Revisions of grafana
- Update to version 8.5.20: * Security: SVG: Add dompurify preprocessor step (bsc#1207749, CVE-2022-23552) * Security: Snapshots: Fix originalUrl spoof security issue (bsc#1207750, CVE-2022-39324) * Security: Omit error from http response * Bug fix: Email and username trimming and invitation validation
buildservice-autocommit
accepted
request 1042696
from
Michael Vetter (jubalh)
(revision 92)
baserev update by copy to link target
Fix CVE reference in changelog
buildservice-autocommit
accepted
request 1037280
from
Witek Bedyk (witekbedyk)
(revision 90)
baserev update by copy to link target
Update to version 8.5.15 (jsc#PED-2617): * Security: Fix for privilege escalation (bsc#1205225, CVE-2022-3930) * Security: Omit error from http response when user does not exists (bsc#1205227, CVE-2022-39307)
buildservice-autocommit
accepted
request 1035683
from
Tatjana Dehler (tdehler)
(revision 88)
baserev update by copy to link target
- Update to version 8.5.14 (jsc#PED-2617): * Security: Fix do not forward login cookie in outgoing requests (bsc#1204303, CVE-2022-39201) * Security: Make proxy endpoints not leak sensitive HTTP headers (bsc#1204305, CVE-2022-31130) * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123) * Security: Fix blocknig other users from signing in (bsc#1204304, CVE-2022-39229)
buildservice-autocommit
accepted
request 1010210
from
Witek Bedyk (witekbedyk)
(revision 86)
baserev update by copy to link target
Add two missing bsc references
- Add ECO reference (jsc#PED-2145):
buildservice-autocommit
accepted
request 1007190
from
Tatjana Dehler (tdehler)
(revision 83)
baserev update by copy to link target
Add Bugzilla reference to the changelog
buildservice-autocommit
accepted
request 1006997
from
Witek Bedyk (witekbedyk)
(revision 81)
baserev update by copy to link target
Add the following bsc IDs to the .changes file: * bsc#1193686 * bsc#1193492 * bsc#1192763 * bsc#1192383 * bsc#1189520 * bsc#1188571
buildservice-autocommit
accepted
request 1006375
from
Tatjana Dehler (tdehler)
(revision 79)
baserev update by copy to link target
- Update to version 8.5.13: + Features and enhancements: * Plugins: Expose emotion/react to plugins to prevent load failures + Bug fix: * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and CVE-2022-35957 - Update to version 8.5.11: + Features and enhancements: * Rendering: Add support for renderer token * Alerting: AlertingProxy to elevate permissions for request forwarded to data proxy when RBAC enabled
buildservice-autocommit
accepted
request 999239
from
Witek Bedyk (witekbedyk)
(revision 77)
baserev update by copy to link target
- Update to version 8.5.10 + Bug fixes (8.5.10): * RBAC: Fix Anonymous Editors missing dashboard controls. #52649, @gamab + Bug fixes (8.5.9): * Security: Fixes for CVE-2022-31107 and CVE-2022-31097. #52238, @xlson + Bug fixes (8.4.10): * Security: Security: Fixes for CVE-2022-31107 and CVE-2022-31097. #52218, @IevaVasiljeva + Bug fixes (8.5.6): * Dashboard: Fixes random scrolling on time range change. #50379, @torkelo * Security: Fixes minor code scanning security warnings in old vendored javascript libs. #50382, @torkelo + Features and enhancements (8.5.5): * Azure Monitor: Include datasource ref when interpolating variables. #49543, @kevinwcyu * CloudWatch: Add multi-value template variable support for log group names in logs query builder. #49737, @kevinwcyu * Cloudwatch: Add template variable query function for listing log groups. #50100, @yaelleC + Bug fixes (8.5.5): * Alerting: Do not overwrite existing alert rule condition. #49920, @gillesdemey * Alerting: Remove double quotes from matchers. #50044, @alexweav + Features and enhancements (8.5.4): * Alerting: Remove disabled flag for data source when migrating alerts. #48559, @yuri-tceretian * Alerting: Show notification tab of legacy alerting only to editor. #49624, @yuri-tceretian * Alerting: Update migration to migrate only alerts that belong to existing org\dashboard. #49192, @yuri-tceretian * AzureMonitor: Do not quote variables when a custom "All" variable option is used. #49428, @andresmgot * AzureMonitor: Update allowed namespaces. #48468, @jcolladokuri * CloudMonitor: Correctly encode default project response. #49510, @aangelisc * Cloudwatch: Add support for new AWS/RDS EBS* metrics. #48798, @szymonpk * InfluxDB: Use backend for influxDB by default via feature toggle. #48453, @yesoreyeram * Legend: Use correct unit for percent and count calculations. #49004, @dprokop * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor * Plugins: Introduce HTTP 207 Multi Status response to api/ds/query. #48550, @wbrowne * Reporting: Improve PDF file size using grid layout. (Enterprise) * Transformations: Add an All Unique Values Reducer. #48653, @josiahg * Transformers: avoid error when the ExtractFields source field is missing. #49368, @wardbekker * [v8.5.x] Alerting: Update migration to migrate only alerts that belong to existing org\dashboard. #49199, @grafanabot * [v8.5.x] Reporting: Improve PDF file size using grid layout. (Enterprise) + Bug fixes (8.5.4): * Alerting: Allow disabling override timings for notification policies. #48648, @gillesdemey * Alerting: Allow serving images from custom url path. #49022, @gillesdemey * Alerting: Apply Custom Headers to datasource queries. #47860, @joeblubaugh * Alerting: Fix RBAC actions for notification policies. #49185, @yuri-tceretian * Alerting: Fix access to alerts for viewer with editor permissions when RBAC is disabled. #49270, @yuri-tceretian * Alerting: Fix anonymous access to alerting. #49203, @yuri-tceretian * Alerting: correctly show all alerts in a folder. #48684, @gillesdemey * AzureMonitor: Fixes metric definition for Azure Storage queue/file/blob/table resources. #49101, @aangelisc * Dashboard: Fix dashboard update permission check. #48746, @IevaVasiljeva * DashboardExport: Fix exporting and importing dashboards where query data source ended up as incorrect. #48410, @torkelo * FileUpload: clicking the Upload file button now opens their modal correctly. #48766, @ashharrison90 * GrafanaUI: Fix color of links in error Tooltips in light theme. #49327, @joshhunt * LibraryPanels: Fix library panels not connecting properly in imported dashboards. #49161, @joshhunt * Loki: Improve unpack parser handling. #49074, @gabor * RolePicker: Fix menu position on smaller screens. #48429, @Clarity-89 * TimeRange: Fixes updating time range from url and browser history. #48657, @torkelo * TimeSeries: Fix detection & rendering of sparse datapoints. #48841, @leeoniya * Timeseries: Fix outside range stale state. #49633, @ryantxu * Tooltip: Fix links not legible in Tooltips when using light theme. #48748, @joshhunt * Tooltip: Sort decimals using standard numeric compare. #49084, @dprokop * Transforms: Labels to fields, fix label picker layout. #49304, @torkelo * Variables: Fixes issue with data source variables not updating queries with variable. #49478, @torkelo * [v8.5.x] Alerting: Fix RBAC actions for notification policies (#49185). #49348, @yuri-tceretian * [v8.5.x] Alerting: Fix access to alerts for viewer with editor permissions when RBAC is disabled. #49427, @konrad147 * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268, @yuri-tceretian + Breaking changes (8.5.4): For a data source query made via /api/ds/query: If the DatasourceQueryMultiStatus feature is enabled and The data source response has an error set as part of the DataResponse, the resulting HTTP status code is now 207 Multi Status instead of 400 Bad gateway If the DatasourceQueryMultiStatus feature is not enabled and The data source response has an error set as part of the DataResponse, the resulting HTTP status code is 400 Bad Request (no breaking change) --> Issue #48550 + Bug fixes (8.5.3): * Security: fixes CVE-2022-29170. #49240, @xlson + Features and enhancements (8.5.2): * Alerting: Add safeguard for migrations that might cause dataloss. #48526, @JohnnyQQQQ * AzureMonitor: Add support for not equals and startsWith operators when creating Azure Metrics dimension filters. #48077, @aangelisc * Elasticsearch: Add deprecation notice for < 7.10 versions. #48506, @ivanahuckova * Traces: Filter by service/span name and operation in Tempo and Jaeger. #48209, @joey-grafana + Bug fixes (8.5.2): * AzureAd Oauth: Fix strictMode to reject users without an assigned role. #48474, @kyschouv * CloudWatch: Fix variable query tag migration. #48587, @iwysiu * Plugins: Ensure catching all appropriate 4xx api/ds/query scenarios. #47565, @wbrowne + Bug fixes (8.5.1): * Azure Monitor: Fix space character encoding for metrics query link to Azure Portal. #48139, @kevinwcyu * CloudWatch: Prevent log groups from being removed on query change. #47994, @asimpson * Cloudwatch: Fix template variables in variable queries. #48140, @iwysiu * Explore: Prevent direct access to explore if disabled via feature toggle. #47714, @Elfo404 * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram * Navigation: Prevent navbar briefly showing on login. #47968, @ashharrison90 * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr * Table: Fix filter crashes table. #48258, @zoltanbedi * TimeSeries: Properly stack series with missing datapoints. #48321, @leeoniya + Features and enhancements (8.5.0): * Alerting: Add contact points provisioning API. #47197, @JohnnyQQQQ * Alerting: Add resolved count to notification title when both firing and resolved present. #46697, @JacobsonMT * Alerting: Alert rule should wait For duration when execution error state is Alerting. #47052, @grobinson-grafana * Alerting: Classic conditions can now display multiple values. #46971, @gotjosh * Alerting: Display query from grafana-managed alert rules on /api/v1/rules. #45969, @gotjosh * Alerting: Enhance support for arbitrary group names in managed alerts. #47785, @gillesdemey * Alerting: add field for custom slack endpoint. #45751, @nathanrodman * Azure Monitor : Adding json formatting of error messages in Panel Header Corner and Inspect Error Tab. #44877, @yaelleC * Azure Monitor: Add 2 more Curated Dashboards for VM Insights. #45187, @jcolladokuri * CloudWatch: Handle new error codes for MetricInsights. #47033, @Gabrielopesantos * Dashboards: show changes in save dialog. #46557, @ryantxu * DataSource: Default data source is no longer a persisted state but just the default data source for new panels. #45132, @torkelo * DataSourcePlugin API: Allow queries import when changing data source type. #47435, @dprokop * Explore: Remove return to panel button. #45018, @gelicia * Explore: allow users to save Explore state to a new panel in a new dashboard. #45148, @Elfo404 * Instrumentation: Proxy status code correction and various improvements. #47473, @marefr * Logging: Introduce feature toggle to activate gokit/log format. #47336, @ying-jeanne * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney * Plugins: Add deprecation notice for /api/tsdb/query endpoint. #45238, @wbrowne * Plugins: Adding support for traceID field to accept variables. #45559, @vinisdl * PostgreSQL: __unixEpochGroup to support arithmetic expression as argument. #46764, @s0nik42 * Profile/Help: Expose option to disable profile section and help menu. #46308, @cameronwaterman * Prometheus: Enable new visual query builder by default. #46634, @torkelo * SAML: Allow disabling of SAML signups. #47481, @mmandrus * SAML: Allow disabling of SAML signups. (Enterprise) * Table: New pagination option. #45732, @zoltanbedi * TablePanel: Add cell inspect option. #45620, @dprokop * Tempo / Trace Viewer: Support Span Links in Trace Viewer. #45632, @Shachi16 * Tempo: Download span references in data inspector. #47074, @connorlindsey * Tempo: Separate trace to logs and loki search datasource config. #46655, @connorlindsey * Trace View: Show number of child spans. #44393, @tharun208 * Transformations: Support escaped characters in key-value pair parsing. #47901, @aangelisc + Bug fixes (8.5.0): * Azure Monitor: Bug Fix for incorrect variable cascading for template variables. #47478, @jcolladokuri * CloudWatch: List all metrics properly in SQL autocomplete. #45898, @sunker * CloudWatch: Run query on blur in logs query field. #47454, @fridgepoet * Dashboard: Template variables are now correctly persisted when clicking breadcrumb links. #46790, @ashharrison90 * DashboardPage: Remember scroll position when coming back panel edit / view panel. #47639, @torkelo * Panel Edit: Options search now works correctly when a logarithmic scale option is set. #47927, @ashharrison90 * Postgres: Return tables with hyphenated schemes. #45754, @zuchka * Table panel: Fix horizontal scrolling when pagination is enabled. #47776, @dprokop * Variables: Ensure variables in query params are correctly recognised. #47049, @ashharrison90 * Variables: Fix crash when changing query variable datasource. #44957, @joshhunt * Visualizations: Stack negative-valued series downwards. #47373, @leeoniya + Breaking changes (8.5.0): For a proxied request, e.g. Grafana's datasource or plugin proxy: If the request is cancelled, e.g. from the browser/by the client, the HTTP status code is now 499 Client closed request instead of 502 Bad gateway If the request times out, e.g. takes longer time than allowed, the HTTP status code is now 504 Gateway timeout instead of 502 Bad gateway. Issue #47473 The change in behavior is that negative-valued series are now stacked downwards from 0 (in their own stacks), rather than downwards from the top of the positive stacks. We now automatically group stacks by Draw style, Line interpolation, and Bar alignment, making it impossible to stack bars on top of lines, or smooth lines on top of stepped lines. Issue #47373 The meaning of the default data source has now changed from being a persisted property in a panel. Before when you selected the default data source for a panel and later changed the default data source to another data source it would change all panels who were configured to use the default data source. From now on the default data source is just the default for new panels and changing the default will not impact any currently saved dashboards. Issue #45132 The Tooltip component provided by @grafana/ui is no longer automatically interactive (that is you can hover onto it and click a link or select text). It will from now on by default close automatically when you mouse out from the trigger element. To make tooltips behave like before set the new interactive property to true. + Deprecations (8.5.0): /api/tsdb/query API has been deprecated and will be removed in a future release. Use /api/ds/query instead. Issue #45238 + Plugin development fixes & changes (8.5.0): * Card: Increase clickable area when meta items are present. #47935, @ashharrison90 * Loki: Fix operator description propup from being shortened. #46575, @glintik * Tooltips: Make tooltips non interactive by default. #45053, @torkelo + Features and enhancements (8.4.7): * CloudWatch: Added missing MemoryDB Namespace metrics. #47290, @james-deee * Histogram Panel: Take decimal into consideration. #47330, @mdvictor * TimeSeries: Sort tooltip values based on raw values. #46738, @dprokop + Bug fixes (8.4.7): * API: Include userId, orgId, uname in request logging middleware. #47183, @marefr * Elasticsearch: Respect maxConcurrentShardRequests datasource setting. #47120, @alexandrst88 + Bug fixes (8.4.6): * Security: Fixes CVE-2022-24812. For more information, see our blog + Features and enhancements (8.4.5): * Instrumentation: Make backend plugin metrics endpoints available with optional authentication. #46467, @marefr * Table panel: Show datalinks for cell display modes JSON View and Gauge derivates. #46020, @mdvictor + Bug fixes (8.4.5): * Azure Monitor: Small bug fixes for Resource Picker. #46665, @sarahzinger * Logger: Use specified format for file logger. #46970, @sakjur * Logs: Handle missing fields in dataframes better. #46963, @gabor * ManageDashboards: Fix error when deleting all dashboards from folder view. #46877, @joshhunt + Features and enhancements (8.4.4): * Loki: Add unpack to autocomplete suggestions (#44623). #46573, @glintik * Plugins: allow using both Function and Class components for app plugins. #46148, @leventebalogh * TimeSeries: Add migration for Graph panel's transform series override. #46577, @dprokop * TimeSeries: Preserve null/undefined values when performing negative y transform. #46584, @dprokop + Bug fixes (8.4.4): * CloudWatch: Use default http client from aws-sdk-go. #46370, @sunker * Dashboards: Fixes repeating by row and no refresh. #46565, @torkelo * Gauge: Fixes blank viz when data link exists and orientation was horizontal. #46335, @torkelo * Search: sort results correctly when using postgres. #46466, @xlson * TagsInput: fix tags remove button accessibility issues. #46254, @Elfo404 * TextPanel: Sanitize after markdown has been rendered to html. #46166, @ashharrison90 + Features and enhancements (8.4.3): * Alerting: Grafana uses > instead of >= when checking the For duration. #46010 * Alerting: Use expanded labels in dashboard annotations. #45726, @grobinson-grafana * Logs: Escape windows newline into single newline. #45771, @perosb + Bug fixes (8.4.3): * Alerting: Fix use of > instead of >= when checking the For duration. #46011, @grobinson-grafana * Azure Monitor: Fixes broken log queries that use workspace. #45820, @sunker * CloudWatch: Remove error message when using multi-valued template vars in region field. #45886, @sunker * Middleware: Fix IPv6 host parsing in CSRF check. #45911, @ying-jeanne + Plugin development fixes & changes (8.4.3): * ClipboardButton: Use a fallback when the Clipboard API is unavailable. #45831, @ashharrison90 + Features and enhancements (8.4.2): * OAuth: Add setting to skip org assignment for external users. #34834, @baez90 * Tracing: Add option to map tag names to log label names in trace to logs settings. #45178, @connorlindsey + Bug fixes (8.4.2): * Explore: Fix closing split pane when logs panel is used. #45602, @ifrost + Features and enhancements (8.4.1): * Cloudwatch: Add support for AWS/PrivateLink* metrics and dimensions. #45515, @szymonpk * Configuration: Add ability to customize okta login button name and icon. #44079, @DanCech * Tempo: Switch out Select with AsyncSelect component to get loading state in Tempo Search. #45110, @CatPerry + Bug fixes (8.4.1): * Alerting: Fix migrations by making send_alerts_to field nullable. #45572, @santihernandezc + Features and enhancements (8.4.0): * API: Extract OpenAPI specification from source code using go-swagger. #40528, @papagian * AccessControl: Disable user remove and user update roles when they do not have the permissions. #43429, @Jguer * AccessControl: Provisioning for teams. #43767, @gamab * API: Add usage stats preview endpoint. #43899, @Jguer * Alerting: Move slow queries in the scheduler to another goroutine. #44423, @grobinson-grafana * Alerting: Use time.Ticker instead of alerting.Ticker in ngalert. #44395, @grobinson-grafana * Alerting: add custom grouping to Alert Panel. #44559, @gillesdemey * Analytics: Add user id tracking to google analytics. #42763, @autoric * Angular: Add AngularJS plugin support deprecation plan to docs site. #45149, @torkelo * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur * Azure Monitor Logs: Order subscriptions in resource picker by name. #45228, @sunker * Azure monitor Logs: Optimize data fetching in resource picker. #44549, @sunker * AzureMonitor: Filter list of resources by resourceType. #43522, @andresmgot * BarChart: color by field, x time field, bar radius, label skipping. #43257, @leeoniya * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes * Cloud Monitoring: Adds metric type to Metric drop down options. #43268, @tw1nk * CloudWatch: Add Data Lifecycle Manager metrics and dimension. #43310, @ilyastoli * CloudWatch: Add Missing Elasticache Host-level metrics. #43455, @dhendo * CloudWatch: Add all ElastiCache Redis Metrics. #43336, @siavashs * CloudWatch: Add new AWS/ES metrics. #43034, @sunker * Cloudwatch: Add syntax highlighting and autocomplete for "Metric Search". #43985, @sarahzinger * Explore: Support custom display label for exemplar links for Prometheus datasource. #42732, @JokerQueue * Hotkeys: Make time range absolute/permanent. #43802, @davkal * Playlists: Enable sharing direct links to playlists. #44161, @ashharrison90 * SQLStore: Prevent concurrent migrations. #44101, @papagian * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations. #43583, @kylebrandt * Setting: Support configuring feature toggles with bools instead of just passing an array. #43326, @bergquist * TimeSeries: Add support for negative Y and constant transform. #44774, @dprokop * Transformations: Add 'JSON' field type to ConvertFieldTypeTransformer. #42624, @sd2k + Bug fixes (8.4.0): * Auth: Guarantee consistency of signed SigV4 headers. #45054, @wbrowne * CloudWatch: Fix MetricName resetting on Namespace change. #44165, @yaelleC * Cloudwatch : Fixed reseting metric name when changing namespace in Metric Query. #44612, @yaelleC * Explore: Avoid locking timepicker when range is inverted. #44790, @Elfo404 * Instrumentation: Fix HTTP request instrumentation of authentication failures. #44234, @marefr * LibraryPanels: Prevent long descriptions and names from obscuring the delete button. #45190, @zuchka * OAuth: Fix parsing of ID token if header contains non-string value. #44159, @marefr * Panel Edit: Visualization search now works correctly with special characters. #45137, @ashharrison90 * Provisioning: Fix duplicate validation when multiple organizations have been configured. #44151, @marefr * QueryField: Fix issue with undo history when suggestion is inserted (#28656). #39114, @glintik * TablePanel: Do not prefix columns with frame name if multiple frames and override active. #45174, @mdvictor + Deprecations (8.4.0): AngularJS plugin support is now in a deprecated state, meaning it will be removed in a future release. Currently, that is planned for version 10 (in 2023). The documentation site has an article with more details on why, when, and how. Issue #45149
buildservice-autocommit
accepted
request 997329
from
Witek Bedyk (witekbedyk)
(revision 75)
baserev update by copy to link target
- Update to version 8.3.10 + Security: * Fixes XSS vulnerability in the Unified Alerting (bsc#1201535, CVE-2022-31097) * Fixes OAuth account takeover vulnerability (bsc#1201539, CVE-2022-31107) - Update to version 8.3.9 + Bug fixes: * Geomap: Display legend * Prometheus: Fix timestamp truncation - Update to version 8.3.7 + Bug fix: * Provisioning: Ensure that the default value for orgID is set when provisioning datasources to be deleted. - Update to version 8.3.6 + Features and enhancements: * Cloud Monitoring: Reduce request size when listing labels. * Explore: Show scalar data result in a table instead of graph. * Snapshots: Updates the default external snapshot server URL. * Table: Makes footer not overlap table content. * Tempo: Add request histogram to service graph datalink. * Tempo: Add time range to tempo search query behind a feature flag. * Tempo: Auto-clear results when changing query type. * Tempo: Display start time in search results as relative time. + Bug fixes: * CloudMonitoring: Fix resource labels in query editor. * Cursor sync: Apply the settings without saving the dashboard. * LibraryPanels: Fix for Error while cleaning library panels. * Logs Panel: Fix timestamp parsing for string dates without timezone. * Prometheus: Fix some of the alerting queries that use reduce/math operation. * TablePanel: Fix ad-hoc variables not working on default datasources. * Text Panel: Fix alignment of elements. * Variables: Fix for constant variables in self referencing links.
Displaying revisions 41 - 60 of 133