Pull Request Explorer

Summary

Switch provisioning controllers to NATS-backed informer

Enables provisioning controllers to consume change events directly from NATS, simplifying event handling and improving resilience.

Health Assessment

• • PR introduced a large-scale refactor of provisioning informers, leveraging AI assistance for code generation and review, with moderate review turnaround and extensive changes.

Summary

Set frontend OpenFeature context from backend

Ensures frontend receives correct OpenFeature context, preventing flag evaluation failures when reducedBootDataAPI is enabled. This temporary fix maintains feature toggle functionality until a more permanent solution is implemented.

Health Assessment

• • Fast cycle time and approvals indicate a straightforward, low-risk change with minimal rework.

Summary

Use default workflow token for notify-pr

Ensures CI workflow has sufficient permissions for notify-pr step, improving reliability.

Health Assessment

• • Quick merge with minimal changes indicates a straightforward CI tweak with low risk.

Summary

Upgrade sigstore dependency to address CVE

Bumps sigstore to 4.1.1 to fix CVE-2026-48815, ensuring certificate OID enforcement.

Health Assessment

• • Fast review and merge, minimal changes, quick security fix.

Summary

Upgrade sigstore dependency to address CVE

This PR updates the sigstore npm package to version 4.1.1, fixing CVE-2026-48815 and ensuring certificate OID enforcement, improving security posture.

Health Assessment

• • Quick turnaround with minimal changes; security patch applied promptly.

Summary

Chore: Upgrade sigstore to 4.1.1

Upgrade the sigstore dependency to address CVE-2026-48815, ensuring security compliance without affecting runtime behavior.

Health Assessment

• • Dependency upgrade resolved a high severity CVE with minimal code changes, reviewed and merged within 2.4 hours.

Summary

Map created/updated fields to numeric for retrieval

Ensures timestamp fields are searchable and retrievable, improving query accuracy and data integrity.

Health Assessment

• • Quick fix with minimal review, indicating straightforward issue resolution.

Summary

Slim dashboard and panel slices

Removes legacy dashboard and panel code, reducing Redux slice and deleting dead methods.

Health Assessment

• • The PR has a large scope with 17 files changed and 772 lines removed, but the review process was relatively smooth.

Summary

Build search field providers from manifests

Eliminates fallback provider, simplifying search backend and reducing maintenance.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and risk.

Summary

Speed up folder-scoped authorization

Improves performance of folder-scoped authorization checks, reducing latency from ~7.6s to ~1.2s, enhancing user experience and system scalability.

Health Assessment

• • Performance improvement with moderate iteration, quick review, and small scope, indicating an efficient and low-risk change process.

Summary

Fix flaky list history error reporting test

Fixes flaky test for storage list history error reporting. Improves CI stability and confidence in backend storage reliability.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, indicating low risk and high confidence.

Summary

Bump OpenFGA dependency to v1.18.0

Updates the OpenFGA library to the latest version, ensuring compatibility and security fixes for the Grafana backend.

Health Assessment

• • Quickly merged after a single review, indicating a straightforward dependency update with minimal impact on the codebase.

Summary

Bump OpenFGA dependency to v1.18.0

Updates the OpenFGA library to the latest version to ensure compatibility and security fixes.

Health Assessment

• • Dependency bump merged quickly with minimal review, indicating low complexity and risk.

Summary

Bump OpenFGA dependency to v1.18.0

Updates the OpenFGA library to the latest version, ensuring compatibility and security fixes for the Grafana backend.

Health Assessment

• • The PR was reviewed and merged within 16 hours, with no significant rework or comments, indicating a smooth and low-risk dependency update.

Summary

Fix NATS integration test

Ensures NATS integration tests run correctly, improving reliability of the messaging subsystem.

Health Assessment

• • Quick fix with minimal changes, fast review and merge.

Summary

Fix metrics registration and pub/sub dependencies

Ensures metrics are only registered when NATS is enabled and removes redundant dependencies, improving performance and reliability.

Health Assessment

• • Quick fix with minimal changes, resolved in a single review cycle.

Summary

Add canvas snapshot tests for TimelineChart

Enhances visual regression testing for the TimelineChart component, reducing future UI bugs and improving reliability.

Health Assessment

• • Rapid approval with minimal review comments; the PR adds extensive test coverage in a short cycle.

Summary

Track remote settings cache max size

Adds a gauge exposing the maximum cache size for remote settings, enabling operators to compute cache utilization directly in dashboards.

Health Assessment

• • Quick merge with minimal changes, indicating low complexity and risk.

Summary

Add embedded NATS server discovery

Enables embedded NATS replicas to self‑assemble into a cluster by persisting peer route metadata in a DB‑backed key/value store, improving resilience and simplifying deployment.

Health Assessment

• • Fast 10‑hour cycle with minimal rework; AI review bots provided quick feedback, keeping the PR on schedule.

Summary

Fix sparkline rendering on table refresh

Ensures sparkline charts in table panels update correctly on data refresh, improving data visibility for users.

Health Assessment

• • Long review and merge delays likely due to integration with main branch; small change but slow process.

Summary

Add default 10s keepalive to unified storage clients

Ensures clients detect ungraceful server shutdowns, improving reliability.

Health Assessment

• • Quick review and single commit fix indicates low complexity and high confidence.

Summary

Remove job queue from provisioning operator

This change removes the redundant job queue driver from the provisioning-jobs operator, ensuring job execution is handled exclusively by the dedicated provisioning-jobqueue operator. It simplifies the provisioning stack, reduces duplicated processing, and improves maintainability.

Health Assessment

• • Fast cycle with minimal rework; single commit and quick approval indicates low complexity.

Summary

Collapse IAM search document builders

Simplifies IAM search builder code, reducing maintenance and potential bugs.

Health Assessment

• • Quick turnaround with minimal rework indicates smooth review.

Summary

Add experimental categorical color palettes

Provides new color palettes for data visualizations, enabling richer chart options for users while controlled by a feature toggle.

Health Assessment

• • Merged within 2 days with minimal rework, indicating a smooth review process and low complexity.

Summary

Refactor provisioning webhook handler for provider-agnostic dispatch

Improves webhook handling by moving dispatch logic out of provider-specific code, enabling shared replay protection and simplifying testing for provisioning sync. No user-facing impact; purely internal refactor.

Health Assessment

• • The PR underwent extensive rework after a review request, with multiple commits and comments, indicating complex refactoring and potential integration challenges.

Summary

Added list of available APIs

Provides updated documentation listing all HTTP APIs for developers, improving API discoverability.

Health Assessment

• • Quickly merged after a single commit with no review friction, indicating a straightforward documentation update.

Summary

Align alerting RBAC fixed-role tables

Updated RBAC reference tables for alerting notifications to match current role definitions, ensuring accurate permissions and reducing confusion for administrators.

Health Assessment

• • PR was merged within 5 days with no review delays.
• • Documentation changes were straightforward and required minimal rework.

Summary

Add panel render duration breakdown and navigation meta

Enables detailed performance metrics for panel rendering and user navigation, improving insights into dashboard load times and user flow.

Health Assessment

• • The PR was reviewed quickly and merged within a day, indicating efficient collaboration and a well-scoped change.

Summary

Add list of available HTTP APIs

Provides developers with a comprehensive reference of Grafana's HTTP APIs, improving integration and developer experience.

Health Assessment

• • Quick review and merge, minimal changes, straightforward documentation update.

Summary

Make update-workspace

Adds update-workspace support to enterprise imports, enabling workspace updates in Grafana Enterprise.

Health Assessment

• • Single-file change merged quickly after one review, indicating low complexity and minimal risk.

Summary

Move dashboard search fields into CUE manifest

Centralizes dashboard search field definitions in the CUE manifest, simplifying maintenance and ensuring consistency across the codebase without affecting search functionality. This change reduces duplication and potential errors while keeping search performance unchanged.

Health Assessment

• • Fast review and merge within an hour, indicating a straightforward refactor with minimal impact.

Summary

Fix experimental color palettes in dashboards

Experimental color schemes were broken with v2 dashboards; this PR re‑adds support for colorblind and gradient palettes, ensuring they persist in the spec.

Health Assessment

• • The PR had a long cycle time and required multiple merges from main, indicating integration friction. The changes were moderate in size but involved many files, suggesting a complex refactor of dashboard spec generation.

Summary

Update Dependabot PR updater to sign commits

Ensures Dependabot-generated PRs are signed, improving security and auditability.

Health Assessment

• • Merged within 24 minutes with minimal changes, indicating low complexity and high confidence.

Summary

Adjust code owners for scopes feature toggles

Ensures correct ownership of scope‑related feature toggles, improving maintainability and accountability.

Health Assessment

• • Rapid review and merge indicate low complexity and high confidence in the change.

Summary

Remove useMultipleScopeNodesEndpoint feature toggle

This PR removes the legacy `useMultipleScopeNodesEndpoint` feature toggle from the backend registry and updates generated files, ensuring no impact on current users.

Health Assessment

• • Clean removal of an unused feature toggle with minimal changes and a quick review, reflecting efficient maintenance.

Summary

Sync visualization docs with source

Align documentation with code for traces, trend, and xy chart visualizations, ensuring consistency.

Health Assessment

• • Quickly resolved documentation drift with minimal changes and no review friction.

Summary

Fix cross-namespace folder sync isolation test

Corrects test isolation for cross-namespace provisioning, ensuring dashboards are stored in per-org subdirectories and preventing cross-org data leakage.

Health Assessment

• • Rapid review and merge indicate low complexity and high confidence in the fix.

Summary

Fix annotation label selector for legacy ID

Updates annotation migration proxy to use label selector on grafana.app/legacyID, improving compatibility with app-platform API.

Health Assessment

• • Quick review and minimal changes indicate a straightforward bug fix with low risk.

Summary

Sync visualization docs with source

Align documentation with code for traces, trend, and xy chart visualizations, ensuring consistency and reducing user confusion.

Health Assessment

• • The PR had a long cycle time due to multiple small edits after review, but the scope was minimal and involved only documentation, resulting in low risk.

Summary

Coalesce concurrent permission cache misses

Improves API response times by preventing redundant permission resolution, reducing latency for user search requests.

Health Assessment

• • Fast review and merge cycle (20h) with a single commit and no back‑and‑forth, indicating a straightforward performance fix with minimal risk.

Summary

Preserve unset fields on team update

Fixes a regression where partial team updates cleared fields, restoring expected behavior for IAM team management.

Health Assessment

• • Quick review and minimal changes indicate low complexity; regression fix with small code changes.

Summary

Remove per-object create relation from team

Eliminates the per-object create relation for teams in the Zanzana OpenFGA schema, aligning authorization logic with team creation semantics and preventing misleading list results.

Health Assessment

• • Quick review and merge within 10 hours indicates a straightforward change with minimal risk.

Summary

Remove per-object create relation from user and service-account

Eliminates an invalid per-object create relation in the Zanzana OpenFGA schema, ensuring that creation permissions are correctly applied at the namespace level and preventing unnecessary errors.

Health Assessment

• • Quick, single-commit change approved in one review, indicating low complexity and risk.

Summary

Add integration test for nats embedded server

Adds integration tests for the embedded NATS server, ensuring basic scenarios work correctly.

Health Assessment

• • Quick turnaround with minimal rework; tests added and merged within an hour, indicating a straightforward change with low complexity.

Summary

Move IAM search fields into CUE manifests

Centralizes search field definitions for IAM kinds in CUE manifests, reducing duplication and keeping definitions close to resource specs, with no change to behavior.

Health Assessment

• • Quick turnaround with a single commit and minimal review indicates a straightforward refactor with low risk.

Summary

Focus confirm input instead of disabled button

Improves user experience for type‑to‑confirm dialogs by focusing the input field, reducing confusion and keyboard navigation friction.

Health Assessment

• • Single small change with quick review and merge, indicating smooth process.

Summary

Add heatmapNegativeLogBuckets feature toggle

Adds a new experimental toggle to enable symlog rendering of negative histogram buckets in heatmap panels, improving visibility for Prometheus native histograms.

Health Assessment

• • Fast turnaround with minimal rework; single review cycle and quick merge indicates low complexity.

Summary

Show dashboard description tooltip

Adds a hover tooltip for dashboards with descriptions, allowing users to see context without opening the dashboard.

Health Assessment

• • PR required several commits after the first review but completed within a normal cycle time, indicating efficient but iterative development.

Summary

Migrate Explore utils to async data source API

Updates Explore utilities to use the new async data source API, ensuring compatibility and future‑proofing without affecting user experience.

Health Assessment

• • Quick turnaround with minimal rework; PR merged within 21 hours, indicating smooth review and low complexity.

Summary

Add semantic search column to command palette

Adds a semantic search column to the command palette, enabling vector-based dashboard search for more relevant results. This improves user experience by surfacing relevant dashboards quickly.

Health Assessment

• • The PR introduced a large-scale feature spanning frontend and backend, with rapid initial review followed by multiple iterations, indicating significant coordination and potential complexity.