Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Error updating branch: update failure

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (39)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/apache/arrow/go/v15](https://redirect.github.com/apache/arrow) | `2024-07-11` |
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/cheekybits/genny](https://redirect.github.com/cheekybits/genny) | `2018-08-30` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/gogo/googleapis](https://redirect.github.com/gogo/googleapis) | `2021-03-16` |
| gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` |
| gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/grafana/dataplane/sdata](https://redirect.github.com/grafana/dataplane) | `2024-04-16` |
| gomod | [github.com/hashicorp/go-hclog](https://redirect.github.com/hashicorp/go-hclog) | `2024-04-01` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/jszwedko/go-datemath](https://redirect.github.com/jszwedko/go-datemath) | `2019-10-14` |
| gomod | [github.com/mattetti/filebuffer](https://redirect.github.com/mattetti/filebuffer) | `2020-05-07` |
| gomod | [github.com/mitchellh/go-homedir](https://redirect.github.com/mitchellh/go-homedir) | `2019-01-27` |
| gomod | [github.com/mithrandie/csvq](https://redirect.github.com/mithrandie/csvq) | `2023-03-26` |
| gomod | [github.com/mithrandie/csvq-driver](https://redirect.github.com/mithrandie/csvq-driver) | `2023-03-26` |
| gomod | [github.com/mithrandie/go-file/v2](https://redirect.github.com/mithrandie/go-file) | `2022-06-18` |
| gomod | [github.com/mithrandie/go-text](https://redirect.github.com/mithrandie/go-text) | `2023-03-26` |
| gomod | [github.com/mithrandie/ternary](https://redirect.github.com/mithrandie/ternary) | `2022-02-22` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/patrickmn/go-cache](https://redirect.github.com/patrickmn/go-cache) | `2017-10-24` |
| gomod | [github.com/pkg/errors](https://redirect.github.com/pkg/errors) | `2020-01-14` |
| gomod | [github.com/russross/blackfriday/v2](https://redirect.github.com/russross/blackfriday) | `2020-11-07` |
| gomod | [github.com/unknwon/bra](https://redirect.github.com/unknwon/bra) | `2020-05-17` |
| gomod | [github.com/unknwon/com](https://redirect.github.com/unknwon/com) | `2019-08-04` |
| gomod | [github.com/unknwon/log](https://redirect.github.com/unknwon/log) | `2020-03-08` |
| gomod | [golang.org/x/xerrors](https://go.googlesource.com/xerrors) | `2024-09-03` |
| gomod | [gopkg.in/fsnotify/fsnotify.v1](https://redirect.github.com/fsnotify/fsnotify) | `2018-01-10` |
| npm | [identity-obj-proxy](https://redirect.github.com/keyanzhang/identity-obj-proxy) | `2016-08-03` |
| npm | [imports-loader](https://redirect.github.com/webpack-contrib/imports-loader) | `2024-01-16` |
| npm | [replace-in-file-webpack-plugin](https://redirect.github.com/oyslin/replace-in-file-webpack-plugin) | `2018-05-17` |
| npm | [sql-formatter-plus](https://redirect.github.com/kufii/sql-formatter-plus) | `2019-10-31` |
| npm | [style-loader](https://redirect.github.com/webpack-contrib/style-loader) | `2024-04-08` |
| npm | [webpack-livereload-plugin](https://redirect.github.com/statianzo/webpack-livereload-plugin) | `2021-08-04` |
| npm | [webpack-subresource-integrity](https://redirect.github.com/waysact/webpack-subresource-integrity) | `2023-02-22` |
| npm | [webpack-virtual-modules](https://redirect.github.com/sysgears/webpack-virtual-modules) | `2024-06-04` |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update dependency eslint to v10
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v64
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update backend dependencies (major) (`github.com/apache/arrow/go/v15`, `github.com/cenkalti/backoff/v5`, `github.com/urfave/cli`)
- [ ] chore(deps): update dependency @changesets/cli to v3
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v11.2.0
- [ ] chore(deps): update npm to v12
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

- [ ] chore(deps): pin grafana/data-sources-ci-workflows action to 906b18e

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update grafana/grafana-enterprise:latest docker digest to 3865fe3
- [ ] chore(deps): update grafana/shared-workflows/create-github-app-token action to v1.0

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update frontend dependencies](../pull/568) (`@babel/core`, `@grafana/data`, `@grafana/e2e-selectors`, `@grafana/i18n`, `@grafana/plugin-ui`, `@grafana/runtime`, `@grafana/schema`, `@grafana/ui`, `@testing-library/dom`, `@types/node`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `cspell`, `sass`)
- [ ] [chore(deps): update node.js to v24.21.0](../pull/542)
- [ ] [fix(deps): update backend dependencies](../pull/567) (`github.com/apache/arrow-go/v18`, `github.com/googleapis/enterprise-certificate-proxy`, `github.com/grafana/sqlds/v5`, `github.com/jaegertracing/jaeger-idl`, `github.com/klauspost/compress`, `github.com/mattn/go-runewidth`, `golang.org/x/crypto`, `golang.org/x/exp`, `golang.org/x/mod`, `golang.org/x/net`, `golang.org/x/telemetry`, `golang.org/x/term`, `golang.org/x/text`, `golang.org/x/tools`, `google.golang.org/genproto`, `google.golang.org/genproto/googleapis/api`, `google.golang.org/genproto/googleapis/rpc`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `0`/`1` CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/crypto

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)

## Detected Dependencies

docker-compose (2)

.config/docker-compose-base.yaml

docker-compose.yaml

dockerfile (1)

.config/Dockerfile (1)

- `grafana/grafana-enterprise latest@sha256:68a7ee3dc2c726e54b2be3533a9e1ac6baaed0893334947a6378520de28a6a76` → [Updates: `latest`]

github-actions (6)

.github/workflows/add-to-project.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/cron.yml (5)

- `hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc`
- `grafana/data-sources-ci-workflows main` → [Updates: `main`]
- `grafana/shared-workflows send-slack-message/v3.0.2@551bc8d50017d3e95d5da3f8a4826e733a208dc0`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/publish.yaml (1)

- `grafana/plugin-ci-workflows ci-cd-workflows/v10.1.0` → [Updates: `ci-cd-workflows/v11.2.0`]

.github/workflows/push.yaml (2)

- `grafana/plugin-ci-workflows ci-cd-workflows/v10.1.0` → [Updates: `ci-cd-workflows/v11.2.0`]
- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/stale.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/update-create-plugin.yml (2)

- `grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e` → [Updates: `create-github-app-token/v1.0`]
- `grafana/plugin-actions create-plugin-update/v2.0.2@b82357e85d512c678416146ca4e9f8672bd108da`

gomod (1)

go.mod (116)

- `go 1.26.5`
- `cloud.google.com/go v0.123.0`
- `cloud.google.com/go/bigquery v1.83.0`
- `github.com/grafana/grafana-google-sdk-go v0.4.2`
- `github.com/grafana/grafana-plugin-sdk-go v0.296.4`
- `github.com/grafana/macropro v1.0.2`
- `github.com/grafana/sqlds/v5 v5.3.1` → [Updates: `v5.3.2`]
- `github.com/pkg/errors v0.9.1`
- `github.com/stretchr/testify v1.12.1`
- `golang.org/x/oauth2 v0.37.0`
- `google.golang.org/api v0.297.0` → [Updates: `v0.298.0`]
- `google.golang.org/grpc v1.83.2`
- `cloud.google.com/go/auth v0.23.2`
- `cloud.google.com/go/auth/oauth2adapt v0.2.8`
- `cloud.google.com/go/compute/metadata v0.9.0`
- `cloud.google.com/go/iam v1.13.0`
- `github.com/BurntSushi/toml v1.6.0`
- `github.com/apache/arrow-go/v18 v18.7.0` → [Updates: `v18.8.0`]
- `github.com/apache/arrow/go/v15 v15.0.2` → [Updates: `v17.0.0`]
- `github.com/beorn7/perks v1.0.1`
- `github.com/cenkalti/backoff/v5 v5.0.3` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/cheekybits/genny v1.0.0`
- `github.com/clipperhouse/displaywidth v0.11.0`
- `github.com/clipperhouse/uax29/v2 v2.7.0`
- `github.com/cpuguy83/go-md2man/v2 v2.0.7`
- `github.com/fatih/color v1.19.0`
- `github.com/felixge/httpsnoop v1.1.0`
- `github.com/go-logr/logr v1.4.4`
- `github.com/go-logr/stdr v1.2.2`
- `github.com/goccy/go-json v0.10.6`
- `github.com/gogo/googleapis v1.4.1`
- `github.com/gogo/protobuf v1.3.2`
- `github.com/golang/protobuf v1.5.4`
- `github.com/google/flatbuffers v25.12.19+incompatible`
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/s2a-go v0.1.9`
- `github.com/google/uuid v1.6.0`
- `github.com/googleapis/enterprise-certificate-proxy v0.3.21` → [Updates: `v0.3.22`]
- `github.com/googleapis/gax-go/v2 v2.24.1`
- `github.com/grafana/dataplane/sdata v0.0.9`
- `github.com/grafana/otel-profiling-go v0.6.0`
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.12`
- `github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0`
- `github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.4`
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0`
- `github.com/hashicorp/go-hclog v1.6.3`
- `github.com/hashicorp/go-plugin v1.8.0`
- `github.com/hashicorp/yamux v0.1.2`
- `github.com/jaegertracing/jaeger-idl v0.11.4` → [Updates: `v0.12.0`]
- `github.com/json-iterator/go v1.1.12`
- `github.com/jszwedko/go-datemath v0.1.1-0.20260113213115-7f666eef0523@7f666eef0523`
- `github.com/klauspost/compress v1.19.2` → [Updates: `v1.20.0`]
- `github.com/klauspost/cpuid/v2 v2.4.0`
- `github.com/magefile/mage v1.17.2`
- `github.com/mattetti/filebuffer v1.0.1`
- `github.com/mattn/go-colorable v0.1.15`
- `github.com/mattn/go-isatty v0.0.24`
- `github.com/mattn/go-runewidth v0.0.29` → [Updates: `v0.0.30`]
- `github.com/mitchellh/go-homedir v1.1.0`
- `github.com/mithrandie/csvq v1.18.1`
- `github.com/mithrandie/csvq-driver v1.7.0`
- `github.com/mithrandie/go-file/v2 v2.1.0`
- `github.com/mithrandie/go-text v1.6.0`
- `github.com/mithrandie/ternary v1.1.1`
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.2`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/oklog/run v1.2.0`
- `github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6@50322a0618f6`
- `github.com/olekukonko/errors v1.3.0`
- `github.com/olekukonko/ll v0.1.8`
- `github.com/olekukonko/tablewriter v1.1.4` → [Updates: `v1.1.5`]
- `github.com/patrickmn/go-cache v2.1.0+incompatible`
- `github.com/pierrec/lz4/v4 v4.1.29` → [Updates: `v4.1.30`]
- `github.com/prometheus/client_golang v1.24.1`
- `github.com/prometheus/client_model v0.6.3`
- `github.com/prometheus/common v0.71.0`
- `github.com/prometheus/procfs v0.22.0`
- `github.com/russross/blackfriday/v2 v2.1.0`
- `github.com/unknwon/bra v0.0.0-20200517080246-1e3013ecaff8@1e3013ecaff8`
- `github.com/unknwon/com v1.0.1`
- `github.com/unknwon/log v0.0.0-20200308114134-929b1006e34a@929b1006e34a`
- `github.com/urfave/cli v1.22.17` → [Updates: `v3.11.0`]
- `github.com/zeebo/xxh3 v1.1.0`
- `go.opentelemetry.io/auto/sdk v1.2.1`
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0`
- `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.71.0`
- `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0`
- `go.opentelemetry.io/contrib/propagators/jaeger v1.46.0`
- `go.opentelemetry.io/contrib/samplers/jaegerremote v0.37.3`
- `go.opentelemetry.io/otel v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0`
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0`
- `go.opentelemetry.io/otel/metric v1.46.0`
- `go.opentelemetry.io/otel/sdk v1.46.0`
- `go.opentelemetry.io/otel/trace v1.46.0`
- `go.opentelemetry.io/proto/otlp v1.11.0`
- `go.yaml.in/yaml/v3 v3.0.5`
- `golang.org/x/crypto v0.56.0` → [Updates: `v0.57.0`]
- `golang.org/x/exp v0.0.0-20260813180055-c1d0aacb2297@c1d0aacb2297` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/mod v0.40.0` → [Updates: `v0.41.0`]
- `golang.org/x/net v0.58.0` → [Updates: `v0.59.0`]
- `golang.org/x/sync v0.23.0`
- `golang.org/x/sys v0.48.0`
- `golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5@a038080d80e5` → [Updates: `v0.0.0-20260910141331-15ceca2b0a1f`]
- `golang.org/x/term v0.45.0` → [Updates: `v0.46.0`]
- `golang.org/x/text v0.41.0` → [Updates: `v0.42.0`]
- `golang.org/x/time v0.16.0`
- `golang.org/x/tools v0.49.0` → [Updates: `v0.50.0`]
- `golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da`
- `google.golang.org/genproto v0.0.0-20260715232425-e75dac1f907d@e75dac1f907d` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688@08b0e4226688` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/genproto/googleapis/rpc v0.0.0-20260825221802-da73d73af1c5@da73d73af1c5` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/protobuf v1.36.12`
- `gopkg.in/fsnotify/fsnotify.v1 v1.4.7`

npm (1)

package.json (69)

- `@emotion/css 11.13.5`
- `@grafana/assistant 0.1.34`
- `@grafana/data 13.1.1` → [Updates: `13.2.1`]
- `@grafana/google-sdk 0.6.1`
- `@grafana/i18n 13.1.1` → [Updates: `13.2.1`]
- `@grafana/plugin-ui 0.17.4` → [Updates: `0.17.5`]
- `@grafana/runtime 13.1.1` → [Updates: `13.2.1`]
- `@grafana/schema 13.1.1` → [Updates: `13.2.1`]
- `@grafana/ui 13.1.1` → [Updates: `13.2.1`]
- `@react-awesome-query-builder/ui 6.6.15`
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-virtualized-auto-sizer 2.0.3`
- `sql-formatter-plus 1.3.6`
- `@babel/core 8.0.1` → [Updates: `8.0.5`]
- `@changesets/cli 2.31.1` → [Updates: `3.0.2`]
- `@grafana/e2e-selectors 13.1.1` → [Updates: `13.2.1`]
- `@grafana/eslint-config 10.0.0`
- `@grafana/plugin-e2e 3.12.0` → [Updates: `3.13.0`]
- `@grafana/tsconfig 2.2.0`
- `@playwright/test 1.63.0`
- `@stylistic/eslint-plugin 5.10.0`
- `@swc/core 1.16.2`
- `@swc/jest 0.2.39`
- `@testing-library/dom 10.4.1` → [Updates: `10.4.2`]
- `@testing-library/jest-dom 6.9.1` → [Updates: `7.0.1`]
- `@testing-library/react 16.3.3`
- `@testing-library/user-event 14.6.7`
- `@trivago/prettier-plugin-sort-imports 6.0.2`
- `@types/jest 30.0.0`
- `@types/node 25.9.5` → [Updates: `25.9.6`]
- `@types/react 18.3.31` → [Updates: `19.3.0`]
- `@types/react-dom 18.3.7` → [Updates: `19.3.0`]
- `@typescript-eslint/eslint-plugin 8.69.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 8.69.0` → [Updates: `8.70.0`]
- `copy-webpack-plugin 14.0.0`
- `cspell 10.2.2` → [Updates: `10.3.1`]
- `css-loader 7.1.5`
- `eslint 9.39.5` → [Updates: `10.10.0`]
- `eslint-config-prettier 10.1.8`
- `eslint-plugin-jsdoc 63.3.3` → [Updates: `64.3.10`]
- `eslint-plugin-prettier 5.5.6`
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 7.1.1`
- `eslint-webpack-plugin 6.0.0`
- `fork-ts-checker-webpack-plugin 9.1.0`
- `glob 13.0.6`
- `identity-obj-proxy 3.0.0`
- `imports-loader 5.0.0`
- `jest 30.5.1`
- `jest-environment-jsdom 30.5.1`
- `prettier 3.9.6` → [Updates: `3.9.7`]
- `replace-in-file-webpack-plugin 1.0.6`
- `rxjs 7.8.2`
- `sass 1.104.0` → [Updates: `1.104.1`]
- `sass-loader 17.0.1`
- `style-loader 4.0.0`
- `swc-loader 0.2.7`
- `terser-webpack-plugin 5.6.1`
- `ts-node 10.9.2`
- `typescript 6.0.3` → [Updates: `7.0.2`]
- `webpack 5.110.3` → [Updates: `5.111.0`]
- `webpack-cli 7.2.3`
- `webpack-livereload-plugin 3.0.2`
- `webpack-subresource-integrity 5.1.0`
- `webpack-virtual-modules 0.6.2`
- `node >=24`
- `npm >=11.16.0`
- `npm 11.19.1` → [Updates: `12.0.2`]

nvm (1)

.nvmrc (1)

- `node 24.18.0` → [Updates: `24.21.0`]

renovate-config (1)

.github/renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

This is a Renovate dashboard rather than a scoped change, with dependency entries in go.mod, .config/Dockerfile, Docker Compose files, and .github/workflows/*.yml. Start by reading the listed repository problem and existing pull requests, then identify a single update with a defined scope. Done would require resolving that specific update and validating its checks; the issue does not define one task.

Written by the indexing model from the issue text.