grafana

Files

T

grafana-delivery-bot[bot] be023a10fd [v11.0.x] Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93949 )

Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93940)

Fix endpoint permission on rule write endpoint

(cherry picked from commit c2799b4901)

Co-authored-by: Alexander Weaver <weaver.alex.d@gmail.com>

2024-09-27 14:53:20 -05:00

accesscontrol

[v11.0.x] Access Control: Clean up permissions for deprovisioned data sources (#88700 )

2024-06-05 10:49:41 +03:00

annotations

[v11.0.x] Annotations: Optimize search by tags (#93609 )

2024-09-23 17:57:18 +02:00

anonymous

[v11.0.x] Auth: Convert SetDefaultOrgHook to PostLoginHook (#85664 )

2024-04-08 11:38:32 +03:00

apikey

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

apiserver

[v11.0.x] K8s: standalone authenticator that allows a type of downstream forwarding (#86362 )

2024-04-16 16:57:06 +01:00

auth

[v11.0.x] JWT: Find login and email claims with JMESPATH (#86357 )

2024-04-16 16:25:18 +01:00

authn

[v11.0.x] User: Fix GetByID (#88894 )

2024-06-07 13:55:45 +02:00

caching

Fixing typos (#70487 )

2023-06-22 09:43:38 +01:00

cleanup

Auth: Fix email verification bypass when using basic authentication (#82914 )

2024-02-16 18:54:59 +01:00

cloudmigration

Backport 87073 to v11.0.x (#87078 )

2024-04-29 15:37:20 -04:00

contexthandler

[v11.0.x] AuthN: Add IsAuthenticatedBy to identity interface and replace checks (#86321 )

2024-04-16 14:41:15 +01:00

correlations

Correlations: Limit access to correlations page to users who can access Explore (#93674 )

2024-09-26 09:57:35 +02:00

dashboardimport

[v11.0.x] Add FolderUID for library elements (#86280 )

2024-04-17 20:04:37 +02:00

dashboards

[v11.0.x] SQLStore: Disable redundant create and drop unique index migrations on dashboard table (#86867 )

2024-04-24 16:37:39 +01:00

dashboardsnapshots

[v11.0.x] Snapshots: Fix panic when snapshot_remove_expired is true (#91330 )

2024-07-31 16:41:53 +03:00

dashboardversion

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

datasourceproxy

Errors: Make errors the same in dev as prod (#77366 )

2023-10-30 14:06:26 -04:00

datasources

[v11.0.x] Access Control: Clean up permissions for deprovisioned data sources (#88700 )

2024-06-05 10:49:41 +03:00

encryption

Chore: use any rather than interface{} (#74066 )

2023-08-30 18:46:47 +03:00

extsvcauth

Better tracing during extSvcAcc registration (#84719 )

2024-03-21 16:41:10 +01:00

featuremgmt

[v11.0.x] Prometheus: Reintroduce Azure audience override feature flag (#90558 )

2024-07-23 11:31:22 +01:00

folder

[v11.0.x] RBAC: List only the folders that the user has access to (#89015 )

2024-06-11 11:20:30 +03:00

gcom

[v11.0.x] Cloud migrations: create endpoint to create an access token (#86137 )

2024-04-15 14:53:53 +01:00

grpcserver

Swap weaveworks/common utilities for equivalents in grafana/dskit (#80051 )

2024-01-05 10:08:38 -06:00

guardian

Folders: Allow listing folders with write permission (#83527 )

2024-03-15 14:05:27 +02:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227 )

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307 )

2023-06-19 23:44:01 +02:00

ldap

[v11.0.x] User: Fix GetByID (#88894 )

2024-06-07 13:55:45 +02:00

libraryelements

[v11.0.x] LibraryPanels/RBAC: Ignore old folder permission check when deleting/patching lib panel (#88493 )

2024-05-30 14:40:17 +03:00

librarypanels

[v11.0.x] Add FolderUID for library elements (#86280 )

2024-04-17 20:04:37 +02:00

licensing

Chore: Clean up old navigation (#66287 )

2023-04-14 09:43:11 +01:00

live

[v11.0.x]: Live: Add ha_prefix (#93759 ) (#93926 )

2024-09-27 14:20:43 -05:00

[v11.0.x] User: Fix GetByID (#88894 )

2024-06-07 13:55:45 +02:00

loginattempt

[v11.0.x] Chore: Add login protection when user is trying different uppercase letters (#87612 )

2024-05-10 15:06:35 +03:00

navtree

[v11.0.x] samlsettings: api integration (#86109 )

2024-04-15 13:55:59 +01:00

ngalert

[v11.0.x] Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93949 )

2024-09-27 14:53:20 -05:00

notifications

[v11.0.x] Notifications: Do not log email address in error message (#89501 )

2024-06-20 20:13:26 +03:00

oauthtoken

Fix: Refresh token when id_token is expired (#79569 )

2024-02-05 16:44:25 +01:00

org

[v11.0.x] User: add second migration for lowercasing login/email of users (#88917 )

2024-06-10 10:42:47 +02:00

playlist

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

plugindashboards

Chore: removing folderId from plugindashboard service (#80570 )

2024-01-16 11:08:39 +01:00

pluginsintegration

[v11.0.x] Plugins: Don't forward cookies for app plugins (#88706 )

2024-06-04 18:12:48 +03:00

preference

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

provisioning

[v11.0.x] Provisioning: Prevent provisioning folder errors from failing startup (#92588 )

2024-08-28 15:40:23 +02:00

publicdashboards

[v11.0.x] Public dashboards: fix public dashboard permissions so that annotations are displayed (#85112 )

2024-03-26 09:03:04 +00:00

query

Queries: Improve debug logging of metrics queries (#84048 )

2024-03-12 16:17:22 +02:00

queryhistory

Query History: Count using SQL, not post query (#82208 )

2024-02-20 07:32:40 -06:00

quota

Alerting: Stop persisting silences and nflog to disk (#84706 )

2024-03-26 10:02:34 +00:00

rendering

Rendering: Add PDFRendering capability (#84438 )

2024-03-19 08:48:46 +01:00

screenshot

Remove extra defers in screenshot sevice (#84697 )

2024-03-20 07:13:16 +00:00

Add MFolderIDsServiceCount to count folderIDs in services pkg (#81237 )

2024-01-25 11:10:35 +01:00

searchusers

Grafana: Replace magic number with a constant variable in response status (#80132 )

2024-02-27 18:39:51 +02:00

searchV2

PanelTitleSearch: Show datasource usage in plugins (#83922 )

2024-03-05 22:20:38 +02:00

secrets

[backport to v11.0] SSO: add SSO settings to secrets migrator (#86913 ) (#86939 )

2024-04-29 18:42:47 +03:00

serviceaccounts

Better tracing during extSvcAcc registration (#84719 )

2024-03-21 16:41:10 +01:00

shorturls

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

signingkeys

SigningKeys: Add added_at when creating new signing key (#85060 )

2024-03-26 10:02:34 +00:00

sqlstore

[v11.0.x] User: add second migration for lowercasing login/email of users (#88917 )

2024-06-10 10:42:47 +02:00

ssosettings

[backport to v11.0] SSO: add SSO settings to secrets migrator (#86913 ) (#86939 )

2024-04-29 18:42:47 +03:00

star

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

stats

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

store

[v11.0.x] Storage: GuaranteedUpdate fix & other improvements (#86323 )

2024-04-16 14:42:56 +01:00

supportbundles

UsageStats: Separate context and threads for usage stats (#83963 )

2024-03-11 15:18:42 +01:00

tag

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

team

RBAC: Fix delete team permissions on team delete (#83442 )

2024-02-27 12:21:26 +01:00

temp_user

[v11.0.x] User: email verification completion (#86354 )

2024-04-16 16:24:53 +01:00

updatechecker

Chore: Bump update checker interval to 1 day (#84404 )

2024-03-14 13:00:26 +02:00

user

[v11.0.x] Auth: Removal of conflicting users check upon creation (#89092 )

2024-06-12 10:44:17 +02:00

validations

chore: move validations model into the validations service (#61953 )

2023-01-23 15:10:14 -05:00