Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Error updating branch: update failure

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/testing-library__jest-dom` |  |

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (33)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| gomod | [github.com/beorn7/perks](https://redirect.github.com/beorn7/perks) | `2019-07-31` |
| gomod | [github.com/cespare/xxhash/v2](https://redirect.github.com/cespare/xxhash) | `2024-04-04` |
| gomod | [github.com/cheekybits/genny](https://redirect.github.com/cheekybits/genny) | `2018-08-30` |
| gomod | [github.com/go-logr/stdr](https://redirect.github.com/go-logr/stdr) | `2021-12-15` |
| gomod | [github.com/gogo/protobuf](https://redirect.github.com/gogo/protobuf) | `2021-01-10` |
| gomod | [github.com/golang/protobuf](https://redirect.github.com/golang/protobuf) | `2024-03-06` |
| gomod | [github.com/google/uuid](https://redirect.github.com/google/uuid) | `2024-01-23` |
| gomod | [github.com/gorilla/mux](https://redirect.github.com/gorilla/mux) | `2023-11-05` |
| gomod | [github.com/hashicorp/go-hclog](https://redirect.github.com/hashicorp/go-hclog) | `2024-04-01` |
| gomod | [github.com/josharian/intern](https://redirect.github.com/josharian/intern) | `2019-12-14` |
| gomod | [github.com/json-iterator/go](https://redirect.github.com/json-iterator/go) | `2021-09-11` |
| gomod | [github.com/mattetti/filebuffer](https://redirect.github.com/mattetti/filebuffer) | `2020-05-07` |
| gomod | [github.com/modern-go/concurrent](https://redirect.github.com/modern-go/concurrent) | `2018-03-06` |
| gomod | [github.com/modern-go/reflect2](https://redirect.github.com/modern-go/reflect2) | `2021-09-11` |
| gomod | [github.com/mohae/deepcopy](https://redirect.github.com/mohae/deepcopy) | `2017-09-29` |
| gomod | [github.com/munnerz/goautoneg](https://redirect.github.com/munnerz/goautoneg) | `2019-10-10` |
| gomod | [github.com/perimeterx/marshmallow](https://redirect.github.com/perimeterx/marshmallow) | `2023-07-03` |
| gomod | [github.com/rivo/uniseg](https://redirect.github.com/rivo/uniseg) | `2024-02-08` |
| gomod | [github.com/russross/blackfriday/v2](https://redirect.github.com/russross/blackfriday) | `2020-11-07` |
| gomod | [github.com/unknwon/bra](https://redirect.github.com/unknwon/bra) | `2020-05-17` |
| gomod | [github.com/unknwon/com](https://redirect.github.com/unknwon/com) | `2019-08-04` |
| gomod | [github.com/unknwon/log](https://redirect.github.com/unknwon/log) | `2020-03-08` |
| gomod | [golang.org/x/xerrors](https://go.googlesource.com/xerrors) | `2024-09-03` |
| gomod | [gopkg.in/fsnotify/fsnotify.v1](https://redirect.github.com/fsnotify/fsnotify) | `2018-01-10` |
| gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` |
| npm | [eslint-plugin-deprecation](https://redirect.github.com/gund/eslint-plugin-deprecation) | `2024-05-31` |
| npm | [identity-obj-proxy](https://redirect.github.com/keyanzhang/identity-obj-proxy) | `2016-08-03` |
| npm | [imports-loader](https://redirect.github.com/webpack-contrib/imports-loader) | `2024-01-16` |
| npm | [replace-in-file-webpack-plugin](https://redirect.github.com/oyslin/replace-in-file-webpack-plugin) | `2018-05-17` |
| npm | [style-loader](https://redirect.github.com/webpack-contrib/style-loader) | `2024-04-08` |
| npm | [webpack-livereload-plugin](https://redirect.github.com/statianzo/webpack-livereload-plugin) | `2021-08-04` |
| npm | [webpack-subresource-integrity](https://redirect.github.com/waysact/webpack-subresource-integrity) | `2023-02-22` |
| npm | [webpack-virtual-modules](https://redirect.github.com/sysgears/webpack-virtual-modules) | `2024-06-04` |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update dependency eslint to v10
- [ ] chore(deps): update dependency eslint-config-prettier to v10
- [ ] chore(deps): update dependency eslint-plugin-deprecation to v3
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v64
- [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7
- [ ] chore(deps): update dependency eslint-webpack-plugin to v6
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update backend dependencies (major) (`github.com/cenkalti/backoff/v4`, `github.com/go-openapi/jsonpointer`, `github.com/olekukonko/tablewriter`, `github.com/urfave/cli`)
- [ ] chore(deps): update dependency @grafana/eslint-config to v10
- [ ] chore(deps): update dependency @grafana/plugin-e2e to v3
- [ ] chore(deps): update dependency @stylistic/eslint-plugin-ts to v4
- [ ] chore(deps): update dependency @types/testing-library__jest-dom to v6
- [ ] chore(deps): update dependency copy-webpack-plugin to v14
- [ ] chore(deps): update dependency css-loader to v7
- [ ] chore(deps): update dependency fork-ts-checker-webpack-plugin to v9
- [ ] chore(deps): update dependency prettier to v3
- [ ] chore(deps): update dependency sass-loader to v17
- [ ] chore(deps): update dependency style-loader to v4
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency webpack-cli to v7
- [ ] chore(deps): update github actions dependencies (major) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/setup-node`, `actions/upload-artifact`)
- [ ] chore(deps): update jest monorepo to v30 (`@types/jest`, `jest`, `jest-environment-jsdom`)
- [ ] chore(deps): update npm to v12
- [ ] chore(deps): update testing-library monorepo (major) (`@testing-library/jest-dom`, `@testing-library/react`)
- [ ] chore(deps): update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] fix(deps): update grafana monorepo to v13 (`@grafana/data`, `@grafana/runtime`, `@grafana/schema`, `@grafana/ui`)
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

- [ ] [chore(deps): pin dependencies](../pull/60) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/setup-node`, `actions/upload-artifact`, `grafana/data-sources-ci-workflows`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): pin grafana/grafana-enterprise docker tag to 3865fe3](../pull/61)
- [ ] [fix(deps): update backend dependencies](../pull/62) (`github.com/BurntSushi/toml`, `github.com/apache/arrow-go/v18`, `github.com/chromedp/cdproto`, `github.com/cpuguy83/go-md2man/v2`, `github.com/elazarl/goproxy`, `github.com/fatih/color`, `github.com/getkin/kin-openapi`, `github.com/go-logr/logr`, `github.com/go-openapi/jsonpointer`, `github.com/go-openapi/swag`, `github.com/goccy/go-json`, `github.com/google/flatbuffers`, `github.com/gorilla/mux`, `github.com/grafana/grafana-plugin-sdk-go`, `github.com/grafana/otel-profiling-go`, `github.com/grafana/pyroscope-go/godeltaprof`, `github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus`, `github.com/grpc-ecosystem/go-grpc-middleware/v2`, `github.com/grpc-ecosystem/grpc-gateway/v2`, `github.com/hashicorp/go-plugin`, `github.com/hashicorp/yamux`, `github.com/klauspost/compress`, `github.com/klauspost/cpuid/v2`, `github.com/magefile/mage`, `github.com/mailru/easyjson`, `github.com/mattn/go-colorable`, `github.com/mattn/go-isatty`, `github.com/mattn/go-runewidth`, `github.com/oasdiff/yaml`, `github.com/oasdiff/yaml3`, `github.com/oklog/run`, `github.com/pierrec/lz4/v4`, `github.com/prometheus/client_golang`, `github.com/prometheus/client_model`, `github.com/prometheus/common`, `github.com/prometheus/procfs`, `github.com/rivo/uniseg`, `github.com/unknwon/log`, `github.com/urfave/cli`, `github.com/zeebo/xxh3`, `go`, `go.opentelemetry.io/auto/sdk`, `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`, `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace`, `go.opentelemetry.io/contrib/propagators/jaeger`, `go.opentelemetry.io/contrib/samplers/jaegerremote`, `go.opentelemetry.io/otel`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace`, `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`, `go.opentelemetry.io/otel/metric`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/trace`, `go.opentelemetry.io/proto/otlp`, `golang.org/x/exp`, `golang.org/x/mod`, `golang.org/x/net`, `golang.org/x/sync`, `golang.org/x/sys`, `golang.org/x/text`, `golang.org/x/tools`, `google.golang.org/genproto`, `google.golang.org/grpc`, `google.golang.org/protobuf`)
- [ ] [fix(deps): update frontend dependencies](../pull/63) (`@emotion/css`, `@grafana/data`, `@grafana/eslint-config`, `@grafana/plugin-e2e`, `@grafana/runtime`, `@grafana/schema`, `@grafana/tsconfig`, `@grafana/ui`, `@playwright/test`, `@stylistic/eslint-plugin-ts`, `@swc/core`, `@swc/helpers`, `@swc/jest`, `@testing-library/jest-dom`, `@testing-library/react`, `@types/jest`, `@types/node`, `@types/testing-library__jest-dom`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `copy-webpack-plugin`, `css-loader`, `eslint`, `eslint-config-prettier`, `eslint-plugin-deprecation`, `eslint-plugin-jsdoc`, `eslint-plugin-react`, `eslint-plugin-react-hooks`, `eslint-webpack-plugin`, `fork-ts-checker-webpack-plugin`, `glob`, `imports-loader`, `jest`, `jest-environment-jsdom`, `npm`, `prettier`, `react`, `react-dom`, `replace-in-file-webpack-plugin`, `sass`, `sass-loader`, `semver`, `style-loader`, `swc-loader`, `terser-webpack-plugin`, `ts-node`, `typescript`, `webpack`, `webpack-cli`, `webpack-livereload-plugin`, `webpack-subresource-integrity`, `webpack-virtual-modules`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `94`/`94` CVEs have Renovate fixes.

gomod

go.mod

go

- [GO-2025-3749](https://osv.dev/vulnerability/GO-2025-3749) (fixed in >= 1.24.4)
- [GO-2025-3750](https://osv.dev/vulnerability/GO-2025-3750) (fixed in >= 1.24.4)
- [GO-2025-3751](https://osv.dev/vulnerability/GO-2025-3751) (fixed in >= 1.24.4)
- [GO-2025-3849](https://osv.dev/vulnerability/GO-2025-3849) (fixed in >= 1.24.6)
- [GO-2025-3956](https://osv.dev/vulnerability/GO-2025-3956) (fixed in >= 1.24.6)
- [GO-2025-4006](https://osv.dev/vulnerability/GO-2025-4006) (fixed in >= 1.24.8)
- [GO-2025-4007](https://osv.dev/vulnerability/GO-2025-4007) (fixed in >= 1.24.9)
- [GO-2025-4008](https://osv.dev/vulnerability/GO-2025-4008) (fixed in >= 1.24.8)
- [GO-2025-4009](https://osv.dev/vulnerability/GO-2025-4009) (fixed in >= 1.24.8)
- [GO-2025-4010](https://osv.dev/vulnerability/GO-2025-4010) (fixed in >= 1.24.8)
- [GO-2025-4011](https://osv.dev/vulnerability/GO-2025-4011) (fixed in >= 1.24.8)
- [GO-2025-4012](https://osv.dev/vulnerability/GO-2025-4012) (fixed in >= 1.24.8)
- [GO-2025-4013](https://osv.dev/vulnerability/GO-2025-4013) (fixed in >= 1.24.8)
- [GO-2025-4014](https://osv.dev/vulnerability/GO-2025-4014) (fixed in >= 1.24.8)
- [GO-2025-4015](https://osv.dev/vulnerability/GO-2025-4015) (fixed in >= 1.24.8)
- [GO-2025-4155](https://osv.dev/vulnerability/GO-2025-4155) (fixed in >= 1.24.11)
- [GO-2025-4175](https://osv.dev/vulnerability/GO-2025-4175) (fixed in >= 1.24.11)
- [GO-2026-4337](https://osv.dev/vulnerability/GO-2026-4337) (fixed in >= 1.24.13)
- [GO-2026-4340](https://osv.dev/vulnerability/GO-2026-4340) (fixed in >= 1.24.12)
- [GO-2026-4341](https://osv.dev/vulnerability/GO-2026-4341) (fixed in >= 1.24.12)
- [GO-2026-4342](https://osv.dev/vulnerability/GO-2026-4342) (fixed in >= 1.24.12)
- [GO-2026-4403](https://osv.dev/vulnerability/GO-2026-4403) (fixed in >= 1.24.3)
- [GO-2026-4601](https://osv.dev/vulnerability/GO-2026-4601) (fixed in >= 1.25.8)
- [GO-2026-4602](https://osv.dev/vulnerability/GO-2026-4602) (fixed in >= 1.25.8)
- [GO-2026-4603](https://osv.dev/vulnerability/GO-2026-4603) (fixed in >= 1.25.8)
- [GO-2026-4864](https://osv.dev/vulnerability/GO-2026-4864) (fixed in >= 1.25.9)
- [GO-2026-4865](https://osv.dev/vulnerability/GO-2026-4865) (fixed in >= 1.25.9)
- [GO-2026-4869](https://osv.dev/vulnerability/GO-2026-4869) (fixed in >= 1.25.9)
- [GO-2026-4870](https://osv.dev/vulnerability/GO-2026-4870) (fixed in >= 1.25.9)
- [GO-2026-4918](https://osv.dev/vulnerability/GO-2026-4918) (fixed in >= 1.25.10)
- [GO-2026-4946](https://osv.dev/vulnerability/GO-2026-4946) (fixed in >= 1.25.9)
- [GO-2026-4947](https://osv.dev/vulnerability/GO-2026-4947) (fixed in >= 1.25.9)
- [GO-2026-4970](https://osv.dev/vulnerability/GO-2026-4970) (fixed in >= 1.25.12)
- [GO-2026-4971](https://osv.dev/vulnerability/GO-2026-4971) (fixed in >= 1.25.10)
- [GO-2026-4976](https://osv.dev/vulnerability/GO-2026-4976) (fixed in >= 1.25.10)
- [GO-2026-4977](https://osv.dev/vulnerability/GO-2026-4977) (fixed in >= 1.25.10)
- [GO-2026-4980](https://osv.dev/vulnerability/GO-2026-4980) (fixed in >= 1.25.10)
- [GO-2026-4981](https://osv.dev/vulnerability/GO-2026-4981) (fixed in >= 1.25.10)
- [GO-2026-4982](https://osv.dev/vulnerability/GO-2026-4982) (fixed in >= 1.25.10)
- [GO-2026-4986](https://osv.dev/vulnerability/GO-2026-4986) (fixed in >= 1.25.10)
- [GO-2026-5026](https://osv.dev/vulnerability/GO-2026-5026) (fixed in >= 1.25.13)
- [GO-2026-5037](https://osv.dev/vulnerability/GO-2026-5037) (fixed in >= 1.25.11)
- [GO-2026-5038](https://osv.dev/vulnerability/GO-2026-5038) (fixed in >= 1.25.11)
- [GO-2026-5039](https://osv.dev/vulnerability/GO-2026-5039) (fixed in >= 1.25.11)
- [GO-2026-5856](https://osv.dev/vulnerability/GO-2026-5856) (fixed in >= 1.25.12)
- [GO-2026-5972](https://osv.dev/vulnerability/GO-2026-5972) (fixed in >= 1.25.13)
- [GO-2026-6088](https://osv.dev/vulnerability/GO-2026-6088) (fixed in >= 1.25.13)
- [GO-2026-6089](https://osv.dev/vulnerability/GO-2026-6089) (fixed in >= 1.25.13)
- [GO-2026-6090](https://osv.dev/vulnerability/GO-2026-6090) (fixed in >= 1.25.13)
- [GO-2026-6091](https://osv.dev/vulnerability/GO-2026-6091) (fixed in >= 1.25.13)
- [GO-2026-6218](https://osv.dev/vulnerability/GO-2026-6218) (fixed in >= 1.25.13)

github.com/getkin/kin-openapi

- [GHSA-jpcw-4wr7-c3vq](https://osv.dev/vulnerability/GHSA-jpcw-4wr7-c3vq) (fixed in >= 0.144.0)
- [GHSA-mmfr-pmjx-hw9w](https://osv.dev/vulnerability/GHSA-mmfr-pmjx-hw9w) (fixed in >= 0.141.0)
- [GHSA-r277-6w6q-xmqw](https://osv.dev/vulnerability/GHSA-r277-6w6q-xmqw) (fixed in >= 0.144.0)
- [GHSA-xhj3-7xw9-vr34](https://osv.dev/vulnerability/GHSA-xhj3-7xw9-vr34) (fixed in >= 0.142.0)
- [GO-2026-6095](https://osv.dev/vulnerability/GO-2026-6095) (fixed in >= 0.144.0)
- [GO-2026-6112](https://osv.dev/vulnerability/GO-2026-6112) (fixed in >= 0.144.0)
- [GO-2026-6274](https://osv.dev/vulnerability/GO-2026-6274) (fixed in >= 0.141.0)
- [GO-2026-6275](https://osv.dev/vulnerability/GO-2026-6275) (fixed in >= 0.142.0)

github.com/klauspost/compress

- [GO-2026-5841](https://osv.dev/vulnerability/GO-2026-5841) (fixed in >= 1.18.7)

go.opentelemetry.io/otel/sdk

- [GHSA-9h8m-3fm2-qjrq](https://osv.dev/vulnerability/GHSA-9h8m-3fm2-qjrq) (fixed in >= 1.40.0)
- [GHSA-hfvc-g4fc-pqhx](https://osv.dev/vulnerability/GHSA-hfvc-g4fc-pqhx) (fixed in >= 1.43.0)
- [GO-2026-4394](https://osv.dev/vulnerability/GO-2026-4394) (fixed in >= 1.40.0)
- [GO-2026-5426](https://osv.dev/vulnerability/GO-2026-5426) (fixed in >= 1.43.0)

golang.org/x/mod

- [GO-2026-6179](https://osv.dev/vulnerability/GO-2026-6179) (fixed in >= 0.40.0)
- [GO-2026-6180](https://osv.dev/vulnerability/GO-2026-6180) (fixed in >= 0.40.0)

golang.org/x/net

- [GHSA-5cv4-jp36-h3mw](https://osv.dev/vulnerability/GHSA-5cv4-jp36-h3mw) (fixed in >= 0.55.0)
- [GHSA-vvgc-356p-c3xw](https://osv.dev/vulnerability/GHSA-vvgc-356p-c3xw) (fixed in >= 0.38.0)
- [GO-2025-3595](https://osv.dev/vulnerability/GO-2025-3595) (fixed in >= 0.38.0)
- [GO-2026-4440](https://osv.dev/vulnerability/GO-2026-4440) (fixed in >= 0.45.0)
- [GO-2026-4441](https://osv.dev/vulnerability/GO-2026-4441) (fixed in >= 0.45.0)
- [GO-2026-4918](https://osv.dev/vulnerability/GO-2026-4918) (fixed in >= 0.53.0)
- [GO-2026-5025](https://osv.dev/vulnerability/GO-2026-5025) (fixed in >= 0.55.0)
- [GO-2026-5026](https://osv.dev/vulnerability/GO-2026-5026) (fixed in >= 0.55.0)
- [GO-2026-5027](https://osv.dev/vulnerability/GO-2026-5027) (fixed in >= 0.55.0)
- [GO-2026-5028](https://osv.dev/vulnerability/GO-2026-5028) (fixed in >= 0.55.0)
- [GO-2026-5029](https://osv.dev/vulnerability/GO-2026-5029) (fixed in >= 0.55.0)
- [GO-2026-5030](https://osv.dev/vulnerability/GO-2026-5030) (fixed in >= 0.55.0)
- [GO-2026-5942](https://osv.dev/vulnerability/GO-2026-5942) (fixed in >= 0.56.0)

golang.org/x/sys

- [GO-2026-5024](https://osv.dev/vulnerability/GO-2026-5024) (fixed in >= 0.44.0)

golang.org/x/text

- [GO-2026-5970](https://osv.dev/vulnerability/GO-2026-5970) (fixed in >= 0.39.0)

google.golang.org/grpc

- [GHSA-2v4p-qf9q-27wj](https://osv.dev/vulnerability/GHSA-2v4p-qf9q-27wj) (fixed in >= 1.82.2)
- [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) (fixed in >= 1.82.1)
- [GHSA-p77j-4mvh-x3m3](https://osv.dev/vulnerability/GHSA-p77j-4mvh-x3m3) (fixed in >= 1.79.3)
- [GHSA-qc2q-p7wx-3px3](https://osv.dev/vulnerability/GHSA-qc2q-p7wx-3px3) (fixed in >= 1.83.1)
- [GHSA-vp52-pcj8-j9qc](https://osv.dev/vulnerability/GHSA-vp52-pcj8-j9qc) (fixed in >= 1.83.1)
- [GO-2026-4762](https://osv.dev/vulnerability/GO-2026-4762) (fixed in >= 1.79.3)
- [GO-2026-6061](https://osv.dev/vulnerability/GO-2026-6061) (fixed in >= 1.82.1)
- [GO-2026-6348](https://osv.dev/vulnerability/GO-2026-6348) (fixed in >= 1.83.1)
- [GO-2026-6441](https://osv.dev/vulnerability/GO-2026-6441) (fixed in >= 1.83.1)
- [GO-2026-6443](https://osv.dev/vulnerability/GO-2026-6443) (fixed in >= 1.82.2)

npm

package.json

glob

- [GHSA-5j98-mcp5-4vw2](https://osv.dev/vulnerability/GHSA-5j98-mcp5-4vw2) (fixed in >= 10.5.0)

webpack

- [GHSA-38r7-794h-5758](https://osv.dev/vulnerability/GHSA-38r7-794h-5758) (fixed in >= 5.104.0)
- [GHSA-8fgc-7cc6-rx7x](https://osv.dev/vulnerability/GHSA-8fgc-7cc6-rx7x) (fixed in >= 5.104.1)

## Detected Dependencies

docker-compose (2)

.config/docker-compose-base.yaml

docker-compose.yaml

dockerfile (1)

.config/Dockerfile (1)

- `grafana/grafana-enterprise latest` → [Updates: `latest`]

github-actions (7)

.github/workflows/add-to-project.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/bundle-stats.yml (2)

- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `grafana/plugin-actions main` → [Updates: `main`]

.github/workflows/ci.yml (17)

- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `actions/setup-node v4` → [Updates: `v7`, `v4`]
- `actions/setup-go v5` → [Updates: `v7`, `v5`]
- `actions/upload-artifact v4` → [Updates: `v7`, `v4`]
- `actions/upload-artifact v4` → [Updates: `v7`, `v4`]
- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `grafana/plugin-actions main` → [Updates: `main`]
- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `actions/download-artifact v4` → [Updates: `v8`, `v4`]
- `actions/setup-node v4` → [Updates: `v7`, `v4`]
- `grafana/plugin-actions main` → [Updates: `main`]
- `grafana/plugin-actions main` → [Updates: `main`]
- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `grafana/plugin-actions main` → [Updates: `main`]
- `node 22`
- `go 1.22`
- `node 22`

.github/workflows/cp-update.yml (1)

- `grafana/plugin-actions main` → [Updates: `main`]

.github/workflows/is-compatible.yml (3)

- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `actions/setup-node v4` → [Updates: `v7`, `v4`]
- `node 22`

.github/workflows/release.yml (2)

- `actions/checkout v4` → [Updates: `v7`, `v4`]
- `grafana/plugin-actions main` → [Updates: `main`]

.github/workflows/stale.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

gomod (1)

go.mod (89)

- `go 1.24.1`
- `go 1.24.2` → [Updates: `1.25.13`]
- `github.com/grafana/grafana-plugin-sdk-go v0.276.0` → [Updates: `v0.296.4`]
- `github.com/BurntSushi/toml v1.4.0` → [Updates: `v1.6.0`]
- `github.com/apache/arrow-go/v18 v18.2.0` → [Updates: `v18.8.0`]
- `github.com/beorn7/perks v1.0.1`
- `github.com/cenkalti/backoff/v4 v4.3.0` → [Updates: `v7.0.0`]
- `github.com/cespare/xxhash/v2 v2.3.0`
- `github.com/cheekybits/genny v1.0.0`
- `github.com/chromedp/cdproto v0.0.0-20220208224320-6efb837e6bc2@6efb837e6bc2` → [Updates: `v0.0.0-20260912003405-686a5c723acc`]
- `github.com/cpuguy83/go-md2man/v2 v2.0.5` → [Updates: `v2.0.7`]
- `github.com/elazarl/goproxy v1.7.2` → [Updates: `v1.9.1`]
- `github.com/fatih/color v1.15.0` → [Updates: `v1.19.0`]
- `github.com/getkin/kin-openapi v0.131.0` → [Updates: `v0.144.0`]
- `github.com/go-logr/logr v1.4.2` → [Updates: `v1.4.4`]
- `github.com/go-logr/stdr v1.2.2`
- `github.com/go-openapi/jsonpointer v0.21.0` → [Updates: `v0.24.0`, `v1.0.1`]
- `github.com/go-openapi/swag v0.23.0` → [Updates: `v0.29.2`]
- `github.com/goccy/go-json v0.10.5` → [Updates: `v0.10.6`]
- `github.com/gogo/protobuf v1.3.2`
- `github.com/golang/protobuf v1.5.4`
- `github.com/google/flatbuffers v25.2.10+incompatible` → [Updates: `v25.12.19+incompatible`]
- `github.com/google/go-cmp v0.7.0`
- `github.com/google/uuid v1.6.0`
- `github.com/gorilla/mux v1.8.0` → [Updates: `v1.8.1`]
- `github.com/grafana/otel-profiling-go v0.5.1` → [Updates: `v0.6.0`]
- `github.com/grafana/pyroscope-go/godeltaprof v0.1.8` → [Updates: `v0.1.12`]
- `github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1` → [Updates: `v1.1.0`]
- `github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.1` → [Updates: `v2.3.4`]
- `github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1` → [Updates: `v2.30.0`]
- `github.com/hashicorp/go-hclog v1.6.3`
- `github.com/hashicorp/go-plugin v1.6.3` → [Updates: `v1.8.0`]
- `github.com/hashicorp/yamux v0.1.1` → [Updates: `v0.1.2`]
- `github.com/josharian/intern v1.0.0`
- `github.com/json-iterator/go v1.1.12`
- `github.com/klauspost/compress v1.18.0` → [Updates: `v1.18.7`]
- `github.com/klauspost/cpuid/v2 v2.2.10` → [Updates: `v2.4.0`]
- `github.com/magefile/mage v1.15.0` → [Updates: `v1.17.2`]
- `github.com/mailru/easyjson v0.7.7` → [Updates: `v0.9.2`]
- `github.com/mattetti/filebuffer v1.0.1`
- `github.com/mattn/go-colorable v0.1.13` → [Updates: `v0.1.15`]
- `github.com/mattn/go-isatty v0.0.20` → [Updates: `v0.0.24`]
- `github.com/mattn/go-runewidth v0.0.16` → [Updates: `v0.0.30`]
- `github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd`
- `github.com/modern-go/reflect2 v1.0.2`
- `github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826@c48cc78d4826`
- `github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822`
- `github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037@f31be36b4037` → [Updates: `v0.1.1`]
- `github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90@d2182401db90` → [Updates: `v0.0.14`]
- `github.com/oklog/run v1.0.0` → [Updates: `v1.2.0`]
- `github.com/olekukonko/tablewriter v0.0.5` → [Updates: `v1.1.4`]
- `github.com/perimeterx/marshmallow v1.1.5`
- `github.com/pierrec/lz4/v4 v4.1.22` → [Updates: `v4.1.29`]
- `github.com/prometheus/client_golang v1.20.5` → [Updates: `v1.24.1`]
- `github.com/prometheus/client_model v0.6.1` → [Updates: `v0.6.3`]
- `github.com/prometheus/common v0.63.0` → [Updates: `v0.71.0`]
- `github.com/prometheus/procfs v0.15.1` → [Updates: `v0.22.0`]
- `github.com/rivo/uniseg v0.4.4` → [Updates: `v0.4.7`]
- `github.com/russross/blackfriday/v2 v2.1.0`
- `github.com/unknwon/bra v0.0.0-20200517080246-1e3013ecaff8@1e3013ecaff8`
- `github.com/unknwon/com v1.0.1`
- `github.com/unknwon/log v0.0.0-20150304194804-e617c87089d3@e617c87089d3` → [Updates: `v0.0.0-20200308114134-929b1006e34a`]
- `github.com/urfave/cli v1.22.16` → [Updates: `v1.22.17`, `v3.11.0`]
- `github.com/zeebo/xxh3 v1.0.2` → [Updates: `v1.1.0`]
- `go.opentelemetry.io/auto/sdk v1.1.0` → [Updates: `v1.2.1`]
- `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0` → [Updates: `v0.71.0`]
- `go.opentelemetry.io/contrib/propagators/jaeger v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/contrib/samplers/jaegerremote v0.29.0` → [Updates: `v0.37.3`]
- `go.opentelemetry.io/otel v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/metric v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/otel/sdk v1.35.0` → [Updates: `v1.43.0`]
- `go.opentelemetry.io/otel/trace v1.35.0` → [Updates: `v1.46.0`]
- `go.opentelemetry.io/proto/otlp v1.5.0` → [Updates: `v1.11.0`]
- `golang.org/x/exp v0.0.0-20240909161429-701f63a606c0@701f63a606c0` → [Updates: `v0.0.0-20260908205506-85c1c2202aba`]
- `golang.org/x/mod v0.23.0` → [Updates: `v0.40.0`]
- `golang.org/x/net v0.37.0` → [Updates: `v0.56.0`]
- `golang.org/x/sync v0.13.0` → [Updates: `v0.23.0`]
- `golang.org/x/sys v0.31.0` → [Updates: `v0.44.0`]
- `golang.org/x/text v0.23.0` → [Updates: `v0.39.0`]
- `golang.org/x/tools v0.30.0` → [Updates: `v0.50.0`]
- `golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da`
- `google.golang.org/genproto v0.0.0-20210630183607-d20f26d13c79@d20f26d13c79` → [Updates: `v0.0.0-20260911204522-f61a6ca850bd`]
- `google.golang.org/grpc v1.71.1` → [Updates: `v1.83.1`]
- `google.golang.org/protobuf v1.36.6` → [Updates: `v1.36.12`]
- `gopkg.in/fsnotify/fsnotify.v1 v1.4.7`
- `gopkg.in/yaml.v3 v3.0.1`

npm (1)

package.json (54)

- `@emotion/css 11.10.6` → [Updates: `11.13.5`]
- `@grafana/data ^11.5.3` → [Updates: `11.6.0`, `^11.6.0`, `^13.0.0`]
- `@grafana/runtime ^11.5.3` → [Updates: `11.6.0`, `^11.6.0`, `^13.0.0`]
- `@grafana/ui ^11.5.3` → [Updates: `11.6.0`, `^11.6.0`, `^13.0.0`]
- `@grafana/schema ^11.5.3` → [Updates: `11.6.0`, `^11.6.0`, `^13.0.0`]
- `react 18.2.0` → [Updates: `18.3.1`, `19.3.0`]
- `react-dom 18.2.0` → [Updates: `18.3.1`, `19.3.0`]
- `@grafana/eslint-config ^8.0.0` → [Updates: `8.0.0`, `^10.0.0`]
- `@grafana/plugin-e2e ^1.17.1` → [Updates: `1.19.4`, `^1.19.4`, `^3.0.0`]
- `@grafana/tsconfig ^2.0.0` → [Updates: `2.0.0`]
- `@playwright/test 1.50.1` → [Updates: `1.63.0`]
- `@stylistic/eslint-plugin-ts ^2.9.0` → [Updates: `2.13.0`, `^4.0.0`]
- `@swc/core ^1.3.90` → [Updates: `1.11.20`, `^1.16.2`]
- `@swc/helpers ^0.5.0` → [Updates: `0.5.17`, `^0.5.17`]
- `@swc/jest ^0.2.26` → [Updates: `0.2.37`, `^0.2.37`]
- `@testing-library/jest-dom 6.1.4` → [Updates: `6.9.1`, `7.0.1`]
- `@testing-library/react 14.0.0` → [Updates: `14.3.1`, `16.3.3`]
- `@types/jest ^29.5.0` → [Updates: `29.5.14`, `^30.0.0`]
- `@types/node ^20.8.7` → [Updates: `20.17.30`, `^20.17.30`, `^22.0.0`]
- `@types/testing-library__jest-dom 5.14.8` → [Updates: `5.14.9`, `6.0.0`]
- `@typescript-eslint/eslint-plugin ^6.18.0` → [Updates: `6.21.0`, `^8.0.0`]
- `@typescript-eslint/parser ^6.18.0` → [Updates: `6.21.0`, `^8.0.0`]
- `copy-webpack-plugin ^11.0.0` → [Updates: `11.0.0`, `^14.0.0`]
- `css-loader ^6.7.3` → [Updates: `6.11.0`, `^7.0.0`]
- `eslint ^8.0.0` → [Updates: `8.57.1`, `^10.0.0`]
- `eslint-config-prettier ^8.8.0` → [Updates: `8.10.0`, `^8.10.0`, `^10.0.0`]
- `eslint-plugin-jsdoc ^46.8.0` → [Updates: `46.10.1`, `^64.0.0`]
- `eslint-plugin-react ^7.33.0` → [Updates: `7.37.5`]
- `eslint-plugin-react-hooks ^4.6.0` → [Updates: `4.6.2`, `^7.0.0`]
- `eslint-plugin-deprecation ^2.0.0` → [Updates: `2.0.0`, `^3.0.0`]
- `eslint-webpack-plugin ^4.0.1` → [Updates: `4.2.0`, `^6.0.0`]
- `fork-ts-checker-webpack-plugin ^8.0.0` → [Updates: `8.0.0`, `^9.0.0`]
- `glob ^10.2.7` → [Updates: `^10.2.7`]
- `identity-obj-proxy 3.0.0`
- `imports-loader ^5.0.0` → [Updates: `5.0.0`]
- `jest ^29.5.0` → [Updates: `29.7.0`, `^30.0.0`]
- `jest-environment-jsdom ^29.5.0` → [Updates: `29.7.0`, `^30.0.0`]
- `prettier ^2.8.7` → [Updates: `2.8.8`, `^3.0.0`]
- `replace-in-file-webpack-plugin ^1.0.6` → [Updates: `1.0.6`]
- `sass 1.63.2` → [Updates: `1.104.1`]
- `sass-loader 13.3.1` → [Updates: `13.3.3`, `17.0.1`]
- `semver ^7.6.3` → [Updates: `7.7.1`, `^7.7.1`]
- `style-loader 3.3.3` → [Updates: `3.3.4`, `4.0.0`]
- `swc-loader ^0.2.3` → [Updates: `0.2.6`, `^0.2.6`]
- `terser-webpack-plugin ^5.3.10` → [Updates: `5.3.14`, `^5.6.1`]
- `ts-node ^10.9.2` → [Updates: `10.9.2`]
- `typescript 5.5.4` → [Updates: `5.9.3`, `7.0.2`]
- `webpack ^5.94.0` → [Updates: `^5.94.0`]
- `webpack-cli ^5.1.4` → [Updates: `5.1.4`, `^7.0.0`]
- `webpack-livereload-plugin ^3.0.2` → [Updates: `3.0.2`]
- `webpack-subresource-integrity ^5.1.0` → [Updates: `5.1.0`]
- `webpack-virtual-modules ^0.6.2` → [Updates: `0.6.2`]
- `node >=22`
- `npm 10.7.0` → [Updates: `10.9.9`, `12.0.2`]

nvm (1)

.nvmrc (1)

- `node 22` → [Updates: `24`]

renovate-config (1)

.github/renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.