Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Error updating branch: update failure

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (30)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/araddon/dateparse](https://redirect.github.com/araddon/dateparse) | `2021-04-29` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/cheekybits/genny](https://redirect.github.com/cheekybits/genny) | `2018-08-30` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/gogo/googleapis](https://redirect.github.com/gogo/googleapis) | `2021-03-16` |
| gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/hashicorp/go-hclog](https://redirect.github.com/hashicorp/go-hclog) | `2024-04-01` |
| gomod | [github.com/influxdata/tdigest](https://redirect.github.com/influxdata/tdigest) | `2019-11-07` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/mattetti/filebuffer](https://redirect.github.com/mattetti/filebuffer) | `2020-05-07` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/patrickmn/go-cache](https://redirect.github.com/patrickmn/go-cache) | `2017-10-24` |
| gomod | [github.com/pkg/errors](https://redirect.github.com/pkg/errors) | `2020-01-14` |
| gomod | [github.com/russross/blackfriday/v2](https://redirect.github.com/russross/blackfriday) | `2020-11-07` |
| gomod | [github.com/shurcooL/graphql](https://redirect.github.com/shurcooL/graphql) | `2024-09-15` |
| gomod | [github.com/unknwon/bra](https://redirect.github.com/unknwon/bra) | `2020-05-17` |
| gomod | [github.com/unknwon/com](https://redirect.github.com/unknwon/com) | `2019-08-04` |
| gomod | [github.com/unknwon/log](https://redirect.github.com/unknwon/log) | `2020-03-08` |
| gomod | [gopkg.in/fsnotify/fsnotify.v1](https://redirect.github.com/fsnotify/fsnotify) | `2018-01-10` |
| npm | [identity-obj-proxy](https://redirect.github.com/keyanzhang/identity-obj-proxy) | `2016-08-03` |
| npm | [imports-loader](https://redirect.github.com/webpack-contrib/imports-loader) | `2024-01-16` |
| npm | [replace-in-file-webpack-plugin](https://redirect.github.com/oyslin/replace-in-file-webpack-plugin) | `2018-05-17` |
| npm | [style-loader](https://redirect.github.com/webpack-contrib/style-loader) | `2024-04-08` |
| npm | [webpack-livereload-plugin](https://redirect.github.com/statianzo/webpack-livereload-plugin) | `2021-08-04` |
| npm | [webpack-subresource-integrity](https://redirect.github.com/waysact/webpack-subresource-integrity) | `2023-02-22` |
| npm | [webpack-virtual-modules](https://redirect.github.com/sysgears/webpack-virtual-modules) | `2024-06-04` |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v64
- [ ] chore(deps): update dependency eslint-webpack-plugin to v6
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency @babel/core to v8
- [ ] chore(deps): update dependency @changesets/cli to v3
- [ ] chore(deps): update dependency @grafana/eslint-config to v10
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v11.2.0
- [ ] chore(deps): update npm to v12
- [ ] fix(deps): update backend dependencies (major) (`github.com/cenkalti/backoff/v5`, `github.com/golang-jwt/jwt/v4`, `github.com/google/go-github/v84`, `github.com/google/go-github/v88`, `github.com/urfave/cli`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

- [ ] chore(deps): pin grafana/data-sources-ci-workflows action to 906b18e

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [chore(deps): update grafana/grafana-enterprise:latest docker digest to 3865fe3](../pull/783)
- [ ] chore(deps): update grafana/shared-workflows/create-github-app-token action to v1.0

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/medium/): update dependency react-router to v7 [security]](../pull/795)
- [ ] [chore(deps): update backend dependencies](../pull/805) (`github.com/apache/arrow-go/v18`, `github.com/jaegertracing/jaeger-idl`, `github.com/klauspost/compress`, `github.com/mattn/go-runewidth`, `golang.org/x/exp`, `golang.org/x/net`, `golang.org/x/text`, `google.golang.org/genproto/googleapis/api`, `google.golang.org/genproto/googleapis/rpc`)
- [ ] [chore(deps): update node.js to v24.21.0](../pull/806)
- [ ] [fix(deps): update frontend dependencies](../pull/807) (`@grafana/data`, `@grafana/e2e-selectors`, `@grafana/i18n`, `@grafana/plugin-e2e`, `@grafana/plugin-ui`, `@grafana/runtime`, `@grafana/schema`, `@grafana/ui`, `@testing-library/dom`, `@types/node`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `cspell`, `dompurify`, `sass`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency eslint to v10](../pull/639)

## Vulnerabilities

> [!IMPORTANT]
> `2`/`2` CVEs have Renovate fixes.

npm

package.json

react-router

- [GHSA-337j-9hxr-rhxg](https://osv.dev/vulnerability/GHSA-337j-9hxr-rhxg) (fixed in >= 7.18.0)
- [GHSA-wrjc-x8rr-h8h6](https://osv.dev/vulnerability/GHSA-wrjc-x8rr-h8h6) (fixed in >= 7.18.0)

## Detected Dependencies

docker-compose (2)

.config/docker-compose-base.yaml

docker-compose.yaml

dockerfile (1)

.config/Dockerfile (1)

- `grafana/grafana-enterprise latest@sha256:f7e79dc47a09b9543901e2178ed8dd5a4d4ffd8ce4cc4977cb9a9d56bd2a08dd` → [Updates: `latest`]

github-actions (5)

.github/workflows/add-to-project.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/publish.yaml (1)

- `grafana/plugin-ci-workflows ci-cd-workflows/v10.1.0` → [Updates: `ci-cd-workflows/v11.2.0`]

.github/workflows/push.yaml (1)

- `grafana/plugin-ci-workflows ci-cd-workflows/v10.1.0` → [Updates: `ci-cd-workflows/v11.2.0`]

.github/workflows/stale.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/update-create-plugin.yml (2)

- `grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e` → [Updates: `create-github-app-token/v1.0`]
- `grafana/plugin-actions create-plugin-update/v2.0.1@244c3bc9c6eb94bc1dd6458ade2462499bbf0f5b`

gomod (1)

go.mod (92)

- `go 1.26.5`
- `github.com/bradleyfalzon/ghinstallation/v2 v2.19.0`
- `github.com/google/go-github/v84 v84.0.0` → [Updates: `v91.0.0`]
- `github.com/grafana/grafana-plugin-sdk-go v0.296.4`
- `github.com/influxdata/tdigest v0.0.1`
- `github.com/pkg/errors v0.9.1`
- `github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed`
- `github.com/stretchr/testify v1.12.1`
- `golang.org/x/oauth2 v0.37.0`
- `pgregory.net/rapid v1.3.0`
- `github.com/BurntSushi/toml v1.6.0`
- `github.com/apache/arrow-go/v18 v18.7.0` → [Updates: `v18.8.0`]
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/clipperhouse/displaywidth v0.11.0`
- `github.com/clipperhouse/uax29/v2 v2.7.0`
- `github.com/cpuguy83/go-md2man/v2 v2.0.7`
- `github.com/fatih/color v1.19.0`
- `github.com/go-logr/logr v1.4.4`
- `github.com/go-logr/stdr v1.2.2`
- `github.com/goccy/go-json v0.10.6`
- `github.com/gogo/googleapis v1.4.1`
- `github.com/gogo/protobuf v1.3.2`
- `github.com/golang-jwt/jwt/v4 v4.5.2` → [Updates: `v5.3.1`]
- `github.com/google/go-github/v88 v88.0.0` → [Updates: `v91.0.0`]
- `github.com/google/go-querystring v1.2.0`
- `github.com/google/uuid v1.6.0`
- `github.com/grafana/otel-profiling-go v0.6.0`
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.12`
- `github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0`
- `github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.4`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0`
- `github.com/jaegertracing/jaeger-idl v0.11.4` → [Updates: `v0.12.0`]
- `github.com/json-iterator/go v1.1.12`
- `github.com/klauspost/compress v1.19.2` → [Updates: `v1.20.0`]
- `github.com/klauspost/cpuid/v2 v2.4.0`
- `github.com/mattn/go-colorable v0.1.15`
- `github.com/mattn/go-isatty v0.0.24`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.2`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6@50322a0618f6`
- `github.com/olekukonko/errors v1.3.0`
- `github.com/olekukonko/ll v0.1.8`
- `github.com/patrickmn/go-cache v2.1.0+incompatible`
- `github.com/pierrec/lz4/v4 v4.1.29` → [Updates: `v4.1.30`]
- `github.com/russross/blackfriday/v2 v2.1.0`
- `github.com/unknwon/bra v0.0.0-20200517080246-1e3013ecaff8@1e3013ecaff8`
- `github.com/unknwon/com v1.0.1`
- `github.com/unknwon/log v0.0.0-20200308114134-929b1006e34a@929b1006e34a`
- `github.com/urfave/cli v1.22.17` → [Updates: `v3.11.0`]
- `github.com/zeebo/xxh3 v1.1.0`
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0`
- `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.71.0`
- `go.opentelemetry.io/contrib/propagators/jaeger v1.46.0`
- `go.opentelemetry.io/contrib/samplers/jaegerremote v0.37.3`
- `go.opentelemetry.io/otel v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0`
- `go.opentelemetry.io/otel/metric v1.46.0`
- `go.opentelemetry.io/otel/sdk v1.46.0`
- `go.opentelemetry.io/otel/trace v1.46.0`
- `go.opentelemetry.io/proto/otlp v1.11.0`
- `go.yaml.in/yaml/v3 v3.0.5`
- `golang.org/x/exp v0.0.0-20260813180055-c1d0aacb2297@c1d0aacb2297` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260825221802-da73d73af1c5@da73d73af1c5` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `gopkg.in/fsnotify/fsnotify.v1 v1.4.7`
- `github.com/araddon/dateparse v0.0.0-20210429162001-6b43995a97de@6b43995a97de`
- `github.com/beorn7/perks v1.0.1`
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/cheekybits/genny v1.0.0`
- `github.com/google/flatbuffers v25.12.19+incompatible`
- `github.com/google/go-cmp v0.7.0`
- `github.com/hashicorp/go-hclog v1.6.3`
- `github.com/hashicorp/go-plugin v1.8.0`
- `github.com/hashicorp/yamux v0.1.2`
- `github.com/magefile/mage v1.17.2`
- `github.com/mattetti/filebuffer v1.0.1`
- `github.com/mattn/go-runewidth v0.0.29` → [Updates: `v0.0.30`]
- `github.com/oklog/run v1.2.0`
- `github.com/olekukonko/tablewriter v1.1.4` → [Updates: `v1.1.5`]
- `github.com/prometheus/client_golang v1.24.1`
- `github.com/prometheus/client_model v0.6.3`
- `github.com/prometheus/common v0.71.0`
- `github.com/prometheus/procfs v0.22.0`
- `github.com/shurcooL/graphql v0.0.0-20240915155400-7ee5256398cf@7ee5256398cf`
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/sys v0.48.0`
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `google.golang.org/grpc v1.83.2`
- `google.golang.org/protobuf v1.36.12`

npm (1)

package.json (78)

- `@emotion/css 11.13.5`
- `@grafana/data 13.1.1` → [Updates: `13.2.1`]
- `@grafana/i18n 13.1.1` → [Updates: `13.2.1`]
- `@grafana/plugin-ui 0.17.4` → [Updates: `0.17.5`]
- `@grafana/runtime 13.1.1` → [Updates: `13.2.1`]
- `@grafana/schema 13.1.1` → [Updates: `13.2.1`]
- `@grafana/ui 13.1.1` → [Updates: `13.2.1`]
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `tslib 2.8.1`
- `@axe-core/playwright 4.13.0`
- `@babel/core 7.29.7` → [Updates: `8.0.5`]
- `@changesets/cli 2.31.1` → [Updates: `3.0.2`]
- `@grafana/e2e-selectors 13.1.1` → [Updates: `13.2.1`]
- `@grafana/eslint-config 9.0.0` → [Updates: `10.0.0`]
- `@grafana/plugin-e2e 3.11.1` → [Updates: `3.12.0`]
- `@grafana/plugin-meta-extractor 0.13.0`
- `@grafana/sign-plugin 3.3.3`
- `@grafana/tsconfig 2.2.0`
- `@openfeature/web-sdk 1.10.0`
- `@playwright/test 1.63.0`
- `@stylistic/eslint-plugin-ts 4.4.1`
- `@swc/core 1.16.2`
- `@swc/helpers 0.5.23`
- `@swc/jest 0.2.39`
- `@testing-library/dom 10.4.1` → [Updates: `10.4.2`]
- `@testing-library/jest-dom 6.9.1` → [Updates: `7.0.1`]
- `@testing-library/react 16.3.3`
- `@testing-library/user-event 14.6.7`
- `@types/jest 30.0.0`
- `@types/lodash 4.17.25`
- `@types/node 25.9.5` → [Updates: `25.9.6`]
- `@types/react 18.3.31` → [Updates: `19.3.0`]
- `@types/react-dom 18.3.7` → [Updates: `19.3.0`]
- `@typescript-eslint/eslint-plugin 8.69.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 8.69.0` → [Updates: `8.70.0`]
- `copy-webpack-plugin 14.0.0`
- `cspell 10.2.2` → [Updates: `10.3.1`]
- `css-loader 7.1.5`
- `eslint 9.39.5` → [Updates: `10.10.0`]
- `eslint-config-prettier 10.1.8`
- `eslint-plugin-jsdoc 62.9.0` → [Updates: `64.3.10`]
- `eslint-plugin-prettier 5.5.6`
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 7.1.1`
- `eslint-webpack-plugin 5.0.3` → [Updates: `6.0.0`]
- `fork-ts-checker-webpack-plugin 9.1.0`
- `glob 13.0.6`
- `identity-obj-proxy 3.0.0`
- `imports-loader 5.0.0`
- `jest 30.5.1`
- `jest-environment-jsdom 30.5.1`
- `prettier 3.9.6` → [Updates: `3.9.7`]
- `replace-in-file-webpack-plugin 1.0.6`
- `rxjs 7.8.2`
- `sass 1.104.0` → [Updates: `1.104.1`]
- `sass-loader 17.0.1`
- `semver 7.8.5`
- `style-loader 4.0.0`
- `swc-loader 0.2.7`
- `terser-webpack-plugin 5.6.1`
- `ts-node 10.9.2`
- `tsconfig-paths 4.2.0`
- `typescript 6.0.3` → [Updates: `7.0.2`]
- `webpack 5.110.3` → [Updates: `5.111.0`]
- `webpack-cli 7.2.3`
- `webpack-livereload-plugin 3.0.2`
- `webpack-subresource-integrity 5.1.0`
- `webpack-virtual-modules 0.6.2`
- `node >=24`
- `npm >=11.17.0`
- `npm 11.19.1` → [Updates: `12.0.2`]
- `react-router 6.30.4` → [Updates: `7.18.0`]
- `@remix-run/router 1.23.4`
- `@openfeature/core 1.12.0`
- `serialize-javascript 7.1.1`
- `i18next 26.4.2`
- `dompurify 3.4.13` → [Updates: `3.4.15`]

nvm (1)

.nvmrc (1)

- `node 24.19.0` → [Updates: `24.21.0`]

renovate-config (1)

.github/renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.