c2fb2dcfbe	wire up unified search from the ui; add basic search support (#94358 ) * wire up search from the ui; add basic search support	9 months ago
Ezequiel Victorero	19844220db	Playlists: Remove from menu for users without permissions (#94403 )	9 months ago
Matheus Macabu	96384b5181	CloudMigrations: cover cases where library panel has no folder (#94405 )	9 months ago
Andres Martinez Gotor	02f5e1f930	Add Sandbox settings feature flag (#94388 )	9 months ago
Gabriel MABILLE	b90e09e966	Fix: Deduplicate OrgID in SA logins (#94378 ) * Fix: Deduplicate OrgID in SA logins	10 months ago
Misi	bd7850853e	Auth: Attach external session info to Grafana session (#93849 ) * initial from poc changes * wip * Remove public external session service * Update swagger * Fix merge * Cleanup * Add backgroud service for cleanup * Add auth_module to user_external_session * Add tests for token revocation functions * Add secret migration capabilities for user_external_session fields * Cleanup, refactor to address feedback * Fix test	10 months ago
Jo	9eea0e99fc	Chore: Use UIDs as identifiers for teams frontend (#94345 ) * Team frontend now uses UIDs as identifiers. Safe to revert	10 months ago
Jo	945dd052b1	Fix: Ensure SA migrations doesn't hit migrated SAs if rerun (#94347 ) * ensure mig doesn't hit migrated SAs if rerun * Fix small issue with the test --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Yuri Tseretyan	b8df574aba	Alerting: Support optimistic concurrency in notification policies service (#93932 ) * update notification policy provisioning service to support optimistic concurrency * rewrite tests and include concurrency tests	10 months ago
Yuri Tseretyan	4c1cb79069	Alerting: Add access control to receiver status API (#94287 )	10 months ago
Ieva	d7aca7d0fe	Role mapping: Add `group_mapping_uid` column to `user_role` table (#93810 ) * add group_mapping_uid column to user_role table * add group mapping UID to user role struct	10 months ago
Misi	0539ccf10d	Auth: Fix redirection when auto_login is enabled (#94311 ) * Fix for SAML auto login * Fix for OAuth auto login	10 months ago
Matheus Macabu	6bd2f9f3ea	CloudMigrations: remove duplicated import on test (#94322 )	10 months ago
Matheus Macabu	712314e832	CloudMigrations: create `onPremToCloudMigrationsAlerts` feature toggle in experimental stage (#94257 ) CloudMigrations: create onPremToCloudMigrationsAlerts feature toggle in experimental stage This feature toggle requires the `onPremToCloudMigrations` toggle to be enabled in order to work. Given migration of Alerts (and child resources) is more critical, this flag was separated from the main one.	10 months ago
Matheus Macabu	e89aef57cb	CloudMigrations: wire ngalert to cloud migration service and add slicesext.Map helper (#94254 ) * CloudMigrations: add slicesext.Map function to simplify dto creation * CloudMigrations: wire ngalert to cloud migration service	10 months ago
Matheus Macabu	9af095d730	CloudMigrations: Add data types for alerts resources (#94251 )	10 months ago
Dana Axinte	d88be2819d	CloudMigrations: Store parent folder name in cloud_migration_resource table (#94009 ) * use name in fe * store parent folder name in local db * clean up * tiny test * trial react * rename to parent name * go lint * generate api and ts * go tests * rearrange * clean * update with suggestions from josh * make library elements work * updates from comments * global migration types * parent name for alter table	10 months ago

1 2 3 4 5 ...

7805 Commits (v11.4.6+security-01)