Pull Request Explorer

Summary

Disable splash screen toggle by default for OSS

The splash screen modal is now disabled by default for OSS deployments, reducing unnecessary UI while still allowing explicit enablement for Grafana Cloud.

Health Assessment

• • Rapid approval with minimal changes indicates low complexity and high confidence in the change.

Summary

Bump golang.org/x/mod to 0.35.0

Updates the Go module dependency to the latest patch, ensuring compatibility and security.

Health Assessment

• • Quick dependency bump with minimal changes, merged within 0.6 hours.

Summary

Bump cloud.google.com/go/kms from 1.26.0 to 1.29.0

Updates the KMS client library to the latest patch, ensuring compatibility and security fixes.

Health Assessment

• • Quick merge with minimal changes indicates low risk and efficient review.

Summary

Add stable container data-testids for plugin-e2e

Provides stable selectors for UI components, enabling plugin authors to write reliable end‑to‑end tests and improving test stability and developer productivity.

Health Assessment

• • Long cycle time and multiple review rounds indicate significant rework; the PR had to address compatibility across Grafana versions, leading to many iterations.

Summary

Feature toggle: introduce grafana.enableScopesFirstMode

Adds an OpenFeature flag to gate UI changes for integrations that require a scope to always be selected, off by default and hidden from docs during rollout.

Health Assessment

• • The PR was reviewed quickly with a single comment and merged within 13 hours, indicating a smooth, low‑risk change with minimal scope.

Summary

Add deprecation warning to support bundles page

Adds a warning banner to the support bundles list page, informing users that support bundles are deprecated and will be removed soon, and provides alternative troubleshooting guidance.

Health Assessment

• • The PR had a moderate review cycle with a single review after a couple of commits, indicating a straightforward change with minimal friction.

Summary

Cap forwarded User-Agent length to 255 bytes

Prevents excessively long User-Agent headers from causing issues in downstream services, ensuring consistency with database column limits.

Health Assessment

• • Fast cycle time and single review round suggest low complexity and minimal risk.

Summary

Add cooldown of 14 days for dependency updates

Configures Dependabot to wait 14 days before creating a PR for new dependency releases, excluding security updates.

Health Assessment

• • Quick merge with minimal changes indicates low complexity and high confidence in the configuration update.

Summary

Fix public dashboard query variable refresh bug

This change stops query variables from triggering invalid API calls on public dashboards, eliminating 400 errors that broke unrelated panels. It improves reliability for users viewing dashboards in public mode.

Health Assessment

Summary

Remove transaction from Keeper store

Eliminates the use of database transactions in the Keeper store, simplifying logic and improving performance for secret management.

Health Assessment

• • The PR was reviewed quickly and merged after a single commit, but the change spans 20 files and 630 lines, indicating a substantial refactor with potential impact on database interactions.

Summary

Backport features #124546 and #124543 to release 11.6.15

Adds critical security fixes and feature enhancements from newer releases to the 11.6.15 branch, addressing CVE-2026-41602 and GHSA vulnerability.

Health Assessment

• • Quick merge with minimal changes, no review needed, indicating straightforward backport.

Summary

Backport security fixes to backend modules

Backports critical security fixes to backend modules, addressing CVE-2026-41602 and GHSA-xmrv-pmrh-hhx2, ensuring system integrity.

Health Assessment

• • Single commit backport with quick review, minimal changes, low risk.

Summary

Backport features to release 13.0.2

Adds previously released features and security fixes to the 13.0.2 release, ensuring compatibility and addressing CVE-2026-41602 and GHSA-xmrv-pmrh-hhx2.

Health Assessment

• • Single commit, quick review, minimal changes, low risk.

Summary

Backport security fixes to 12.4.4

Backports critical security fixes from newer releases to the 12.4.4 branch, addressing CVE-2026-41602 and GHSA-xmrv-pmrh-hhx2, ensuring compliance and protecting users.

Health Assessment

• • The PR was merged quickly with minimal review, indicating straightforward dependency updates.

Summary

Backport security fixes to backend modules

Backports critical security fixes to backend modules, addressing CVE-2026-41602 and GHSA-xmrv-pmrh-hhx2, ensuring system integrity.

Health Assessment

• • PR completed quickly with minimal changes, indicating a straightforward backport of security fixes.

Summary

I18n: Download translations from Crowdin

Automatically pulls updated translations from Crowdin and merges them daily, keeping the UI localized for all supported languages.

Health Assessment

• • The PR was merged within 0.3 hours with no review, indicating a low-risk, automated maintenance update.

Summary

Add canvas panel integration tests

Adds comprehensive integration tests for the canvas panel, ensuring user interactions work correctly and reducing regression risk.

Health Assessment

• • Rapid cycle with minimal review, indicating straightforward test addition.

Summary

Add UID field to annotation resource for PATCH

Adds UID field to annotation resource metadata, enabling successful PATCH operations. This prevents update failures and improves reliability of annotation management.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Add feature flag for notifications API migration

Enables controlled rollout of notifications API changes, reducing potential disruption to users.

Health Assessment

• • The PR was merged quickly, indicating a smooth review process.
• • The small scope and low number of files changed suggest a well-focused change.

Summary

Remove externalVizSuggestions feature toggle

Disables a deprecated visualization suggestion toggle, simplifying feature management and reducing configuration noise.

Health Assessment

• • The PR was reviewed immediately but took almost four days to merge, likely due to scheduling or release cycle constraints.

Summary

Configure Provisioning Files API Max Size

Allows operators to set a maximum file size for provisioning files, improving control over resource usage and preventing oversized uploads or downloads.

Health Assessment

• • The PR received extensive AI‑assisted review comments, leading to a quick first review but a prolonged overall cycle time, indicating integration delays despite the single review round.

Summary

Enable Annotations Clustering by Default

This PR promotes the annotations clustering feature to general availability, ensuring users can cluster annotations by default and that documentation and feature toggles are updated accordingly. The change includes documentation updates and feature toggle configuration to support the new GA release.

Health Assessment

• • The PR had a long review cycle with no active discussion, indicating a potential bottleneck in the review workflow.

Summary

Remove timeRangePan feature toggle

Simplifies feature toggle management by removing an unused toggle, reducing maintenance overhead.

Health Assessment

• • PR had a slow review cycle but minimal changes, indicating a straightforward refactor that was delayed by review backlog.

Summary

Enrich gRPC logs with authn context

Adds detailed authentication context to gRPC logs, enabling faster issue diagnosis and better observability without increasing log volume.

Health Assessment

• • The PR added enriched logging fields to improve observability, with quick review turnaround but a moderate cycle time due to a single rework after initial feedback.

Summary

Bump modernc.org/sqlite dependency

Updates the SQLite Go driver to the latest patch, ensuring compatibility with SQLite 3.53.1 and addressing recent bug fixes.

Health Assessment

• • Quick dependency update with minimal review and fast merge, indicating a smooth process.

Summary

Fix runtime error for invalid annotation colors

Prevents panel crashes when annotations use invalid color strings, improving stability.

Health Assessment

• • Quick fix with minimal changes, fast review, low risk.

Summary

Fix XYChart data update rendering

This PR resolves a rendering bug in the XYChart panel, ensuring charts correctly refresh when underlying data changes, improving data accuracy for dashboards.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, indicating low complexity and high confidence in correctness.

Summary

Health Assessment

Summary

Downgrade Bleve to v2.5.7

Fixes search title retrieval issue by reverting Bleve to a stable version, ensuring dashboard search results display correct titles.

Health Assessment

• • Quick fix with minimal changes and fast review, indicating low complexity and low risk.

Summary

Add unit tests for XYChart panel

Adds unit test coverage for XYChart custom editor and migration logic, improving reliability and reducing regressions.

Health Assessment

• • Quick turnaround with minimal review, indicating straightforward test additions.

Summary

Update sender to log bad request response body

Adds detailed logging of bad request responses in the alerting sender, improving diagnostics for developers and support teams.

Health Assessment

• • The PR was merged within a day with minimal changes, indicating a straightforward enhancement with low risk.

Summary

Fix nested row expansion state flipping

Ensures table rows remain expanded across data refreshes, improving user experience by preventing accidental collapse.

Health Assessment

• • Long review and merge cycle indicates significant rework and integration testing required.
• • Multiple merges of remote-tracking branch suggest integration with main branch was challenging.

Summary

Update Azure Monitor docs for user auth

Removes obsolete experimental notice, clarifying that current user authentication is now fully enabled.

Health Assessment

• • Fast review and minimal changes indicate a straightforward documentation update.

Summary

Fix folder Edit permission to include delete

Corrects documentation to reflect that folder deletion is allowed under Edit permissions, reducing user confusion.

Health Assessment

• • Quick review and merge, minimal changes, low risk.

Summary

Add preferences migration

Adds database migration for user preferences, enabling new feature support and ensuring data consistency.

Health Assessment

• • The PR involved multiple iterations to refine migration logic and test data, reflecting moderate complexity. Despite a 29‑hour cycle time, the PR was merged efficiently, indicating effective collaboration.

Summary

Add series limits to panel presets

Adds series limits to panel presets, giving users finer control over data display in Grafana panels.

Health Assessment

• • Fast review and merge (1.6h cycle) indicate a straightforward, low‑risk change.

Summary

Clarify remote index lock loss semantics

This update clarifies how remote index locks behave when lost, ensuring consistent cleanup and preventing stale channel references, which improves system reliability and reduces potential data consistency issues.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward change with low complexity.

Summary

Refine plugin install error reporting

Improves clarity of plugin installation errors, enabling operators and publishers to quickly identify whether a missing version is due to catalog absence or compatibility issues, reducing troubleshooting time.

Health Assessment

• • Fast review cycle (0.2h to first review) and minimal rework indicate a smooth process; the PR adds a new error code that enhances diagnostics without affecting existing functionality.

Summary

Add canvas integration tests for XYChart

Adds comprehensive canvas integration tests for the XYChart panel, ensuring accurate rendering and improving reliability for end users.

Health Assessment

• • Fast review and merge within 1.7 hours, indicating straightforward test addition with minimal friction. The large line count reflects extensive snapshot generation but poses no functional risk.

Summary

Use blobless clone for CI change detection

Improves CI reliability and speed for all contributors by ensuring change detection works even on deep branches.

Health Assessment

• • Long cycle time due to delayed review; minimal changes, low risk.

Summary

Clean up Go module files

Streamlines dependency management across Grafana's Go modules, ensuring consistent versions and reducing maintenance overhead.

Health Assessment

• • Quick turnaround with minimal rework indicates a straightforward refactor with low risk.

Summary

Chore: bump scenes to v8.2.5

Updates the scenes library to the latest patch, ensuring compatibility and security fixes.

Health Assessment

• • Quick dependency bump with no code changes, minimal review needed.

Summary

Refactor recent scopes for performance and sync

Replaces full scope objects in local storage with IDs, fetches data on demand via RTK Query, adds cross‑tab sync, and improves test reliability—reducing stale data, memory usage, and UI lag.

Health Assessment

• • The PR involved extensive refactoring across 15 files with over 600 lines of change, required multiple review cycles, and leveraged AI-generated code and automated reviews, indicating a complex, high‑risk change that ultimately improved performance and cross‑tab consistency.

Summary

Add time‑of‑day greeting to homepage

Adds a personalized greeting based on the time of day and edition to the Grafana OSS homepage, improving user experience and aligning with the Cloud homepage.

Health Assessment

• • Quick approval after a single review, minimal rework, and small scope indicate a smooth process.

Summary

Bump grpc-go dependency

Updates the gRPC Go library to the latest patch, ensuring compatibility with new Go versions and bug fixes.

Health Assessment

• • Fast review and merge with minimal risk, typical for automated dependency updates.

Summary

Expose grafana.orgDashboardTemplates to Go

Adds Go code generation for the grafana.orgDashboardTemplates feature flag, enabling backend type‑safe references and improving maintainability.

Health Assessment

• • Fast review and merge with minimal changes; low risk to production.

Summary

Remove alertRuleUseFiredAtForStartsAt feature toggle

Disables an internal feature flag to make the default alert rule behavior correct, eliminating the bug where startsAt equals endsAt and improving alert reliability for users.

Health Assessment

• • Fast cycle time and single review round indicate a straightforward change with minimal risk.

Summary

Release 12.4.3+security-02

Updates changelog for the new release, ensuring accurate version history for users and stakeholders.

Health Assessment

• • Rapid merge after release with minimal changes, indicating low complexity and risk.

Summary

Release 12.3.6 Security Update

Adds security fixes to Grafana release 12.3.6, ensuring compliance and stability for users.

Health Assessment

• • Rapid merge of changelog after release, minimal code changes and low risk.

Summary

Release 12.2.8+security-04

Updated changelog to reflect the new release.

Health Assessment

• • Quick merge of documentation update after release, minimal impact on codebase.