Matheus Macabu
2e2e89a816
[release-11.5.6] Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 ( #106118 )
...
* Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371
* Static: Fix failing unit test import
2025-06-09 13:06:46 +02:00
Matheus Macabu
c0e2889cea
[release-11.5.5] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace ( #105461 )
...
Dependencies: Bump golang.org/x to latest
2025-05-15 14:52:51 +02:00
Matheus Macabu
f4ad2eb9ec
[release-11.5.5] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.3 to v2.5.0 ( #105441 )
...
Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.3 to v2.5.0
2025-05-15 12:05:26 +02:00
Matheus Macabu
2aa89a90a2
[release-11.5.5] Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 ( #105373 )
...
Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12
2025-05-14 14:17:25 +02:00
Matheus Macabu
919f46426c
[release-11.5.5] Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 ( #105252 )
...
Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0
2025-05-12 14:52:30 +02:00
Matheus Macabu
2e24578a72
[release-11.5.5] Chore: Bump Go version to 1.24.3 ( #105109 )
...
Chore: Bump Go version to 1.24.3
2025-05-08 16:08:08 +02:00
Mariell Hoversholm
bf3f23b558
[release-11.5.4] Go: Bump to 1.24.2 ( #103525 )
...
Go: Bump to 1.24.2
It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless.
Fixes: CVE-2025-22871
Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311
2025-04-08 17:24:33 +02:00
Matheus Macabu
797c085005
[release-11.5.4] Dependencies: Bump github.com/redis/go-redis/v9 to 9.6.3 to address CVE-2025-29923 ( #102865 )
...
Dependencies: Bump github.com/redis/go-redis/v9 from 9.6.1 to 9.6.3
2025-03-26 11:43:27 +01:00
Denis Vodopianov
6932c6af7e
Chore: Update CVE-affected dependencies ( #102709 )
...
Chore: Update CVE-affected golang-gwt dependencies
2025-03-24 16:23:58 +01:00
Matheus Macabu
cd63f38f47
[release-11.5.3] Chore: Bump dependencies to address security issues ( #101627 )
...
* Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4
* Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90
* Chore: Bump golang.org/x/net to v0.36.0
* Chore: Use github.com/moby/moby version 27.4.1 instead of 26.0.0
* Chore: Bump github.com/openfga/openfga to v1.8.5
2025-03-06 10:12:17 +01:00
Matheus Macabu
29d35ec39c
[release-11.5.3] Chore: Bump Go to 1.23.7 ( #101581 )
...
Chore: Bump Go to 1.23.7
2025-03-05 09:59:05 +01:00
Matheus Macabu
9db9662213
[release-11.5.3] Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues ( #101278 )
...
Chore: Update golang.org/x/crypto and golang.org/x/ouath2 to address security issues (#101268 )
- CVE-2025-22869 and Go issue https://go.dev/issue/71931 .
- CVE-2025-22868 and Go issue https://go.dev/issue/71490 .
(cherry picked from commit 3aedb9159e )
2025-02-26 08:42:00 +01:00
Matthew Jacobson
6700924913
[release-11.5.3] Alerting: Fix token-based Slack image upload to work with channel names ( #101078 )
...
Alerting: Fix token-based Slack image upload to work with channel names
Upgrades grafana/alerting to be46240 which includes the v11.5 fix.
2025-02-20 10:28:19 -05:00
Yuri Tseretyan and github-actions[bot]
9c7139ee7a
[v11.5.x] Alerting: k8s receivers api encrypt existing unencrypted secureFields on update ( #99847 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-01-30 16:42:33 -07:00
Mariell Hoversholm
940d71250b
Security: Update to Go 1.23.5 - Backport to v11.5.x ( #99122 )
...
* feat: update to Go 1.23.5
* chore: make drone
* chore: make update-workspace
* fix: 1.23.5, not 1.23.4
* fix: update in Makefile
* CI: Force re-build
2025-01-17 09:30:36 +01:00
Gabriel MABILLE
4c86de2678
Chore: Update authlib ( #98870 )
...
* Chore: Update authlib
* AccessChecker -> AccessClient
2025-01-14 09:42:17 +01:00
Mariell Hoversholm
05ea05d64e
Chore: Bump Go to 1.23.4 ( #98853 )
...
* Chore: Bump Go to 1.23.4
This is done in preparation of updating the App SDK library we import, as it has bumped its Go version to 1.23.4 as well.
* Chore: make update-workspace
2025-01-14 09:28:44 +01:00
dependabot[bot] and github-actions[bot]
1c67f4084c
Bump google.golang.org/api from 0.213.0 to 0.216.0 ( #98905 )
...
* Bump google.golang.org/api from 0.213.0 to 0.216.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.213.0 to 0.216.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.213.0...v0.216.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* update workspace
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-01-13 16:05:48 -05:00
ismail simsek
f74396b51d
Prometheus: Update prometheus to v0.301.0 for utf8 support ( #98848 )
...
* update github.com/prometheus/prometheus to v0.301.0
* have an adapter for infra logger
* go mod tidy and go work sync
* remvoe the cuelang.org/go replace
* remove slog_adapter
2025-01-13 17:14:20 +01:00
Ryan McKinley
98c7861936
Search: Update repository query apis ( #98886 )
2025-01-13 17:05:04 +02:00
Matthew Jacobson
ad1417b732
Alerting: Return default builtin templates in k8s templategroup API and UI ( #96330 )
...
* Alerting: PoC - default template in k8s templategroup API
* Move code to grafana/alerting
* Move validation to admission validation abstraction
* Testing
* Linting
* Workspace update
* Update grafana/alerting hash to the merged commit
* More user-friendly name and remove need for CREATE/UPDATE validation
Use __default__ for k8s object name and UID so that we don't need to restrict
CREATE/UPDATE for similarly named user-owned templates.
2025-01-10 19:53:18 -05:00
Selene
9e5fd78b52
Codegen: Remove pfs codegen dependency from Grafana codebase ( #98840 )
...
* Remove pfs dependency for IAM struct to avoid to import codegen code in main go.mod
* Remove pointer
* Remove dependency cycle
* Update tests
2025-01-10 22:43:40 +02:00
Ryan McKinley
ed39259461
Search: Replace Origin calls with Repository ( #98754 )
2025-01-10 20:27:10 +02:00
Scott Lepper
07d3bdbe72
[search] - filter by starred ( #98651 )
...
[search] - filter by starred
2025-01-09 16:45:04 -05:00
Dave Henderson
ee7ffb7a04
chore(deps): remove obsolete prometheus replace directive ( #96925 )
...
* chore(deps): remove obsolete prometheus replace directive
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* chore: Replace newly-deprecated call
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
---------
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2025-01-09 12:56:42 -05:00
Ryan McKinley
429da7fd68
SQL/Blob: Add support for blob storage to SQL backend ( #98192 )
2025-01-08 22:08:10 +02:00
Ryan McKinley
d1d7c0850f
Search: Explain scores ( #98316 )
2025-01-06 11:25:32 -05:00
Ryan McKinley
6683cdc082
K8s: Update from v0.31.3 to v0.32.0 ( #98507 )
2025-01-06 18:20:35 +03:00
Scott Lepper
83bcd86d18
[search] set folder; case insensitive sort ( #98335 )
...
* [search] set folder
* sort case insensitive
* fix test
2025-01-02 14:58:42 -05:00
Robert Goltz
5a2344ed0c
Chore: Bump dependency golang.org/x/net to v0.33.0 - fix: CVE-2024-45338 ( #98340 )
...
* Chore: golang.org/x/net update to fix CVE-2024-45338
* Chore: golang.org/x/net update to fix CVE-2024-45338 - resolve trivy-finding + 2nd run make update-workspace
2025-01-02 11:22:25 -07:00
Gabriel MABILLE
efb7cc0343
Chore: Authlib upgrade ( #98319 )
...
* Chore: Authlib upgrade
* Upgrade authlib
* Uncommit file
2024-12-20 15:48:35 +01:00
a8f347144d
wire up the ui to the new search api ( #97866 )
...
wire up the ui to the new search api
Co-authored-by: Scott Lepper <scott.lepper@gmail.com >
Co-authored-by: Ryan McKinley <ryantxu@gmail.com >
Co-authored-by: Dan Cech <dcech@grafana.com >
2024-12-19 13:21:48 -05:00
Georges Chaudy
3fe2227c82
[auth] make id-token optional ( #97831 )
...
make idtoken optional
enure there is always an identity in the context
fix: update token
fix: now it should work
fix: now it should work
2024-12-17 13:28:00 +02:00
Stephanie Hingtgen
8f6e9f8ed0
Restores in app platform ( #97582 )
2024-12-13 16:55:43 -06:00
Robert Goltz and Mariell Hoversholm
0a390cc069
Chore: Bump dependency golang.org/x/crypto to v0.31.0 - fix: CVE-2024-45337 ( #97823 )
...
* Update dependency golang.org/x/crypto to v0.31.0
* Update dependency golang.org/x/crypto to v0.31.0 - based on Trivy Scan
* Chore: go mod tidy
* Chore: make update-workspace
* Chore: manually update more sum files
---------
Co-authored-by: Mariell Hoversholm <mariell.hoversholm@grafana.com >
2024-12-12 14:21:46 +01:00
Ryan McKinley
ea17b79c09
Search: Return counts for values within an folder/repository ( #97534 )
2024-12-10 20:37:37 +02:00
owensmallwood
d762a96436
Unified Storage: Init at startup, fix traces, and speed up indexing ( #97529 )
...
* dont lazy init unified storage
* Inits index when creating new resource server. Fixes trace propagation by passing span ctx. Update some logging.
* Use finer grained cache locking when building indexes to speed things up. Locking the whole function was slowing things down.
* formatting
* linter fix
* go mod
* make update-workspace
* fix workspaces check error
* update dependency owner in mod file
* wait 1 second before querying metrics
* try with big timeout, see if fixes CI. Wont fail locally.
* skips postgres integration test. Only fails in drone. Will fix later.
* put delay back to 500 ms
2024-12-09 22:32:19 -06:00
owensmallwood
9b9cb81199
Unified Storage Search: Check error first after building index ( #97504 )
...
check error first after building index
2024-12-05 21:14:04 +02:00
Ryan McKinley
8165258a2d
Storage: Query stats within a namespace ( #97403 )
2024-12-05 13:58:13 +03:00
owensmallwood
70c9c3889f
Unified Storage Indexer: Add back metrics ( #97310 )
...
* Adds back indexer metrics. Uses config values instead of hardcoded ones.
* cast to int64
* remove unused func
* Index metrics impl doesn't depend on Bleve. Adds a TotalDocs func to SearchBackend interface.
* adds config setting for index_min_count
* rename arg
* rename metric label to namespace instead of slug
* adds default "do nothing" case to satisfy linter
* moves bleve index metrics to search package
* make bleve backend private, dont need to pass in prom reg
* imports
* adds bleve metrics to resource package to avoid circular deps
2024-12-04 15:02:40 -06:00
Ryan McKinley
9d89d8757f
Search: Build index from resource stats ( #97320 )
2024-12-03 20:20:27 +03:00
Karl Persson
3a17d0c927
IAM: align AuthInfo interface ( #97228 )
...
* Update to use updated interface
2024-12-03 15:11:17 +01:00
Ryan McKinley
219411f894
K8s: Upgrade v0.31.1 -> v0.31.3 ( #96964 )
2024-12-02 12:49:24 +02:00
Georges Chaudy
f6124344ba
authnz: Fix panic in the authenticator and rename metric ( #97150 )
...
* Fix: panic
* suggestion
2024-11-28 14:03:54 +02:00
Ryan McKinley
f6ccf976e5
UnifiedSearch: Use ResourceIndex from dashboards apiserver (v0alpha1 only) ( #96939 )
2024-11-27 07:57:53 +02:00
Karl Persson
3990637af9
IAM: remove duplicated functions ( #96989 )
...
* Remove duplicated function and use the one provided by claims package
2024-11-26 09:22:45 +01:00
Ryan McKinley
94262fd095
Search: expose search on dashboard apiserver (v0alpha1) ( #96907 )
2024-11-22 22:26:56 +02:00
Ryan McKinley and Scott Lepper
c6848d4b68
UnifiedSearch: Introduce a ResourceIndex interface and bleve implementation ( #96826 )
...
Co-authored-by: Scott Lepper <scott.lepper@gmail.com >
2024-11-22 16:44:06 +03:00
Georges Chaudy
8bb59c64f0
unistore: handle auth when fallback is used ( #96772 )
...
* handle auth when fallback is used
* handle auth when fallback is used
* add traces
2024-11-21 12:21:22 +02:00
Ryan McKinley
0cb6c3d7bf
UnifiedSearch: Introduce a DocumentBuilder interface ( #96738 )
2024-11-21 07:53:25 +02:00