Matheus Macabu 7b7b37359f [release-11.2.8] Chore: Bump dependencies to address security issues (#101648) ...

* Chore: Bump github.com/rs/cors to v1.11.1

* Chore: Bump github.com/golang/glog to v1.2.4

* Chore: Bump filippo.io/age to v1.2.1

* Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90

* Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4

* Chore: Bump golang.org/x/net to v0.36.0

* Chore: Bump golang.org/x/oauth2 to v0.28.0

* Chore: Bump github.com/moby/moby to v27.5.1

* Chore: Bump github.com/elazarl/goproxy to v1.7.1

* Zanzana: bump openfga version (#94485)

* Bump openfga

* Remove internall sqlite implementation for openfga

* Use sqlite implementation from openfga

(cherry picked from commit 9ece88d585)

* Chore: Bump github.com/openfga/openfga to v1.8.5

---------

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

2025-03-07 10:14:08 +01:00

..

accesscontrol

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

annotations

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

anonymous

[v11.2.x] Anonymous User: Adds validator service for anonymous users (#94993)

2024-10-22 13:41:22 -03:00

apikey

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

apiserver

Chore: Update k8s.io dependencies (#91692)

2024-08-08 18:39:44 +03:00

auth

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

authn

[v11.2.x] OrgSync: Do not set default Organization for a user to a non-existent Organization (#94549)

2024-10-10 17:02:19 +03:00

authz

[release-11.2.8] Chore: Bump dependencies to address security issues (#101648)

2025-03-07 10:14:08 +01:00

caching

Fixing typos (#70487)

2023-06-22 09:43:38 +01:00

cleanup

Dashboards: Add feature restore dashboards backend (#83131)

2024-05-16 14:36:26 -03:00

cloudmigration

[v11.2.x] MigrationAssistant: Restrict dashboards, folders and datasources by the org id of the signed in user (#96344)

2024-11-12 16:33:06 -03:00

contexthandler

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

correlations

Correlations: Limit access to correlations page to users who can access Explore (#93676)

2024-09-26 09:57:28 +02:00

dashboardimport

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

dashboards

apply security patch: release-11.2.7/320-202502130525.patch

2025-02-18 21:02:44 +00:00

dashboardsnapshots

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

dashboardversion

Chore: removing (more) redundant transactions (#89373)

2024-06-25 09:19:49 -04:00

datasourceproxy

Plugins: Preserve trailing slash in plugin proxy (#86859)

2024-06-05 13:36:14 +02:00

datasources

RBAC: Allow omitting default permissions when a new resource is created (#90720)

2024-07-24 19:31:26 +03:00

encryption

Tracing: Various improvements (#88308)

2024-05-27 14:21:40 +02:00

extsvcauth

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

featuremgmt

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

folder

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

gcom

Cloud migrations: create route to delete token (#88297)

2024-05-31 10:03:43 -03:00

grpcserver

Unified Storage: Propagate traces from the apiserver grpc client (#91226)

2024-08-06 09:52:11 -06:00

guardian

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227)

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307)

2023-06-19 23:44:01 +02:00

ldap

Zanzana: Evaluate permissions alongside with RBAC engine (#90064)

2024-07-05 11:31:23 +02:00

libraryelements

[v11.2.x] LibraryPanels: Fix folderUid nil pointer dereference (#93401)

2024-09-17 16:23:02 +03:00

librarypanels

Chore: Replace appcontext.User(ctx) with identity.GetRequester(ctx) (#91030)

2024-07-26 16:39:23 +03:00

licensing

Navigation: Remove ApplyAdminIA logic (#89113)

2024-06-12 16:45:13 +01:00

live

[v11.2.x]: Live: Add ha_prefix (#93759) (#93924)

2024-09-27 14:20:48 -05:00

login

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

loginattempt

Chore: Add login protection when user is trying different uppercase letters (#87588)

2024-05-10 13:49:59 +02:00

navtree

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

ngalert

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

notifications

notifications: Fix flaky SMTP tests (#90801)

2024-07-23 08:22:00 -04:00

oauthtoken

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

org

[v11.2.x] QuotaService: refactor to use ReplDB for Get queries (#92285)

2024-08-22 08:55:54 -04:00

playlist

Chore: Update test database initialization (#81673)

2024-02-09 09:35:39 -05:00

plugindashboards

chore(perf): Pre-allocate where possible (enable prealloc linter) (#88952)

2024-06-14 14:16:36 -04:00

pluginsintegration

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

preference

Bookmarks: Store URLs instead of ids (#91121)

2024-07-31 13:56:39 +01:00

provisioning

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

publicdashboards

DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)

2024-07-12 10:47:49 -04:00

query

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

queryhistory

Explore: Check for RBAC permissions when hitting query history endpoints (#91156)

2024-07-31 12:10:52 -06:00

quota

[v11.2.x] Alerting: Make context deadline on AlertNG service startup configurable (#96133)

2024-11-08 16:46:47 +00:00

rendering

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

screenshot

Chore: Refactor render via http (#84613)

2024-05-14 07:24:18 -03:00

search

chore(tracing): add tracing for frontend and db session (#91509)

2024-08-05 17:17:39 -08:00

searchusers

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

searchV2

search v2: pre-allocate dashboardQueryResult slice capacity for performance (#91536)

2024-08-05 13:54:57 -04:00

secrets

[v11.2.x] Chore: Fix flaky cloud migration test (#94115)

2024-10-01 14:26:49 -06:00

serviceaccounts

[v11.2.x] ServiceAccounts: Remove permissions to service account when it is deleted (#94373)

2024-10-08 14:33:52 +02:00

shorturls

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

signingkeys

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

sqlstore

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

ssosettings

Zanzana: Evaluate permissions alongside with RBAC engine (#90064)

2024-07-05 11:31:23 +02:00

star

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

stats

Experimental Feature Toggle: databaseReadReplica (#89232)

2024-06-18 11:07:15 -04:00

store

[release-11.2.8] Chore: Bump Go version to 1.23.7 (#101294)

2025-03-05 09:55:25 +01:00

supportbundles

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

tag

Chore: Update test database initialization (#81673)

2024-02-09 09:35:39 -05:00

team

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

temp_user

Chore: removing (more) redundant transactions (#89373)

2024-06-25 09:19:49 -04:00

updatechecker

Chore: Making versioncheck url rely on config instead of being hardcoded (#85855)

2024-04-11 12:04:53 +02:00

user

[v11.2.x] Identity: remove GetTypedID (#92256)

2024-08-22 15:53:59 +02:00

validations

chore: move validations model into the validations service (#61953)

2023-01-23 15:10:14 -05:00