Pull Request Explorer

Summary

Fix folder-scoped permission checks in Zanzana

Corrects permission checks for folder scopes, ensuring users with folder-level grants are properly authorized and preventing unintended denials.

Health Assessment

• • Fast review and merge, minimal rework, straightforward bug fix.

Summary

Honor list-keys manifest opt-outs in apiserver

Enables resources to opt out of generic list‑keys routes, preserving normal APIs and tightening authorization controls.

Health Assessment

• • Fast cycle time and single review round indicate a straightforward, low‑risk change with minimal friction.

Summary

Remove GFM processing from Storybook docs

Eliminates unnecessary GFM processing, reducing package size and simplifying Storybook documentation for contributors. This streamlines the UI docs and reduces maintenance overhead.

Health Assessment

• • Quick turnaround with a single review and merge, indicating a straightforward refactor with minimal impact.

Summary

Remove unused custom evaluator from access control

Eliminates obsolete custom evaluation API, simplifying access control logic and reducing maintenance overhead.

Health Assessment

• • Q
• • u
• • i
• • c
• • k
• •
• • a
• • p
• • p
• • r
• • o
• • v
• • a
• • l
• •
• • w
• • i
• • t
• • h
• •
• • m
• • i
• • n
• • i
• • m
• • a
• • l
• •
• • c
• • h
• • a
• • n
• • g
• • e
• • s
• •
• • i
• • n
• • d
• • i
• • c
• • a
• • t
• • e
• • s
• •
• • l
• • o
• • w
• •
• • c
• • o
• • m
• • p
• • l
• • e
• • x
• • i
• • t
• • y
• •
• • a
• • n
• • d
• •
• • h
• • i
• • g
• • h
• •
• • c
• • o
• • n
• • f
• • i
• • d
• • e
• • n
• • c
• • e
• •
• • i
• • n
• •
• • t
• • h
• • e
• •
• • r
• • e
• • f
• • a
• • c
• • t
• • o
• • r
• • .

Summary

Fix eslint suppression for alerting utils

Reduces ESLint bulk suppression tech debt by tightening type safety in alerting utilities, improving maintainability without affecting runtime behavior.

Health Assessment

• • Quick, single-commit PR with minimal changes, indicating low risk and efficient review.

Summary

Update @uiw/react-codemirror dependency

This PR updates the @uiw/react-codemirror library to the latest patch, ensuring compatibility and bug fixes.

Health Assessment

• • Fast merge with single approval, minimal changes, no review comments.

Summary

Make alert button accessible name dynamic

Improves screen‑reader compatibility by using visible text for alert dismiss buttons, reducing WCAG violations.

Health Assessment

• • PR merged after 4+ days, but required minimal rework and had a small scope.

Summary

Add CI metrics for dependency counts

Adds metrics to track frontend dependency graph changes over time, enabling better monitoring of third‑party package usage.

Health Assessment

• • Fast cycle time and single review round indicate smooth integration.

Summary

Update changelog for release versions

Ensures accurate release notes for Grafana versions 12.4.12, 13.0.10, 13.1.7, and 13.2.3, supporting compliance and user awareness.

Health Assessment

• • Rapid, automated merge with minimal changes; no code impact; low risk to production.

Summary

Remove background from panel card badge

Improves visual consistency by removing the hardcoded background color from panel card badges, delivering a cleaner UI for all users.

Health Assessment

• • Single commit with minimal changes received quick approval, indicating low complexity and risk.

Summary

Release 13.2.3 with security patches

Security patches applied to Grafana 13.2.3, addressing CVE-2026-13719, CVE-2026-13720, and CVE-2026-81841.

Health Assessment

• • Release merged quickly with minimal review, indicating efficient release process.

Summary

Fix edge case bugs in query inspector

Corrects rendering errors in query components, enhancing reliability for all users.

Health Assessment

• • The PR experienced a prolonged review cycle and slow first review, indicating potential bottlenecks in the review process. Despite moderate code changes, the extended review period suggests complexity or low priority.

Summary

Release 13.1.7 Security Patches

Applies critical security patches to Grafana 13.1.7, ensuring compliance and stability.

Health Assessment

• • Release automation completed quickly with minimal changes, indicating a smooth process.

Summary

Release: 13.0.10

Applies security patches and updates dependencies for Grafana 13.0.10, ensuring compliance with recent CVE fixes.

Health Assessment

• • Fast cycle time and minimal review iterations indicate an efficient release process.

Summary

Fix AuthInfo store recursion in k8s redirect

Prevents authentication failures for users when Kubernetes redirect is enabled, ensuring reliable access to AuthInfo resources.

Health Assessment

• • Quick 1.2‑hour cycle with a single commit and no review back‑and‑forth indicates a straightforward, low‑risk fix for a critical authentication issue.

Summary

Release 12.4.12 Security Patch

Applies critical security patches to Grafana 12.4.12, addressing multiple CVEs and ensuring platform stability.

Health Assessment

• • Merged within 0.8 hours with a single review, indicating an automated release process with minimal friction.

Summary

Fail over search requests to another replica

Search queries now automatically fail over to healthy replicas when a chosen replica is unavailable, reducing search failures. This enhances user experience by ensuring consistent search results and lowering error rates.

Health Assessment

• • The PR was merged within 17 hours with only a single review comment, indicating a smooth review process. The change adds moderate code churn but does not introduce high risk, improving search reliability.

Summary

Chore: Enable jsontext encoding in Go

Adds support for Go 1.27's jsontext package, improving JSON handling performance.

Health Assessment

• • Quick update with minimal changes, no rework, fast review.

Summary

Preserve repeats in dashboard conversion

Ensures nested panels render correctly when converting dashboards from v2 to v1, improving PDF export quality for reporting dashboards.

Health Assessment

• • Single review comment and quick response indicate minimal friction; the long cycle time is likely due to PR queue scheduling rather than complexity.

Summary

Return BadRequest for invalid resource names

Fixes 500 errors on invalid names, improving API reliability and SLO compliance.

Health Assessment

• • Quick fix with minimal changes, resolved in a single commit and review, indicating low complexity.

Summary

Add index document listing for resource type

Enables precise comparison between search index and storage, improving data consistency and sync reliability for Grafana users.

Health Assessment

• • The PR was reviewed and merged within 11.5 hours, indicating a smooth process and high confidence in the changes.

Summary

Upgrade Go to 1.27.1 for Grafana

Upgrade Grafana's Go baseline to 1.27.1, improving JSON decoding speed, allocation efficiency, and diagnostics across the platform.

Health Assessment

• • Fast cycle time and minimal review friction indicate a straightforward version bump with no functional impact.

Summary

Pass decrypted secure values to custom routes

Enables secure values to be passed decrypted to plugin backends, improving plugin integration and security handling.

Health Assessment

• • The PR had a long cycle time with multiple iterations and AI-assisted reviews, indicating significant complexity and potential risk.

Summary

Update nodemailer to v10 for security

Patches a medium‑severity vulnerability that could allow cross‑tenant credential leakage by updating Nodemailer to a fixed version.

Health Assessment

• • Merged within 2 hours of opening, with a single review and minimal code changes, indicating a low‑risk, high‑confidence security update.

Summary

Thread id-token-deriver through datasource/plugin egress

Adds id-token forwarding for plugin backends, ensuring consistent authentication and improving security across datasource and plugin egress paths.

Health Assessment

• • The PR took over 9 days to merge with a single review cycle and a large code change, indicating moderate complexity but no significant back‑and‑forth.

Summary

Add translations from Crowdin

Adds updated translations for multiple languages, improving international user experience.

Health Assessment

• • Fast automated merge with minimal review, keeping translation content up to date.

Summary

Remove 'New' badge from CMAB app navigation

Hides the inaccurate 'New' badge for the CMAB app, improving UI clarity for all Grafana users.

Health Assessment

• • Fast review and merge with minimal code changes, indicating low complexity and risk.

Summary

Adjust annotation migration proxy throttling

Increase client QPS and burst to 200/300 and add tracing to improve load performance and visibility.

Health Assessment

• • Quick performance fix with minimal code changes, no review delays.

Summary

Docs: Add information about publishing delay

Adds documentation explaining the delay between publishing a community dashboard and when it becomes live, closing an information gap.

Health Assessment

• • Quickly merged after a single review, indicating low complexity and minimal risk.

Summary

Add gRPC logging interceptor to enterprise imports

Enables detailed request logging for enterprise authn imports, improving observability and debugging.

Health Assessment

• • Single commit, fast review, minimal changes, low risk.

Summary

Add k8s state and health filtering to Search API

Enables clients to filter alert rules by state and health directly in the API, reducing client‑side processing and improving performance.

Health Assessment

• • The PR had a long cycle time and slow first review, indicating potential bottlenecks in the review process. The large scope and many file changes increase risk of regressions.

Summary

Add publishing delay info

Provides clarity on the delay between publishing community dashboards and when they become live, improving user understanding.

Health Assessment

• • Docs update completed quickly with minimal review, indicating low complexity and high confidence in content.

Summary

Add OBO exchanger for remote clients

Enables remote storage clients to exchange tokens on behalf of service callers, improving authentication flow for remote integrations.

Health Assessment

• • The PR required extensive rework with multiple merge cycles and a cursor bugbot review, indicating complex integration and potential for integration issues.

Summary

Add log line to instrument query handler

Adds a single log line per query request to enable fast instrumentation in production, improving observability and troubleshooting.

Health Assessment

• • Quick instrumentation added with minimal changes and no review friction.

Summary

Add flag gated redirect between legacy and k8s AuthInfo stores

Enables a feature‑flag controlled redirect for AuthInfo storage, allowing a smooth migration from legacy SQL to Kubernetes‑based storage without impacting users.

Health Assessment

• • The PR required over four days to merge, with a single review and multiple commits, indicating moderate review friction but a large code change. The feature‑flag approach mitigates risk for users.

Summary

Replace size-limit wrapper with concrete repository

Adds configurable max file size to provisioning, improving stability and performance.

Health Assessment

• • Rapid merge after minimal review but many commits suggest significant rework; large code changes may increase risk.

Summary

Prepare Grafana for Go 1.27 upgrade

Enables validation of Go 1.27 compatibility by extracting fixes and cleanup from a larger upgrade PR, ensuring code remains functional before toolchain upgrade.

Health Assessment

• • Fast merge with no review iterations indicates low complexity and high confidence in the changes.

Summary

Add inline JSDoc examples for provider usage

Provides clearer documentation for developers using OpenFeature proxy provider methods, reducing errors and ensuring consistent usage.

Health Assessment

• • Quick review and merge indicate low complexity and high confidence in the changes.

Summary

Memoize instance props in LogsContainer

Adds memoization to the LogsContainer component to preserve performance after refactor to function component, preventing regressions.

Health Assessment

• • Quick turnaround with minimal rework; single review and merge within 45 minutes.

Summary

Add staticcheck suppression for legacy fields

Adds staticcheck suppression comments to preserve legacy compatibility without changing runtime behavior.

Health Assessment

• • Fast cycle time and minimal review indicate low friction and a straightforward maintenance change.

Summary

Support route-only plugins in Grafana

Enables app plugins that expose only custom routes to be discoverable and accessible via OpenAPI, improving plugin developer experience and API discoverability. This ensures plugins with no storage still appear in discovery, allowing users to interact with them.

Health Assessment

• • Fast cycle time and minimal rework indicate a smooth review process.

Summary

Switch to Rudderstack beacon transport

Switches analytics transport to beacon to prevent event loss when users close tabs, improving reliability for developers.

Health Assessment

• • Fast cycle time and minimal changes indicate low risk and a smooth review process.

Summary

Declare hoisted dependencies for Yarn

Ensures root dependencies are declared to support Yarn hoisting, enabling successful builds and tests across Grafana packages.

Health Assessment

• • Quick approval with minimal changes indicates low risk and smooth integration.

Summary

Add codeowners for annotation registry

Adds grafana-backend-services-squad as CODEOWNERS of /pkg/registry/apps/annotation.

Health Assessment

• • Quick review and merge with minimal changes.

Summary

Maintain log list scroll position on volume updates

Ensures users don't lose scroll position when logs volume changes, improving usability.

Health Assessment

• • Quick review and merge with minimal iterations, indicating a straightforward change.

Summary

Generate e2e selectors without Yarn

Enables selector generation with any package manager, ensuring builds succeed after switching to pnpm.

Health Assessment

• • Fast review and merge with minimal changes, indicating low risk and high confidence in the implementation.

Summary

Switch Live pipeline tracing to standard OTEL

Enables Grafana Live pipelines to use Grafana's shared OpenTelemetry provider, improving consistency and reducing duplicate exporters. This change aligns tracing with Grafana's global configuration, simplifying troubleshooting for developers.

Health Assessment

• • Fast review and merge with minimal iterations indicates a straightforward change with low complexity.

Summary

Update @lezer/highlight dependency to v1.2.4

This PR updates the @lezer/highlight library to the latest patch, ensuring compatibility and security fixes.

Health Assessment

• • Quick dependency bump with minimal changes, approved in under two hours.

Summary

Compile theme Sass before frontend bundling

Precompiles legacy Sass themes into CSS, cutting frontend build times by ~20% and reducing dependency bloat for developers.

Health Assessment

• • Fast cycle time (2.9h) and minimal review rounds indicate smooth integration, but the large code churn and many file changes suggest a high-impact change that required careful coordination.

Summary

Add metrics to pgx pool collector

Adds pgxpool acquire time and connection capacity metrics to the annotations pool collector, improving observability of database connections.

Health Assessment

• • The PR took over a day to review but involved only a small set of changes, indicating a low-risk maintenance update.