Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (35)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
gomod	github.com/araddon/dateparse	2021-04-29
gomod	github.com/beorn7/perks	2019-07-31
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/cheekybits/genny	2018-08-30
gomod	github.com/davecgh/go-spew	2018-02-21
gomod	github.com/go-logr/stdr	2021-12-14
gomod	github.com/gogo/googleapis	2021-03-10
gomod	github.com/gogo/protobuf	2021-01-10
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/hashicorp/go-hclog	2024-04-01
gomod	github.com/huandu/xstrings	2024-06-06
gomod	github.com/influxdata/tdigest	2019-10-30
gomod	github.com/josharian/intern	2019-12-14
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/jszwedko/go-datemath	2019-10-13
gomod	github.com/mattetti/filebuffer	2020-05-07
gomod	github.com/modern-go/concurrent	2018-03-06
gomod	github.com/modern-go/reflect2	2021-09-11
gomod	github.com/munnerz/goautoneg	2019-10-10
gomod	github.com/patrickmn/go-cache	2017-07-22
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/pmezard/go-difflib	2016-01-10
gomod	github.com/russross/blackfriday/v2	2020-10-27
gomod	github.com/unknwon/bra	2020-05-17
gomod	github.com/unknwon/com	2019-08-04
gomod	github.com/unknwon/log	2020-03-08
gomod	gopkg.in/fsnotify/fsnotify.v1	2018-01-10
gomod	gopkg.in/yaml.v3	2022-05-27
npm	identity-obj-proxy	2016-08-03
npm	imports-loader	2024-01-16
npm	replace-in-file-webpack-plugin	2018-05-17
npm	style-loader	2024-04-08
npm	webpack-livereload-plugin	2021-08-04
npm	webpack-subresource-integrity	2023-02-22
npm	webpack-virtual-modules	2024-06-04

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency eslint-plugin-jsdoc to v63
• chore(deps): update dependency eslint-webpack-plugin to v6
• chore(deps): update eslint monorepo to v10
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update docker dependencies
• fix(deps): update backend dependencies (major) (github.com/cenkalti/backoff/v5, github.com/golang-jwt/jwt/v4, github.com/google/go-github/v84, github.com/urfave/cli, go.yaml.in/yaml/v2)
• chore(deps): lock file maintenance frontend dependencies
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update babel monorepo to v8
• chore(deps): update dependency @grafana/eslint-config to v10
• chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v10.1.0
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/add-to-project digest to 828acb6
• fix(deps): update backend dependencies (github.com/apache/arrow-go/v18, github.com/bradleyfalzon/ghinstallation/v2, github.com/clipperhouse/displaywidth, github.com/clipperhouse/uax29/v2, github.com/emicklei/go-restful/v3, github.com/fatih/color, github.com/go-openapi/jsonpointer, github.com/go-openapi/jsonreference, github.com/go-openapi/swag, github.com/go-openapi/swag/jsonname, github.com/goccy/go-json, github.com/google/gnostic-models, github.com/grafana/grafana-plugin-sdk-go, github.com/grafana/otel-profiling-go, github.com/grafana/pyroscope-go/godeltaprof, github.com/grafana/schemads, github.com/grpc-ecosystem/grpc-gateway/v2, github.com/hashicorp/go-plugin, github.com/huandu/go-sqlbuilder, github.com/huandu/xstrings, github.com/jaegertracing/jaeger-idl, github.com/jszwedko/go-datemath, github.com/klauspost/compress, github.com/magefile/mage, github.com/mailru/easyjson, github.com/mattn/go-colorable, github.com/mattn/go-isatty, github.com/mattn/go-runewidth, github.com/oklog/run, github.com/olekukonko/errors, github.com/olekukonko/ll, github.com/pierrec/lz4/v4, github.com/prometheus/common, github.com/prometheus/procfs, github.com/shurcooL/graphql, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace, go.opentelemetry.io/contrib/propagators/jaeger, go.opentelemetry.io/contrib/samplers/jaegerremote, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace, go.opentelemetry.io/proto/otlp, go.yaml.in/yaml/v2, golang.org/x/exp, golang.org/x/mod, golang.org/x/net, golang.org/x/sync, golang.org/x/sys, golang.org/x/text, golang.org/x/tools, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc, pgregory.net/rapid)
• fix(deps): update frontend dependencies (@axe-core/playwright, @babel/core, @grafana/data, @grafana/e2e-selectors, @grafana/i18n, @grafana/plugin-e2e, @grafana/plugin-meta-extractor, @grafana/plugin-ui, @grafana/runtime, @grafana/schema, @grafana/tsconfig, @grafana/ui, @openfeature/core, @openfeature/web-sdk, @playwright/test, @remix-run/router, @swc/core, @swc/helpers, @types/node, @types/react, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, cspell, dompurify, eslint-plugin-prettier, i18next, jest, jest-environment-jsdom, prettier, sass, sass-loader, semver, serialize-javascript, terser-webpack-plugin, webpack, webpack-cli, yarn)
• chore(deps): update dependency sass-loader to v17
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update grafana monorepo to v13 (@grafana/data, @grafana/e2e-selectors, @grafana/i18n, @grafana/runtime, @grafana/schema, @grafana/ui)

Vulnerabilities

Important

15/15 CVEs have Renovate fixes.

gomod

go.mod

golang.org/x/net

• GO-2026-5025 (fixed in >= 0.55.0)
• GO-2026-5026 (fixed in >= 0.55.0)
• GO-2026-5027 (fixed in >= 0.55.0)
• GO-2026-5028 (fixed in >= 0.55.0)
• GO-2026-5029 (fixed in >= 0.55.0)
• GO-2026-5030 (fixed in >= 0.55.0)

golang.org/x/sys

• GO-2026-5024 (fixed in >= 0.44.0)

npm

package.json

dompurify

• GHSA-76mc-f452-cxcm (fixed in >= 3.4.7)
• GHSA-cmwh-pvxp-8882 (fixed in >= 3.4.11)
• GHSA-gvmj-g25r-r7wr (fixed in >= 3.4.8)
• GHSA-hpcv-96wg-7vj8 (fixed in >= 3.4.6)
• GHSA-r47g-fvhr-h676 (fixed in >= 3.4.6)
• GHSA-rp9w-3fw7-7cwq (fixed in >= 3.4.7)
• GHSA-vxr8-fq34-vvx9 (fixed in >= 3.4.9)
• GHSA-x4vx-rjvf-j5p4 (fixed in > 3.4.6)

Detected Dependencies

docker-compose (2)

.config/docker-compose-base.yaml

docker-compose.yaml

dockerfile (1)

.config/Dockerfile (1)

• grafana/grafana-enterprise latest@sha256:f7e79dc47a09b9543901e2178ed8dd5a4d4ffd8ce4cc4977cb9a9d56bd2a08dd → [Updates: latest]

github-actions (4)

.github/workflows/add-to-project.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• actions/add-to-project main@8b5d8dd2895c251002b427e4688a6115b5ed2f09 → [Updates: main]

.github/workflows/publish.yaml (1)

• grafana/plugin-ci-workflows ci-cd-workflows/v9.0.0 → [Updates: ci-cd-workflows/v10.1.0]

.github/workflows/push.yaml (1)

• grafana/plugin-ci-workflows ci-cd-workflows/v9.0.0 → [Updates: ci-cd-workflows/v10.1.0]

.github/workflows/update-create-plugin.yml (2)

• grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e
• grafana/plugin-actions create-plugin-update/v2.0.1@244c3bc9c6eb94bc1dd6458ade2462499bbf0f5b

gomod (1)

go.mod (115)

• go 1.26.1
• github.com/bradleyfalzon/ghinstallation/v2 v2.18.0 → [Updates: v2.19.0]
• github.com/google/go-github/v84 v84.0.0 → [Updates: v88.0.0]
• github.com/grafana/grafana-plugin-sdk-go v0.291.1 → [Updates: v0.292.1]
• github.com/grafana/schemads v0.0.8 → [Updates: v0.2.3]
• github.com/influxdata/tdigest v0.0.1
• github.com/pkg/errors v0.9.1
• github.com/shurcooL/githubv4 v0.0.0-20260209031235-2402fdf4a9ed@2402fdf4a9ed
• github.com/stretchr/testify v1.11.1
• golang.org/x/oauth2 v0.36.0
• pgregory.net/rapid v1.2.0 → [Updates: v1.3.0]
• github.com/BurntSushi/toml v1.6.0
• github.com/apache/arrow-go/v18 v18.5.2 → [Updates: v18.6.0]
• github.com/cenkalti/backoff/v5 v5.0.3 → [Updates: v6.0.1]
• github.com/clipperhouse/displaywidth v0.10.0 → [Updates: v0.11.0]
• github.com/clipperhouse/uax29/v2 v2.6.0 → [Updates: v2.7.0]
• github.com/cpuguy83/go-md2man/v2 v2.0.7
• github.com/emicklei/go-restful/v3 v3.11.0 → [Updates: v3.13.0]
• github.com/fatih/color v1.18.0 → [Updates: v1.19.0]
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/go-openapi/jsonpointer v0.22.5 → [Updates: v0.23.1]
• github.com/go-openapi/jsonreference v0.21.5 → [Updates: v0.21.6]
• github.com/go-openapi/swag v0.23.0 → [Updates: v0.26.1]
• github.com/go-openapi/swag/jsonname v0.25.5 → [Updates: v0.26.1]
• github.com/goccy/go-json v0.10.5 → [Updates: v0.10.6]
• github.com/gogo/googleapis v1.4.1
• github.com/gogo/protobuf v1.3.2
• github.com/golang-jwt/jwt/v4 v4.5.2 → [Updates: v5.3.1]
• github.com/google/gnostic-models v0.7.0 → [Updates: v0.7.1]
• github.com/google/go-querystring v1.2.0
• github.com/google/uuid v1.6.0
• github.com/grafana/otel-profiling-go v0.5.1 → [Updates: v0.6.0]
• github.com/grafana/pyroscope-go/godeltaprof v0.1.9 → [Updates: v0.1.11]
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 → [Updates: v2.29.0]
• github.com/huandu/go-clone v1.7.3
• github.com/huandu/go-sqlbuilder v1.39.1 → [Updates: v1.42.1]
• github.com/huandu/xstrings v1.4.0 → [Updates: v1.5.0]
• github.com/jaegertracing/jaeger-idl v0.6.0 → [Updates: v0.9.0]
• github.com/josharian/intern v1.0.0
• github.com/json-iterator/go v1.1.12
• github.com/jszwedko/go-datemath v0.1.1-0.20230526204004-640a500621d6@640a500621d6 → [Updates: v0.1.1-0.20230526204004-640a500621d6]
• github.com/klauspost/compress v1.18.4 → [Updates: v1.18.6]
• github.com/klauspost/cpuid/v2 v2.3.0
• github.com/mailru/easyjson v0.7.7 → [Updates: v0.9.2]
• github.com/mattn/go-colorable v0.1.14 → [Updates: v0.1.15]
• github.com/mattn/go-isatty v0.0.20 → [Updates: v0.0.22]
• github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd@bacd9c7ef1dd
• github.com/modern-go/reflect2 v1.0.2
• github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822@a7dc8b61c822
• github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6@50322a0618f6
• github.com/olekukonko/errors v1.2.0 → [Updates: v1.3.0]
• github.com/olekukonko/ll v0.1.6 → [Updates: v0.1.8]
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/pierrec/lz4/v4 v4.1.25 → [Updates: v4.1.27]
• github.com/russross/blackfriday/v2 v2.1.0
• github.com/unknwon/bra v0.0.0-20200517080246-1e3013ecaff8@1e3013ecaff8
• github.com/unknwon/com v1.0.1
• github.com/unknwon/log v0.0.0-20200308114134-929b1006e34a@929b1006e34a
• github.com/urfave/cli v1.22.17 → [Updates: v3.10.0]
• github.com/zeebo/xxh3 v1.1.0
• go.opentelemetry.io/auto/sdk v1.2.1
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 → [Updates: v0.69.0]
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.67.0 → [Updates: v0.69.0]
• go.opentelemetry.io/contrib/propagators/jaeger v1.42.0 → [Updates: v1.44.0]
• go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0 → [Updates: v0.37.1]
• go.opentelemetry.io/otel v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/metric v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/sdk v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/otel/trace v1.43.0 → [Updates: v1.44.0]
• go.opentelemetry.io/proto/otlp v1.9.0 → [Updates: v1.10.0]
• go.yaml.in/yaml/v2 v2.4.3 → [Updates: v2.4.4, v3.0.4]
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/exp v0.0.0-20260112195511-716be5621a96@716be5621a96 → [Updates: v0.0.0-20260611194520-c48552f49976]
• golang.org/x/mod v0.34.0 → [Updates: v0.37.0]
• golang.org/x/sync v0.20.0 → [Updates: v0.21.0]
• golang.org/x/telemetry v0.0.0-20260311193753-579e4da9a98c@579e4da9a98c → [Updates: v0.0.0-20260626140120-b709645a9e92]
• golang.org/x/tools v0.43.0 → [Updates: v0.46.0]
• google.golang.org/genproto/googleapis/api v0.0.0-20260209200024-4cfbd4190f57@4cfbd4190f57 → [Updates: v0.0.0-20260622175928-b703f567277d]
• google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171@a57be14db171 → [Updates: v0.0.0-20260622175928-b703f567277d]
• gopkg.in/fsnotify/fsnotify.v1 v1.4.7
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4@a19766b6e2d4 → [Updates: v0.0.0-20260624041617-8f3fa4921821]
• sigs.k8s.io/randfill v1.0.0
• github.com/araddon/dateparse v0.0.0-20210429162001-6b43995a97de@6b43995a97de
• github.com/beorn7/perks v1.0.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/cheekybits/genny v1.0.0
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/google/flatbuffers v25.12.19+incompatible
• github.com/google/go-cmp v0.7.0
• github.com/hashicorp/go-hclog v1.6.3
• github.com/hashicorp/go-plugin v1.7.0 → [Updates: v1.8.0]
• github.com/hashicorp/yamux v0.1.2
• github.com/magefile/mage v1.16.1 → [Updates: v1.17.2]
• github.com/mattetti/filebuffer v1.0.1
• github.com/mattn/go-runewidth v0.0.19 → [Updates: v0.0.24]
• github.com/oklog/run v1.1.0 → [Updates: v1.2.0]
• github.com/olekukonko/tablewriter v1.1.4
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/prometheus/client_golang v1.23.2
• github.com/prometheus/client_model v0.6.2
• github.com/prometheus/common v0.67.5 → [Updates: v0.69.0]
• github.com/prometheus/procfs v0.16.1 → [Updates: v0.20.1]
• github.com/shurcooL/graphql v0.0.0-20220606043923-3cf50f8a0a29@3cf50f8a0a29 → [Updates: v0.0.0-20240915155400-7ee5256398cf]
• golang.org/x/net v0.53.0 → [Updates: v0.55.0]
• golang.org/x/sys v0.43.0 → [Updates: v0.44.0]
• golang.org/x/text v0.36.0 → [Updates: v0.38.0]
• golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da
• google.golang.org/grpc v1.79.3 → [Updates: v1.81.1]
• google.golang.org/protobuf v1.36.11

npm (1)

package.json (74)

• @emotion/css 11.13.5
• @grafana/data 12.4.2 → [Updates: 12.4.5, 13.1.0]
• @grafana/i18n 12.4.3 → [Updates: 12.4.5, 13.1.0]
• @grafana/plugin-ui 0.13.1 → [Updates: 0.16.0]
• @grafana/runtime 12.4.2 → [Updates: 12.4.5, 13.1.0]
• @grafana/schema 12.4.2 → [Updates: 12.4.5, 13.1.0]
• @grafana/ui 12.4.2 → [Updates: 12.4.4, 13.0.2]
• react 18.3.1 → [Updates: 19.2.7]
• react-dom 18.3.1 → [Updates: 19.2.7]
• tslib 2.8.1
• @axe-core/playwright 4.11.3 → [Updates: 4.12.1]
• @babel/core 7.29.0 → [Updates: 7.29.7, 8.0.1]
• @changesets/cli 2.31.0
• @grafana/e2e-selectors 12.4.2 → [Updates: 12.4.5, 13.1.0]
• @grafana/eslint-config 9.0.0 → [Updates: 10.0.0]
• @grafana/plugin-e2e 3.7.1 → [Updates: 3.9.1]
• @grafana/plugin-meta-extractor 0.12.2 → [Updates: 0.13.0]
• @grafana/tsconfig 2.1.0 → [Updates: 2.2.0]
• @openfeature/web-sdk 1.8.0 → [Updates: 1.9.0]
• @playwright/test 1.59.1 → [Updates: 1.61.0]
• @stylistic/eslint-plugin-ts 4.4.1
• @swc/core 1.15.32 → [Updates: 1.15.43]
• @swc/helpers 0.5.21 → [Updates: 0.5.23]
• @swc/jest 0.2.39
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/jest 30.0.0
• @types/lodash 4.17.24
• @types/node 25.6.0 → [Updates: 25.9.4]
• @types/react 18.3.28 → [Updates: 18.3.31, 19.2.17]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• @typescript-eslint/eslint-plugin 8.59.1 → [Updates: 8.62.0]
• @typescript-eslint/parser 8.59.1 → [Updates: 8.62.0]
• copy-webpack-plugin 14.0.0
• cspell 10.0.0 → [Updates: 10.0.1]
• css-loader 7.1.4
• eslint 9.39.4 → [Updates: 10.5.0]
• eslint-config-prettier 10.1.8
• eslint-plugin-jsdoc 62.9.0 → [Updates: 63.0.7]
• eslint-plugin-prettier 5.5.5 → [Updates: 5.5.6]
• eslint-plugin-react 7.37.5
• eslint-plugin-react-hooks 7.1.1
• eslint-webpack-plugin 5.0.3 → [Updates: 6.0.0]
• fork-ts-checker-webpack-plugin 9.1.0
• glob 13.0.6
• identity-obj-proxy 3.0.0
• imports-loader 5.0.0
• jest 30.3.0 → [Updates: 30.4.2]
• jest-environment-jsdom 30.3.0 → [Updates: 30.4.1]
• prettier 3.8.3 → [Updates: 3.8.4]
• replace-in-file-webpack-plugin 1.0.6
• rxjs 7.8.2
• sass 1.99.0 → [Updates: 1.101.0]
• sass-loader 16.0.7 → [Updates: 16.0.8, 17.0.0]
• semver 7.7.4 → [Updates: 7.8.5]
• style-loader 4.0.0
• swc-loader 0.2.7
• terser-webpack-plugin 5.5.0 → [Updates: 5.6.1]
• ts-node 10.9.2
• tsconfig-paths 4.2.0
• typescript 6.0.3
• webpack 5.106.2 → [Updates: 5.107.2]
• webpack-cli 7.0.2 → [Updates: 7.0.3]
• webpack-livereload-plugin 3.0.2
• webpack-subresource-integrity 5.1.0
• webpack-virtual-modules 0.6.2
• @remix-run/router 1.23.2 → [Updates: 1.23.3]
• @openfeature/core 1.10.0 → [Updates: 1.11.0]
• serialize-javascript 7.0.5 → [Updates: 7.0.6]
• i18next 26.0.8 → [Updates: 26.3.1]
• dompurify 3.4.2 → [Updates: 3.4.11]
• yarn 4.14.1 → [Updates: 4.17.0]

nvm (1)

.nvmrc (1)

• node 24

renovate-config (1)

renovate.json

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.