Matheus Macabu
46f53b9008
[release-11.3.7] Dependencies: Bump github.com/redis/go-redis/v9 from v9.1.0 to v9.6.3 ( #105523 )
...
Dependencies: Bump github.com/redis/go-redis/v9 from v9.1.0 to v9.6.3
2025-05-19 09:48:24 +02:00
Matheus Macabu
e2b1120bdb
[release-11.3.7] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace ( #105467 )
...
Dependencies: Bump golang.org/x to latest
2025-05-15 14:52:57 +02:00
Matheus Macabu
63e8ce5b89
[release-11.3.7] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0 ( #105447 )
...
Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0
2025-05-15 12:05:37 +02:00
Matheus Macabu
d34b905c73
[release-11.3.7] Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 ( #105376 )
...
Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12
2025-05-14 14:19:08 +02:00
Matheus Macabu
d8b2f416c7
[release-11.3.7] Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0 ( #105254 )
...
Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0
2025-05-12 14:52:16 +02:00
Matheus Macabu
9434a6b6d5
[release-11.3.7] Chore: Bump Go version to 1.24.3 ( #105112 )
...
Chore: Bump Go version to 1.24.3
2025-05-08 16:08:43 +02:00
Mariell Hoversholm
27d1c63107
[release-11.3.6] Go: Bump to 1.24.2 ( #103528 )
...
* Go: Bump to 1.24.2
It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless.
Fixes: CVE-2025-22871
Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311
* CI: Update golangci-lint
(cherry picked from commit 1c4284a8b4 )
2025-04-09 08:44:16 +02:00
Denis Vodopianov
22d7a474b3
Chore: Update libs with CVE in dependencies ( #102710 )
...
Chore: Update CVE-affected golang-gwt dependencies
2025-03-24 16:23:14 +01:00
Matheus Macabu and Karl Persson
534a96a72c
[release-11.3.5] Chore: Bump dependencies to address security issues ( #101641 )
...
* Chore: Bump golang.org/x/net to v0.36.0
* Chore: Bump filippo.io/age to v1.2.1
* Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90
* Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4
* Chore: Bump github.com/moby/moby to v27.5.1
* Zanzana: bump openfga version (#94485 )
* Bump openfga
* Remove internall sqlite implementation for openfga
* Use sqlite implementation from openfga
(cherry picked from commit 9ece88d585 )
* Chore: Bump github.com/openfga/openfga to v1.8.5
* Chore: Bump github.com/elazarl/goproxy to v1.7.1
* Chore: Pin Prometheus to v1.20.3 for ngalert
---------
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
2025-03-07 10:14:12 +01:00
Matheus Macabu
4d5714a61f
[release-11.3.5] Chore: Bump Go to 1.23.7 ( #101583 )
...
Chore: Bump Go to 1.23.7
2025-03-05 09:57:06 +01:00
Moustafa Baiou
78c9437129
[release-11.3.5] Alerting: Fix token-based Slack image upload to work with channel names ( #101488 )
...
backport of #97985 and #100988 to v11.3.x
2025-03-03 11:12:00 -05:00
Matheus Macabu
9a2ab39cf0
[release-11.3.5] Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues ( #101283 )
...
Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues (#101268 )
- CVE-2025-22869 and Go issue https://go.dev/issue/71931 .
- CVE-2025-22868 and Go issue https://go.dev/issue/71490 .
(cherry picked from commit 3aedb9159e )
2025-02-26 08:42:10 +01:00
Witek Bedyk and Matheus Macabu
8f47143c97
[release-11.3.5] Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 ( #100818 )
...
* [release-11.4.2] Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1
Backport from #95807
(cherry picked from commit ec33c739a8 )
* Run make update-workspace
---------
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
2025-02-24 11:07:16 +01:00
Yuri Tseretyan and github-actions[bot]
120d198e42
[v11.3.x] Alerting: k8s receivers api encrypt existing unencrypted secureFields on update ( #99849 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-01-30 16:44:03 -07:00
Mariell Hoversholm
4605a8e751
Security: Update to Go 1.23.5 - Backport to v11.3.x ( #99124 )
...
* feat: update to Go 1.23.5
* chore: make drone
* chore: make update-workspace
* CI: Force re-build
* build: update mariadb connection
The new Alpine base that the Golang images are built on no longer trust the CA of MySQL.
This is a backport of: https://github.com/grafana/grafana/pull/98857
(cherry picked from commit e1bb8ccb79 )
2025-01-17 09:33:25 +01:00
Adam Yeats
c5000228dc
[v11.3.x] MSSQL: Bump go-mssqldb to v1.8.0 ( #97834 )
...
MSSQL: Bump `go-mssqldb` to v1.8.0 (#97773 )
(cherry picked from commit 60f093e3d3 )
2024-12-13 16:19:01 +00:00
Mariell Hoversholm
d0a31e48d9
Backport 0a390cc069 from #97823 ( #97860 )
2024-12-12 16:10:38 +01:00
Sam Jewell
df57ba1b70
[v11.3.x] ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability ( #94955 )
...
ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94942 )
* disable sql expressions
remove duckdb ref
* Run `make update-workspace`
---------
Co-authored-by: Scott Lepper <scott.lepper@gmail.com >
(cherry picked from commit ea71201ddc )
2024-10-18 12:46:53 +01:00
Todd Treece
a4d919c157
Chore: Update k8s.io dependencies to v0.31.1 ( #93696 )
2024-10-03 15:50:15 -04:00
Misi
ee8bb63d2d
Auth: Replace jmespath/go-jmespath with jmespath-community/go-jmespath ( #94203 )
...
Replace jmespath/go-jmespath with jmespath-community/go-jmespath
2024-10-03 15:43:15 +02:00
Isabella Siu
4be5ccaece
Cloudwatch: Update grafana-aws-sdk ( #94155 )
...
Cloudwatch: update grafana-aws-sdk
2024-10-02 14:22:41 -04:00
Robert Goltz and Jo
299fe3e5b1
Chore: bump module github.com/rs/cors from v1.10.1 to v1.11.1 ( #93363 )
...
* Chore: Update module github.com/rs/cors to v1.11.0
* Fix: rs/cors to v1.11.1 to benefit from fix regarding support for multiple Access-Control-Request-Headers field, e.g. API Gateway
* update go.sum
---------
Co-authored-by: Jo <me@jguer.space >
2024-10-01 10:59:23 +02:00
6a3eb276ef
Grafana Indexing PoC: Adds feature flag and gRPC endpoint ( #93356 )
...
* adds Filter gRPC and make protobuf
* adds route for querying the filter gRPC
* wires up Filter gRPC call
* [WIP] index from start
* renames gRPC endpoint to "Search"
* adds /apis/search route into k8s routes. Hacky for now.
* updates readme - wrong casing
* adds feature toggle for unified storage search
* hides US search behind feature flag. Clean up print statements.
* removes indexer - will be added in another PR
* Search: Add API Builder
* adds required method
* implementing UpdateAPIGroupInfo (WIP)
* adds groupversion
* commenting out for now
* remove unneeded code from experimenting and update register.go to match interface required
* namespaces search route
---------
Co-authored-by: leonorfmartins <leonorfmartins@gmail.com >
Co-authored-by: Todd Treece <todd.treece@grafana.com >
2024-09-30 13:46:14 -06:00
dependabot[bot] and Mihaly Gyongyosi
52f208d3ac
Bump github.com/beevik/etree from 1.2.0 to 1.4.1 ( #90707 )
...
Bumps [github.com/beevik/etree](https://github.com/beevik/etree ) from 1.2.0 to 1.4.1.
- [Release notes](https://github.com/beevik/etree/releases )
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md )
- [Commits](https://github.com/beevik/etree/compare/v1.2.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: github.com/beevik/etree
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com >
2024-09-30 17:51:41 +01:00
Santiago
aa77023008
Alerting: Fix panics when attempting to create an Alertmanager after failing ( #94023 )
2024-09-30 13:50:35 -03:00
Santiago
80611b381c
Alerting: Decrypt secure settings when testing receivers in the remote Alertmanager ( #93864 )
...
* Alerting: Decrypt secure settings when testing receivers in the remote Alertmanager
* go work sync
* make update-workspace
* point to latest main in grafana/alerting
* unit test
* import definitions only once
2024-09-30 13:28:30 -03:00
Marcus Efraimsson
b7a7f2bd62
Plugins: Use handler middleware from the SDK ( #93445 )
...
updates sdk to v0.251.0
2024-09-30 16:33:15 +02:00
Santiago
920d79680d
Alerting: Fix Slack notification errors when using bad title template ( #93771 )
...
* Alerting: Fix Slack notification errors when using bad title template
* upgrade grafana/alerting to latest main
2024-09-26 12:58:58 -03:00
Gabriel MABILLE
6b89e3f711
go.mod: Authlib update ( #93642 )
2024-09-24 09:41:52 +02:00
Andres Martinez Gotor
74b2d38e37
Chore: Update grafana-plugin-sdk ( #93426 )
2024-09-20 10:20:59 +02:00
Alexander Akhmetov
e59ea00518
Alerting: Add TLS, QoS and retain options to the MQTT receiver ( #92331 )
2024-09-17 21:11:16 +02:00
Artur Wierzbicki
1782b3dd39
Chore: Add update-workspace to build-go deps ( #93386 )
...
* Revert "Chore: Remove update-workspace from build-go deps (#93352 )"
This reverts commit 8a712fd510 .
* workspace update changes
2024-09-17 12:47:00 +03:00
Todd Treece
d1ffcc22d9
Playlists: Migrate to App SDK codegen ( #93246 )
2024-09-13 16:27:40 -04:00
Todd Treece
b4918f40c4
Chore: Update plugin SDK to v0.248.0 ( #93217 )
2024-09-11 15:17:29 +03:00
cb372d3fa8
Alerting: Support secrets in contact points nested fields ( #92035 )
...
Back-end:
* update alerting module
* update GetSecretKeysForContactPointType to extract secret fields from nested options
* Update RemoveSecretsForContactPoint to support complex settings
* update PostableGrafanaReceiverToEmbeddedContactPoint to support nested secrets
* update Integration to support nested settings in models.Integration
* make sigv4 fields optional
Front-end:
* add UI support for encrypted subform fields
* allow emptying nested secure fields
* Omit non touched secure fields in POST payload when saving a contact point
* Use SecretInput from grafana-ui instead of the new EncryptedInput
* use produce from immer
* rename mapClone
* rename sliceClone
* Don't use produce from immer as we need to delete the fileds afterwards
---------
Co-authored-by: Gilles De Mey <gilles.de.mey@gmail.com >
Co-authored-by: Sonia Aguilar <soniaaguilarpeiron@gmail.com >
Co-authored-by: Matt Jacobson <matthew.jacobson@grafana.com >
2024-09-10 22:26:23 -04:00
Andreas Christou
9c7029fa3e
Azure: Upgrade grafana-azure-sdk-go ( #93009 )
...
* Upgrade grafana-azure-sdk-go
* Run update-workspace
* Update go work
* Fix deps
* Update go.sum
2024-09-09 16:44:35 +03:00
Claudiu Dragalina-Paraipan
3aeb8d390e
[authn] update authlib and claims versions ( #93098 )
...
* update authlib version to latest
* make update-workspace -- 2nd run
* manual cleanup of old version
2024-09-09 15:45:59 +03:00
ismail simsek
6548ea377d
Chore: Bump grafana-plugin-sdk-go version to v0.247.0 ( #93095 )
...
* Bump grafana-plugin-sdk-go version to v0.247.0
* make update-workspace
* make update-workspace
2024-09-09 14:36:59 +03:00
Dave Henderson
e1090db5d9
Chore: Bump Go to 1.23.1 ( #93007 )
...
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-09-06 20:58:50 +03:00
Ryan McKinley
3cf84d1921
Chore: update centrifuge library ( #93020 )
2024-09-06 12:17:43 +03:00
Claudiu Dragalina-Paraipan
1ce43b4c42
[authn] update authlib and claims versions ( #92987 )
...
* update authlib and claims versions
* 2nd make update-workspace
* manual fix
2024-09-05 19:17:15 +03:00
Matheus Macabu
95ef2a1eb2
CloudMigrations: Fix snapshot creation on Windows systems ( #92941 )
...
* cloudmigration: improve error logging stringify body
* deps: update migration snapshot library to v1.3.0 (fix to Windows)
2024-09-05 15:34:20 +02:00
Santiago
87f4df4bc3
Remote Alertmanager: update github.com/go-openapi/runtime (v0.27.1 -> v0.28.0) ( #92951 )
2024-09-05 08:47:38 -03:00
Dave Henderson
c00a3bed42
chore(tests): Attempting to fix flaxy SMTP unit test ( #92786 )
...
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-09-04 16:25:44 -04:00
Marcus Efraimsson
0a337ff3b3
Chore: Update SDK to v0.246.0 ( #92938 )
2024-09-04 17:30:37 +02:00
Gábor Farkas and Kyle Brandt
abca0380a8
use count_bytes_reader from plugin-sdk-go ( #92553 )
...
* use count_bytes_reader from plugin-sdk-go
* run `make update-workspace`
* update postgres tests
* update mysql tests
* time back to utc
* make update-workspace done
---------
Co-authored-by: Kyle Brandt <kyle@grafana.com >
2024-08-28 16:44:13 +02:00
Charandas
af2e79aa83
K8s: namespace mapper should use authlib's util ( #92332 )
2024-08-27 15:01:42 -07:00
Alexander Akhmetov
7f6b6dea45
Alerting: Change expire placeholder for Pushover in the UI to 10800 seconds ( #92379 )
...
* Alerting: Change max retry for Pushover in the UI to 10800 seconds
* Update alerting to 70248a7a3a674e50e026a37205ebac86e1ec25fd
2024-08-27 11:13:58 +03:00
832bb01f36
Alerting: Add MQTT notifications receiver ( #91487 )
...
* Alerting: Add MQTT notifications receiver
* Update alerting to 9daa6239cc41dc42bff0e916c8d0d27766caa8b9 (main)
---------
Co-authored-by: Jack Baldry <jack.baldry@grafana.com >
Co-authored-by: brendamuir <100768211+brendamuir@users.noreply.github.com >
2024-08-22 16:47:48 +02:00
Todd Treece
a86ded2438
Chore: Add apistore dependency ( #92240 )
2024-08-21 16:22:45 -04:00