Pull Request Explorer

Summary

Use self-hosted runners for all CI workflows

Switches all CI jobs from public GitHub runners to self-hosted runners, improving build speed, reliability, and cost control.

Health Assessment

• • Fast turnaround with a single commit and no rework, indicating a straightforward update to CI configuration.

Summary

Use os.Root API for remote index storage

Improves security by replacing insecure filesystem access with the safer os.Root API in Grafana's storage layer, reducing potential vulnerabilities.

Health Assessment

• • Merged within 18 hours with minimal changes and quick review, indicating a low-risk refactor.

Summary

unified-storage: drop opentracing dependency

This PR removes the direct opentracing dependency from unified storage, reducing the attack surface and simplifying maintenance while keeping functionality via dskit.

Health Assessment

• • Fast cycle time of 21.5 hours, minimal changes, and a single dismissed review indicate a smooth, low-risk refactor.

Summary

Add KV‑lease‑backed Elector for zanzana embedded mode

Enables high‑availability leader election in Grafana’s embedded Zanzana mode by using a unified‑storage KV lease, ensuring only one reconciler runs at a time without requiring Kubernetes Lease objects.

Health Assessment

• • The PR required over 12 days to receive a review and only one commit was made, indicating a slow review cycle and potential blocker. The change adds 640 lines of code, a large scope that increases risk of regressions.

Summary

Update tj-actions SHA to v46.0.1

Updates the SHA used by tj-actions to v46.0.1 to address CVE-2025-30066, ensuring secure CI pipelines for all users.

Health Assessment

• • Quick review and merge with minimal changes to CI configuration, indicating low risk and high process efficiency.

Summary

Download translations from Crowdin

This PR pulls the latest translations from Crowdin, keeping the UI up-to-date for all supported languages.

Health Assessment

• • Automated daily translation update merged with minimal review, indicating low complexity and high confidence in the process.

Summary

Update enterprise imports logic

Fixes CI failures by updating enterprise import logic.

Health Assessment

• • Quick fix with minimal changes, no rework.

Summary

Run knip on more packages

Runs knip to clean up dead code and dependencies across multiple Grafana frontend packages, improving maintainability for developers.

Health Assessment

• • Fast cycle time and minimal review rounds indicate smooth integration; the PR cleans up unused code across several packages, reducing technical debt.

Summary

Reenable crowdin automerge

Reenable crowdin automerge using grafana-pr-approver token to allow crowdin PRs to automerge.

Health Assessment

• • Fast cycle time of 0.9h and single commit indicates minimal review friction.

Summary

Centralize annotation cleanup cutoff logic

Moves the retention cutoff calculation to the caller, ensuring consistent cleanup across all annotation storage backends and simplifying maintenance.

Health Assessment

• • Long review cycle suggests low priority or blocker; the change is a small refactor with minimal user impact.

Summary

Health Assessment

Summary

Fix permission set in release workflow

Corrected permission set during release build to ensure proper access control.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence in correctness.

Summary

Add Dockerhub login to CI workflows

Prevents hitting Docker Hub rate limits during CI runs.

Health Assessment

• • Quick approval with minimal changes indicates low complexity and high confidence.

Summary

Apply item checker to initial watch events

Ensures initial watch backfill respects per-item authorization, aligning behavior with streamed events and preventing unauthorized data exposure.

Health Assessment

• • The PR was merged within 4.3 hours with only a single review, indicating a smooth review process.
• • AI assistance helped expedite code changes and the added regression test provides confidence against future regressions.

Summary

Make frontend test coverage CI check optional

Allows frontend test coverage to be optional, aligning CI checks with policy-bot guidelines and reducing unnecessary build failures.

Health Assessment

• • Quick change with minimal review, indicating low complexity and high confidence in policy compliance.

Summary

Remove go.uber.org/atomic dependency

Eliminates external atomic library, replacing it with the standard library to simplify dependencies and reduce potential issues.

Health Assessment

• • Quick approval with minimal changes, indicating low complexity and risk.

Summary

Add knip config for grafana-data

Adds knip linting to clean up dead code and dependencies for grafana-data, improving maintainability for developers.

Health Assessment

• • The PR was merged within 3.6 hours with only two commits and a single review, indicating a smooth and efficient process. The changes are focused on tooling and code cleanup, posing minimal risk to production.

Summary

Health Assessment

Summary

Fix data inspector join order for empty series

Ensures the data inspector displays data correctly when series are empty, improving user experience and reducing confusion.

Health Assessment

• • Quick fix with minimal changes, resolved in a single commit after a single review.

Summary

Add metrics for unified storage lease handling

Adds comprehensive metrics for key-value lease operations in unified storage. Enhances observability and aids performance tuning for Grafana backend.

Health Assessment

• • PR had quick review and approval, indicating straightforward changes with minimal friction.

Summary

Add hideable sidebar on desktop

Enables users to hide the sidebar on desktop, improving screen real estate and focus during dashboard editing.

Health Assessment

• • The PR required over a week for review and merge, with a single review round and no rework, indicating a straightforward change but a slow review process.

Summary

Git Sync export clarification

Clarifies export behavior for Git Sync in observability‑as‑code documentation, improving user understanding.

Health Assessment

• • PR merged within 30 minutes with minimal changes, indicating a straightforward documentation update.

Summary

Fix on-prem release packaging

Ensures on-prem Grafana release builds correctly, shipping server and CLI.

Health Assessment

• • Merged within 12 minutes with no review, indicating a straightforward packaging fix.

Summary

Align CreateNewButton order with QuickAdd

Ensures consistent ordering of dashboard creation actions across UI, improving user experience and reducing confusion.

Health Assessment

• • Long review delay but minimal changes; low risk.

Summary

Fix provisioning import flow foundations

Enables the upcoming provisioned dashboard import flow by correcting URL handling, improving GHE support, and ensuring consistent messaging, reducing errors for users.

Health Assessment

• • Fast cycle time and minimal rework indicate a smooth review process with low friction.

Summary

Remove gf-form classname from DataSourceTestingStatus

Simplifies component styling by eliminating a deprecated CSS class, reducing maintenance overhead.

Health Assessment

• • Single commit with quick approval after a day, minimal code changes, low risk to production.

Summary

Update Go dependencies to address CVEs

Patches multiple critical CVEs by updating Go networking and crypto libraries, ensuring system security.

Health Assessment

• • Rapid security patch with minimal review, indicating efficient process.

Summary

Refresh parent folder on dashboard save

Adds logic to refresh the old parent folder when a dashboard is saved and moved, improving folder consistency.

Health Assessment

• • The PR had a long cycle time due to a single large commit after review, but the review process was quick and the changes were straightforward.

Summary

Update Go dependencies to address CVEs

Patches multiple critical CVEs by updating Go networking and crypto libraries, ensuring system security. This reduces vulnerability exposure for Grafana deployments.

Health Assessment

• • Rapid merge after single review indicates high confidence in changes.
• • Large dependency update but minimal review suggests low complexity.

Summary

Add search-based display for IAM users

The IAM display endpoint now pulls data from search results when legacy storage is empty, ensuring users see up-to-date information.

Health Assessment

• • The PR required several rounds of rework after the initial review, indicating complexity in integrating search results into the IAM display endpoint. The overall cycle time was long due to multiple merges and adjustments.

Summary

Add frontend helpers to resolve the 'general' folder

Adds helper functions to ensure the folder property is returned for 'general' or empty folder names, cleaning up existing behavior.

Health Assessment

• • The PR had a long review cycle (~3 days) but only a single commit and minimal changes, indicating a straightforward bug fix that was delayed by review scheduling.

Summary

Fix auto height in auto grid layout

Allows panels to resize correctly when auto height is enabled, improving dashboard usability.

Health Assessment

• • Fast review and minimal changes resulted in a smooth merge after a long initial cycle.

Summary

Upgrade ws to 8.20.1

Upgrade ws to address CVE-2026-45736, ensuring security compliance.

Health Assessment

• • Quick dependency upgrade with minimal review, indicating low complexity and risk.

Summary

Health Assessment

Summary

Add VectorSearch query cache and rate limit

Enables efficient reuse of query embeddings and protects the backend from overload, improving performance and cost control for multi‑tenant deployments.

Health Assessment

• • PR took over 4 days to merge but received quick approval after a single review, indicating clear implementation and minimal contention.

Summary

Upgrade js-cookie to 3.0.7

Upgrade js-cookie to address CVE-2026-46625, improving security for all users.

Health Assessment

• • Quick approval with minimal changes, indicating low risk and straightforward dependency upgrade.

Summary

Health Assessment

Summary

Chore(deps): Bump qs from 6.15.1 to 6.15.2

Updates the qs library to address recent bug fixes, improving stability of query string handling.

Health Assessment

• • Fast cycle time and minimal changes indicate low risk and efficient process.

Summary

Replace jsdom-testing-mocks with native code

Eliminates a vulnerable third‑party test dependency, reducing security risk and maintenance overhead for Grafana maintainers.

Health Assessment

• • Fast turnaround with a single commit and approval, indicating minimal friction and low risk to the codebase.

Summary

Remove protobufjs resolution

Permanently removes the pinned protobufjs resolution from package.json, simplifying dependency management.

Health Assessment

• • Quick approval with minimal changes indicates low risk and straightforward maintenance.

Summary

Ignore levitate reviewers for now

Unblocks PRs by disabling reviewer manipulation in CI workflow.

Health Assessment

• • Quick fix with minimal changes, fast review and merge.

Summary

Enable scenes flickering fix by default

Enables a previously tested feature for all dashboards, reducing flickering issues for users.

Health Assessment

• • Long cycle time due to ops monitoring, but minimal code changes and quick review.

Summary

Bump app-sdk version for UserReadable property

Updates the app SDK to support the new UserReadable property, enabling richer app manifests.

Health Assessment

• • Merged quickly after a single review, indicating low complexity despite the large number of dependency updates.

Summary

Migrate GitHub Actions to use GATB

Updates CI workflows for release 12.3.7, improving build stability and consistency.

Health Assessment

• • The PR involved extensive changes to CI workflows, taking over a week to merge with a single review round, indicating moderate complexity and potential for build stability improvements.

Summary

Return 400 on UID mismatch in datasource update

Prevents silent failures and improves API reliability by validating UID consistency, reducing downstream errors.

Health Assessment

• • Quick, single-commit fix with minimal scope and fast review cycle indicates low risk and high confidence in correctness.

Summary

Health Assessment

Summary

Dashboard Section Variables: Unified List & Labels

Improves consistency and usability of dashboard variable configuration, enabling drag‑and‑drop and clearer labeling for row/tab contexts.

Health Assessment

• • Long review cycle (~40h) and large code changes (~400 lines) indicate significant effort; no post‑review commits suggest smooth final approval.

Summary

Reduce timeout for scroll to fix flaky test

Fixes flaky end‑to‑end test by reducing timeout for scroll assertion, improving test reliability.

Health Assessment

• • Quick fix with minimal changes, approved in under 2 hours, indicating low complexity and high confidence in the change.

Summary

Prevent drag hooks on non-draggable layouts

Stops panels from being draggable in view mode, improving user experience and preventing accidental layout changes.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, indicating low complexity and risk.

Summary

Rename LeftActions and RightActions

Improves code clarity by renaming components to reflect functionality and removing unused code, enhancing maintainability.

Health Assessment

• • Quick review and merge within 6 days, minimal changes, low risk.