Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@types/memoize-one](https://redirect.github.com/alexreardon/memoize-one#readme) |  |
| npm | `@types/react-calendar` |  |
| npm | `@types/testing-library__jest-dom` |  |

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (6)

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
| Datasource | Package | Last Updated |
|------------|------|-------------|
| npm | [@rollup/plugin-json](https://redirect.github.com/rollup/plugins) | `2023-12-12` |
| npm | [acorn-typescript](https://redirect.github.com/TyrealHu/acorn-typescript) | `2024-01-03` |
| npm | [copyfiles](https://redirect.github.com/calvinmetcalf/copyfiles) | `2020-11-27` |
| npm | [mockdate](https://redirect.github.com/boblauer/MockDate) | `2021-03-25` |
| npm | [react-popper-tooltip](https://redirect.github.com/mohsinulhaq/react-popper-tooltip) | `2022-06-27` |
| npm | [react-select-event](https://redirect.github.com/romgain/react-select-event) | `2022-08-06` |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update dependency eslint to v10
- [ ] chore(deps): update dependency eslint-config-prettier to v10
- [ ] chore(deps): update dependency eslint-plugin-jsdoc to v64
- [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update github actions dependencies (`actions/checkout`, `actions/deploy-pages`, `grafana/data-sources-ci-workflows`)
- [ ] chore(deps): update node.js to v24.21.0
- [ ] chore(deps): update dependency @testing-library/jest-dom to v7
- [ ] chore(deps): update dependency brace-expansion to v5
- [ ] chore(deps): update dependency copy-webpack-plugin to v14
- [ ] chore(deps): update dependency fast-uri to v4
- [ ] chore(deps): update dependency jest-fetch-mock to v4
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dependency webpack-cli to v7
- [ ] chore(deps): update github actions dependencies (major) (`EndBug/version-check`, `actions/checkout`, `actions/setup-node`, `actions/upload-artifact`)
- [ ] fix(deps): update dependency @hello-pangea/dnd to v18
- [ ] fix(deps): update dependency @marcbachmann/cel-js to v8
- [ ] fix(deps): update dependency react-calendar to v6
- [ ] fix(deps): update dependency react-virtualized-auto-sizer to v2
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(security/high/): update dependency js-yaml to v4 [security]](../pull/336)
- [ ] [fix(security/medium/): update dependency react-router to v7 [security]](../pull/337)
- [ ] [fix(deps): pin dependencies](../pull/338) (`@emotion/css`, `@grafana/data`, `@grafana/e2e-selectors`, `@grafana/plugin-e2e`, `@grafana/runtime`, `@grafana/schema`, `@grafana/ui`, `@playwright/test`, `@storybook/addon-docs`, `@storybook/addon-links`, `@storybook/react-webpack5`, `@swc/core`, `@testing-library/react`, `@testing-library/user-event`, `@types/lodash`, `@types/node`, `@types/react`, `@types/react-dom`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `acorn`, `copy-webpack-plugin`, `cspell`, `esbuild`, `js-yaml`, `lefthook`, `monaco-editor`, `prettier`, `publint`, `react`, `react-dom`, `rollup`, `rollup-plugin-dts`, `smol-toml`, `storybook`, `swc-loader`, `tslib`, `typescript`, `undici`, `uuid`, `webpack`, `webpack-cli`, `yarn`)
- [ ] [chore(deps): update dependency @grafana/eslint-config to v10](../pull/315)
- [ ] [chore(deps): update jest monorepo to v30](../pull/300) (`jest`, `jest-environment-jsdom`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency @types/react-calendar to v4](../pull/259)

## Vulnerabilities

> [!IMPORTANT]
> `5`/`5` CVEs have Renovate fixes.

npm

package.json

smol-toml

- [GHSA-7w5x-hrqm-74c2](https://osv.dev/vulnerability/GHSA-7w5x-hrqm-74c2) (fixed in >= 1.7.1)

js-yaml

- [GHSA-2883-xcg3-v3hh](https://osv.dev/vulnerability/GHSA-2883-xcg3-v3hh) (fixed in >= 3.15.2)
- [GHSA-2883-xcg3-v3hh](https://osv.dev/vulnerability/GHSA-2883-xcg3-v3hh) (fixed in >= 4.3.2)

react-router

- [GHSA-337j-9hxr-rhxg](https://osv.dev/vulnerability/GHSA-337j-9hxr-rhxg) (fixed in >= 7.18.0)
- [GHSA-wrjc-x8rr-h8h6](https://osv.dev/vulnerability/GHSA-wrjc-x8rr-h8h6) (fixed in >= 7.18.0)

## Detected Dependencies

docker-compose (1)

e2e/docker-compose.yaml

github-actions (6)

.github/workflows/add-to-project.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/ci.yml (2)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]

.github/workflows/e2e.yml (5)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `grafana/plugin-actions e2e-version/v3.0.2@3ef49643a84470fd25bafeb96701fa0be3be6746`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.1`]

.github/workflows/publish-npm.yml (3)

- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v6.1.0`, `v7.0.1`]
- `EndBug/version-check v2.1.7@5102328418c0130d66ca712d755c303e93368ce2` → [Updates: `v3.0.0`]
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]

.github/workflows/stale.yml (1)

- `grafana/data-sources-ci-workflows main` → [Updates: `main`]

.github/workflows/storybook.yml (4)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9`
- `actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128` → [Updates: `v5.0.1`]

npm (3)

e2e/fixture-datasource/package.json (17)

- `@emotion/css ^11.13.5` → [Updates: `11.13.5`]
- `@grafana/data ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/runtime ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/schema ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/ui ^13.0.0` → [Updates: `13.2.2`]
- `react ^18.3.1` → [Updates: `18.3.1`, `^19.0.0`]
- `react-dom ^18.3.1` → [Updates: `18.3.1`, `^19.0.0`]
- `tslib ^2.8.1` → [Updates: `2.8.1`]
- `@swc/core ^1.7.0` → [Updates: `1.16.2`]
- `@types/node ^22.0.0` → [Updates: `22.20.3`]
- `@types/react ^18.3.1` → [Updates: `18.3.31`, `^19.0.0`]
- `@types/react-dom ^18.3.1` → [Updates: `18.3.7`, `^19.0.0`]
- `copy-webpack-plugin ^12.0.2` → [Updates: `12.0.2`, `^14.0.0`]
- `swc-loader ^0.2.6` → [Updates: `0.2.7`]
- `typescript ^5.5.0` → [Updates: `5.9.3`, `^7.0.0`]
- `webpack ^5.94.0` → [Updates: `5.111.0`]
- `webpack-cli ^5.1.4` → [Updates: `5.1.4`, `^7.0.0`]

e2e/package.json (2)

- `@grafana/plugin-e2e 3.11.0` → [Updates: `3.12.0`]
- `@playwright/test 1.61.1` → [Updates: `1.63.0`]

package.json (97)

- `@emotion/css 11.13.5`
- `@hello-pangea/dnd 17.0.0` → [Updates: `18.0.1`]
- `@marcbachmann/cel-js 7.6.1` → [Updates: `8.0.0`]
- `@react-awesome-query-builder/ui 6.6.15`
- `acorn 8.17.0` → [Updates: `8.18.0`]
- `acorn-loose 8.5.2`
- `acorn-typescript 1.4.13`
- `lodash 4.18.1`
- `prismjs 1.30.0`
- `react-calendar 4.8.0` → [Updates: `6.0.1`]
- `react-popper-tooltip 4.4.2`
- `react-use 17.6.1`
- `react-virtualized-auto-sizer 1.0.26` → [Updates: `2.0.3`]
- `sql-formatter 15.8.2`
- `uuid 14.0.1` → [Updates: `14.0.2`]
- `@arethetypeswrong/cli 0.18.5`
- `@grafana/data 13.1.1` → [Updates: `13.2.1`]
- `@grafana/e2e-selectors 13.1.1` → [Updates: `13.2.1`]
- `@grafana/eslint-config 8.2.0` → [Updates: `10.0.0`]
- `@grafana/runtime 13.1.1` → [Updates: `13.2.1`]
- `@grafana/tsconfig 2.2.0`
- `@grafana/ui 13.1.1` → [Updates: `13.2.1`]
- `@rollup/plugin-commonjs 29.0.3`
- `@rollup/plugin-json 6.1.0`
- `@rollup/plugin-node-resolve 16.0.3`
- `@storybook/addon-docs 10.5.0` → [Updates: `10.6.0`]
- `@storybook/addon-links 10.5.0` → [Updates: `10.6.0`]
- `@storybook/addon-webpack5-compiler-swc 4.0.3`
- `@storybook/react-webpack5 10.5.0` → [Updates: `10.6.0`]
- `@stylistic/eslint-plugin-ts 4.4.1`
- `@swc/core 1.15.43` → [Updates: `1.16.2`]
- `@swc/jest 0.2.39`
- `@testing-library/jest-dom 6.9.1` → [Updates: `7.0.1`]
- `@testing-library/react 16.3.2` → [Updates: `16.3.3`]
- `@testing-library/user-event 14.6.1` → [Updates: `14.6.7`]
- `@types/chance 1.1.8`
- `@types/jest 30.0.0`
- `@types/lodash 4.17.24` → [Updates: `4.17.25`]
- `@types/memoize-one 5.1.2`
- `@types/node 25.9.5` → [Updates: `25.9.6`]
- `@types/prismjs 1.26.6`
- `@types/react 18.3.31` → [Updates: `19.3.0`]
- `@types/react-calendar 3.9.0` → [Updates: `4.1.0`]
- `@types/testing-library__jest-dom 6.0.0`
- `@typescript-eslint/eslint-plugin 8.63.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 8.63.0` → [Updates: `8.70.0`]
- `chance 1.1.13`
- `copyfiles 2.4.1`
- `cspell 10.0.1` → [Updates: `10.3.1`]
- `esbuild 0.28.1` → [Updates: `0.28.2`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-config-prettier 8.10.2` → [Updates: `10.1.8`]
- `eslint-plugin-jsdoc 46.10.1` → [Updates: `64.3.10`]
- `eslint-plugin-prettier 5.5.6`
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 4.6.2` → [Updates: `7.1.1`]
- `fast-glob 3.3.3`
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-environment-jsdom 29.7.0` → [Updates: `30.5.1`]
- `jest-fetch-mock 3.2.0` → [Updates: `4.2.0`]
- `lefthook 2.1.10` → [Updates: `2.1.12`]
- `mockdate 3.0.5`
- `monaco-editor 0.34.1` → [Updates: `0.56.0`]
- `prettier 3.9.5` → [Updates: `3.9.6`]
- `publint 0.3.21` → [Updates: `0.3.24`]
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-select-event 5.5.1`
- `rollup 4.59.0` → [Updates: `4.63.2`]
- `rollup-plugin-dts 6.4.1` → [Updates: `6.5.1`]
- `rollup-plugin-esbuild 6.2.1`
- `rollup-plugin-node-externals 9.0.1`
- `rxjs 7.8.2`
- `smol-toml 1.7.0` → [Updates: `1.7.1`]
- `storybook 10.5.0` → [Updates: `10.6.0`]
- `ts-node 10.9.2`
- `typescript 5.9.3` → [Updates: `7.0.2`]
- `@grafana/data ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/e2e-selectors ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/runtime ^13.0.0` → [Updates: `13.2.2`]
- `@grafana/ui ^13.0.0` → [Updates: `13.2.2`]
- `@testing-library/jest-dom ^6.9.1` → [Updates: `6.9.1`, `^7.0.0`]
- `@testing-library/react ^16.3.2` → [Updates: `16.3.3`]
- `@testing-library/user-event ^14.6.1` → [Updates: `14.6.1`]
- `monaco-editor >=0.30` → [Updates: `0.56.0`]
- `react ^18.0.0 || ^19.0.0` → [Updates: `19.3.0`]
- `react-dom ^18.0.0 || ^19.0.0` → [Updates: `19.3.0`]
- `node >=24`
- `yarn >=4.16.0`
- `undici 8.9.0` → [Updates: `8.10.2`]
- `js-yaml 3.15.1` → [Updates: `4.3.2`]
- `js-yaml 4.3.1` → [Updates: `4.3.2`]
- `fast-uri 3.1.7` → [Updates: `3.1.8`, `4.1.4`]
- `react-router 6.30.6` → [Updates: `7.18.0`]
- `brace-expansion 1.1.18` → [Updates: `1.1.21`, `5.0.9`]
- `brace-expansion 5.0.9` → [Updates: `5.0.12`]
- `yarn 4.17.1` → [Updates: `4.18.0`]

nvm (1)

.nvmrc (1)

- `node 24.18.0` → [Updates: `24.21.0`]

renovate-config (1)

.github/renovate.json

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.