Pull Request Explorer

Summary

Upgrade @grafana/faro-* to 2.7.0

Fixes multiple high‑severity CVEs by updating Faro dependencies to the latest secure version.

Health Assessment

• • Fast cycle time and minimal review friction indicate efficient handling of critical security updates.

Summary

Upgrade @rsdoctor/webpack-plugin to fix CVE

This upgrade resolves a critical DoS vulnerability in the qs library by updating the webpack plugin dependency, ensuring the Grafana codebase remains secure without affecting production functionality.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward dependency update with low risk.

Summary

Update Go dependencies to address CVEs

This PR updates critical Go networking libraries to patch multiple CVEs, enhancing security for Grafana's backend services.

Health Assessment

• • The PR took nearly three days to review and merge, indicating a slow review process for security updates. The change is small in scope but critical for patching multiple CVEs.

Summary

Update golang.org/x dependencies for release 13.0.2

Ensures all golang.org/x subpackages are up-to-date, improving security and compatibility.

Health Assessment

• • Dependency update completed after a single commit, but review took almost three days, indicating possible review backlog.

Summary

Update plugin settings via new API

Centralizes plugin settings updates through the shared runtime API, reducing duplication and improving consistency for Grafana maintainers.

Health Assessment

• • Long cycle time (~13 days) due to delayed review; minimal code changes; low technical risk.

Summary

Add merged preferences to boot flow

Enables instant startup by loading inherited user preferences at boot, improving user experience.

Health Assessment

• • The PR required multiple reverts and re-additions, indicating significant rework before final merge, with two review rounds and seven commits reflecting iterative refinement.

Summary

Enable Unified Filters Toggle for GA

Enables the unified filters feature for general availability, improving user experience in dashboards.

Health Assessment

• • Fast review and minimal changes indicate low complexity and quick approval.

Summary

Move OAuthPassThru settings to datasource package

Adds standard OAuth and cookie settings to datasource spec, simplifying configuration and reducing dependencies.

Health Assessment

• • PR closed within 24 hours with minimal review friction; moderate code changes; no major risk.

Summary

Fix flaky DashboardTabs extension tabs test

Fixes flaky test for DashboardTabs extension tabs, ensuring reliable UI behavior. Improves developer confidence and reduces false positives in CI.

Health Assessment

• • Quick, single-commit fix with minimal changes, AI-assisted, no production impact.

Summary

Promote feature toggles to GA and public preview

Enables new feature toggles for Grafana, improving stability and user control.

Health Assessment

• • Fast review and merge, minimal changes, straightforward toggle promotion.

Summary

Move alerting functions to specific packages

Reorganizes alerting code for better maintainability and clarity, reducing future merge conflicts and speeding feature development.

Health Assessment

• • Fast cycle time and minimal review rounds indicate smooth integration and low risk of regressions.

Summary

Promote clearPreviousFieldValues toggle to GA

Enables a critical toggle to reduce memory usage in React, improving performance.

Health Assessment

• • Quick approval with minimal changes indicates low complexity and high confidence in the toggle promotion.

Summary

Add dashboard-scene support for template flow

Enables enterprise users to edit and save dashboard templates within the dashboard-scene UI, streamlining template management and improving workflow efficiency.

Health Assessment

• • Long cycle time and multiple iterations indicate significant rework; large scope and many commits suggest high complexity and risk to delivery.

Summary

Promote groupToNestedTableV2 to Public Preview

Promotes the groupToNestedTableV2 feature toggle to public preview, enabling opt‑in usage and exposing it in public docs.

Health Assessment

• • Fast review and merge with minimal changes; straightforward toggle promotion.

Summary

PanelStyles: Enable flag by default

Enables the panelStyleActions feature flag by default, allowing users to access new panel styling options without manual configuration.

Health Assessment

• • The PR involved multiple merge commits and conflict resolutions but ultimately merged within two days, indicating moderate review friction but a small scope.

Summary

Enable VizPresets flag by default

Enabling the VizPresets feature by default allows users to access advanced visualization presets without manual configuration, improving user experience and accelerating adoption.

Health Assessment

Summary

Dependencies: Update golang.org/x/net to v0.55.0

This PR updates the golang.org/x/net dependency to v0.55.0 across multiple backend services, addressing several critical CVEs and strengthening security posture.

Health Assessment

• • Quick turnaround with minimal changes, indicating efficient handling of security updates.

Summary

Extract KV and DB construction into Wire providers

Enables cleaner dependency injection for storage, reduces startup overhead, and supports KV‑lease‑based leader election, improving modularity and reliability.

Health Assessment

• • Long cycle time (214h) with many commits after the first review indicates significant rework, but the final merge shows a stable integration.

Summary

Derive Variable Metadata Name from Spec

Simplifies variable identity by deriving metadata.name from logical name and folder, eliminating race conditions and simplifying uniqueness enforcement. This change improves reliability and reduces client complexity for variable creation and updates.

Health Assessment

• • Fast review and merge with minimal back‑and‑forth indicates high confidence in the change; the large code churn suggests thorough testing was performed.

Summary

Health Assessment

Summary

Increase npm minimal age gate

Updated Yarn configuration to require a 3‑day minimal age for npm packages, ensuring more stable dependency usage.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and risk.

Summary

Fix race condition in lease key reading

Eliminates race condition during lease release, ensuring accurate tracing and stability.

Health Assessment

• • Quick fix with minimal changes, resolved race condition without additional review rounds.

Summary

Add Agentic Testing to Testing & Synthetics side nav

Promotes the Agentic Testing app into the Testing & Synthetics navigation, making it easier for users to discover testing workflows, gated behind a feature toggle for controlled rollout.

Health Assessment

• • The PR required several iterations after the first review, indicating some refinement, but the overall scope was small and the cycle time stayed within a normal range, suggesting manageable risk.

Summary

Add extension points to Grafana homepage

Enables Grafana Cloud to inject custom content into the OSS homepage, improving brand consistency and feature rollout.

Health Assessment

• • The PR introduced a large number of changes across the frontend, requiring multiple iterations and a lengthy review period, indicating moderate complexity and potential integration risk.

Summary

Add pr_approver_token to i18n workflow

Adds a PR approver token to the i18n workflow, enabling automated merging of pull requests once translations are downloaded. This streamlines the release process for internationalised content.

Health Assessment

• • The PR was reviewed and merged within minutes, indicating minimal friction and low risk.

Summary

Add MeasureText mock to test utilities

Provides a centralized helper for mocking canvas measureText in uPlot tests, simplifying test setup for developers.

Health Assessment

• • Review took almost the entire cycle time, indicating a slow review process; the PR required only a single commit and merge, showing minimal rework.

Summary

CI: Update ephemerals-pr-comment

Enables automated triggering of CI workflows via a new bot, improving deployment automation and reducing manual intervention.

Health Assessment

• • Quick review and merge indicate a straightforward CI update with minimal risk.

Summary

Redesign Custom Dashboard Template Card

Improves the UI for custom dashboard templates, providing a clearer, more consistent card design that enhances user experience.

Health Assessment

• • The PR was reviewed and merged within 20 hours, indicating a smooth process.
• • Multiple commits suggest iterative refinement, but the small number of files keeps the scope manageable.

Summary

Add OAuth Passthrough docs for GCM

Provides updated documentation for Google Cloud Monitoring users to configure OAuth passthrough authentication, improving clarity and onboarding.

Health Assessment

• • Docs update with minimal changes, quick review turnaround, and no significant rework.

Summary

Add Forward OAuth Identity to GCM frontend

Adds a UI control that enables per-user IAM scoping for Google Cloud Monitoring data sources, allowing administrators to configure OAuth passthrough and improve security and user experience.

Health Assessment

• • PR required multiple commits after review and a long cycle time, indicating moderate review friction but ultimately a small, low-risk feature addition.

Summary

Add OAuth Passthrough for Google Cloud Monitoring

Adds per-user OAuth passthrough for the Cloud Monitoring data source, allowing queries to run under the signed-in Grafana user's Google credentials. This improves data scoping, audit logs, and aligns with GCP IAM.

Health Assessment

• • The PR required multiple commits after review and a long cycle time, indicating significant rework and potential blockers.

Summary

Fix dashboard import issues in release 12.4.4

Resolved multiple import errors in the dashboard import feature, improving stability for users importing dashboards.

Health Assessment

• • The PR addressed import bugs with a few commits and a single review, merging within a day.

Summary

Backport datasource fixes to v12.4.4

Backport datasource priority and persistence fixes to the 12.4.4 release, ensuring dashboards use the correct data source and improving reliability for users.

Health Assessment

• • The PR was reviewed quickly and merged within three days, indicating efficient collaboration. The large number of lines added reflects substantial backport work, but the short review cycle mitigates risk.

Summary

Fix dashboard crash on unknown matcher id

This fix stops dashboards from crashing when a field override references an unknown matcher ID, ensuring a smoother user experience.

Health Assessment

• • Quick fix with minimal changes, merged within 4.5 hours, indicating efficient review and low complexity.

Summary

Move plural defaults into Trans tOptions

Reduces default i18n resource size and improves localization performance for Grafana developers.

Health Assessment

• • Fast review and merge within 4 hours, minimal rework, indicating efficient process.

Summary

Move plural defaults into options object

Refactors i18n calls to reduce default resource size, improving load performance.

Health Assessment

• • Quick mechanical refactor with a single commit, minimal review time, and low risk to production.

Summary

Cleanup operator shutdown mechanisms

Simplifies operator shutdown by using context cancellation, improving reliability and reducing signal handling complexity.

Health Assessment

• • Quick approval with minimal changes indicates low complexity and high confidence in the refactor.

Summary

Specify codeowners for ofrep package

Adds a CODEOWNERS entry for the ofrep package, clarifying ownership and improving governance for future changes.

Health Assessment

• • Quick single-file change merged within 2 hours, indicating minimal review friction and low risk.

Summary

Add member count to GET /api/teams/{team_id}

Ensures accurate member count is returned for teams when Kubernetes Teams Redirect is enabled, aligning the endpoint with legacy behavior and improving data consistency for users.

Health Assessment

• • The PR experienced a delayed review, but the change was small and straightforward, leading to a quick merge once approved.

Summary

Backport CI workflows to release-13.0.2

Backport CI workflows from main to the release branch, ensuring consistent build and test processes and reducing manual configuration for release builds.

Health Assessment

• • The PR merged quickly after a single review, indicating straightforward backporting with minimal friction.

Summary

Migrate GitHub Actions to use GATB

Updates CI workflows to use GATB for improved build reliability and consistency across Grafana releases.

Health Assessment

• • Rapid review and minimal rework indicate a straightforward CI update.

Summary

Prevent sidebar from opening when interacting with table panels

Fixes a UI bug that prevented users from selecting series in edit mode without unintentionally opening the sidebar, improving editing workflow.

Health Assessment

• • Fast review and minimal changes indicate low complexity and low risk.

Summary

Fix timeshift display in dashboard panels

Corrects visual bug where month timeshift values were displayed in lowercase, ensuring accurate time range representation for users.

Health Assessment

• • Single commit with quick review, minimal changes, low risk to production.

Summary

Move IAM searchExternalGroupMappings spec to CUE

The change moves the IAM searchExternalGroupMappings API spec into a CUE manifest, enabling automatic type generation. It simplifies the response to a list of team names, reducing payload size and improving client efficiency.

Health Assessment

• • The PR experienced a prolonged review cycle with numerous iterations and merges, indicating high review friction and complexity.

Summary

Enable anonymous users to use section variables

Allows anonymous users to view dashboards with tab/row-level variables, improving accessibility and user experience.

Health Assessment

• • The PR had a single review cycle and a moderate amount of changes, resulting in a cycle time of ~4 days. The change was straightforward and did not introduce significant risk.

Summary

Set namespaced User-Agent in OFREP proxy

Ensures upstream services can distinguish requests by namespace, improving rate limiting and routing accuracy.

Health Assessment

• • Long review cycle and merge conflicts suggest blockers; minimal rework after first review indicates focused changes.

Summary

Coordinate periodic index rebuilds across replicas

This PR optimizes index rebuilds by coordinating snapshots across replicas, reducing duplicate work and improving performance.

Health Assessment

• • The review cycle was fast with only one comment, indicating clear intent.
• • The large number of lines changed suggests significant refactoring and potential risk.

Summary

Bump golang.org/x/crypto to v0.52.0

Fixes multiple security vulnerabilities in the crypto library, improving system security.

Health Assessment

• • Quick merge with minimal review indicates low friction and high confidence in the change.

Summary

Bypass yarn min age gate for scenes and plugin-e2e

Allows maintainers to update scenes and plugin-e2e packages without waiting for yarn's minimum age gate, speeding up maintenance and release cycles.

Health Assessment

• • Quick approval with minimal changes; maintainers can update packages promptly.

Summary

Upgrade uuid to 14.0.0 to fix CVE

Pin uuid to 14.0.0 across Grafana to address a security vulnerability, ensuring all direct dependencies use the patched version. This change mitigates a bounds-check flaw that could allow memory corruption.

Health Assessment

• • Fast review and merge with minimal changes indicates a straightforward dependency upgrade. Low friction and quick turnaround reflect efficient handling of security patches.