* Update changelog --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: Kevin Minehart <5140827+kminehart@users.noreply.github.com>
499 KiB
12.3.6+security-04 (2026-05-12)
Bug fixes
- Alerting: Fix error when updating Alertmanager config with autogenerated receivers #113712, @moustafab
- Security: CVE-2026-28374
- Security: CVE-2026-28376
- Security: CVE-2026-28383
- Security: CVE-2026-28380
- Security: CVE-2026-33376
- Security: CVE-2026-28379
- Security: CVE-2026-33377
- Security: CVE-2026-33378
- Security: CVE-2026-33381
- Security: CVE-2026-33380
13.0.1+security-01 (2026-05-12)
Bug fixes
- Security: CVE-2026-28374
- Security: CVE-2026-28376
- Security: CVE-2026-28383
- Security: CVE-2026-28380
- Security: CVE-2026-33376
- Security: CVE-2026-28379
- Security: CVE-2026-33377
- Security: CVE-2026-33378
- Security: CVE-2026-33381
- Security: CVE-2026-33380
12.4.3+security-02 (2026-05-12)
Bug fixes
- Security: CVE-2026-28374
- Security: CVE-2026-28376
- Security: CVE-2026-28383
- Security: CVE-2026-28380
- Security: CVE-2026-33376
- Security: CVE-2026-28379
- Security: CVE-2026-33377
- Security: CVE-2026-33378
- Security: CVE-2026-33381
- Security: CVE-2026-33380
12.2.8+security-04 (2026-05-12)
Bug fixes
- Security: CVE-2026-28374
- Security: CVE-2026-28376
- Security: CVE-2026-28383
- Security: CVE-2026-28380
- Security: CVE-2026-33376
- Security: CVE-2026-28379
- Security: CVE-2026-33377
- Security: CVE-2026-33378
- Security: CVE-2026-33381
- Security: CVE-2026-33380
11.6.14+security-04 (2026-05-12)
Bug fixes
- Security: CVE-2026-28374
- Security: CVE-2026-28376
- Security: CVE-2026-28383
- Security: CVE-2026-28380
- Security: CVE-2026-33376
- Security: CVE-2026-28379
- Security: CVE-2026-33377
- Security: CVE-2026-33378
- Security: CVE-2026-33381
- Security: CVE-2026-33380
13.0.1 (2026-04-17)
Features and enhancements
- Dashboard: Preserve timezone user-preference when converting V1 → V2 #122673, @ivanortegaalba
- Provisioning: Include dashboard validation errors in pull request comments #122433, @gttrigger
Bug fixes
- Unified storage: Skip migrations if dualwrite state shows they were already migrated #122880, @stephaniehingtgen
12.4.3 (2026-04-14)
Features and enhancements
- Analytics: Keep internal dashboard id #121417, @ryantxu
- Go: Update to 1.25.9 #122095, @macabu
- Reporting: Correctly apply appSubURL to report settings requests (Enterprise)
Bug fixes
- Alerting: Document Grafana HA Alertmanager cluster metrics prefix change in Grafana 12.4 #121481, @alexander-akhmetov
13.0.0 (2026-04-14)
Features and enhancements
- ** Chore:** Prepare @grafana/sql for npm publishing #120786, @itsmylife
- API Clients: Make legacy APIs internal only, and publish to NPM #119507, @tomratcliffe
- APIServer: Allow user to set preferred version #121256, @stephaniehingtgen
- APIServer: Surface watch errors in the UI #117983, @Clarity-89
- AccessControl: Invalidate RBAC permission cache on role assignment changes (Enterprise)
- AccessControl: Invalidate scope resolver cache on datasource deletion #118334, @mihai-turdean
- Accessibility: Add
aria-pressedstate to "Show only overrides" button #119826, @ashharrison90 - Accessibility: Colorblind safe color palette for visualizations #121385, @vijaygovindaraja
- AdHocFiltersCombobox: Remove newFiltersUI feature toggle #117235, @Sergej-Vlasov
- Adhoc: Rename customer-facing ad hoc terminology to Filter #121081, @kristinademeshchik
- Alerting: Add @grafana/api-clients usage rule to CLAUDE.md and rename to AGENTS.md #118660, @soniaAguilarPeiron
- Alerting: Add Alert activity navigation tabs for V2 nav #117882, @aifraenkel
- Alerting: Add FlagAlertEnrichmentPreview feature toggle for enrichment feature #120276, @laurenashleigh
- Alerting: Add RoutingTreeSelector component in grafana-alerting package #117890, @soniaAguilarPeiron
- Alerting: Add access control for managed routes #121034, @yuri-tceretian
- Alerting: Add alertingAlertsActivityBanner FT to backend #118057, @laurenashleigh
- Alerting: Add alerts activity banner to rule list view #117893, @laurenashleigh
- Alerting: Add concurrency cap to buildinfo requests in useRuleSourcesWithRuler #120345, @rodrigopk
- Alerting: Add createAlertRuleFromPanel feature toggle #120427, @laurenashleigh
- Alerting: Add date/time formatting guidance to AGENTS.md #120013, @soniaAguilarPeiron
- Alerting: Add folder full path to alert_rules table with sync #117418, @konrad147
- Alerting: Add frontend only alertingPolicyRoutingSettings feature flag #120463, @rodrigopk
- Alerting: Add frontend only feature flag alertingAlertListPanelEnhancements #119343, @rodrigopk
- Alerting: Add instance count badges to activity workbench #117741, @konrad147
- Alerting: Add labels breakdown to triage view #119123, @konrad147
- Alerting: Add learning from corrections guideline to AGENTS.md #120035, @soniaAguilarPeiron
- Alerting: Add legacy badge for templates with mimir kind #119039, @rodrigopk
- Alerting: Add limits validation for templates and silences #116787, @rwwiv
- Alerting: Add multi-select support to RoutingTreeSelector #119229, @gillesdemey
- Alerting: Add notification history tab to rule viewer. #117943, @stevesg
- Alerting: Add notifications in activity page, instance detail drawer #119426, @soniaAguilarPeiron
- Alerting: Add policy filter to alert list view #121110, @rodrigopk
- Alerting: Add predefined saved searches for Alert Activity #118842, @laurenashleigh
- Alerting: Add protected fields authorization check to provisioning API #120513, @yuri-tceretian
- Alerting: Add saved searches support to Alert Activity page #117241, @dhalachliyski
- Alerting: Add silence view page #118403, @rodrigopk
- Alerting: Add sort by full path to prometheus rules API #118839, @moustafab
- Alerting: Add tracking events for multi notification policies feature #120456, @rodrigopk
- Alerting: Add tracking to import to gma wizard #118869, @rodrigopk
- Alerting: Add typesVersions to @grafana/alerting for backwards compat #120020, @soniaAguilarPeiron
- Alerting: Alerting List Dashboard Panel Improvements #119448, @rodrigopk
- Alerting: Convert instant to range for prometheus and loki #118538, @gillesdemey
- Alerting: Create alert rule drawer dashboard panel #113119, @laurenashleigh
- Alerting: Create alert rule from dashboard iterations #120826, @laurenashleigh
- Alerting: Deprecate legacy notification permission actions #121689, @yuri-tceretian
- Alerting: Deprecate provisioning alert rule endpoints #120606, @rwwiv
- Alerting: Enable alertingUIUseBackendFilters by default #119308, @alexander-akhmetov
- Alerting: Enforce provenance permissions via service-layer validator in notification APIs #121335, @titolins
- Alerting: Extract notification policies active check into a named function #118905, @soniaAguilarPeiron
- Alerting: Group by folder in alerts activity by default #119437, @laurenashleigh
- Alerting: Hide action buttons for read only resources #119026, @rodrigopk
- Alerting: Import wizard UI small changes #120930, @soniaAguilarPeiron
- Alerting: Improve Step 2 of import wizard #118547, @soniaAguilarPeiron
- Alerting: Improve alerts activity UI RBAC #121458, @laurenashleigh
- Alerting: Improve alerts activity UI part 2 #121410, @laurenashleigh
- Alerting: Improve alerts notification filter row UI #121180, @laurenashleigh
- Alerting: Improve enrichment feature (Enterprise)
- Alerting: Improve enrichment feature backend changes (Enterprise)
- Alerting: Improve enrichment feature part 2 (Enterprise)
- Alerting: Improve import wizard validation and UX #118350, @soniaAguilarPeiron
- Alerting: Improve triage workbench filter and group-by dropdowns #117856, @konrad147
- Alerting: Managed routes access control UI #121652, @rodrigopk
- Alerting: Migrate alert notifiers api to the new app platform api #118033, @rodrigopk
- Alerting: Migrate notifications.alerting.grafana.app from v0alpha1 to v1beta1 #121028, @rodrigopk
- Alerting: Migrate receivers test endpoint to auto generated client #118621, @rodrigopk
- Alerting: Move inhibition rules alert to sidebar #121263, @rodrigopk
- Alerting: Pre-select Step 2 routing tree from Step 1 policy tree name #120491, @soniaAguilarPeiron
- Alerting: Remove Grafana (imported) option from alertmanager dropdown #118731, @rodrigopk
- Alerting: Remove
kubernetesAlertingRulesfeature flag #121799, @moustafab - Alerting: Remove the alertingImportAlertmanagerAPI feature flag gate for recevier test api #120430, @rodrigopk
- Alerting: Revert adding typesVersions to @grafana/alerting for backward compat #120093, @soniaAguilarPeiron
- Alerting: Simplify managed routes UI when there is only one routing tree #118798, @soniaAguilarPeiron
- Alerting: Single-node evaluation mode #118527, @alexander-akhmetov
- Alerting: Update provisioning APIs to accept resource-specific permissions #120552, @yuri-tceretian
- Alerting: Use dry-run mode in the api for validating collisions #118235, @soniaAguilarPeiron
- Alerting: Use notification settings instead of labels for assigning a managed route to an alert rule #120610, @rodrigopk
- Alerting: Use notification_settings.policy in import wizard #120778, @soniaAguilarPeiron
- Alerting: Use the new k8s API instead of the legacy GET config endpoint for inhibit rules alert #119413, @soniaAguilarPeiron
- Analytics tab: Improve voice over accessibility (Enterprise)
- Analytics: Keep internal dashboard id #119115, @ryantxu
- Annotations: Clustering experimental release #120244, @gtk-grafana
- Annotations: Indicator controls #120343, @gtk-grafana
- Auditing: Disable logging of data sources request and response bodies by default (Enterprise)
- Auth: Remember the user's last org for SSO logins #114135, @jtroy
- Auth: Remove passwordless (magic link) authentication backend implementation #118881, @colin-stuart
- Auth: Remove passwordless (magic link) authentication frontend implementation #118880, @colin-stuart
- Azure: Support certificate authentication #118512, @aangelisc
- Badge: Increase contrast for light themed badges #119821, @ashharrison90
- Browse Dashboards: Add team folders section #119866, @tomratcliffe
- Browse dashboards: Make elements visible and flow better when zoomed #120038, @aocenas
- Build : Team Bulk API: redirect for team bulk PUT request #117450, @yudintsevegor
- Card: Improve header semantics #119849, @ashharrison90
- Chore: Bump Ubuntu base image from 22.04 to 24.04 #120573, @samjewell
- Chore: Bump grpc-gateway/v2 from v2.27.8 to v2.28.0 #119403, @MissingRoberto
- Chore: Bump slog-gokit to v0.1.6 for performance improvements #119389, @MissingRoberto
- Chore: Prepare @grafana/o11y-ds-frontend for npm publishing #120444, @itsmylife
- Chore: Remove deprecated DataGrid panel from frontend code #119152, @fastfrwrd
- Chore: Remove prometheus bundled dashboards #121084, @itsmylife
- Chore: Update some dependencies in grafana-prometheus #118589, @itsmylife
- Chore: Use a faster gzip middleware library #118975, @ryantxu
- Cloudwatch: Rename X-Ray to Application Signals #117958, @iwysiu
- ColorPicker: Add visual label for custom color input #119829, @ashharrison90
- Combobox: Migrate to isItemDisabled API #117975, @Clarity-89
- Dashboard Import: Labels in v2 schema #117212, @harisrozajac
- Dashboard: Add default layout selector to Dashboard Empty page #121257, @ifrost
- Dashboard: Add rows and tabs from the side pane #119451, @harisrozajac
- Dashboard: Add v2 API version with aligned TransformationKind and Dashboard Preferences (backend) #118646, @dprokop
- Dashboard: Make legend colors and link rows keyboard accessible #117038, @DivyamUp14
- Dashboard: Simplify variable change #121727, @torkelo
- DashboardEdit: Add As Code dashboard editor with schema validation #118107, @dprokop
- Dashboards a11y: Do not open time zonemenu on focus #120101, @idastambuk
- Dashboards: Do not show share and edit button in kiosk mode #120976, @ifrost
- Dashboards: Enable default layout selector #121752, @ifrost
- Dashboards: Get annotations and dashboard endpoint performance improvements #119378, @filewalkwithme
- Dashboards: GnetID should be a number, not a string #118478, @ryantxu
- Dashboards: Graduate to V1 #120748, @stephaniehingtgen
- Dashboards: Recognise links in variable description #120259, @leventebalogh
- Dashboards: Remove dashboardScene feature toggle usage #121431, @Sergej-Vlasov
- Dashboards: Resolve display names by identity in version history #119220, @ivanortegaalba
- Dashboards: Section level variables #119572, @harisrozajac
- Dashboards: Support k8s resource inside /api/dashboards/db #118946, @ryantxu
- Database: Add stats collector from Prometheus library #119477, @macabu
- Datasource Permissions: Add
datasourceTypeto role provisioning (Enterprise) - Datasource Permissions: Allow sending in query param
ds_typeand add database migration #121501, @stephaniehingtgen - Docs: Remove passwordless authentication #121329, @colin-stuart
- Docs: Setting up Prom Rules docs and removing SLO docs #117236, @github-actions[bot]
- Dynamic Dashboards: Ability to add links from side pane #119267, @harisrozajac
- Dynamic dashboards: Add paste panel button to the sidebar #119305, @idastambuk
- Elasticsearch: Add variable query editor support #118539, @adamyeats
- Elasticsearch: ES|QL support #117798, @cauemarcondes
- Elasticsearch: Query editor options box #119665, @bossinc
- Elasticsearch: Raw query editor metrics orderby bug #120133, @bossinc
- Elasticsearch: Remove core datasource (Enterprise)
- Expressions: Isolate broken SSE pipeline nodes to enable partial results #121043, @NWRichmond
- Feature Toggles: Allow setting via env var directly, deprecate GF_FEATURE_TOGGLES_ENABLE #121271, @hairyhenderson
- Feature Toggles: Deprecate feature_toggles.enable configuration #114047, @hairyhenderson
- FilterPill: Selected border style update #118996, @ywzheng1
- Folders: Block setting ownerReferences on repository-managed folders #120509, @MissingRoberto
- Folders: Move to v1 #119954, @filewalkwithme
- Frontend: Negotiate folder app API v1 vs v1beta1 at runtime #121503, @filewalkwithme
- Frontend: Prevent HTML error pages from showing in UI notifications #119595, @joshhunt
- Gauge: Enable GA #119414, @fastfrwrd
- Geomap: Update dashboard variable with view data #116208, @dashie
- Go: Update to 1.25.8 #119692, @macabu
- Grafana Advisor: General Availability #121086, @andresmgot
- I18n: Add LANG override to make command #118180, @aocenas
- InfluxDB: Use text input for regex tag values in query builder #118899, @chiranjeevi-max
- Inline Log Details: Added support to have inline details without scrolls #119517, @matyax
- Live: Add RBAC for pushing to live #120547, @stephaniehingtgen
- Log Details: Optimized vertical space #120937, @matyax
- Log Line Details: Use small font size when the option is enabled in the panel or controls #119335, @matyax
- Logs CSV export: Include log line body when selected as field #120947, @matyax
- Logs Panel: Added support to hide level in Dashboards and app plugins #119318, @matyax
- Logs Panel: Added support to pass custom grammar definition for plugin developers #120402, @matyax
- Logs Panel: Added support to persist displayed fields as panel options in Dashboards #118027, @matyax
- Logs Panel: Added support to show the field selector in Dashboards #118079, @matyax
- Logs Panel: Added support to toggle Level visibility from the field selector #120667, @matyax
- Logs: Default labels API #118602, @matyax
- MenuItem: Add optional iconColor prop to MenuItem #120484, @ywzheng1
- OTel logs formatting: Added support for dot-separated label names #121671, @matyax
- PanelChrome: Improve panel status design #118252, @torkelo
- PanelStyles: Add registry with trend & candlestick #121490, @drew08t
- PanelStyles: Extend support to other panels #121510, @drew08t
- PanelStyles: Extend to core panels #121670, @drew08t
- Permissions: Remove /access-control/assignments/search endpoint (Enterprise)
- Plugins: Forward AWS SDK credential chain env vars to external AWS plugins #119772, @kevinwcyu
- Plugins: Share react-dom/client and react-dom/server #118852, @jackw
- Plugins: Update catalog to support community managed plugins #119510, @oshirohugo
- Plugins: Update test mocks (Enterprise)
- Presets: Introduce UI and time series panel support #119186, @adela-almasan
- Prometheus: Hide common labels when the legendFormat is set as
auto#116003, @martin-schulze-e2m - Provisioning: Add client level decrypt metrics for connections and repositories #119865, @MissingRoberto
- Provisioning: Add custom webhook base URL to repository spec #119635, @MissingRoberto
- Provisioning: Add descriptive error translation for GitHub API errors #119230, @MissingRoberto
- Provisioning: Add repository types to defaults to enable env var override #120148, @MissingRoberto
- Provisioning: Check for branch protection in Github Repositories #118717, @MissingRoberto
- Provisioning: Check for write permissions for not ready-only repositories #119232, @MissingRoberto
- Provisioning: Enable folder metadata by default #121833, @ferruvich
- Provisioning: Enable provisioning and Git Sync by default #120014, @MissingRoberto
- Provisioning: Ignore git submodules #118212, @MissingRoberto
- Provisioning: Prevent unmanaged resource overrides and generate new UIDs on export #119601, @MissingRoberto
- Provisioning: Remove experimental banner for on-prem Git Sync #120492, @MissingRoberto
- Provisioning: Update folder title on sync when it has changed #119580, @MissingRoberto
- Provisioning: Validate if configured branch is protected using rulesets #119521, @MissingRoberto
- Provisioning: Validate if repository is empty #119502, @MissingRoberto
- Public Dashboards: Prevent unintended CRUD operations from different orgs #120339, @mmandrus
- Pyroscope: Add .NET-specific profile type descriptions #120677, @simonswine
- Pyroscope: New Call Tree visualization #118419, @aleks-p
- Pyroscope: Support profileIdSelector and add full label set to exemplars #116325, @alsoba13
- QueryCaching: Remove duplicated metrics grafana_caching_items and grafana_caching_size (Enterprise)
- RBAC: Seed cloud app roles (Enterprise)
- RadioButton: Correctly set accessible labels #120410, @ashharrison90
- RemoteCache: Add network=unix support for the Redis remote cache #119278, @IngmarStein
- Remoteruler: Add support for sorting rules by folder full path (Enterprise)
- Rendering: Add support for custom CA certs in Image Renderer #118612, @mrevutskyi
- Rendering: Remove deprecated plugin support #118809, @macabu
- Rendering: Switch default auth mode to jwt-based #120924, @macabu
- Reporting: Add PDF header toggle settings (Enterprise)
- Reporting: Add configurable PDF footer backend support (Enterprise)
- Reporting: Add configurable PDF footer settings UI (Enterprise)
- Reporting: Add report readiness observer #118312, @tskarhed
- Reporting: Correctly apply appSubURL to report settings requests (Enterprise)
- Restore dashboards: Enable the feature toggle by default #121548, @Clarity-89
- Roles: Deprecated version in writes; autoincrement instead (Enterprise)
- Roles: Remove IncludeMapped parameter from
GET /access-control/users/{userId}/roles(Enterprise) - SQL: Guard fill resampling in MSSQL, PostgreSQL and MySQL #121327, @github-actions[bot]
- Search: Respect serve_from_sub_path in command palette URLs #120723, @moktamd
- Secrets Keeper: Add Create Keeper page with AWS form (Enterprise)
- Secrets Keeper: Add keeper type chooser interstitial page (Enterprise)
- Secrets Keeper: Replace mock hooks with RTK Query API integration (Enterprise)
- Secrets: Enable secrets management UI (PublicPreview) #119043, @ericrshields
- Server: Support HTTPS and HTTP/2 over Unix domain sockets #118155, @IngmarStein
- Server: Support simultaneous TCP and Unix domain socket serving #118627, @IngmarStein
- StatsPicker: Convert to Combobox #120831, @fastfrwrd
- Suggested Fields: Add support for any logging source #119607, @matyax
- Suggestions: Mark feature toggles as GA and swap defaults to true #121435, @fastfrwrd
- Table: Add "no rows" display and prevent an error with pagination when no rows are present #121099, @fastfrwrd
- Table: Add aria label to table header for accessibility #120376, @idastambuk
- Table: Add nested field overrides behind flag #119996, @fastfrwrd
- Team Folders: Add owner filter to browse dashboards #121298, @Clarity-89
- TeamFolders: Create folder during team creation #118969, @aocenas
- TeamFolders: Folders tab in team page #118588, @aocenas
- TeamFolders: Keep folder owner modal combobox working when team does not exist anymore #118272, @aocenas
- Teams: Disable sorting by membercount on TeamsList #121552, @mgyongyosi
- Tempo: Enhance gRPC client with full OpenTelemetry tracing and Prometheus metrics #111735, @QuentinBisson
- Tempo: Forward incoming and team headers for streaming requests #118631, @jcolladokuri
- Themes: Add new colorblind-friendly themes #116953, @ashharrison90
- TimePicker: Add duration shortcut input support #113653, @olegpixel
- TopBar: Add a separator between top nav sidebar extension items #118672, @domasx2
- TraceView: Display service.namespace alongside service.name in span labels (frontend only) #119091, @cedricziel
- Unified Storage: Block changing manager properties #120521, @MissingRoberto
- Unified Storage: Enforce folder manager consistency for repository managed folders #120569, @MissingRoberto
- Unified: Enable folder/dashboard migrations by default for OSS #118715, @RafaelPaulovic
- Unified: Enable folder/dashboard migrations by default for OSS #119293, @RafaelPaulovic
- Usage Insights: Migrate data source and dashboard view events from ID -> UID (Enterprise)
- VizLegend: Add limit for number of series items #117947, @leeoniya
Bug fixes
- Alert Enrichment: Fix payload sent for per-rule enrichers (Enterprise)
- Alerting: Change display name of alerting.provisioning:writer fixed role #120072, @yuri-tceretian
- Alerting: Change scope for testing new receivers to use supported resource type. #118407, @yuri-tceretian
- Alerting: Document Grafana HA Alertmanager cluster metrics prefix change #120877, @alexander-akhmetov
- Alerting: Fix "Page not found" shown in the page header for some notifications pages #118314, @soniaAguilarPeiron
- Alerting: Fix 'too many SQL variables' when deleting large rule groups #118238, @soniaAguilarPeiron
- Alerting: Fix Alert Activity group-by showing same firing count for all groups #120963, @gillesdemey
- Alerting: Fix CollateAlertRuleGroup migration for MariaDB compatibility #118972, @alexander-akhmetov
- Alerting: Fix Page not found breadcrumb in import wizard #120938, @soniaAguilarPeiron
- Alerting: Fix Time intervals tab highlighting Notification policies tab #118813, @soniaAguilarPeiron
- Alerting: Fix alert list panel dashboard refresh subscription issue #119265, @rodrigopk
- Alerting: Fix evaluation interval validation and auto-adjust pending period accordingly #119195, @soniaAguilarPeiron
- Alerting: Fix flaky test in policies list #120698, @rodrigopk
- Alerting: Fix infinite loading in route preview for multiple AM #120234, @rodrigopk
- Alerting: Fix legacy permissions being ignored in rbac notification settings page #121596, @rodrigopk
- Alerting: Fix missing series evaluations to resolve not preserved when duplicating a rule #118537, @alexander-akhmetov
- Alerting: Fix no data display Alerts Activity #118688, @laurenashleigh
- Alerting: Fix policies breadcrumb #118477, @soniaAguilarPeiron
- Alerting: Fix policy tab broken #118275, @soniaAguilarPeiron
- Alerting: Fix reducer undefined error in alert rule edit #119875, @rodrigopk
- Alerting: Fix rule label/annotation key template failure fallback #119460, @moustafab
- Alerting: Fix stale alertmanager selection issue when switching organizations #120128, @rodrigopk
- Alerting: Fix time range picker bug in alert activity #118468, @laurenashleigh
- Alerting: Only apply canUse filter for Grafana alertmanager in MuteTimingsSelector #118362, @soniaAguilarPeiron
- Alerting: Preserve scroll position on Alert Activity refresh #121434, @dhalachliyski
- Alerting: Refactor triage stats to use DataFrame field access directly #118936, @gillesdemey
- Alerting: Sort recently deleted alert rules by deletion time #121284, @gillesdemey
- Alerting: Treat not found error when fetching plugins as not installed #120096, @rodrigopk
- Auth: Fix token refresh when using Entra ID OAuth with workload_identity (federated credentials) #114172, @Richard87
- BarGauge: Fix incorrect value width in basic and gradient modes #118412, @qtlaurent
- Browse Dashboards: Fix not loading a page of items due to "invalid shape" #119724, @aocenas
- CloudConfig: Fix stale OAuth2 tokens on HTTP path by propagating datasource Updated timestamp (Enterprise)
- Combobox: Fix long option overflow in MultiCombobox when single item selected #121557, @gillesdemey
- Combobox: Selects the correct option when opening the dropdown #120004, @hugohaggmark
- Dashboard: Fixes docking in view mode #121016, @torkelo
- Dashboards: Fix adding variables and links when no controls are displayed #121728, @ifrost
- Dashboards: Fix start parameter in list versions API for K8s backend #118566, @MissingRoberto
- DataSourcePicker: Deleted datasources are not shown in dropdown #120188, @hugohaggmark
- DataSourcePicker: Fix focus state when navigating with keyboard #118355, @ashharrison90
- DataSourceTabPage: Fix active tab indicator for custom config pages #118156, @4RH1T3CT0R7
- Docs: Fix link to SCIM provisioning documentation in SAML setup #121693, @eamonryan
- Elasticsearch: Fix variable queries broken by empty meta object #120169, @adamyeats
- Fix: Keyboard accessibility for menus #118251, @MdTanwer
- GCM: Ensure the SLO name is human readable #118012, @aangelisc
- IAM: Handle NULL team_member.external column to fix dashboard loading #119895, @difro
- Jaeger data source: Fix panic on empty trace response #120266, @zoltanbedi
- Jaeger: Handle gzip, deflate, and brotli compressed API responses #120370, @zoltanbedi
- Live/Plugins: Fix "namespace" to "scope" rename #119108, @ryantxu
- Logs: Fix missing log entry in TXT export when fields are selected #120757, @weiking1021
- MSSQL: Fix connection when password contains semicolon #118076, @MdTanwer
- MultiCombobox: Shows correct truncated items when focused #119922, @hugohaggmark
- MySQL: Preserve
#inside quoted strings in SQL comment stripping #121535, @karthik-idikuda - Plugins: Fix installer IsDisabled condition #120401, @andresmgot
- Plugins: Forward PLUGIN_UNIX_SOCKET_DIR to plugin processes to fix temp dir in restricted environments #119955, @HarshadaGawas05
- Prometheus: Fix aggregating by labels with dots #114807, @juliuskoval
- Provisioning: Bump nanogit v0.3.1 with missing objects fixes #118086, @MissingRoberto
- Provisioning: Do not enforce git suffix for pure git repositories #120394, @MissingRoberto
- Provisioning: Fix editors not being able to open dashboard preview #120496, @MissingRoberto
- Provisioning: Fix job driver deadlock and stale ResourceVersion in lease renewal #119820, @MissingRoberto
- Security: Bump nanogit v0.7.0 to fix 4 CVEs in Go stdlib #120290, @MissingRoberto
- Security: Fix CVE-2026-27876, CVE-2026-27877, CVE-2026-28375, CVE-2026-27879, CVE-2026-27880 #121514, @github-actions[bot]
- Stat: Fixes missing suggestions for time series #119711, @torkelo
- Tempo: Fix query editor breaking when invalid query used #118409, @spider-yamet
- Tempo: Fix search frame transformation when attributes are missing. #118435, @jcolladokuri
- Tempo: Fix secure gRPC connection over TLS regardless of Basic auth setting #111770, @TheoBrigitte
- Transformations: Correctly link content with header #118860, @ashharrison90
- Transformations: Fix bug in "Config from query results" #117964, @NWRichmond
Breaking changes
- Access Control: Remove deprecated dashboard annotation scope #118120, @Jguer
- Alerting: Protect /api/v2/status endpoint with dedicated permission #121006, @yuri-tceretian
- Alerting: Remove DELETE and restrict GET/history legacy Alertmanager config API endpoints #120579, @titolins
- Alerting: Remove legacy TestReceivers endpoint and supporting code #121692, @JacobsonMT
- Chore: Remove promlib #120031, @itsmylife
- Config: Change default value for server.enable_gzip to true #106093, @ygerlach
- Dashboards: Remove organization annotation permissions from dashboard dto #121390, @ryantxu
- Datasources: Disable deprecated numeric id using APIs by default #119930, @gabor
- Elasticsearch: Remove core datasource #119956, @njvrzm
- Gauge: Delete from @grafana/ui #120850, @fastfrwrd
- Packaging: Remove
grafana-cliandgrafana-servercommands; usegrafana cliorgrafana serverinstead #120225, @kminehart - Plugins: Make
typeproperty required in includes array of plugin json #119963, @s4kh - Rendering: Prohibit usage of empty/default render auth token in JWT mode #121408, @macabu
- Viz: Delete the Graph portion of the grafana-ui graveyard #119422, @fastfrwrd
Plugin development fixes & changes
- Alert: Make more responsive when buttons are present #119971, @ashharrison90
- Combobox: Not found label is not truncated with auto size #120036, @hugohaggmark
- Combobox: Use custom value label is not truncated with auto sizing #120074, @hugohaggmark
- Modal: Remove deprecated props #121288, @ashharrison90
- SeriesIcon: Remove noMargin prop and make it default behaviour #118195, @ashharrison90
- TextLink: Fix icon positioning if text wraps #118233, @ashharrison90
12.3.6+security-01 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-33375
12.2.8+security-01 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-33375
12.1.10+security-01 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-33375
11.6.14+security-01 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-33375
12.4.2 (2026-03-25)
Features and enhancements
- Analytics tab: Improve voice over accessibility (Enterprise)
- Dashboards a11y: Do not open time zonemenu on focus #120388, @idastambuk
- Dashboards: Resolve display names by identity in version history #120273, @ivanortegaalba
- Plugins: Forward AWS SDK credential chain env vars to external AWS plugins #120209, @kevinwcyu
- Public Dashboards: Prevent unintended CRUD operations from different orgs #120457, @mmandrus
Bug fixes
- IAM: Handle NULL team_member.external column to fix dashboard loading #120179, @difro
- Plugins: Fix installer IsDisabled condition #120568, @andresmgot
- Plugins: Forward PLUGIN_UNIX_SOCKET_DIR to plugin processes to fix tmp dir in restricted environments #120275, @HarshadaGawas05
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27877
- Security: Fix CVE-2026-28375
- Security: Fix CVE-2026-27879
- Security: Fix CVE-2026-27880
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-33375
12.3.6 (2026-03-25)
Features and enhancements
Bug fixes
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27877
- Security: Fix CVE-2026-28375
- Security: Fix CVE-2026-27879
- Security: Fix CVE-2026-27880
- Security: Fix CVE-2026-27876
12.2.8 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27877
- Security: Fix CVE-2026-28375
- Security: Fix CVE-2026-27879
- Security: Fix CVE-2026-27880
- Security: Fix CVE-2026-27876
12.1.10 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27877
- Security: Fix CVE-2026-28375
- Security: Fix CVE-2026-27879
- Security: Fix CVE-2026-27880
- Security: Fix CVE-2026-27876
11.6.14 (2026-03-25)
Bug fixes
- Security: Fix CVE-2026-27876
- Security: Fix CVE-2026-27877
- Security: Fix CVE-2026-28375
- Security: Fix CVE-2026-27879
12.4.1 (2026-03-09)
Features and enhancements
- AccessControl: Invalidate scope resolver cache on datasource deletion #118741, @mihai-turdean
- Go: Update to 1.25.8 #119693, @macabu
- Rendering: Add support for custom CA certs in Image Renderer #118859, @mrevutskyi
Bug fixes
- AccessControl: Fix test utility for datasource deletion permissions cleanup (Enterprise)
- Alerting: Change scope for testing new receivers to use supported resource type. #118495, @yuri-tceretian
- Alerting: Fix CollateAlertRuleGroup migration for MariaDB compatibility #119028, @alexander-akhmetov
12.3.5 (2026-03-09)
Features and enhancements
- Go: Update to 1.25.8 #119694, @macabu
- Rendering: Add support for custom CA certs in Image Renderer #118910, @mrevutskyi
Bug fixes
- Dashboards: Fix start parameter in list versions API for K8s backend #119397, @MissingRoberto
12.2.7 (2026-03-09)
Features and enhancements
- Go: Update to 1.25.8 #119696, @macabu
- Rendering: Add support for custom CA certs in Image Renderer #118911, @mrevutskyi
Bug fixes
- Dashboards: Fix start parameter in list versions API for K8s backend #119398, @MissingRoberto
12.1.9 (2026-03-09)
Features and enhancements
- Go: Update to 1.25.8 #119701, @macabu
- Rendering: Add support for custom CA certs in Image Renderer #118912, @mrevutskyi
11.6.13 (2026-03-09)
Features and enhancements
12.4.0 (2026-02-24)
Features and enhancements
- API: Add missing scope check on dashboards #116885, @Proximyst
- Alerting Enrichment: Add new RBAC permissions for reading and writing enrichments (Enterprise)
- Alerting: Add Alert Rules tabs navigation with feature toggle #116253, @aifraenkel
- Alerting: Add Alert activity card to alerting home page #115822, @dhalachliyski
- Alerting: Add Cursor frontmatter to CLAUDE.md for auto-loading #115613, @soniaAguilarPeiron
- Alerting: Add Edit/Export actions to group rows, clickable folders, and square icon for recording rules #117763, @konrad147
- Alerting: Add RBAC for enrichment #113296, @soniaAguilarPeiron
- Alerting: Add RBAC to enrichments (Enterprise)
- Alerting: Add UI for imported time intervals #116249, @soniaAguilarPeiron
- Alerting: Add alert labels as tags on annotations (#28610) #116244, @msvechla
- Alerting: Add alertingSyncNotifiersApiMigration feature flag #117946, @rodrigopk
- Alerting: Add compressed periodic save for alert instances #111803, @softho0n
- Alerting: Add counts for firing and pending alert rules #113309, @laurenashleigh
- Alerting: Add empty state to triage page WIP #113390, @laurenashleigh
- Alerting: Add expression type information to webhook valueString #112312, @softho0n
- Alerting: Add feature toggle to disable DMA creation in UI #116830, @soniaAguilarPeiron
- Alerting: Add first CLAUDE.md in the frontend alerting folder #114308, @soniaAguilarPeiron
- Alerting: Add folder_uid label to the grafana_alerting_rule_group_rules metric #115129, @alexander-akhmetov
- Alerting: Add gh in CLAUDE.md #114992, @soniaAguilarPeiron
- Alerting: Add limits for the size of expanded notification templates #115242, @yuri-tceretian
- Alerting: Add managed folder validation frontend #115203, @laurenashleigh
- Alerting: Add policy selector in the alert rule form #117464, @soniaAguilarPeiron
- Alerting: Add saved searches feature for alert rules page #115001, @dhalachliyski
- Alerting: Add viz wrapper for run queries in enrichment (Enterprise)
- Alerting: Alerts page performance improvements #113391, @konrad147
- Alerting: Analyze an alert rule with Grafana Assistant #114420, @soniaAguilarPeiron
- Alerting: Apply pending period to NoData and Error alerts #117024, @santihernandezc
- Alerting: Change group filtering to search-based using lightweight BE endpoint #114347, @laurenashleigh
- Alerting: Collate alert_rule.namespace_uid column as binary #115152, @alexander-akhmetov
- Alerting: Collate rule_group column as binary #114365, @rwwiv
- Alerting: Config option to set default datasource in Prometheus rule import #115665, @alexander-akhmetov
- Alerting: Correct relative paths in CLAUDE.md Required Reading links #114709, @dhalachliyski
- Alerting: Dedicated permission for Template testing API #115032, @yuri-tceretian
- Alerting: Deprecate OpsGenie integration #117085, @yuri-tceretian
- Alerting: Filter out imported contact points from simplified routing dropdown #116408, @soniaAguilarPeiron
- Alerting: Hide DMA options when no manageAlerts datasources exist #115952, @soniaAguilarPeiron
- Alerting: Import to Grafana Alerting Wizard - first iteration #116924, @soniaAguilarPeiron
- Alerting: Improve ASH Loki query efficiency by including folderUID #113322, @JacobsonMT
- Alerting: Improve instance count display #114997, @laurenashleigh
- Alerting: Make AI Helper in triage to use only assistant (Enterprise)
- Alerting: Make default notification configuration use empty receiver #116368, @yuri-tceretian
- Alerting: Make saved search name clickable to apply search #116832, @dhalachliyski
- Alerting: Migrate to K8s style receiver testing API #116847, @rodrigopk
- Alerting: Notification configuration tabs #116749, @aifraenkel
- Alerting: Prevent routing preview from auto-triggering on mount #113749, @laurenashleigh
- Alerting: Prevent users from saving rules to git-synced folders #114944, @rwwiv
- Alerting: Protected fields for Contact points #115442, @yuri-tceretian
- Alerting: Receiver testing via app platform APIs #111338, @yuri-tceretian
- Alerting: Refactor error for duplicate names on notificationPolicy creation #117797, @rodrigopk
- Alerting: Replace the static radio button list for notification routing with a dropdown #117414, @soniaAguilarPeiron
- Alerting: Resize created_by and updated_by columns in alert rules tables #113870, @yuri-tceretian
- Alerting: Restrict import UI to admin users only #117441, @rodrigopk
- Alerting: Show alert rule scoping in the UI to enrichments list and form (Enterprise)
- Alerting: Single alertmanager contact points versions #116076, @soniaAguilarPeiron
- Alerting: Update GOPS labels API calls to v2alpha1 #116327, @soniaAguilarPeiron
- Alerting: Update RuleGroupConfig definitions with missing fields #115850, @JacobsonMT
- Alerting: Update UI of instance counts on triage page #113660, @laurenashleigh
- Alerting: Update createdBy field when silence is being Recreated #115543, @paulojmdias
- Alerting: Update docs for ash AI helper button #114229, @soniaAguilarPeiron
- Alerting: Update import wizard to use policyTreeName as config identifier #117382, @soniaAguilarPeiron
- Alerting: Update logic handling canCreate in integrations version, and handle the new deprecated field in the schema #116672, @soniaAguilarPeiron
- Alerting: Update origin for openAssistant in ash (Enterprise)
- Alerting: Update prompt for Analyze rule AI button #115341, @soniaAguilarPeiron
- Alerting: Update prompt for the button 'Analyze rule with assistant' button #114593, @konrad147
- Alerting: Update tooltip message when routing preview is disabled #113962, @laurenashleigh
- Alerting: Update translations (Enterprise)
- Alerting: Use assistant inline hook instead of llm for template ai button (Enterprise)
- Alerting: Use canUse instead of provenance to filter out time intervals #117036, @rodrigopk
- Alerting: Use data source headers when remote writing #114528, @santihernandezc
- AppChrome: Add proper menu icon for menu, logo icon becomes home #114713, @torkelo
- Auditing: Allow configuring Loki retries and timeout (Enterprise)
- Auditing: Track uid endpoints for dashboards, not id (Enterprise)
- Auth: Add SSO settings PATCH endpoint #117346, @colin-stuart
- Auth: Add support for validating OAuth ID token signatures #116442, @DanCech
- Auth: Promote SCIM to GA #116963, @linoman
- Authz: Implement Query operation for Zanzana with folder parent retrieval #113483, @mihai-turdean
- Avatar: Require sign-in, remove queue, respect timeout #116891, @macabu
- Azure Monitor: Clear filter options in logs builder when key changes #116329, @aangelisc
- Azure: Improved column handling in logs query builder #114667, @aangelisc
- Azure: Include aggregate columns in logs builder #114684, @aangelisc
- CandleStick: Add timeRangePan #113888, @drew08t
- Chore: API: add query params to the spec #117217, @yudintsevegor
- Chore: Access API: add missing query params (Enterprise)
- Chore: Deprecate experimental restore dashboard API #116256, @ryantxu
- Chore: Deprecate the localeFormatPreference feature toggle #116621, @joshhunt
- Chore: Improve packaging/docker/run.sh #114012, @dmotte
- Chore: RBAC: Migrate role picker to rtkq #116571, @yudintsevegor
- Chore: Remove Drilldown Investigations #115471, @joey-grafana
- Chore: Remove
logRequestsInstrumentedAsUnknownfeature flag #116417, @undef1nd - Chore: Remove
pinNavItemsfeature toggle #113855, @tomratcliffe - Chore: Remove
unifiedHistoryfeature toggle and associated code #113857, @tomratcliffe - Chore: Remove deprecated language_provider methods in prometheus package #114361, @itsmylife
- Chore: Remove experimental feature individualCookiePreferences #116374, @hairyhenderson
- Chore: Remove unused+experimental /dashboards/calculate-diff API support #114151, @ryantxu
- Chore: Rudderstack upgrade to SDK v3 behind flag #114126, @samsch
- Chore: Upgrade Grafana Faro to v2, removing
web_vitals_attribution_enabled#117516, @tskarhed - Cleanup: Remove CSV drag-and-drop snapshot query feature #113645, @fastfrwrd
- Cloud Monitoring: Add support for Google Cloud universe_domain #115931, @aangelisc
- CloudMigrations: Remove feature toggle and introduce config setting to disable it #114223, @macabu
- CloudWatch Logs: Hide internal logs field #114121, @kevinwcyu
- CloudWatch Logs: Limit CloudWatch logs queries to use logGroupIdentifiers only for monitoring accounts #113137, @kevinwcyu
- CloudWatch Logs: Select log groups with the log group selector and $__logGroups macro for OpenSearch Structured Query Language queries #116222, @kevinwcyu
- CloudWatch: Add anomaly command to language support, add documentation for anomaly queries #113311, @idastambuk
- CloudWatch: Add links to data source docs in the config editor #113795, @kevinwcyu
- CloudWatch: Make match exact toggle false by default #113314, @idastambuk
- Cloudwatch: Make cloudwatchBatchQueries GA #117448, @iwysiu
- Cloudwatch: Mark missing default region error downstream #117551, @iwysiu
- Cloudwatch: Update grafana-aws-sdk to 1.4.2 #115855, @iwysiu
- Config: Set skip migrations in defaults.ini + override when running frontend service locally #114007, @ashharrison90
- Correlations: Remove support for org_id=0 #116877, @gelicia
- Dashboard : Allow applying variable regex to display text #114426, @kristinademeshchik
- Dashboard Controls: Add UI for displaying under menu #113517, @leventebalogh
- Dashboard provisioning: Add support for v2 schema #113620, @stephaniehingtgen
- Dashboard: Do not select element always #116986, @torkelo
- Dashboard: Hide sidebar in kiosk mode #115387, @torkelo
- Dashboard: Hide sidebar on mobile when in view mode #117369, @torkelo
- Dashboard: Hide sidebar when playlist is playing #115414, @torkelo
- Dashboard: New experimental time range zoom shortcuts #114190, @jesdavpet
- Dashboard: Round x/y/w/h when importing a dashboard with floats #117072, @bfmatei
- Dashboards: Avoid using internal id from the frontend #117398, @ryantxu
- Dashboards: Do not show alert rules button for new dashboads #115571, @torkelo
- Dashboards: Make clear all of variable dropdown accessible by keyboard navigation #117462, @oscarkilhed
- Dashboards: Per panel filtering for timeseries #114499, @mdvictor
- Dashboards: Prevent memory leak in CUE validation by reusing context only for 100 validations #114818, @MissingRoberto
- Dashboards: Remove deprecated dashboard id endpoints #117227, @stephaniehingtgen
- DashboardsAPI: Deprecate /api/dashboards/home #115333, @ryantxu
- DataSources: Deprecate api routes with name and internal IDs #116391, @ryantxu
- DataSources: Update SDKs in support of auth service #112101, @njvrzm
- Datagrid: Deprecate panel #116071, @natellium
- Datasources: Experimental API group names use full plugin IDs #112961, @dafydd-t
- Datasources: Support new temp creds AWS datasources in auth service (Enterprise)
- Dependencies: Bump Go to v1.25.5 #114749, @macabu
- Docs: Add Knowledge Graph trace & profile configuration section #117155, @github-actions[bot]
- Docs: Add a "DO NOT MODIFY" warning to the
public/img/*source code directory #115502, @jesdavpet - Docs: Clarify section title for repeating rows and tabs #115170, @imatwawana
- Docs: Cleanup enterprise tag usage #114694, @Hipska
- Docs: Cleanup enterprise tag usage (Enterprise)
- Dynamic Dashboards: Add new panel button with drag & drop #116276, @idastambuk
- Dynamic Dashboards: Disallow adding empty row and tab titles #113941, @idastambuk
- Dynamic Dashboards: Make outline open by default #114146, @idastambuk
- Dynamic Dashboards: Show hidden variables greyed out #115723, @idastambuk
- EchoSrv: Enable auto route tracking for Azure App Insights #113354, @joshhunt
- ElasticSearch: Update annotation time-range properties #115500, @aangelisc
- Elasticsearch: Add default query mode config setting #112540, @cauemarcondes
- Elasticsearch: Add support for serverless connections #114855, @cauemarcondes
- Elasticsearch: Clear code editor query when switching query types #116318, @Milad93R
- Elasticsearch: Handle keyed filters buckets and emit frames #113478, @adamyeats
- Elasticsearch: Raw query editor for DSL #114066, @bossinc
- Explore: Add keyboard shortcut to run queries (#111675) #115811, @naimeshpatel5295
- Explore: Ensure data source is part of query object in internal data links #112949, @ifrost
- Explore: Remove use of AppChrome navbar #114680, @torkelo
- Explore: Reset legend when a new query is run #116323, @ifrost
- Explore: Traces query that will work with either logs drilldown or explore #115837, @gtk-grafana
- Explore: Use new Table component #111463, @SamarthBagga
- ExternalPlugins: Restore backward compatability for util function #113735, @torkelo
- Feat: Datasources Auth Service (Enterprise)
- Feat: Experimental sandbox mode for community & PPT plugins (Enterprise)
- Feat: Experimental sandbox mode for community plugins #115936, @njvrzm
- Feat: Remove experimental
permissionsFilterRemoveSubqueryfeature #116405, @papagian - FeatureToggle: Create experimental
timeRangePanflag #112988, @jesdavpet - FeatureToggle: Enable time range pan zoom flags by default as generally available #116970, @jesdavpet
- FieldColor: Add accessible color palettes #114424, @ashharrison90
- Folders: Deprecate
getFolderByUIDmethod #113173, @tomratcliffe - Folders: Improve wording for actions and move/delete #114090, @tomratcliffe
- Folders: Manage folder owner reference #117426, @tomratcliffe
- Folders: Send permissions query param with app platform for folder picker #114158, @tomratcliffe
- Folders: Show owner references on folder details pages #116843, @tomratcliffe
- Gauge: Delete radialbar plugin to avoid migrations #116722, @fastfrwrd
- Gauge: Mark grafana/ui export as deprecated #116436, @fastfrwrd
- Geomap: Min/Max Zoom options for XYZ Tile Layer #114947, @WoozyMasta
- Geomap: Variable support in the XYZ Tile layer #116654, @WoozyMasta
- Go: Update to 1.25.6 #116394, @macabu
- Go: Update to 1.25.7 #117470, @macabu
- Grafana Cli: Add admin flush-rbac-seed-assignment command #116716, @stephaniehingtgen
- Grafana Monitoring: Enable native HTTP histograms by default, make classic histograms configurable #116534, @undef1nd
- GrafanaBootData: Deprecate config.apps #115610, @hugohaggmark
- GrafanaBootData: Deprecate config.panels #116918, @hugohaggmark
- Graphite: Revert naming convention changes #117158, @aangelisc
- Heatmap: Add timeRangePan #113889, @drew08t
- Heatmap: Support for linear y axis #113337, @leeoniya
- I18n: Ignore dist folder in packages when extracting translations #116532, @aocenas
- IAM: Optionally make refresh tokens required if use_refresh_token is enabled #114174, @cinaglia
- InteractiveTable: Extend sort options with
disableSortRemoveandsortDescFirst#115352, @mikkancso - InteractiveTable: Prevent reset to first page after
dataproperty change unlessautoResetPageproperty is specified #117546, @darrenjaneczek - Library Elements: Deprecate folderFilter query param; update docs for folderFilterUIDs #116048, @stephaniehingtgen
- Live: Add configuration for client_queue_max_size #114225, @itsgareth
- Live: Use namespace rather than OrgID #117275, @ryantxu
- Log Line Context: Internally manage displayed fields #116912, @matyax
- Logs Panel: Added support for transformations when using infinite scrolling #116528, @matyax
- Logs Panel: Added support for unwrapped logs with optional columns for displayed fields #117402, @matyax
- Logs Panel: Integrate client-side search with Popover Menu #114653, @colega
- Logs Volume: Show visible range of logs in Explore #114501, @matyax
- Logs: Cell format value on inspect should use Code view for arrays, objects, and JSON strings #115037, @L2D2Grafana
- Logs: Feature flag logRowsPopoverMenu removed #113583, @matyax
- Logs: Feature flag logsInfiniteScrolling removed #113585, @matyax
- Logs: Improved flexibility of
hasSupplementaryQuerySupport#115348, @aangelisc - Logs: Persist sort order in the Explore URL #114350, @matyax
- Loki: Apply default_manage_alerts_ui_toggle config #112297, @416e64726579
- MSSQL: Current-user authentication #113977, @aangelisc
- MetricsDrilldown: Remove
exploreMetricsRelatedLogsfeature toggle #116090, @NWRichmond - MySQL: Add variable query editor support #116900, @yesoreyeram
- NPM: Dispatch to plugin-tools on e2e-selectors changes #115218, @sunker
- New Logs Panel: Enable new visualization by default #113340, @matyax
- News Panel: Modify pubDate logic to use updated date as fallback #113329, @swiffer
- Node Graph: Use first numeric field as fallback for main stat #116530, @ifrost
- PDFTables: Dynamically shrink font to try and fit whole table in pdf page width (Enterprise)
- Page: Background prop to support canvas background for standard layout pages #111174, @torkelo
- Panel Menu: Allow using icons for link extensions #114836, @leventebalogh
- Panel visualizations: Focus on search input when changing visualizations #115484, @idastambuk
- PanelChrome: Enable new panel padding by default #114492, @torkelo
- PanelChrome: Feature toggle increased panel header height and padding #112613, @torkelo
- Playlists: Graduate to v1 apis #117638, @stephaniehingtgen
- Plugin Metrics: Improve metrics on long duration queries within grafana #116371, @sarahzinger
- PostgreSQL: Add variable query editor support #115974, @yesoreyeram
- PostgreSQL: Remove feature toggle
postgresDSUsePGX#113675, @zoltanbedi - Preferences: Add API validation and update documentation #116045, @stephaniehingtgen
- Prometheus Dashboards: Use $__rate_interval instead of hardcoded value #111899, @attu0
- Prometheus: Add variable job and replaced hardcoded values in prometheus 2.0 stats dashboard #115916, @saurabh007007
- Prometheus: Hide 'Kick start your query' button for existing queries #113980, @priyansh3006
- Prometheus: Introduce failsafe PromQueryFormat unmarshalling #116670, @itsmylife
- Prometheus: Introduce filtering /series endpoint for prometheus versions that don't support match[] parameter #116648, @itsmylife
- Prometheus: Optimize regex pattern for multi-value label matchers #116233, @Krishnachaitanyakc
- Prometheus: Revert "Prometheus: Make sure "Min Step" has precedence (#115941)" #116959, @ellisda
- Provisioning: Enable editing dashboard via JSON model #115420, @Clarity-89
- Provisioning: Integrate GH app connections into the wizard flow #116547, @Clarity-89
- Pyroscope: Exemplar support for series queries #113926, @alsoba13
- Query Editor: Add Query Options footer and sidebar for new query editor #117403, @Develer
- QueryEditorRows: Clear hideSeriesFrom override on query edit #114315, @Sergej-Vlasov
- Reporting: Productize reporting retries feature #117378, @macabu
- Reporting: Remove newPDFRendering feature flag, stabilising it (Enterprise)
- Reporting: Support editing template variables in the form for dashboards v2 (Enterprise)
- Restore dashboards: Improve permissions #116266, @Clarity-89
- SQL Expressions: Add "NOT" keyword to allow list #116802, @net0pyr
- SQLDataSource: Use UID rather than internal ID #116461, @ryantxu
- SQLExpressions: Add new schema inspector panel #113545, @alexjonspencer1
- Scopes: Scope input UI update #114002, @torkelo
- Search: Move experimental panelTitleSearch from searchV2 to unified search #116326, @ryantxu
- SearchAPI: Return "shared with me" children based on the permission query param #116254, @aocenas
- Secrets Keeper: Add secretsKeeperUI feature flag #117427, @ericrshields
- Secrets Keeper: UI shell with tab navigation (Enterprise)
- Security: Sanitize TraceView html #117853, @github-actions[bot]
- Security: Use dashboard timerange if time selection disabled #117854, @dana-axinte
- SelectBase: Use standard portal container #114844, @torkelo
- Short URL: Change default expiration to never #115029, @nmarrs
- Sidebar: A new reusable component for side toolbars and panes #114141, @torkelo
- Span Details: Two-column view #112856, @ifrost
- Sparkline: Improve min/max logic to avoid issues for very narrow deltas #115030, @fastfrwrd
- Sparkline: Prevent infinite loop when rendering a sparkline with a single value #114203, @fastfrwrd
- Table: Add title attribute to make truncated headings legible #115155, @jesdavpet
- Table: Clamp Safari exclusions to 26.0 and 26.1 #114454, @fastfrwrd
- Table: Clean up filter popover layout and improve filter selection UX #114052, @fastfrwrd
- Table: Keyboard accessibility for filter #117354, @fastfrwrd
- Table: Remove hardcoded assumption of __nestedFrames field name #115117, @fastfrwrd
- TeamFolders: Show team folders in folder picker #117381, @aocenas
- Tempo: Encode header values before adding them to outgoing context #117279, @jcolladokuri
- Tempo: Remove forwarding incoming and team headers for streaming requests #117813, @jcolladokuri
- Theme: Add breakpoint methods for container queries #113619, @MattIPv4
- TimePicker: Show new shortcut for zoom out when experimental flag toggled on #114506, @jesdavpet
- TimeRange: Additional keyboard shortcut
t =to complementt +for zoom in #115022, @jesdavpet - TimeRange: Avoid x-axis pan jump caused by data loading latency #114496, @jesdavpet
- TimeSeries: X-axis (time range) click-and-drag panning in panel #112982, @jesdavpet
- Timeline: Add timeRangePan #113890, @drew08t
- Timeseries: Change mouse cursors to indicate active x-axis and y-axis zoom interactions #113465, @jesdavpet
- Timeseries: More nuanced editing of linear threshold to avoid crashes #112301, @fastfrwrd
- Trace View: Span filters updated to use combobox filters #112287, @adrapereira
- Trace datasources: Add Victoria Metrics support for "traces to metrics" #114962, @arturminchukov
- Transformers: Add smoothing transformer #111077, @vesalaakso-oura
- UI Extensions: Add
openInNewTabproperty to link extensions #114831, @leventebalogh - UI: Use react-table column header types in InteractiveTable with story and tests #116091, @Alan-eMartin
- Unified: Run resource data migrations at startup #114857, @RafaelPaulovic
- Viz: Update OutsideRangePlugin to support single datapoint #117278, @fastfrwrd
Bug fixes
- Alerting: Add support for client certificate authentication and TLS options to External Alertmanager #115716, @yuri-tceretian
- Alerting: Bug fix for regex matching in Alerts page #113400, @laurenashleigh
- Alerting: Fix 'Rule group does not exist' error toast (#101949) #114766, @soniaAguilarPeiron
- Alerting: Fix Alerts page filtering #115178, @laurenashleigh
- Alerting: Fix NotificationPreview permission checking #114303, @konrad147
- Alerting: Fix RuleEditorCloudRules test flakiness in CI #114695, @soniaAguilarPeiron
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115662, @alexander-akhmetov
- Alerting: Fix advanced filter not preserving freewords filter in the list view #114651, @soniaAguilarPeiron
- Alerting: Fix alert rule last evaluation duration units #117814, @JacobsonMT
- Alerting: Fix alert rule last evaluation time including scheduling delays #117819, @JacobsonMT
- Alerting: Fix creating a new alert rule vesion when only keep_firing_for changes #114926, @alexander-akhmetov
- Alerting: Fix data source recording rules editor #113363, @soniaAguilarPeiron
- Alerting: Fix error when updating Alertmanager config with autogenerated receivers #113710, @moustafab
- Alerting: Fix expression queries when coming from a panel #114095, @konrad147
- Alerting: Fix file import/export of recording rules with target datasource uid #115663, @alexander-akhmetov
- Alerting: Fix for fetching evaluation group in new filter #113694, @laurenashleigh
- Alerting: Fix groupBy in simplified routing UI #117076, @soniaAguilarPeiron
- Alerting: Fix ignored filters when paginating alert rules in the API #114710, @alexander-akhmetov
- Alerting: Fix label value dropdown suggestions in alert rule editor #113702, @laurenashleigh
- Alerting: Fix label value search not filtering results #116133, @konrad147
- Alerting: Fix label values not being shown in the label drop down #114642, @soniaAguilarPeiron
- Alerting: Fix missing dataSource.type in dsquery enrichers (Enterprise)
- Alerting: Fix missing provenance annotation in GetManagedRoute #117940, @rodrigopk
- Alerting: Fix to prevent regex escape on search input query #113734, @laurenashleigh
- Alerting: Fix width of the code editor for Alertmanager configurations #113541, @gillesdemey
- Alerting: Omit data sources that aren't configured for alerting from search #116537, @gillesdemey
- Alerting: Patch missing expression model refIds #114477, @gillesdemey
- Alerting: Remove unknown state filter #114143, @konrad147
- Alerting: Update alert_rule table to fix paginated results #111336, @moustafab
- Alerting: Update alert_rule table to fix paginated results #111336, @moustafab
- Alerting: Update alert_rule table to fix paginated results #111336, @moustafab
- AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
- AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
- Auth: Fix inconsistent symbol validation by allowing underscore "_" in strong password policy #114571, @ooye-sanket
- Azure: Fix
dcountaggregation #114666, @aangelisc - Azure: Fix
percentilesyntax #114665, @aangelisc - BrowseDashboards: Fix nested folder's parent folder dropped after rename folder title #116223, @ywzheng1
- Canvas: Fix image loading when icon element SVG defined by field mappings #115748, @jesdavpet
- CloudWatch: Fix error source for some query errors #115791, @njvrzm
- CloudWatch: Fix template variable intepolation for metrics queries #116574, @kevinwcyu
- Cloudwatch: Add log group prefix and all-log queries #117210, @kevinwcyu
- Custom branding: Correctly override bouncing loader #115871, @ashharrison90
- Dashboard datasource: Fix library panels not tracked in mixed queries #112959, @axelavargas
- Dashboard: Fix for missing focus style on DataLinkInput component #117095, @DivyamUp14
- Dashboard: Fixes performance issuing saving multiple times #117230, @torkelo
- Dashboards: Fix timeseries off-by N time shift bug after mouse x-axis zoom in panel #113821, @jesdavpet
- Datasources: Fix permissions cleanup when deleting datasource by name #117289, @mihai-turdean
- Dynamic Dashboards: Fix Content outline not being scrollable #115827, @AyushKaithwas
- Dynamic Dashboards: Fix legend click opening panel edit sidebar #116476, @AyushKaithwas
- Dynamic Dashboards: Fix show/hide rules when template variable has "All" selected #116529, @AyushKaithwas
- Elasticsearch: Fix incorrect log level parsing for nested fields #116637, @adamyeats
- Fix: Don't reuse go-plugin config #117877, @njvrzm
- Fix: Ensure clone handles functions properly #116521, @sunker
- Fix: Make plugin.json routes[].path field required #116286, @s4kh
- Fix: Return auth labels from
/api/users/lookup#113584, @mgyongyosi - Fix: Show deprecated badge if installed plugin version is deprecated #117101, @s4kh
- Folders: Make
listFolderscall correct API and fix tags sorting #114181, @tomratcliffe - GrafanaUI: Fix iconPlacement prop not being respected in LinkButton #113708, @ckbedwell
- Graphite: Use target as name for aliased queries #116213, @aangelisc
- Histogram: Fix runaway bucket densification with extremely sparse + large datasets #114557, @jesdavpet
- Icon: Fix SVG not updating when icon name is changed quickly #117584, @joshhunt
- Jaeger: Fix variable interpolation in query input #115513, @dolph
- Notifications: Prevent triggering duplicate notifications #114497, @Alan-eMartin
- Plugins Preinstall: Fix URL parsing when includes basic auth #115143, @andresmgot
- Plugins: Add PluginContext to plugins when scenes is disabled #114989, @hugohaggmark
- Plugins: Datasource breadcrumb link should link to settings tab #113862, @wbrowne
- Plugins: Fix frontend sandbox crash on Firefox with missing browser APIs #116422, @academo
- Postgresql: Fix variable interpolation logic when the variable has multiple values #114058, @itsmylife
- Prometheus: Fix broken hardcoded override in Prometheus 2.0 dashboard #116940, @saurabh007007
- Prometheus: Make sure "Min Step" has precedence for a longer time windows #115941, @itsmylife
- QueryVariableForm: Refil query variable query on default data source update #114491, @Sergej-Vlasov
- RBAC: Correctly display the new roles after updating user, service account and team roles #113783, @IevaVasiljeva
- RBAC: Fix rolepicker autoclosing #116726, @yudintsevegor
- Reporting: Fix PDF report header translation for non-English locales (Enterprise)
- Reporting: Fix bug limiting email address length in recipient field (Enterprise)
- SQL Expressions: Fix alerts with sql expressions that have a cte #114852, @sarahzinger
- SubMenu: Prevent menu positioning itself offscreen #116907, @ashharrison90
- Tempo: Correctly escape/unescape tag when looking for tag values #114275, @joe-elliott
- Tempo: Fix multiple streaming TraceQL metrics queries being conflated into one #114360, @joe-elliott
- TimeSeries: Fix truncated label text in legend table mode #115647, @jesdavpet
- Trace View: Correctly handle span and service name in span filters #115215, @adrapereira
- UI: Fix number fields unexpectedly changing when scrolling #117264, @bittoby
Breaking changes
- Plugins: Prevent passing host environment variables to plugin processes by default #113412, @wbrowne
Plugin development fixes & changes
- Slider: Add support for decimal values #113473, @HarshadaGawas05
- Toggletip: Ensure consistent positioning in all scenarios #114085, @ashharrison90
- ToolbarButton: Require
tooltiporaria-labelif no children are present #114097, @ashharrison90
12.3.4 (2026-02-24)
Bug fixes
- Dashboard Export: Fix datasource variable templating in dashboard export #118327, @kristinademeshchik
- Provisioning: Bump nanogit v0.3.1 with missing objects fixes #118225, @MissingRoberto
12.2.6 (2026-02-24)
Bug fixes
- Dashboard Export: Fix datasource variable templating in dashboard export #118324, @kristinademeshchik
12.1.8 (2026-02-24)
Bug fixes
- Dashboard Export: Fix datasource variable templating in dashboard export #118321, @kristinademeshchik
11.6.12 (2026-02-24)
11.6.11 (2026-02-12)
Features and enhancements
- Alerting: Add limits for the size of expanded notification templates #117713, @yuri-tceretian
- Correlations: Remove support for org_id=0 #116936, @gelicia
- Go: Update to 1.25.7 #117476, @macabu
- Security(Public dashboards annotations): use dashboard timerange if time selection disabled #117865, @github-actions[bot]
12.0.10 (2026-02-12)
Features and enhancements
- Alerting: Add limits for the size of expanded notification templates #117712, @yuri-tceretian
- Security(Public dashboards annotations): use dashboard timerange if time selection disabled #117971, @github-actions[bot]
12.1.7 (2026-02-12)
Features and enhancements
- Alerting: Add limits for the size of expanded notification templates #117711, @yuri-tceretian
- Correlations: Remove support for org_id=0 #116957, @gelicia
- Go: Update to 1.25.7 #117474, @macabu
- Security(Public dashboards annotations): use dashboard timerange if time selection disabled #117863, @github-actions[bot]
12.2.5 (2026-02-12)
Features and enhancements
- Alerting: Add limits for the size of expanded notification templates #117710, @yuri-tceretian
- Correlations: Remove support for org_id=0 #116958, @gelicia
- Go: Update to 1.25.7 #117472, @macabu
- Security(Public dashboards annotations): use dashboard timerange if time selection disabled #117861, @github-actions[bot]
- Security(TraceView): Sanitize html #117867, @github-actions[bot]
12.3.3 (2026-02-12)
Features and enhancements
- Alerting: Add limits for the size of expanded notification templates #117709, @yuri-tceretian
- Correlations: Remove support for org_id=0 #116934, @gelicia
- Go: Update to 1.25.7 #117471, @macabu
- Security(Public dashboards annotations): use dashboard timerange if time selection disabled #117860, @dana-axinte
- Security(TraceView): Sanitize html #117866, @github-actions[bot]
12.3.2+security-01 (2026-02-11)
Bug fixes
- Security: fix for CVE-2025-41117
- Security: fix for CVE-2026-21722
12.2.4+security-01 (2026-02-11)
Bug fixes
- Security: fix for CVE-2025-41117
- Security: fix for CVE-2026-21722
12.1.6+security-01 (2026-02-11)
Bug fixes
- Security: fix for CVE-2026-21722
11.6.10+security-01 (2026-02-11)
Bug fixes
- Security: fix for CVE-2026-21722
12.3.2 (2026-01-27)
Features and enhancements
- API: Add missing scope check on dashboards #116888, @Proximyst
- Avatar: Require sign-in, remove queue, respect timeout #116893, @macabu
- ElasticSearch: Update annotation time-range properties #115566, @aangelisc
- Explore: Reset legend when a new query is run #116590, @ifrost
- Go: Update to 1.25.6 #116396, @macabu
Bug fixes
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115680, @alexander-akhmetov
- Alerting: Fix data source recording rules editor #116303, @soniaAguilarPeiron
12.2.4 (2026-01-27)
Features and enhancements
- API: Add missing scope check on dashboards #116889, @Proximyst
- Avatar: Require sign-in, remove queue, respect timeout #116895, @macabu
- Docs: Clarify section title for repeating rows and tabs #115345, @imatwawana
- ElasticSearch: Update annotation time-range properties #115565, @aangelisc
- Explore: Reset legend when a new query is run #116589, @ifrost
- Go: Update to 1.25.6 #116399, @macabu
Bug fixes
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115694, @alexander-akhmetov
12.1.6 (2026-01-27)
Features and enhancements
- API: Add missing scope check on dashboards #116890, @Proximyst
- Avatar: Require sign-in, remove queue, respect timeout #116896, @macabu
- Go: Update to 1.25.6 #116400, @macabu
Bug fixes
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115693, @alexander-akhmetov
12.0.9 (2026-01-27)
Features and enhancements
- API: Add missing scope check on dashboards #116892, @Proximyst
- Avatar: Require sign-in, remove queue, respect timeout #116897, @macabu
- Go: Update to 1.25.6 #116401, @macabu
Bug fixes
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115692, @alexander-akhmetov
11.6.10 (2026-01-27)
Features and enhancements
- API: Add missing scope check on dashboards #116894, @Proximyst
- Avatar: Require sign-in, remove queue, respect timeout #116898, @macabu
- Go: Update to 1.25.6 #116402, @macabu
Bug fixes
- Alerting: Fix a race condition panic in ResetStateByRuleUID #115691, @alexander-akhmetov
12.3.1+security-01 (2026-01-27)
Bug fixes
- Alerting: Fix contact points issue #115427, @yuri-tceretian
12.2.3+security-01 (2026-01-27)
12.1.5+security-01 (2026-01-27)
12.0.8+security-01 (2026-01-27)
11.6.9+security-01 (2026-01-27)
12.3.1 (2025-12-16)
Features and enhancements
- Alerting: Update alerting dependency #114259, @moustafab
- Azure: Improved column handling in logs query builder #114841, @aangelisc
- Azure: Include aggregate columns in logs builder #114835, @aangelisc
- Dependencies: Bump Go to v1.25.5 #114751, @macabu
- Docs: Clarify section title for repeating rows and tabs #115346, @imatwawana
- Plugins: Add PluginContext to plugins when scenes is disabled #115064, @hugohaggmark
- QueryEditorRows: Clear hideSeriesFrom override on query edit #114628, @Sergej-Vlasov
Bug fixes
- Azure: Fix
dcountaggregation #114907, @aangelisc - Azure: Fix
percentilesyntax #114707, @aangelisc - Dashboards: Fix empty space under time controls when a dashboard has a lot of variables #114730, @oscarkilhed
- Plugins: Datasource breadcrumb link should link to settings tab #113910, @wbrowne
- Postgresql: Fix variable interpolation logic when the variable has multiple values #114876, @itsmylife
12.2.3 (2025-12-16)
Features and enhancements
- Alerting: Update alerting dependency #114256, @moustafab
- Azure: Improved column handling in logs query builder #114840, @aangelisc
- Azure: Include aggregate columns in logs builder #114834, @aangelisc
- Dependencies: Bump Go to v1.25.5 #114753, @macabu
- Plugins: Add PluginContext to plugins when scenes is disabled #115063, @hugohaggmark
- QueryEditorRows: Clear hideSeriesFrom override on query edit #114629, @Sergej-Vlasov
Bug fixes
- Alerting: Fix contact points issue #115412, @yuri-tceretian
- Azure: Fix
dcountaggregation #114906, @aangelisc - Azure: Fix
percentilesyntax #114706, @aangelisc - Postgresql: Fix variable interpolation logic when the variable has multiple values #114875, @itsmylife
12.1.5 (2025-12-16)
Features and enhancements
- Alerting: Update alerting dependency #114254, @moustafab
- Dependencies: Bump Go to v1.25.5 #114755, @macabu
- Docs: Clarify section title for repeating rows and tabs #115344, @imatwawana
- Plugins: Add PluginContext to plugins when scenes is disabled #115062, @hugohaggmark
Bug fixes
- Alerting: Fix contact points issue #115411, @yuri-tceretian
- Azure: Fix
dcountaggregation #114905, @aangelisc - Azure: Fix
percentilesyntax #114705, @aangelisc - Postgresql: Fix variable interpolation logic when the variable has multiple values #114874, @itsmylife
12.0.8 (2025-12-16)
Features and enhancements
- Alerting: Update alerting dependency #114252, @moustafab
- Dependencies: Bump Go to v1.25.5 #114756, @macabu
- Docs: Clarify section title for repeating rows and tabs #115343, @imatwawana
- Plugins: Add PluginContext to plugins when scenes is disabled #115061, @hugohaggmark
Bug fixes
- Alerting: Fix contact points issue #115410, @yuri-tceretian
- Azure: Fix
dcountaggregation #114904, @aangelisc - Azure: Fix
percentilesyntax #114704, @aangelisc - Postgresql: Fix variable interpolation logic when the variable has multiple values #114873, @itsmylife
11.6.9 (2025-12-16)
Features and enhancements
- Alerting: Update alerting dependency #114249, @moustafab
- Dependencies: Bump Go to v1.25.5 #114757, @macabu
- PDFTables: Dynamically shrink font to try and fit whole table in pdf page width (Enterprise)
- Plugins: Add PluginContext to plugins when scenes is disabled #115060, @hugohaggmark
Bug fixes
- Alerting: Fix contacts point issues #115409, @yuri-tceretian
12.3.0 (2025-11-19)
Features and enhancements
- API Clients: Add lazy hooks to clients #113226, @tomratcliffe
- API clients: Automatically set PATCH headers #111879, @Clarity-89
- API clients: Extract into a package #111810, @Clarity-89
- API clients: Extract into a package (Enterprise)
- API clients: Update API clients to include all endpoints & add hooks #113061, @tomratcliffe
- AccessControl: Include hidden roles in service account role display #112924, @Jguer
- AccessControl: Increase limit of LBAC for Datasources rules #111560, @Jguer
- Accessibility: Wrap data source info onto 2 lines at small viewports #113033, @ashharrison90
- Alert Enrichment: Add mutator to insert rule UID labels to allow for efficient use of labelSelector (Enterprise)
- Alerting: Add enrichment components to rule view page (Enterprise)
- Alerting: Add enrichment section to rule view page (Enterprise)
- Alerting: Add jitter support for periodic alert state storage to reduce database load spikes #111357, @softho0n
- Alerting: Add position-based matching for identical alert rules #112407, @konrad147
- Alerting: Create alertingAlertRuleFormSchema in restrictedGrafanaApis #112794, @soniaAguilarPeiron
- Alerting: Display error message in central state history view #111445, @laurenashleigh
- Alerting: Enrichment per rule wip-2 (Enterprise)
- Alerting: Hide metadata if grouping by folder #113216, @laurenashleigh
- Alerting: Improve template ai helper prompt and add some examples (Enterprise)
- Alerting: Move enrichment tab between details and versions #110886, @laurenashleigh
- Alerting: Remove ai feedback button from alert form #112713, @soniaAguilarPeiron
- Alerting: Remove unused components #111320, @laurenashleigh
- Alerting: Remove useRulesSourcesWithRuler for SmartAlertTypeDetector #111623, @soniaAguilarPeiron
- Alerting: Surface remote AM silence creation errors properly #112757, @moustafab
- Alerting: Triage #110339, @gillesdemey
- Alerting: Triage rule details drawer #112055, @konrad147
- Alerting: Update prompt examples for template AI Helper (Enterprise)
- Alerting: Update width to instance details drawer in Triage page #113209, @soniaAguilarPeiron
- Alerting: Use new enrichment endpoints in FE (Enterprise)
- Alerting: Use ruleUid as a prop instead of extracting it from the rule context (Enterprise)
- Analytics: Aggregate daily summary in datasources analytics (Enterprise)
- Analytics: Apply proper batching to Loki exports and add configurable settings (Enterprise)
- Annotations: Exclude internal dashboard id when saved via UID #111535, @ryantxu
- Azure: Use SSO settings in plugin context #112058, @aangelisc
- Buttons: Active style for buttons #111235, @gtk-grafana
- Caching: Disable cache if datasource has oauthPassThru=true (Enterprise)
- Canvas: Allow non-icon bg image fields #112308, @fastfrwrd
- Chore: Add logsdrilldown replace to apps/iam/go.mod #112581, @njvrzm
- CloudWatch Logs: Don't add console link to every field in the logs response #112230, @idastambuk
- CloudWatch Logs: Support Log Anomalies query type #113067, @idastambuk
- CloudWatch: Add syntax highlighting and autocomplete for logs diff command #111207, @kevinwcyu
- CloudWatch: Add tracking for logs anomalies #113181, @idastambuk
- Dashboard Controls: Add annotations to the dashboard controls menu #112816, @leventebalogh
- Dashboard Picker: Update to use correct search + dashboards APIs #112341, @tomratcliffe
- Dashboard: Backend always set
metricEditorMode: 0regardlessmetricQueryTypeandexpression#111613, @ivanortegaalba - Dashboards: Add a new variable type called "Switch" #111366, @leventebalogh
- Dashboards: Hide error notifications in kiosk mode on dashboards #112390, @ivanortegaalba
- Dynamic Dashboards: Expand dashboards_init_dashboard_completed tracking info #111102, @idastambuk
- ErrorBoundary: Report specific boundary type to Faro #112071, @tskarhed
- Explore: Use compact mode only when targeting Tempo #113037, @ifrost
- FeatureToggles: Remove deprecated experimental apiserver #111617, @ryantxu
- Fields Selector: Add component and integrate with Logs and Logs table visualization #112534, @matyax
- Flame Graph: Anchor exact match when clicking a table symbol in search #111101, @samarthbagga-meesho
- FlameGraph: Improve prompt for open assistant to analyze flamegraph #113071, @simonswine
- FolderPicker: Don't show expand button for empty folders and move search icon #111872, @aocenas
- FolderPicker: Show parent folder when searching #111026, @aocenas
- Geomap: Add a MapLibre style base layer #109841, @remogeissbuehler
- Geomap: Move beta layers to GA #113186, @drew08t
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112149, @macabu
- Go: Update to 1.25.3 #112359, @macabu
- Grafana Advisor: Prometheus Type Migration check #110853, @bossinc
- Grafana Data Source: Add random walk configuration options #113009, @nmarrs
- IAM: Add uid column in team_member DB table #112439, @dmihai
- Jaeger: Migrate API calls to gRPC endpoint #113297, @jcolladokuri
- LBAC for data sources: Provide user feedback of potential performance loss from LBAC rules (Enterprise)
- Library Panels: Remove direct use of legacy search #112231, @tomratcliffe
- Logs panel: Respect selected fields for downloading logs #111753, @matyax
- Nav: Render menu items as
ptags so truncation logic can work #113248, @tomratcliffe - Navigation: Move Cost management and billing plugin to root #111739, @gubjanos
- PanelTimeCompare: Support saving time compare window #113150, @torkelo
- PanelTimeSettings: Support panel time range settings changes from dashboard in view mode #113027, @torkelo
- Plugins: Install Grafana Pathfinder behind a feature flag #109909, @Jayclifford345
- PostgreSQL: Support PGPASSFILE by making password optional #108856, @taraspos
- Provisioning: Watch file system for changes #112184, @ryantxu
- Reporting: Add support for schema v2 dashboards (Enterprise)
- Reporting: Wait for streaming to end before exporting CSVs (Enterprise)
- SQL Expressions: Add Functions to Allow list #113291, @kylebrandt
- Snapshots: Use appSubUrl for View all snapshots #111652, @Clarity-89
- Span Details: Bring back span id to span details #112411, @ifrost
- Span Details: Wrap label values #112413, @ifrost
- Stars: Refactor StarsToolbarButton and unify nav update logic #112582, @tomratcliffe
- Stat/BarGauge: Border radius tweak #112562, @torkelo
- Table: Add some error-case handling to ImageCell #110461, @fastfrwrd
- Table: Allow FieldType.other containing arrays to use Pills #111205, @fastfrwrd
- Table: Disable virtualization, hover overflow, and scrollbar width resizing on Safari 26 #111834, @fastfrwrd
- Table: Pill and JSON Cells should allow formatting #111951, @fastfrwrd
- Table: Support DataLinks and Actions in SparklineCell #112244, @fastfrwrd
- Table: Update ad-hoc filter to use name instead of displayName #112815, @fastfrwrd
- Tempo: Migrates tags and tag values to datasource backend CallResource requests (Enterprise)
- Theme: Changes light theme canvas color a more white shade #111318, @torkelo
- Themes: Update themes border radius #111478, @torkelo
- TimeComparison: Automatically show/hide menu on hover #112750, @jesdavpet
- TimeSeries: Allow custom time units on x-axis #112913, @leeoniya
- Timeseries: Numeric duration values could render as NaN (#73795) #112076, @fastfrwrd
- Transformations: Hide "Match all/any" conditions for less than two filters #109754, @sudoice
- UI Extensions: Remove path validation from link extensions #112259, @leventebalogh
Bug fixes
- Access Control: Fix the permission checks for saving/updating/deleting annotations #112953, @IevaVasiljeva
- Accessibility: Improve no-unreduced-motion rule and fix violations #110304, @tomratcliffe
- Alerting Provisioning: Don't error on recording rules without conditions #109410, @djpnicholls
- Alerting: Clear outdated settings when switching contact point type #111869, @konrad147
- Alerting: Fix enrichment tab to be rendered only for grafana alerting rules #113030, @soniaAguilarPeiron
- Alerting: Fix instances matching in notification policies #112326, @konrad147
- Alerting: Fix threshold params #111645, @soniaAguilarPeiron
- Alerting: Fix unmarshalling of GettableStatus to include time intervals #112602, @yuri-tceretian
- Alerting: Migrate
spec.titleandspec.namefieldSelectors #111993, @gillesdemey - Alerting: Normalize health when filtering rules #113087, @gillesdemey
- Alerting: Prohibit receivers with empty name #113064, @yuri-tceretian
- Alerting: Provisioning to fix contact point type on save #112246, @yuri-tceretian
- Alerting: Remove __grafana_origin when duplicating rule #112396, @soniaAguilarPeiron
- AnnoList: Fix annotations not loading when in a repeated row #111540, @joshhunt
- Annotations: Fix issue with transformation logic in scenes #112288, @fastfrwrd
- Auth: Fix render user OAuth passthrough #111636, @charandas
- ComboBox: Add loading state to dropdown and prefixIcon #112967, @tomratcliffe
- Connections: Fix connections home page on enterprise #111751, @oshirohugo
- Dashboard: Fix editor specific permissions in /api #113292, @stephaniehingtgen
- Dashboards: Fix bug with anon users with editor permissions creating dashboards #113260, @stephaniehingtgen
- Dashboards: Fix missing Ctrl+O keyboard shortcut for crosshair toggle #111310, @ivanortegaalba
- Dashboards: Fix moving to root folder #111515, @stephaniehingtgen
- Dashboards: Fix preload field not being persisted via /v1beta1 #112475, @ivanortegaalba
- Flame Graph: Use suffix for values formatted with a short formatter #110999, @ifrost
- FlameGraph: Ensure total is only counted once for recursive function calls #111548, @simonswine
- FolderPermissions: Return 404 error when folder does not exist instead of 500 #112919, @Jguer
- FolderPicker: Fix expand toggle also selecting folder #111755, @aocenas
- Graphite: Fix legacy response unmarshalling #112968, @aangelisc
- Histogram: Properly handle sparse heatmap-cells frames #112907, @leeoniya
- LDAP Authentication: Fix URL to propagate username context as parameter #111723, @bradleypettit
- Node graph: Fix context menu position after scrolling #112374, @adrapereira
- Playlist: Fix navigation issues with emoji-titled dashboards during dual-write migration #111659, @axelavargas
- Plugin Details Page: Fix tabs not loading on hard refresh #112915, @sunker
- Plugin navigation: Fix active nav item selection when there are more than 10 items in a group #112886, @aocenas
- Plugins: Dependencies do not inherit parent URL for preinstall #111762, @wbrowne
- Plugins: Set isProvisioned for local plugins without remote counterpart #111268, @oshirohugo
- Prometheus: Fix incremental querying logic for public dashboards #111642, @jcolladokuri
- Prometheus: Fix parsing logic of prometheus expressions to honor the order of binary operations #112220, @jcolladokuri
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
- SoloPanel: Fixes issue with solo route and scopes variable #112769, @torkelo
- Stars: Fix starred state not being updated #111936, @Clarity-89
- Stat: Fix math for percent change value heights when sparkline is not rendered #112599, @fastfrwrd
- StateTimeline: Fix color display in tooltip #112878, @fastfrwrd
- Table: Fix cell inspect for Sparkline and inferred JSON cells #113059, @fastfrwrd
- TextPanel: Fix
CodeEditornot appearing properly #111937, @ashharrison90 - UnitPicker/Cascader: Fixes type to search for unit feature #112614, @torkelo
- VizTooltip: Better overflow handling on long series names #112240, @fastfrwrd
Breaking changes
- Faro: Update configuration with best practices #112108, @joshhunt
- LibraryPanels: Remove unique name constraints #113077, @ryantxu
- RBAC: Only write action sets #112429, @IevaVasiljeva
Plugin development fixes & changes
- Checkbox: Improve accessibility of the
indeterminatestate #112388, @ashharrison90 - Collapse: Improve layout and deprecate
collapsibleprop #113164, @ashharrison90 - Docs: Add storybook links to components #113102, @samsch
- Modal: Fix button focus being clipped #112867, @ashharrison90
- Slider: Expose prop to control visibility of input #113084, @ashharrison90
- Slider: Make
inputIda required param and fix minor a11y violations #112006, @ashharrison90
12.1.4 (2025-11-19)
Bug fixes
- Alerting: Fix unmarshalling of GettableStatus to include time intervals #112733, @yuri-tceretian
- AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
- AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
12.0.7 (2025-11-19)
Bug fixes
- Alerting: Fix unmarshalling of GettableStatus to include time intervals #112732, @yuri-tceretian
- AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
- AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
12.2.2 (2025-11-19)
Features and enhancements
- Access control: Reduce memory usage when fetching user's permissions #113414, @hairyhenderson
- Table: Pill and JSON Cells should allow formatting #113130, @fastfrwrd
Bug fixes
- AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
- AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
11.6.8 (2025-11-19)
Bug fixes
- Alerting: Fix unmarshalling of GettableStatus to include time intervals #112731, @yuri-tceretian
- AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
- AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
- Seeder: Add check in
filterRemovedPermissionsfor already existing new permissions before seeding (Enterprise)
12.2.1+security-01 (2025-11-19)
Bug fixes
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
12.1.3+security-01 (2025-11-19)
Bug fixes
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
12.0.6+security-01 (2025-11-19)
Bug fixes
- Security: fix for CVE-2025-41115 in SCIM (System for Cross-domain Identity Management) (Enterprise)
12.2.1 (2025-10-21)
Features and enhancements
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112156, @macabu
- Go: Update to 1.25.3 #112361, @macabu
Bug fixes
- Auth: Fix render user OAuth passthrough #112092, @mgyongyosi
- Dashboards: Fix missing Ctrl+O keyboard shortcut for crosshair toggle #111402, @ivanortegaalba
- Fix: Fix redirection after login when Grafana is served from subpath #111069, @mgyongyosi
- FlameGraph: Ensure total is only counted once for recursive function calls #111606, @simonswine
- LDAP Authentication: Fix URL to propagate username context as parameter #111849, @bradleypettit
- Plugins: Dependencies do not inherit parent URL for preinstall #111769, @wbrowne
- Table: Backport the Safari 26 fixes to 12.2.1 #111906, @fastfrwrd
12.1.3 (2025-10-21)
Features and enhancements
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112159, @macabu
- Go: Update to 1.25.3 #112362, @macabu
- Table: Avoid thrown error due to internal React issue #111945, @fastfrwrd
Bug fixes
- Auth: Fix render user OAuth passthrough #112097, @mgyongyosi
- FlameGraph: Ensure total is only counted once for recursive function calls #111605, @simonswine
- LDAP Authentication: Fix URL to propagate username context as parameter #111848, @bradleypettit
- Plugins: Dependencies do not inherit parent URL for preinstall #111767, @wbrowne
12.0.6 (2025-10-21)
Features and enhancements
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112161, @macabu
- Go: Update to 1.25.3 #112364, @macabu
Bug fixes
- Auth: Fix render user OAuth passthrough #112096, @mgyongyosi
- FlameGraph: Ensure total is only counted once for recursive function calls #111604, @simonswine
- LDAP Authentication: Fix URL to propagate username context as parameter #111847, @bradleypettit
- Plugins: Dependencies do not inherit parent URL for preinstall #111766, @wbrowne
11.6.7 (2025-10-21)
Features and enhancements
- Analytics: Apply proper batching to Loki exports and add configurable settings (Enterprise)
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112162, @grambbledook
- Go: Update to 1.25.3 #112365, @macabu
Bug fixes
- Auth: Fix render user OAuth passthrough #112094, @mgyongyosi
- LDAP Authentication: Fix URL to propagate username context as parameter #111846, @bradleypettit
- Plugins: Dependencies do not inherit parent URL for preinstall #111801, @wbrowne
- URLParams: Stringify true values as key=true always (fixes issues with variables with true value) #112045, @torkelo
11.5.10 (2025-10-21)
Features and enhancements
- Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #112163, @macabu
- Go: Update to 1.25.3 #112366, @macabu
Bug fixes
- Auth: Fix render user OAuth passthrough #112093, @mgyongyosi
- LDAP Authentication: Fix URL to propagate username context as parameter #111845, @bradleypettit
- Plugins: Dependencies do not inherit parent URL for preinstall #111802, @wbrowne
12.2.0 (2025-09-23)
Features and enhancements
- ** Alerting:** Add feedback buttons for the new AI helpers (Enterprise)
- Access: Remove plugin app access in plugin basic role seeder (Enterprise)
- Actions: Infinity authentication #109493, @adela-almasan
- Alerting: Add GMA export to the new list page #109784, @konrad147
- Alerting: Add alerting AI buttons for cloud (Enterprise)
- Alerting: Add contact point filter to Active Notifications page #109775, @alexander-akhmetov
- Alerting: Add enrichment per rule extension component (Enterprise)
- Alerting: Add extension point link from alert rule to grafana-metricsdrilldown-app #108566, @bohandley
- Alerting: Add feature toggle and extension point #110141, @soniaAguilarPeiron
- Alerting: Add keepFiringFor and missing_series_evals_to_resolve to file provisioning #109699, @alexander-akhmetov
- Alerting: Add observability to enrichment UI (Enterprise)
- Alerting: Add tooltips in enrichment list for enrichment type (Enterprise)
- Alerting: Alert enrichment list page (Enterprise)
- Alerting: Allow filter by rule source in Filter V2 #110336, @laurenashleigh
- Alerting: Auto refresh contact points in the rule form #109539, @konrad147
- Alerting: Check if TimeInterval is used in ActiveTimings when deleting #110691, @fayzal-g
- Alerting: Disable group consistency check for GMA rules #109599, @konrad147
- Alerting: Display Error Message in Alert History View #110123, @laurenashleigh
- Alerting: Enrichment Config Form (Enterprise)
- Alerting: Filter out private labels before writing recording rules #109295, @alexander-akhmetov
- Alerting: List V2 - Add a group link to the rule list item #108960, @konrad147
- Alerting: List V2 - datasource icons for rules #109033, @konrad147
- Alerting: Load labels in drop-downs without blocking the interaction with the form inputs #110648, @soniaAguilarPeiron
- Alerting: Mark Prometheus to Grafana conversion API as stable #103499, @alexander-akhmetov
- Alerting: Move alerting file to an alerting folder #110257, @soniaAguilarPeiron
- Alerting: Support JSON responses in the Prometheus conversion API #109070, @alexander-akhmetov
- Alerting: Support extra labels in the Prometheus conversion API #109136, @alexander-akhmetov
- Alerting: Support retry with backoff in alert rule evaluation #99710, @alexander-akhmetov
- Alerting: Triage alert history with Assistant if available (Enterprise)
- Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
- Auth: Add setting to disable username based brute force login protection #109152, @TheoBrigitte
- Auth: Support JWT configs
tls_client_caandjwk_set_bearer_token_file#109095, @Baarsgaard - Azure: Resource picker improvements (#109458) #109520, @aangelisc
- Azure: Show resource group in picker #110442, @aangelisc
- Canvas: Add option to disable tooltips for one-click elements #109937, @adela-almasan
- Canvas: Dynamic connection direction #108423, @adela-almasan
- Chore: Remove prometheusCodeModeMetricNamesSearch feature toggle #109024, @itsmylife
- Chore: Removes HideAngularDeprecation configuration #110665, @hugohaggmark
- CloudConfig: Add config from defaults.ini to StackInfo (Enterprise)
- CloudWatch: Append query type to the request id #109068, @idastambuk
- CloudWatch: Use default region when query region is unset #109089, @iwysiu
- CloudWatch: Use the correct metric name for errors per function panel in the AWS Lambda sample dashboard #110718, @kevinwcyu
- CommandPalette: Use fuzzySearch util from grafana/data #108884, @Clarity-89
- Dashboard: Inspect drawer can no longer be opened with url or linked to #109617, @torkelo
- Dashboards: Add support for full screen panel view and embedded (solo panel) route to repeated panels and new layouts (via new SoloPanelContex) #107375, @torkelo
- Dashboards: Conserve timestamp on time range copy-paste across timezones #109769, @alik-r
- Dashboards: Enable kubernetesDashboards by default #107618, @dprokop
- Dashboards: Make it possible to render variables under a drop-down #109225, @leventebalogh
- Database: Add primary key to Settings table (Enterprise)
- Database: Add primary key to settings table (Enterprise)
- Dependencies: Bump Go to v1.24.5 (Enterprise)
- Docs: Deprecate
grafana/grafana-ossdocker repo in favor ofgrafana/grafana#110065, @kminehart - Flame Graph: Analyze with Grafana Assistant #108684, @ifrost
- Folders: Add team folders feature toggle #109389, @tomratcliffe
- Folders: Update folder using app platform APIs #110449, @tomratcliffe
- Folders: Use app platform search endpoint and update tests #108814, @tomratcliffe
- Go: Update to 1.24.6 #109313, @Proximyst
- InfluxDB: Ad hoc filters support for expressions #109344, @aangelisc
- Metrics: Add http_response_size_bytes metric #110428, @joshhunt
- Nested folders: Remove feature flag #109212, @stephaniehingtgen
- NestedFolderPicker: Add rootFolderUID prop #109991, @ywzheng1
- P2P Filter: Add adhoc filter option toggle #110160, @Develer
- PieChart: Add panel options for ascending/descending sort, and no sorting #109564, @cglukas
- Plugin Extensions: DataSource Configuration Components #108350, @shelldandy
- Plugins: Add Connections homepage #108316, @oshirohugo
- Plugins: Record plugin version in request metrics #110210, @njvrzm
- Preferences: Move codegen to apps #109178, @ryantxu
- Prometheus data source: Migration service #107364, @bossinc
- Prometheus: Refactor metrics modal to handle high cardinality metrics #108437, @itsmylife
- Pyroscope: Process and display sampling annotations #109707, @aleks-p
- Reporting: Permit valid but weird emails (Enterprise)
- Reporting: Show correct recipient count (Enterprise)
- Revert: DataSource: Support config CRUD from apiservers (#106996) #110342, @njvrzm
- Revert: DataSource: Support config CRUD from apiservers (#8860) (Enterprise)
- SCIM: Add flag for rejecting non provisioned users from logging in (Enterprise)
- SCIM: Allow empty externalId on update operation (Enterprise)
- SCIM: Delete user instead of disabling it on SCIM DELETE user request (Enterprise)
- SQL Expressions: Switch feature toggle to public preview #110473, @kylebrandt
- Table: Frozen columns #109276, @fastfrwrd
- Table: Max row height for variable height rows #109639, @fastfrwrd
- Table: Tooltip from Field #109428, @fastfrwrd
- Table: Update UX for uniform-reducer case in new footer and overflow #110493, @fastfrwrd
- TableNG: Footer enhancements #102948, @alexjonspencer1
- Text: Add Inter italic font variants to Grafana UI #110313, @kapowaz
- TraceView: Refine UI visual hierarchy inside details section #108929, @ifrost
- Transformations: Add empty values options to Transpose #108421, @gelicia
- Trend/TimeSeries: Add "Show values" option #108090, @HasithDeAlwis
- Trend: Add support for a logarithmic x axis #101433, @gelicia
- Variables: shows warning when user tries to save erroneous variables #110154, @hugohaggmark
- VizTooltip: Replace
ExemplarHoverViewwithVizTooltipcomponents #109369, @adela-almasan
Bug fixes
- Alerting: Fix bug where rules with identical mute/active intervals produced conflicting routes #110971, @alexander-akhmetov
- Alerting: Fix copying of recording rule fields #110311, @moustafab
- Alerting: Fix field names on webhook HMAC/TLS config HCL export #110722, @JacobsonMT
- Alerting: Fix newly created alert rules not immediately showing up in folder view #109584, @tomratcliffe
- Alerting: Fix permission checks for the Import to GMA #109950, @konrad147
- Alerting: Fix permissions for enrichment routes (Enterprise)
- Alerting: Fix subpath handling in the alerting package #109448, @konrad147
- Alerting: Fix wrong import (Enterprise)
- Alerting: Hide list view loader if we don't have anything yet #110464, @gillesdemey
- Alerting: Set dataSourceName to GRAFANA_RULES_SOURCE_NAME when switch… #109900, @laurenashleigh
- Alerting: Update alerting module to 10915888e4f099586ad37bea5f4a70f45101d2f5 #109989, @yuri-tceretian
- Azure: Fix logs editor rendering #109491, @aangelisc
- Canvas: Fix element selection being cleared on panel resize #110010, @adela-almasan
- CloudConfig: Fix panic in defaults.ini merge (Enterprise)
- CloudWatch: Fix handling region for legacy alerts #109217, @iwysiu
- CloudWatch: Fix logs query requestId to prevent setting undefined-logs as a requestId #109930, @kevinwcyu
- CloudWatch: Update grafana/aws-sdk-go with STS endpoint bugfix #109120, @idastambuk
- Config: Fix date_formats options being moved to a different section #109339, @joshhunt
- Dashboard List: Fix how link query part is created when variables are included #109861, @aocenas
- Dashboard versions: Fix list for large dashboards #109433, @stephaniehingtgen
- Dashboard: Fix AngularJS deprecation in grafana-overview dashboard #106462, @schoen2
- Dashboard: Fixes url links to embedded panels in scene based dashboards #109837, @torkelo
- Dashboards: Fix UTF-8 characters not working with excel downloads by replacing download for excel with excel compatibility mode. #110099, @oscarkilhed
- Dashboards: Fix issue where the time range picker would seemingly be hidden behind the side menu if it was set to always open. #108607, @oscarkilhed
- Dashboards: Fix kiosk mode not persisting through refresh #110284, @oscarkilhed
- Dashboards: Fixing saving and viewing snapshots for repeated panels #109856, @torkelo
- Explore: Fix units overflow for trace durations #108515, @martincostello
- Fix: Install plugins when they have no plugin archive info(catalog en… #109200, @s4kh
- InfluxDB: Fix Unable to use self-signed CA for adding influxdb data source #105586, @geekeryy
- Prometheus: Don't use incremental querying if one of the queries has $__range variable #108823, @itsmylife
- Prometheus: Fix eager auto completion #109128, @itsmylife
- Prometheus: QueryEditor fix error when switching from code to builder for undefined aggregation operations #110179, @jcolladokuri
- Pyroscope: Add start and end date to profiletypes call #110277, @zoltanbedi
- Pyroscope: Fix incorrect rate calculation from flamegraph totals #110470, @marcsanmi
- Service Accounts: Fix typo on page indicating none are present #109560, @eamonryan
- Tempo: Fix instant query streaming #108924, @adrapereira
- TimeSeries: Use exported time shift and fix time comparison tooltip #109947, @drew08t
- Transformations: Account for group by / count when assessing if calculation is needed #110546, @gelicia
- Transforms: GroupToMatrix transform should retain keyRowField config #109066, @fastfrwrd
Breaking changes
- Alerting: Enable alertingSaveStateCompressed by default #109390, @alexander-akhmetov
- Dashboards: Repeating with no clone keys #109839, @torkelo
- Provisioning: Use inline secrets for gitsync #109908, @ryantxu
- Stars: Remove deprecated internal ID apis #110499, @ryantxu
Plugin development fixes & changes
- Drawer: Truncate Drawer title to just one line #109540, @joshhunt
- Modal: Center modals at smaller screen heights #109256, @ashharrison90
- MultiCombobox: Fix async options to being able to be removed #109473, @joshhunt
- MultiCombobox: Fix select all when only a single option is available #109910, @aangelisc
12.1.2 (2025-09-23)
Features and enhancements
- Alerting: Update alerting module #109999, @yuri-tceretian
- Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
- Auditing: Document new options for recording datasource query request/response body #109981, @macabu
- Chore: Don't show a "Not found" for public-dashboard fetches if the service is disabled via config #110144, @mmandrus
- CloudWatch: Use default region when query region is unset #111079, @iwysiu
Bug fixes
- Alerting: Fix bug where rules with identical mute/active intervals produced conflicting routes #110973, @alexander-akhmetov
- Alerting: Fix copying of recording rule fields #110312, @moustafab
- Fix: Fix redirection after login when Grafana is served from subpath #111097, @mgyongyosi
Plugin development fixes & changes
12.0.5 (2025-09-23)
Features and enhancements
- Alerting: Update alerting module #110000, @yuri-tceretian
- Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
- Auditing: Document new options for recording datasource query request/response body #109980, @macabu
Bug fixes
- Alerting: Fix copying of recording rule fields #110346, @moustafab
- Azure: Fix time management field #108481, @aangelisc
- Fix: Fix redirection after login when Grafana is served from subpath #111156, @mgyongyosi
Plugin development fixes & changes
11.6.6 (2025-09-23)
Features and enhancements
- Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
11.5.9 (2025-09-23)
Features and enhancements
- Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
- Auditing: Document new options for recording datasource query request/response body #109976, @macabu
Bug fixes
- Fix: Fix redirection after login when Grafana is served from subpath #111099, @mgyongyosi
12.1.1 (2025-08-13)
Features and enhancements
- Alerting: Add rule group name validation to the Prometheus conversion API #108767, @alexander-akhmetov
- CloudWatch: Update grafana/aws-sdk-go with STS endpo… #109357, @iwysiu
- Go: Update to 1.24.6 #109318, @Proximyst
Bug fixes
- Alerting: Fix active time intervals when time interval is renamed #108547, @yuri-tceretian
- Alerting: Fix subpath handling in the alerting package #109505, @konrad147
- Config: Fix date_formats options being moved to a different section #109366, @joshhunt
- Pyroscope: Fix flamegraph totals showing incorrect values after rate aggregation changes #110470, @marcsanmiquel
12.0.4 (2025-08-13)
Features and enhancements
- Go: Update to 1.24.6 #109317, @Proximyst
Bug fixes
- Azure: Fix time management field #108481, @aangelisc
- Azure: Fix time management field #108481, @aangelisc
- Azure: Fix time management field #108481, @aangelisc
- Azure: Fix time management field #108481, @aangelisc
11.6.5 (2025-08-13)
Features and enhancements
- Alerting: Bump alerting package to include change to NewTLSClient #108817, @rwwiv
- Go: Update to 1.24.6 #109314, @Proximyst
11.5.8 (2025-08-12)
Features and enhancements
- Go: Update to 1.24.6 #109315, @Proximyst
11.4.8 (2025-08-12)
Features and enhancements
- Go: Update to 1.24.6 #109316, @Proximyst
Bug fixes
- Dashboards: Panel react for
timeFromandtimeShiftchanges using variables #98659, @Sergej-Vlasov
12.1.0 (2025-07-23)
Features and enhancements
- Access: Disable role none option if advanced access control is not enabled #107378, @Jguer
- Alerting: Add OAuth2 Support for Webhook Receiver #106302, @JacobsonMT
- Alerting: Add ability to import rules to GMA from Prometheus YAML #105807, @soniaAguilarPeiron
- Alerting: Add details to the payload when tracking import to GMA #106404, @soniaAguilarPeiron
- Alerting: Add export folder action to the new list view #106256, @soniaAguilarPeiron
- Alerting: Add filters for health and contact point in Prometheus Rules api #106580, @moustafab
- Alerting: Add loading spinner for loading groups state #106289, @soniaAguilarPeiron
- Alerting: Add need more info for import ui datasource field #106364, @soniaAguilarPeiron
- Alerting: Add provenance to Prometheus API #106596, @moustafab
- Alerting: Add provenance to remote-ruler extension response (Enterprise)
- Alerting: Add simplified routing metadata to the details tab #106403, @gillesdemey
- Alerting: Add state history backend to write ALERTS metric #104361, @alexander-akhmetov
- Alerting: Add support for Redis Sentinel for Alerting HA #106322, @vstpme
- Alerting: Allow disabling recording rules write for a data source in the UI #106664, @alexander-akhmetov
- Alerting: Correctly persist FiredAt in SyncRuleStatePersister #106658, @fayzal-g
- Alerting: Ensure errors cleared when Alerting after error #105246, @moustafab
- Alerting: Evaluate all imported from Prometheus rules sequentially #106295, @alexander-akhmetov
- Alerting: Extensible Settings module #107831, @konrad147
- Alerting: Filter out rules managed by integrations and add an info alert #106602, @soniaAguilarPeiron
- Alerting: Filter out synthetic datasource-managed rules when importing to GMA #106358, @soniaAguilarPeiron
- Alerting: List V2 - Add labels popup #107193, @konrad147
- Alerting: List V2 - Grouped view filters #106400, @konrad147
- Alerting: List V2 - Use backend filters for GMA rules #106897, @konrad147
- Alerting: Make paginated rules endpoint strongly consistent (Enterprise)
- Alerting: Optimize out unnecessary permission check for rule groups (Enterprise)
- Alerting: Optimize prometheus api permission checks #106299, @moustafab
- Alerting: Optimize prometheus api permission checks (Enterprise)
- Alerting: Persist alert instance FiredAt field #105927, @fayzal-g
- Alerting: Remove ruler from alert list view2 #106778, @soniaAguilarPeiron
- Alerting: Resend alerts for states that are missing in the eval results #105965, @alexander-akhmetov
- Alerting: Send notifications immediately on Error|NoData -> Normal transitions #106421, @alexander-akhmetov
- Alerting: Support PDC in Grafana-managed recording rules #106677, @alexander-akhmetov
- Alerting: Use default_datasource_uid as the default target for recording rules in UI #106415, @alexander-akhmetov
- Annotations: Use dashboard uids instead of dashboard ids #106676, @stephaniehingtgen
- App Platform Provisioning: Add experimental nanogit mode for Git Sync #106763, @MissingRoberto
- Auth: Add Azure/Entra workload identity support #104807, @mehighlow
- Auth: Enable improved session handling by default for OAuth and SAML #107442, @mgyongyosi
- Auth: Enable ssoSettingsLDAP by default #106310, @mgyongyosi
- Auth: Remove api key endpoints #106019, @dmihai
- Auth: Remove code for authenticating API keys #105998, @dmihai
- Azure: Support scope selection in Resource Graph queries #105835, @aangelisc
- Betterer: Only allow singleton Storage use #105310, @tskarhed
- Caching: Remove memcached reconnect_interval setting (Enterprise)
- Chore: Update k8s.io to v0.33.1 #105307, @ryantxu
- Cloud Monitoring: Add support for service account impersonation #107022, @zoltanbedi
- CloudMigrations: Add Mute Timings as dependency for Notification Policies #106751, @macabu
- CloudWatch: Backport aws-sdk-go-v2 update from external plugin #107136, @njvrzm
- CloudWatch: Improve instance attribute variable query editor #105206, @iwysiu
- Cloudwatch: Add missing AWS regions #106304, @chriscerie
- Dashboard Provisioning: Reduce db load #106114, @stephaniehingtgen
- Dashboard: Add Alert icon in library panels #107723, @axelavargas
- Dashboard: Add server-configurable quick ranges for the time picker #102254, @chodges15
- Dashboard: Formatting Currency - add new custom 'financial' currency format without abbreviations #106604, @axelavargas
- Dashboard: Library Panels - Add ability to search by folder name #106997, @axelavargas
- Dashboard: Schema V2 - Auto-transform V2 dashboards in V1Resource export mode #105997, @axelavargas
- Datasources: Migrate to new sigv4 middleware (Enterprise)
- Datasources: Update grafana-aws-sdk for new sigv4 middleware and aws-sdk-go v1 removal #107522, @njvrzm
- DatePicker: Add cursor not-allowed style and hover background color #106451, @ywzheng1
- Dependencies: Bump Go to v1.24.4 #106533, @macabu
- Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #107379, @macabu
- Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 #106064, @macabu
- ElasticSearch: Remove frontend response parsing #104148, @nojaf
- Geomap: Add HiDPI support to CARTO basemap (#81195) #106211, @cledwynl
- Git Sync UI: Delete Provisioned Dashboard Flow #106593, @ywzheng1
- Grafana/data: Extract fuzzy search core #107110, @Clarity-89
- I18n: Update eslint rule to catch some untranslated object properties #105072, @tomratcliffe
- InfluxDB: Add an optional time range filter for tag queries in the query panel autocompleteInflux tag filter #107195, @NikolayTsvetkov
- LBAC for data sources: Adds team filtering for lbac rules (Enterprise)
- Library Panels: Mark library panel RBAC as GA & enable by default #106833, @kaydelaney
- Library Panels: Modify connection api endpoint to be compatible with unified storage #107088, @stephaniehingtgen
- Library elements: Remove ability to set as "library variable" #106594, @stephaniehingtgen
- Library panels: Remove
libraryPanelRBACfeature flag, and enable rbac by default #107222, @stephaniehingtgen - Loki: Remove experimental lokiQuerySplittingConfig #107298, @ivanahuckova
- Loki: Remove experimental predefined operations #107289, @ivanahuckova
- OAuth: Add access token as third source for user info extraction #107636, @Jguer
- Plugin Extensions: Expose PluginMeta generic in usePluginContext #107577, @MattIPv4
- Postgres: Switch the datasource plugin from lib/pq to pgx #103961, @zoltanbedi
- Preferences: Use dashboard uid for the home dashboard #106666, @stephaniehingtgen
- Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #106577, @simonswine
- Prometheus: Deprecation message for Azure auth #106490, @bossinc
- Prometheus: Facilitate tree shaking with exports and bundler mode #105575, @NWRichmond
- Prometheus: Migrate remaining selectors to data-testid #106564, @idastambuk
- ProvisionedFolder: Delete folder drawer #107089, @ywzheng1
- Provisioning: Add pure git repository type #106815, @MissingRoberto
- Querying: Pass dashboard and panel title as headers #107032, @ivanahuckova
- Remote Alertmanager: Send SMTP config #106337, @santihernandezc
- Restore dashboards: Add filters and search #106994, @Clarity-89
- SCIM: Ignore unsupported fields in user PATCH requests (Enterprise)
- SCIM: Implement operation for adding an externalId value to a team (Enterprise)
- SCIM: Implement the add members operation in group PATCH requests (Enterprise)
- SCIM: Implement the remove members operation in group PATCH requests (Enterprise)
- SCIM: Update externalId field in group PATCH request (Enterprise)
- SQL Expressions: Always convert on type first #106083, @kylebrandt
- Select: Set min width for the current selected item when width=auto #106131, @tskarhed
- StateTimeline: Display false and empty string values #107059, @jesdavpet
- StateTimeline: Support
NaNandnullvalue mappings #105638, @fastfrwrd - Storage: Take
migration_lockingsetting into account #105938, @JohnnyQQQQ - TableNG: Refactor to better take advantage of react-data-grid #103755, @leeoniya
- Tables: Pills for Table Cells #107485, @timlevett
- Teams: Add support for updating externalId field #106406, @dmihai
- Tempo: Enable native histograms for Tempo service graph #105989, @bohandley
- TimeRangePicker: Highlight range on hover #106616, @joshhunt
- TraceView: Resource attributes links extension point #104680, @edvard-falkskar
- Transformations: Add "Auto" mode to Organize Fields #103055, @gelicia
- Transformations: GA the Regression transformation #106074, @gelicia
- Unified storage: Respect GF_DATABASE_URL override #105331, @pstibrany
- VQB: Add selected columns to GROUP BY dropdown (#106349) #106391, @Shubham19032004
- VQB: Allow custom table names in TableSelector #106420, @Victorthedev
- XYChart: Add support for x=time #106459, @leeoniya
Bug fixes
- Alerting: Fix $value type when single data source is queried #106080, @alexander-akhmetov
- Alerting: Fix ImportToGMARules flaky test #106495, @soniaAguilarPeiron
- Alerting: Fix RefIds not being shown when creating or editing Grafana-managed recording rule #106840, @soniaAguilarPeiron
- Alerting: Fix contact points tab visibility when user can only create #106735, @JacobsonMT
- Alerting: Fix eval time unit in list view #106488, @ebuildy
- Alerting: Fix group interval override when adding new rules #107324, @konrad147
- Alerting: Fix group-level labels and query_offset in the import API #106379, @alexander-akhmetov
- Alerting: Fix notification policy conflicts originating from provenance mismatch #107343, @moustafab
- Alerting: Fix resolved notifications for same-label Error to Normal transitions #106210, @alexander-akhmetov
- Alerting: Hide labels section if we only have private labels #105996, @gillesdemey
- Annotations: Remove prometheus from legacy runner #106737, @scottlepp
- Azure: Fix Application Insights metadata requests #105614, @aangelisc
- Azure: Fix duplicated trace links #105698, @aangelisc
- Azure: Fix legend formatting #106504, @aangelisc
- Azure: Fix resource name determination in template variable queries #105705, @aangelisc
- BarChart/StateTimeline: Use noValue setting for error message when data is empty #107147, @fastfrwrd
- CloudWatch: Fix http client handling + assume role bug #107893, @njvrzm
- CloudWatch: Fix proxy transport issue #107807, @njvrzm
- Dashboard: FF
dashboardNewLayoutsFix library panels non-editable when multiple added #107052, @axelavargas - Dashboard: Fix cache validation to prevent stale cache #105918, @yashschandra
- Dashboard: Fixes issue with dashboard links that include all variables #106356, @torkelo
- Dashboards: Fix history list for dashboard uids that end in
-#107073, @stephaniehingtgen - Drilldown: Fix js crash when using http #105646, @chu121su12
- Fix: Increase login_attempt.ip_address column length for IPv6 support #107035, @Jguer
- FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #106338, @simonswine
- Folders: Correctly resolve nested folder breadcrumbs #106344, @IevaVasiljeva
- GrafanaUI: Fix Combobox ignoring loading prop #105584, @ValeraS
- Graphite: Fix annotation queries #106553, @aangelisc
- Graphite: Fix date mutation #107414, @aangelisc
- Graphite: Fix nested variable interpolation for repeated rows #106976, @aangelisc
- K8s: Dashboards /apis: Fix library element connections #106734, @stephaniehingtgen
- Loki: Fix health check message #107170, @wooffie
- Loki: Fix issue where step parameter using a template variable was marked as invalid #106541, @ivanahuckova
- Loki: Fix label browser not sorted after selection of a label #107394, @paulojmdias
- Org: Fix org deletion #106193, @stephaniehingtgen
- Plugins: Fix and encode invalid gRPC header values #107339, @ivanahuckova
- PostgreSQL: Fix error on panel when toggling sqlDatasourceDatabaseSelection feature #106965, @HasithDeAlwis
- Profiles: Fix for passing the response headers #106293, @simonswine
- Reporting: Stop sending reports with Never schedule on creation (Enterprise)
- SCIM: Fix PUT request for deactivating a user (Enterprise)
- SCIM: Fix the removal of all members in group PUT requests (Enterprise)
- SCIM: Fix user patch operation (Enterprise)
- Security: Add fix for CVE-2025-3580 #105976, @baldm0mma
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108333, @mgyongyosi
- Settings: Fix reencryption and rollback of encrypted values in setting table (Enterprise)
- Tempo: Fix showing dangling edges in NodeGraph #107245, @ifrost
- ToolTip: Fix flexbox bug with tooltip when
maxWidthis set manually #107145, @jdmarshall - URLParams: Stringify true values as key=true always (fixes issues with variables with true value) #106440, @torkelo
Breaking changes
- Alerting: Enable recording rules by default #105603, @alexander-akhmetov
Plugin development fixes & changes
- Carousel: Always center image #106468, @ashharrison90
- Drawer: Include divider and close button when passing a custom title element #106896, @ashharrison90
12.0.3 (2025-07-23)
Bug fixes
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108280, @volcanonoodle
11.6.4 (2025-07-23)
Features and enhancements
- Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #107555, @macabu
- StateTimeline: Add endTime to tooltip #107605, @adela-almasan
- Unified storage: Respect GF_DATABASE_URL override #107573, @pstibrany
Bug fixes
- Alerting: Fix group interval override when adding new rules #107496, @konrad147
- Azure: Fix legend formatting #106934, @aangelisc
- Azure: Fix resource name determination in template variable queries #106939, @aangelisc
- Graphite: Fix annotation queries #106940, @aangelisc
- Graphite: Fix date mutation #107523, @aangelisc
- Graphite: Fix nested variable interpolation for repeated rows #107564, @aangelisc
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108281, @volcanonoodle
11.5.7 (2025-07-23)
Features and enhancements
Bug fixes
- Azure: Fix legend formatting #106933, @aangelisc
- Azure: Fix resource name determination in template variable queries #106938, @aangelisc
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108280, @volcanonoodle
11.4.7 (2025-07-23)
Features and enhancements
Bug fixes
- Azure: Fix legend formatting #106932, @aangelisc
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108279, @volcanonoodle
11.3.9 (2025-07-23)
Features and enhancements
Bug fixes
- Azure: Fix legend formatting #106931, @aangelisc
- Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #108278, @volcanonoodle
12.0.2+security-01 (2025-07-17)
Features and enhancements
- Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #106730, @simonswine
Bug fixes
- FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #106625, @simonswine
- Security: Fixed CVE-2025-6023
- Security: Fixed CVE-2025-6197
11.6.3+security-01 (2025-07-17)
Features and enhancements
- Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #106729, @simonswine
Bug fixes
- FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #106624, @simonswine
- Security: Fixed CVE-2025-6023
- Security: Fixed CVE-2025-6197
11.5.6+security-01 (2025-07-17)
Bug fixes
- Security: Fixed CVE-2025-6023
- Security: Fixed CVE-2025-6197
11.4.6+security-01 (2025-07-17)
Bug fixes
- Security: Fixed CVE-2025-6023
- Security: Fixed CVE-2025-6197
11.3.8+security-01 (2025-07-17)
Bug fixes
- Security: Fixed CVE-2025-6023
- Security: Fixed CVE-2025-6197
12.0.2 (2025-06-17)
Features and enhancements
- Dependencies: Bump Go to v1.24.4 #106565, @macabu
- Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 #106116, @macabu
- Storage: Take
migration_lockingsetting into account #105951, @JohnnyQQQQ
Bug fixes
- Alerting: Fix $value type when single data source is queried #106101, @alexander-akhmetov
- Alerting: Fix group-level labels and query_offset in the import API #106392, @alexander-akhmetov
- Azure: Fix Application Insights metadata requests #105838, @aangelisc
- Org: Fix org deletion #106461, @stephaniehingtgen
- Security: Fixes CVE-2025-3415
11.6.3 (2025-06-17)
Bug fixes
- Security: Fixes CVE-2025-3415
11.5.6 (2025-06-17)
Bug fixes
- Security: Fixes CVE-2025-3415
11.4.6 (2025-06-17)
Features and enhancements
- Dependencies: Bump Go to v1.24.4 #106569, @macabu
- Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 #106119, @macabu
Bug fixes
- Security: Fixes CVE-2025-3415
11.3.8 (2025-06-17)
Features and enhancements
- Dependencies: Bump Go to v1.24.4 #106571, @macabu
- Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 #106120, @macabu
Bug fixes
- Security: Fixes CVE-2025-3415
12.0.1+security-01 (2025-06-13)
Bug fixes
- Security: Fixed CVE-2025-3415
11.6.2+security-01 (2025-06-13)
Bug fixes
- Security: Fixed CVE-2025-3415
11.5.5+security-01 (2025-06-13)
Bug fixes
- Security: Fixed CVE-2025-3415
11.4.5+security-01 (2025-06-12)
Bug fixes
- Security: Fixed CVE-2025-3415
Bug fixes
- Security: Fixed CVE-2025-3415
11.3.7+security-01 (2025-06-12)
Bug fixes
- Security: Fixed CVE-2025-3415
11.2.10+security-01 (2025-06-12)
Bug fixes
- Security: Fixed CVE-2025-3415
10.4.19+security-01 (2025-06-12)
Bug fixes
- Security: Fixed CVE-2025-3415
12.0.1 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105101, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 #105368, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105249, @macabu
- K8s: Dashboards: Add fine grained access control checks to /apis #104419, @stephaniehingtgen
Bug fixes
- Dashboard: Fix Panel Explore link subpath duplication (#104952) #105056, @axelavargas
- Dashboard: Fixes issue with row repeats and first row #104469, @torkelo
- Graphite: Ensure template variables are interpolated correctly #105389, @aangelisc
- Graphite: Fix Graphite series interpolation #104516, @aangelisc
- InfluxDB: Fix nested variable interpolation #104176, @aangelisc
- MetricsDrilldown: Restore link to Metrics Drilldown from Explore #104073, @NWRichmond
- NestedFolderPicker: Fix scroll jumps back to top #105769, @samsch
- Preferences: Disable the save button whilst saving preferences #105612, @ashharrison90
- Prometheus: Fix semver import path #104945, @jackw
- Themes: Prevent duplicated API call in drawer #105611, @ashharrison90
- XYChart: Coerce threshold steps to numbers #104492, @leeoniya
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
11.6.2 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105103, @macabu
- Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0 #105443, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 #105369, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105251, @macabu
Bug fixes
- Dashboard: Fixes issue with row repeats and first row #104467, @torkelo
- Graphite: Ensure template variables are interpolated correctly #105388, @aangelisc
- Graphite: Fix Graphite series interpolation #104568, @aangelisc
- Prometheus: Fix semver import path #104943, @jackw
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
11.5.5 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105109, @macabu
- Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.3 to v2.5.0 #105441, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 #105373, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105252, @macabu
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
11.4.5 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105110, @macabu
- Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0 #105445, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 #105375, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0 #105253, @macabu
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
11.3.7 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105112, @macabu
- Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.2 to v2.5.0 #105447, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 #105376, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0 #105254, @macabu
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
11.2.10 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105113, @macabu
- Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 #105378, @macabu
- Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.125.0 to v0.132.0 #105255, @macabu
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
10.4.19 (2025-05-22)
Features and enhancements
- Chore: Bump Go version to 1.24.3 #105115, @macabu
- Dependencies: Bump golang.org/x/net from v0.37.0 to v0.40.0 #105449, @macabu
- Security: Fix CVE-2025-4123
- Security: Fix CVE-2025-3580
12.0.0+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
11.6.1+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
11.5.4+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
11.4.4+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
11.3.6+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
11.2.9+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
10.4.18+security-01 (2025-05-21)
Bug fixes
- Security: Fix CVE-2025-4123
12.0.0 (2025-05-05)
Features and enhancements
- Alerting: API to convert submitted Prometheus rules to GMA #102231, @fayzal-g
- Alerting: Add HMAC signature config to the webhook integration #100960, @alexander-akhmetov
- Alerting: Add MissingSeriesEvalsToResolve to the APIs #102150, @alexander-akhmetov
- Alerting: Add UI migration feature toggle #102217, @tomratcliffe
- Alerting: Add backend support for keep_firing_for #100750, @alexander-akhmetov
- Alerting: Add details and edit pages for groups #100884, @konrad147
- Alerting: Add keep_firing_for and Recovering state #103248, @soniaAguilarPeiron
- Alerting: Add migration to clean up rule versions table #102484, @yuri-tceretian
- Alerting: Add missing_series_evals_to_resolve option to alert rule form #102808, @tomratcliffe
- Alerting: Delete permanently deleted alert rules. #102960, @soniaAguilarPeiron
- Alerting: Detect target folder rules and show warning #103673, @soniaAguilarPeiron
- Alerting: Migration UI #102010, @soniaAguilarPeiron
- Alerting: Recover deleted alert rules #101869, @yuri-tceretian
- Alerting: Remove constraints for uniqueness of rule title #102067, @yuri-tceretian
- Alerting: Remove feature flag
alertingNoDataErrorExecution#102156, @yuri-tceretian - Alerting: Sequential evaluation of rules in group #98829, @yuri-tceretian
- Alerting: Skip rules that are managed by plugins when importing datasource-managed rules #103573, @soniaAguilarPeiron
- Alerting: Stop allowing manual editing/restore of internal AM config via settings #103884, @tomratcliffe
- Alerting: Template preview enhancements #103817, @JacobsonMT
- Alerting: Update alerting module to 58ba6c617ff05eb1d6f65c59d369a6a16923dff6 #102812, @yuri-tceretian
- Alerting: Use 'Grafana IRM' wording in alerting contact point #102014, @brojd
- Alerting: Webhook Improvements - Templateable Payloads #103818, @JacobsonMT
- AppChrome: Move kiosk button into profile menu #103600, @torkelo
- AppPlatform: Introduce experimental Github integration for dashboard configuration management #96329, @MissingRoberto
- Authorization: Add group to role DisplayName to make filtered list more clear #102950, @forsethc
- Azure Monitor: Add logs query builder #99055, @alyssabull
- Azure: Mark Azure Prometheus exemplars as GA and enable by default #100595, @aangelisc
- AzureMonitor: Improve selection of Basic Logs tables in the query builder #103820, @aangelisc
- BrowseDashboards: Switch to list view if sort is set #102196, @Clarity-89
- Checkbox: Add z-index to description #103847, @Clarity-89
- Chore: Promoting feature toggle pluginsSriChecks GA #102212, @tolzhabayev
- CloudMigrations: Add sorting and error filtering to Snapshot Results backend #102753, @mmandrus
- CloudMigrations: Change onPremToCloudMigrations feature toggle to GA #103212, @dana-axinte
- CloudMigrations: Enable high-level resource type selection #103011, @macabu
- CloudMigrations: Implement table sorting in the UI #103061, @mmandrus
- CloudWatch: Migrate to aws-sdk-go-v2 #103106, @njvrzm
- Cloudwatch: Do not parse log query grouping field to float #102244, @iwysiu
- Cloudwatch: Migrate to aws-sdk-go-v2 #99643, @njvrzm
- Cloudwatch: Revert aws sdk go v2 #103644, @iwysiu
- Config: Removes setting
viewers_can_edit#102275, @eleijonmarck - Dashboard Restore: Remove experimental functionality under feature flag
dashboardRestorefor now - this will be reworked #103204, @stephaniehingtgen - Dashboards: Add Dashboard Schema validation (1) #103662, @marcoabreu
- Dashboards: Add a config setting that limits the number of series that will be displayed in a panel. Users can opt in to render all series. #103405, @oscarkilhed
- Dashboards: Prevent saving to a non-existent folder #103503, @stephaniehingtgen
- Dashboards: Prevent version restore to same data #102665, @stephaniehingtgen
- Dependencies: Bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3 #102555, @dependabot[bot]
- Docs: Standard Datetime units limited to millisecond precision #103610, @axelavargas
- ElasticSearch: Improve index pattern error messaging and docs #103899, @idastambuk
- ElasticSearch: Make script field input a text area #103708, @idastambuk
- Extensions: Expose new observable APIs for accessing components and links #103063, @leventebalogh
- Feat: Make expressions work with plugins that set
alerting:falsebutbackend:truein theirplugin.jsonfiles #102232, @tolzhabayev - FlameGraphPanel: Add units to standard options (#89815) #102720, @snyderdan
- Frontend: Remove Angular #99760, @jackw
- Go: Bump to 1.24.2 #103521, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
- I18n: Add 13 new languages for translations #102971, @joshhunt
- Influx: Support PDC for Influx SQL #103032, @aangelisc
- JWT: Add org role mapping support to the JWT provider #101584, @QuentinBisson
- K8s: Dashboards: Add fine grained access control checks to /apis #104418, @stephaniehingtgen
- K8s: Enable kubernetesClientDashboardsFolders by default #103843, @stephaniehingtgen
- LBAC for data sources: PublicPreview and self serve enablement #102276, @eleijonmarck
- Live: Remove queryOverLive and live-service-web-worker experimental feature flags #103518, @ryantxu
- Logs Panel: Add ISO8601 date to log download files #102932, @gtk-grafana
- Logs Table: Add new Controls component to Explore #103467, @matyax
- Logs: Add new Controls component to Explore #103401, @matyax
- Logs: Always keep displayed fields with changed queries #102493, @svennergr
- Logs: Clean up Explore meta information #103801, @matyax
- Logs: Prevent automatic scrolling on refresh after changing scroll position #102463, @matyax
- MetricsDrilldown: Advance
exploreMetricsUseExternalAppPluginfeature toggle stage #102137, @NWRichmond - MetricsDrilldown: Advance
exploreMetricsUseExternalAppPluginto GA #103653, @NWRichmond - MetricsDrilldown: Mark
exploreMetricsUseExternalAppPluginas not frontend-only #102942, @NWRichmond - MetricsDrilldown: Remove legacy Metrics Drilldown code paths #103845, @NWRichmond
- MetricsDrilldown: Restore link to Metrics Drilldown from Explore #104075, @NWRichmond
- NodeGraph: Add node graph algorithm layout option #102760, @joey-grafana
- Plugins: Remove plugin dependency version (Enterprise)
- Plugins: Remove sort by options from plugins catalog #102862, @oshirohugo
- Plugins: Remove support for secrets manager plugins #101467, @wbrowne
- Plugins: Remove support for secrets manager plugins (Enterprise)
- Plugins: Remove userStorageAPI feature toggle #102915, @oshirohugo
- Prometheus: Add back @lezer/highlight to dev dependency #102632, @idastambuk
- Prometheus: Add support for cloud partners Prometheus data sources #103482, @kevinwcyu
- Prometheus: Enable Combobox metric select by default #101045, @joshhunt
- Prometheus: Enable prometheusRunQueriesInParallel feature toggle by default #102127, @itsmylife
- RecordedQueries: Deprecate recorded queries UI messaging (Enterprise)
- Security: Update JWT library (CVE-2025-30204) #102715, @Proximyst
- Tempo: Add support for ad-hoc filters #102448, @ifrost
- Tempo: Remove aggregate by #98474, @joey-grafana
- TraceView: Add scope attributes to span details #103173, @joey-grafana
- TraceView: Render all links in span details #101881, @ifrost
- Traces: Preinstall Traces Drilldown app with Grafana #102986, @ifrost
Bug fixes
- Alerting: Fix Simple condition threshold inputs with negative values. #102976, @soniaAguilarPeiron
- Alerting: Fix display of
Normal (Updated)in alert history #102476, @tomratcliffe - Alerting: Fix rule instances table #102290, @konrad147
- Alerting: Make nested folders work in Alert List Panel #103550, @tomratcliffe
- Alerting: Remove rule type switch for modified export mode #102287, @konrad147
- Alerting: Simplified alert rule toggle bug fixes #102119, @gillesdemey
- Alertmanager: Add Role-Based Access Control via reqAction Field #101543, @olegpixel
- App Platform: Pin bleve to fix CVE-2022-31022 #102513, @Proximyst
- AppChrome/MegaMenu: Fixes issue with default state being initialised to undocked #103507, @torkelo
- AppTitle: Fix overflowing text #103583, @tskarhed
- Azure: Ensure basic logs queries are limited to a single resource #103588, @aangelisc
- CloudWatch: Import new grafana-aws-sdk with PDC fix #103249, @njvrzm
- ColorPicker: Fixed height when switching tabs #103304, @DanMPA
- Dashboard: Fix Core Panel Migrations - table panel #102146, @axelavargas
- DashboardScenePage: Correct slug in self referencing data links #100048, @Sergej-Vlasov
- Dashboards: Fix duplicate provisioning when errors occur on title-only based provisioning #102249, @stephaniehingtgen
- Dashboards: Fix panel link to Grafana Metrics Drilldown #103759, @NWRichmond
- Fix: Change secure_json_data column data type to medium text only MYSQL #102557, @s4kh
- GrafanaUI: Prevent ToolbarButton from submitting form #102228, @kozhuhds
- GrafanaUI: Remove blurred background from overlay backdrops to improve performance #103563, @joshhunt
- LDAP test: Fix page crash #102587, @ashharrison90
- Navigation: Fix bookmarks when Grafana is running under subpath #102679, @matejkubinec
- PanelEdit: Fixes suggestions not applying options or field config #102675, @torkelo
- PluginProxy: Fix nil pointer in OAuth forwarding #103626, @moustafab
- Plugins: Fix better UX for disabled Angular plugins #101333, @hugohaggmark
- Plugins: Fix support for adhoc filters with raw queries in InfluxDB #101966, @beejeebus
- Renderer: Fix regression on callback URL in plugin mode #103787, @AgnesToulet
- SQL: Fix builder crashes when any in selected #102871, @zoltanbedi
- SSE: Fix goroutine leak in math operation expression parsing #102380, @kylebrandt
- Tempo: Add fixes for broken exemplars #103298, @joey-grafana
Breaking changes
- Alerting: Make $value return the query value in case when a single datasource is used #102301, @alexander-akhmetov
- Alerting: Relax permissions for access a rule #103664, @moustafab
- Alerting: Remove feature toggles relating to Loki Alert State History #103540, @rwwiv
- Alerting: Remove the POST endpoint for the internal Grafana Alertmanager config #103819, @rwwiv
- Anonymous: Enforce org role Viewer setting #102070, @eleijonmarck
- Chore: Enable Grafana version check when installing plugins #103176, @andresmgot
- Chore: Enabling failWrongDSUID by default in Grafana 12 #102192, @tolzhabayev
- Config: Removes setting
viewers_can_edit#101767, @eleijonmarck - Frontend: Remove Angular (Enterprise)
- Plugin Extensions: Clean up the deprecated APIs #102102, @leventebalogh
- Plugins: Remove plugin dependency version #103728, @wbrowne
- Tempo: Remove traceQLStreaming feature toggle #103619, @adrapereira
Plugin development fixes & changes
- Combobox: add grouping functionality #100603, @eledobleefe
- Grafana UI: Add
columnGap+rowGaptoStack/Grid#102883, @ashharrison90 - Grafana UI: Clearly separate multiple warnings by using HTML tags #97979, @zenador
11.6.1 (2025-04-23)
Features and enhancements
- Chore: Update JWT library (CVE-2025-30204) #102727, @grambbledook
- DashboardScenePage: Correct slug in self referencing data links #103854, @Sergej-Vlasov
- Dependencies: Bump github.com/redis/go-redis/v9 to 9.7.3 to address CVE-2025-29923 #102863, @macabu
- Go: Bump to 1.24.2 #103523, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
- GrafanaUI: Use safePolygon close handler for interactive tooltips instead of a delay #102869, @mthorning
- Prometheus: Add support for cloud partners Prometheus data sources #103941, @kevinwcyu
Bug fixes
- Alertmanager: Add Role-Based Access Control via reqAction Field #103479, @olegpixel
- GrafanaUI: Remove blurred background from overlay backdrops to improve performance #103647, @joshhunt
- InfluxDB: Fix nested variable interpolation #104096, @aangelisc
- LDAP test: Fix page crash #102684, @ashharrison90
- Org redirection: Fix linking between orgs #102870, @ashharrison90
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
- Security: Fix CVE-2025-3260
11.5.4 (2025-04-23)
Features and enhancements
- Azure Monitor: Filter namespaces by resource group #103654, @alyssabull
- Azure: Add support for custom namespace and custom metrics variable queries #103650, @aangelisc
- Azure: Resource picker improvements #103638, @aangelisc
- Azure: Support more complex variable interpolation #103651, @aangelisc
- Azure: Variable editor and resource picker improvements #103657, @aangelisc
- Chore: Update CVE-affected dependencies #102709, @grambbledook
- DashboardScenePage: Correct slug in self referencing data links #103853, @Sergej-Vlasov
- Dependencies: Bump github.com/redis/go-redis/v9 to 9.6.3 to address CVE-2025-29923 #102865, @macabu
- Go: Bump to 1.24.2 #103525, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
- Prometheus: Add support for cloud partners Prometheus data sources #103942, @kevinwcyu
Bug fixes
- InfluxDB: Fix nested variable interpolation #104095, @aangelisc
- LDAP test: Fix page crash #102683, @ashharrison90
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.4.4 (2025-04-23)
Features and enhancements
- Go: Bump to 1.24.2 (Enterprise)
Bug Fixes
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.3.6 (2025-04-22)
Features and enhancements
- Chore: Update libs with CVE in dependencies #102710, @grambbledook
- Go: Bump to 1.24.2 #103528, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
Bug fixes
- Auth: Fix SAML user IsExternallySynced not being set correctly #103101, @volcanonoodle
- AuthN: Refetch user on "ErrUserAlreadyExists" #102983, @kalleep
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.2.9 (2025-04-22)
Features and enhancements
- Chore: Update libs with CVE in dependencies #102712, @grambbledook
- Go: Bump to 1.24.2 #103529, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
Bug fixes
- Auth: Fix SAML user IsExternallySynced not being set correctly #103102, @volcanonoodle
- AuthN: Refetch user on "ErrUserAlreadyExists" #102982, @kalleep
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
10.4.18 (2025-04-22)
Features and enhancements
- Chore: Bump golang-jwt/jwt/v4 and golang-jwt/jwt/v5 to address security issues #102762, @macabu
- Go: Bump to 1.24.2 #103531, @Proximyst
- Go: Bump to 1.24.2 (Enterprise)
Bug fixes
- Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) #103177, @volcanonoodle
- AuthN: Refetch user on "ErrUserAlreadyExists" #102981, @kalleep
- Security: Fix CVE-2025-3454
11.6.0+security-01 (2025-04-22)
Bug fixes
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
- Security: Fix CVE-2025-3260
11.5.3+security-01 (2025-04-22)
Features and enhancements
- Chore: Bump Go to 1.23.7 #101581, @macabu
- Chore: Bump Go to 1.23.7 (Enterprise)
- Chore: Update CVE-affected dependencies #102709, @grambbledook
Bug fixes
- Alerting: Fix token-based Slack image upload to work with channel names #101078, @JacobsonMT
- Auth: Fix AzureAD config UI's ClientAuthentication dropdown #100869, @mgyongyosi
- Dashboard: Fix the unintentional time range and variables updates on saving #101671, @harisrozajac
- Dashboards: Fix missing
v/e/ikeybindings to return back to dashboard #102365, @mdvictor - InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #100977, @aangelisc
- LDAP test: Fix page crash #102683, @ashharrison90
- Org redirection: Fix linking between orgs #102089, @ashharrison90
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.4.3+security-01 (2025-04-22)
Features and enhancements
- Chore: Bump Go to 1.23.7 #101582, @macabu
- Chore: Bump Go to 1.23.7 (Enterprise)
- Chore: Update CVE-affected golang-gwt dependencies #102704, @grambbledook
Bug fixes
- Alerting: Fix token-based Slack image upload to work with channel names #101072, @JacobsonMT
- InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #100987, @aangelisc
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101790, @IevaVasiljeva
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.3.5+security-01 (2025-04-22)
Features and enhancements
- Chore: Bump Go to 1.23.7 #101583, @macabu
- Chore: Bump Go to 1.23.7 (Enterprise)
- Chore: Update libs with CVE in dependencies #102710, @grambbledook
Bug fixes
- Alerting: Fix token-based Slack image upload to work with channel names #101488, @moustafab
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101791, @IevaVasiljeva
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
11.2.8+security-01 (2025-04-22)
Features and enhancements
Bug fixes
- Alerting: Update slack image upload to use new API #101487, @moustafab
- CloudMigrations: Fix OrderBy clause in GetSnapshotList sql handler #102351, @mmandrus
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101795, @IevaVasiljeva
- Security: Fix CVE-2025-3454
- Security: Fix CVE-2025-2703
10.4.17+security-01 (2025-04-22)
Features and enhancements
- Chore: Bump Go version to 1.23.7 #101565, @macabu
- Chore: Bump Go version to 1.23.7 (Enterprise)
- Chore: Bump golang-jwt/jwt/v4 and golang-jwt/jwt/v5 to address security issues #102762, @macabu
Bug fixes
- Alerting: Update slack image upload to use new API #101483, @moustafab
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101804, @IevaVasiljeva
- Security: Fix CVE-2025-3454
11.6.0 (2025-03-25)
Features and enhancements
- API keys: Migrate API keys to service accounts at startup #96924, @dmihai
- AccessControl: Allow plugin roles to include
plugins:write#101089, @gamab - Alerting: Add DAG errors to alert rule creation and view #99423, @soniaAguilarPeiron
- Alerting: Add Jira integration to cloud AMs #100482, @soniaAguilarPeiron
- Alerting: Add alert rule version history - part1 #99490, @soniaAguilarPeiron
- Alerting: Add migration to clean up rule versions table #102562, @yuri-tceretian
- Alerting: Add multiple threshold operators #99516, @paulojmdias
- Alerting: Add tracking for the mode used in query and notifications step when c… #100824, @soniaAguilarPeiron
- Alerting: Adding color option for slack receiver #99615, @wymangr
- Alerting: Allow selection of recording rule write target on per-rule basis. #101778, @stevesg
- Alerting: Allow specifying uid for new rules added to groups #99858, @moustafab
- Alerting: Improve template testing by trying non-root scopes #101471, @JacobsonMT
- Alerting: Include time range in template dashboard and panel urls #101095, @JacobsonMT
- Alerting: Keep the latest version of deleted rule in version table #101481, @yuri-tceretian
- Alerting: Promote alertingSaveStateCompressed flag to public preview #99935, @alexander-akhmetov
- Alerting: Remove ID and OrgID from hash calculation #100140, @yuri-tceretian
- Alerting: Remove feature toggle alertingNoNormalState #99905, @yuri-tceretian
- Alerting: Remove rule group edit from single rule editor #100191, @gillesdemey
- Alerting: Return 404 when /api/ruler/grafana/api/v1/rules/{Namespace}/{Groupname} does not exist #100264, @fayzal-g
- Alerting: Rule history restore feature #100609, @soniaAguilarPeiron
- Alerting: Support Jira Integration #100480, @yuri-tceretian
- Alerting: Track if new gm rules are created with queries and expressions transformable to simple mode #101121, @soniaAguilarPeiron
- Alerting: Update IRM copies in Configuration Tracker #100069, @teodosii
- Alerting: Update design of rule details tab and add
updated by#99895, @tomratcliffe - Alerting: Update irm links for incident and oncall in case new irm plugin is present #99952, @soniaAguilarPeiron
- Alerting: Use exponential backoff in the remote Alertmanager readiness check #99756, @santihernandezc
- Alerting: Use uid instead of id in AnnotationsStateHistory #101207, @soniaAguilarPeiron
- Auth: Add IP address login attempt validation #98123, @colin-stuart
- Auth: Add support for the TlsSkipVerify parameter to JWT Auth #91514, @Ret2Me
- Auth: Make ssoSettingsSAML GA and enabled by default #101766, @mgyongyosi
- Azure Monitor: Filter namespaces by resource group #100325, @alyssabull
- Azure: Resource picker improvements #101462, @aangelisc
- Azure: Variable editor and resource picker improvements #101695, @alyssabull
- Badge: Add darkgrey color #100699, @Clarity-89
- Canvas: One click links and actions #99616, @adela-almasan
- Chore: Bump Go to 1.23.7 #101576, @macabu
- Chore: Bump Go to 1.23.7 (Enterprise)
- Chore: Bump github.com/expr-lang/expr to v1.17.0 to address CVE-2025-29786 #102533, @macabu
- Chore: Remove
sqlQuerybuilderFunctionParametersfeature toggle #100809, @zoltanbedi - CloudWatch: Track Logs Insights query language #100254, @idastambuk
- Configuration tracker: Update copy in IRM and point to new IRM slack integration #100440, @teodosii
- Dashboard: Folder move unexpected behavior #100394, @yincongcyincong
- Dashboards: Allow custom quick time ranges specified in dashboard model #93724, @sknaumov
- Dashboards: Monitor dashboard loading performance #99629, @dprokop
- Dashboards: Remove default empty string from variable create view #98922, @yincongcyincong
- Dashboards: WeekStart is now of type WeekStart | undefined instead of string #101123, @oscarkilhed
- DesignSystem: Menu and popover styling update to use new elevated background token #100255, @torkelo
- Docker: Use our own glibc 2.40 binaries #99903, @DanCech
- Docs: Add a note on query caching for Cloudwatch datasource #100180, @idastambuk
- Drilldown: Require
datasources:exploreRBAC action #101366, @svennergr - Elasticsearch: Remove frontend testDatasource method #99894, @idastambuk
- Elasticsearch: Replace level in adhoc filters with level field name #100315, @iwysiu
- Elasticsearch: Replace term size dropdown with text input #99718, @iwysiu
- Explore: Add
hide_logs_downloadand hide button to download logs #99512, @svennergr - Explore: Move drilldown apps from Explore to a new navbar item "Drilldown" #100409, @adrapereira
- ExploreMetrics: Add toggle to enable routing to externalized Explore Metrics app plugin #99481, @NWRichmond
- Feat: OSS connections page state filter and update all added #100688, @s4kh
- Features: Remove openSearchBackendFlowEnabled feature toggle #99068, @idastambuk
- Folders: Add validation that folder is not a parent of itself #101569, @stephaniehingtgen
- Geomap: WebGL for Marker Layer #95457, @drew08t
- Grafana/ui: Export UsersIndicator #100698, @Clarity-89
- Graphite: Compare query builder query to raw query #101104, @bossinc
- Histogram: Handle multiple native histograms #98404, @domasx2
- Image Renderer: Add support for SSL in plugin mode #98009, @nmarrs
- ImportDashboards: Use NestedFolderPicker #99696, @joshhunt
- Loki: Removal of
Resolutionin query editors #101860, @svennergr - Menu: Uniform padding to make menu item hover state look better #100275, @torkelo
- MetricsDrilldown: Update name of queryless metrics experience #100675, @yangkb09
- MultiCombobox: Export from grafana/ui #100368, @Clarity-89
- NodeGraph: Improve view traces for uninstrumented services #98442, @edvard-falkskar
- PluginExtensions: Added support for sharing functions #98888, @theSuess
- PluginExtensions: Added support for sharing functions (Enterprise)
- PluginExtensions: Exposing registry meta for components returned via
usePluginComponents#100587, @mckn - Plugins: Improve plugin details UX for core plugins #99830, @oshirohugo
- Plugins: Remove managedPluginsInstall feature toggle #100416, @oshirohugo
- Plugins: Remove managedPluginsInstall feature toggle (Enterprise)
- Plugins: Remove uninstall plugin step from cli plugins update-all #101632, @oshirohugo
- Prometheus: Get the utcOffset value of timezone when it's specified #99910, @itsmylife
- Prometheus: Remove query assistant and related components #100669, @edwardcqian
- QueryOptions: Handle invalid time shift values #101670, @ivanortegaalba
- RBAC: Remove accessControlOnCall feature toggle #101222, @gamab
- RBAC: Remove accessControlOnCall feature toggle (Enterprise)
- Reporting: Add email subject support (Enterprise)
- Security: Update to Go 1.23.5 (Enterprise)
- Tempo: Support TraceQL instant metrics queries #99732, @joey-grafana
- Tempo: TraceQL metrics streaming #99037, @adrapereira
- Time regions: Add option for cron syntax to support complex schedules #99548, @leeoniya
- TimePicker: Ability to manually specify quick ranges #101465, @Sergej-Vlasov
- TimeRangePicker: Options list padding #100343, @torkelo
- TopNav: Move news into profile menu #99535, @bergquist
- Trace View: Add link from the Trace View to the Profiles Drilldown #101422, @joey-grafana
- Transformation: Add support for variables to ALL transformations #100225, @dprokop
- Transformations: Add round() to Unary mode of
Add field from calc#101295, @leeoniya - VizActions: Add confirmation message #100012, @adela-almasan
- grafana-ui: Update InlineField error prop type to React.ReactNode #100347, @Clarity-89
Bug fixes
- Alerting: Add error handling for missing data source #101508, @gillesdemey
- Alerting: Call RLock() before reading sendAlertsTo map #99812, @santihernandezc
- Alerting: Disable create rule menu item from panel when unifiedAlerting is disabled #100701, @soniaAguilarPeiron
- Alerting: Fix KeyValueMap input bug #101367, @soniaAguilarPeiron
- Alerting: Fix crash when invalid matcher is used in silence query params #101500, @gillesdemey
- Alerting: Fix evaluation of rules with no-op math expressions #101436, @moustafab
- Alerting: Fix exporting new rule with a new group #101404, @soniaAguilarPeiron
- Alerting: Fix fieldSelector encoding #99751, @gillesdemey
- Alerting: Fix inheritance of the timing options for policy tree #99398, @gillesdemey
- Alerting: Fix notification templates layout #101232, @gillesdemey
- Alerting: Fix state reason #101530, @yuri-tceretian
- Alerting: Fix token-based Slack image upload to work with channel names #100988, @JacobsonMT
- App Platform: Pin bleve to fix CVE-2022-31022 #102531, @Proximyst
- App: Fix web app behaviour on iOS #100382, @ashharrison90
- Auth: Fix AzureAD config UI's ClientAuthentication dropdown #100752, @mgyongyosi
- Auth: Fix redirect with JWT auth URL login #100295, @mgyongyosi
- AuthN: Refetch user on "ErrUserAlreadyExists" #100346, @kalleep
- Caching: Fix duplicate metric registration for cache size (Enterprise)
- CloudWatch: Fix condition for running annotation queries to require dimensions #101660, @kevinwcyu
- Combobox: Fix list not being virtualized initially in some cases #100188, @tskarhed
- Dashboard: Fix for overwriting an edited dashboard in the old architecture #100247, @bfmatei
- Dashboard: Fix the unintentional time range and variables updates on saving #101475, @harisrozajac
- Dashboard: Playlist - Fix issue with back button #99401, @yincongcyincong
- DashboardList: Throttle the re-renders #99982, @bfmatei
- Dashboards: Bring back scripted dashboards #100575, @dprokop
- Dashboards: Fix missing
v/e/ikeybindings to return back to dashboard #102364, @mdvictor - Explore: Fix resizing split view with Loki query editor #100257, @ifrost
- ExploreMetrics: Fix escaping of regex metacharacters in label filters #100513, @NWRichmond
- Fix: Optimise frontend Postgresql plugin cache busting #100406, @jackw
- InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #100762, @aangelisc
- Interval variable: Fix $__auto value behavior #100479, @yincongcyincong
- Log Context: Fix bug where variables are not replaced in dashboards #100433, @svennergr
- OpenTSDB: Support v2.4 #100673, @aangelisc
- PDF: Fix repeating panels when there are less items than maxPerRow (Enterprise)
- Plugin Metrics: Eliminate data race in plugin metrics middleware #99396, @clord
- Plugins: Fix update button behavior on downgrade #101048, @oshirohugo
- Plugins: Fix version tab breaking for non semantic version #101225, @oshirohugo
- PromLib: Take AdHoc filters into account when requesting suggestions without label #101555, @tskarhed
- Prometheus: Fix cursor jump in prometheus code editor #100273, @itsmylife
- Prometheus: Fix operator handling when making label expressions utf-8 friendly #100475, @NWRichmond
- Prometheus: Fix setting utcOffset when absolute time range is used #101065, @itsmylife
- RBAC: Don't check folder access if
annotationPermissionUpdateFT is enabled #99717, @IevaVasiljeva - SSO: Fix team_ids validation for Generic OAuth #100732, @dmihai
- Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows #101776, @IevaVasiljeva
- Share: Fix short links when root_url is different from the browser URL #99950, @AgnesToulet
Breaking changes
- Data source: Change Permissions for query to only have query and not
read OR query(Enterprise)
Plugin development fixes & changes
- GrafanaUI: Deprecate Select in favor of Combobox #100294, @joshhunt
- Multi/Combobox: Use pointer cursor when not focused #100878, @tskarhed
- Slider: Fix text input box being too wide #100138, @joshhunt
11.5.3 (2025-03-25)
Features and enhancements
Bug fixes
- Alerting: Fix token-based Slack image upload to work with channel names #101078, @JacobsonMT
- Auth: Fix AzureAD config UI's ClientAuthentication dropdown #100869, @mgyongyosi
- Dashboard: Fix the unintentional time range and variables updates on saving #101671, @harisrozajac
- Dashboards: Fix missing
v/e/ikeybindings to return back to dashboard #102365, @mdvictor - InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #100977, @aangelisc
- Org redirection: Fix linking between orgs #102089, @ashharrison90
11.4.3 (2025-03-25)
Features and enhancements
- Chore: Bump Go to 1.23.7 #101582, @macabu
- Alerting: Fix token-based Slack image upload to work with channel names #101072, @JacobsonMT
- InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #100987, @aangelisc
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101790, @IevaVasiljeva
11.3.5 (2025-03-25)
Features and enhancements
- Chore: Bump Go to 1.23.7 #101583, @macabu
- Alerting: Fix token-based Slack image upload to work with channel names #101488, @moustafab
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101791, @IevaVasiljeva
11.2.8 (2025-03-25)
Features and enhancements
Bug fixes
- Alerting: Update slack image upload to use new API #101487, @moustafab
- CloudMigrations: Fix OrderBy clause in GetSnapshotList sql handler #102351, @mmandrus
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101795, @IevaVasiljeva
11.1.13 (2025-03-25)
Features and enhancements
- Chore: Bump Go version to 1.23.7 #101562, @macabu
- Alerting: Update slack image upload to use new API #101485, @moustafab
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101796, @IevaVasiljeva
10.4.17 (2025-03-25)
Features and enhancements
- Chore: Bump Go version to 1.23.7 #101565, @macabu
- Alerting: Update slack image upload to use new API #101483, @moustafab
- Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows #101804, @IevaVasiljeva
11.5.2 (2025-02-18)
Features and enhancements
- Docker: Use our own glibc 2.40 binaries #99918, @DanCech
- TransformationFilter: Include transformation outputs in transformation filtering options #99878, @Sergej-Vlasov
- grafana-ui: Update InlineField error prop type to React.ReactNode #100373, @Clarity-89
Bug fixes
- Alerting: Allow specifying uid for new rules added to groups #100450, @yuri-tceretian
- Alerting: Allow specifying uid for new rules added to groups #100450, @yuri-tceretian
- Alerting: Call RLock() before reading sendAlertsTo map #99880, @santihernandezc
- Auth: Fix redirect with JWT auth URL login #100355, @mgyongyosi
- AuthN: Refetch user on "ErrUserAlreadyExists" #100582, @kalleep
- Azure: Correctly set application insights resource values #99599, @aangelisc
- CodeEditor: Fix cursor alignment #99863, @ashharrison90
- DashboardList: Throttle the re-renders #100046, @bfmatei
- Dashboards: Bring back scripted dashboards #100633, @dprokop
- Plugin Metrics: Eliminate data race in plugin metrics middleware #100078, @clord
- RBAC: Don't check folder access if
annotationPermissionUpdateFT is enabled #100117, @IevaVasiljeva
11.4.2 (2025-02-18)
Features and enhancements
Bug fixes
- Auth: Fix redirect with JWT auth URL login #100494, @mgyongyosi
- AuthN: Refetch user on "ErrUserAlreadyExists" #100585, @kalleep
- Azure: Correctly set application insights resource values #99598, @aangelisc
- Dashboards: Bring back scripted dashboards #100629, @dprokop
- Plugin Metrics: Eliminate data race in plugin metrics middleware #100077, @clord
- RBAC: Don't check folder access if
annotationPermissionUpdateFT is enabled #100116, @IevaVasiljeva
11.3.4 (2025-02-18)
Features and enhancements
Bug fixes
- Auth: Fix redirect with JWT auth URL login #100495, @mgyongyosi
- Azure: Correctly set application insights resource values #99597, @aangelisc
- Dashboards: Bring back scripted dashboards #100627, @dprokop
- Plugin Metrics: Eliminate data race in plugin metrics middleware #100076, @clord
11.2.7 (2025-02-18)
Features and enhancements
Bug fixes
- Azure: Correctly set application insights resource values #99596, @aangelisc
11.1.12 (2025-02-18)
Features and enhancements
Bug fixes
- Azure: Correctly set application insights resource values #99595, @aangelisc
11.0.11 (2025-02-18)
Features and enhancements
Bug fixes
- Azure: Correctly set application insights resource values #99594, @aangelisc
10.4.16 (2025-02-18)
Features and enhancements
Bug fixes
11.5.1 (2025-02-03)
Bug fixes
- CodeEditor: Fix cursor alignment #99090, @ashharrison90
- TransformationFilter: Include transformation outputs in transformation filtering options: Include transformation outputs in transformation filtering options #98323, @Sergej-Vlasov
11.5.0 (2025-01-28)
Features and enhancements
- ** CloudMigration:** Create authapi service #96581, @leandro-deveikis
- Alerting: Add new button for exporting new alert rule in HCL format #96785, @soniaAguilarPeiron
- Alerting: Add option to show inactive alerts in alert list panel #96888, @bradleypettit
- Alerting: Add state_periodic_save_batch_size config option #98019, @alexander-akhmetov
- Alerting: Change default for max_attempts to 3. #97461, @stevesg
- Alerting: Consume k8s API for notification policies tree #96147, @konrad147
- Alerting: Enable flag alertingApiServer by default #98282, @yuri-tceretian
- Alerting: Explore button in Insights view #96496, @ppcano
- Alerting: Improve performance ash page #97619, @soniaAguilarPeiron
- Alerting: Make alert rule policies preview use k8s API #97070, @tomratcliffe
- Alerting: Return default builtin templates in k8s templategroup API and UI #96330, @JacobsonMT
- Alerting: Simplify notification step #96430, @soniaAguilarPeiron
- Alerting: Update state manager to take image only once per rule evaluation #98289, @yuri-tceretian
- Analytics Views: Deprecate :dashboardID endpoints in favor of uid/:dashboardUID (Enterprise)
- Analytics: Summaries: Deprecate dashboard_id endpoints in favor of dashboard_uid (Enterprise)
- Announcement Banners: Enable feature for all cloud tiers (Enterprise)
- Announcement banner: Remove feature toggle #98782, @Clarity-89
- Announcement banner: Remove feature toggle (Enterprise)
- Announcement banner: Sort by last updated (Enterprise)
- Auth: Return error when retries have been exhausted for OAuth token refresh #98034, @mgyongyosi
- Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only #96858, @adamyeats
- Azure: Improve Azure Prometheus exemplars UI/UX #97198, @aangelisc
- Azure: Unify credentials in frontend for Prometheus #96568, @yjsong11
- Chore: Bump Go to 1.23.4 #98853, @Proximyst
- Chore: Bump Go to 1.23.4 (Enterprise)
- Chore: Remove experimental Storage UI #96887, @ryantxu
- Chore: Update to node 22 #97779, @ashharrison90
- CloudMigrations: Enable feature toggle by default in 11.5 #98686, @mmandrus
- CloudMigrations: Introduce RBAC role for migration assistant #98588, @macabu
- CloudWatch: Add OpenSearch PPL and SQL support in Logs Insights #97508, @idastambuk
- CloudWatch: Batch different time ranges separately #98230, @iwysiu
- Cloudwatch: Accept empty string for logstimeout and mark errors downstream #96947, @iwysiu
- Cloudwatch: Update grafana-aws-sdk for AWS/AmplifyHosting metrics #97799, @iwysiu
- Dashboard Scene: Shows usages in variables list #96000, @harisrozajac
- Dashboards: Add option to specify explicit percent change text size for stat panels #96952, @XZCendence
- Dashboards: Allow DashboardDS subqueries in MixedDS #97116, @mdvictor
- Dashboards: Update docs of the
overwriteparam in Save Dashboard API Call #97011, @ArturWierzbicki - Datasources: Add toggle to control default behaviour of 'Manage alerts via Alerts UI' toggle #98441, @macabu
- Datasources: Allow clearing trace to logs, metrics and profiles datasource pickers #96554, @adrapereira
- Docker: Don't use legacy ENV syntax #93218, @simPod
- Elasticsearch: Health endpoint should handle http errors #96803, @iwysiu
- Elasticsearch: Use _field_caps instead of _mapping to get fields #97607, @iwysiu
- Explore Profiles: Preinstall for onprem Grafana instances #97775, @ifrost
- Explore metrics: Consolidate filters with the OTel experience #98371, @bohandley
- Explore: Show links to queryless apps #96625, @ifrost
- Expressions: Add notification for Strict Mode behavior in Reduce component #97224, @shubhankarunhale
- Faro: Improve performance of TRACKING_URLS regex #98022, @kpelelis
- FeatureToggles: Make newFiltersUI feature toggle generally available #97460, @Sergej-Vlasov
- Features: Remove cloudwatchMetricInsightsCrossAccount feature toggle #98826, @idastambuk
- Frontend Sandbox: Add switch to toggle plugins frontend sandbox via catalog UI (Enterprise)
- Graphite: Set
maxDataPointsbased on user value in alerting #97178, @aangelisc - Licensing: Tidy up license token database code (Enterprise)
- LoginAttempt: Add setting to control max number of attempts before user login gets locked #97091, @kalleep
- Logs Panel: Add infinite scrolling support for Dashboards and Apps #97095, @matyax
- Logs Panel: Allow text selection without changing Log Details state #96995, @matyax
- Logs Panel: Limit displayed characters to MAX_CHARACTERS #96997, @matyax
- Logs: Added option to show the log line body when displayed fields are used #97209, @matyax
- Logs: Added support to disable and re-enable the popover menu #98254, @matyax
- Logs: Allow scroll to reach the bottom of the log list before loading more #96668, @matyax
- Loki: Added support for disabled operations in Query Builder #96751, @matyax
- Loki: Added support to show label types in Log Details #97284, @matyax
- Loki: Allow regex in
labelderived field #96609, @svennergr - Loki: Hide internal labels #97323, @svennergr
- Loki: Sync query direction with sort order in Explore and Dashboards #98722, @matyax
- OAuth: Support client_secret_jwt for oauth providers when doing token exchange #95455, @naizerjohn-ms
- OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync #96655, @mgyongyosi
- Org Selection: Show correct selected org when select is open #96601, @yincongcyincong
- PDF: Add new zoom options (Enterprise)
- Plugin Extensions: Only load app plugins when necessary #86624, @leventebalogh
- Plugins: Add token to gcom requests #96261, @oshirohugo
- Plugins: Add token to gcom requests (Enterprise)
- Plugins: Disable version install when angular version is not supported #97189, @oshirohugo
- Plugins: Disable version installation for specific plugin types #98597, @oshirohugo
- Plugins: Update to latest go plugin SDK (v0.260.3) w/ arrow v18 #97561, @ryantxu
- Plugins: Use grafana-com sso_api_token #97096, @oshirohugo
- Plugins: Use grafana-com sso_api_token (Enterprise)
- Prometheus datasource: Show info annotations in the UI #97978, @zenador
- Prometheus: Improve handling of special chars in label values #96067, @NWRichmond
- PublicDashboards: Remove publicDashboards FF #96578, @juanicabanas
- Reporting: Add allow list email domain configuration (Enterprise)
- Reporting: Include the apiserver by default and deprecated internal ids (Enterprise)
- RuntimeDataSource: Support in core for runtime registered data sources #93956, @torkelo
- SAML: Add the ability to specify EntityID (Enterprise)
- SAML: Implement correct SLO with NameID and SessionIndex handling (Enterprise)
- Security: Update to Go 1.23.5 - Backport to v11.5.x #99122, @Proximyst
- Security: Update to Go 1.23.5 - Backport to v11.5.x (Enterprise)
- Snapshots: Add RBAC roles for creating and deleting #96126, @evictorero
- Storage: Removes integration tests for MySQL 5.7 since it is EOL #98013, @inf0rmer
- Tempo: Add support for TraceQL Metrics exemplars #96859, @adrapereira
- Tempo: Honor datasource TLS settings for gRPC requests #97484, @mdisibio
- Tempo: Improve handling of multiple values in the Search tab query generation #98427, @adrapereira
- ToolbarButton: Auto width on smaller screen sizes #96023, @yincongcyincong
- Trace View: Set span filters as panel options #98328, @adrapereira
- TransformationFilter: Implement RefID multi picker #96841, @Sergej-Vlasov
- Transformations: Add Delimiter format option to Extract fields #97340, @tskarhed
- Transformations: Add RegExp option to Extract fields transformer #96593, @leeoniya
- Transformations: GroupToMatrix add 0 as special value #97642, @tskarhed
- Zipkin: Run queries through backend #97754, @ivanahuckova
Bug fixes
- Alerting: AlertingQueryRunner should skip descendant nodes of invalid queries #97528, @gillesdemey
- Alerting: Allow notification policy filters to match quoted matchers #98525, @gillesdemey
- Alerting: Fix alert rule list view summaries #98433, @yincongcyincong
- Alerting: Fix alert rules unpausing after moving rule to different folder #97580, @santihernandezc
- Alerting: Fix ash not showing history graph in firefox #98128, @soniaAguilarPeiron
- Alerting: Fix bug when saving a rule more than once #96658, @soniaAguilarPeiron
- Alerting: Fix data-testid in RuleEditorSection #97473, @soniaAguilarPeiron
- Alerting: Fix filtering rule group permissions based on their full path (Enterprise)
- Alerting: Fix go template parsing #97145, @konrad147
- Alerting: Fix label escaping in rule export #97985, @moustafab
- Alerting: Fix missing instances and history when Grafana rule is stored in folder with / #97956, @gillesdemey
- Alerting: Fix navigating to URLs with "%25" #96992, @gillesdemey
- Alerting: Fix no-change scenario in provisioning rule update API #98389, @alexander-akhmetov
- Alerting: Fix not being able to remove a reducer when using range query #97757, @soniaAguilarPeiron
- Alerting: Fix recording rules rendering simplified condition #97497, @soniaAguilarPeiron
- Alerting: Fix removing reducer when inital value is instant #97054, @soniaAguilarPeiron
- Alerting: Fix simplified query step #97046, @soniaAguilarPeiron
- Alerting: Fix slack image uploading to use new api #97817, @moustafab
- Alerting: Fix terraform export of notification policy #98429, @moustafab
- Alerting: Fix updating condition when refId changes #97753, @soniaAguilarPeiron
- Alerting: Fix using stacks- prefix instead of stack- for checking the namespace in boot data #97492, @soniaAguilarPeiron
- Anonymous User: Adds validator service for anonymous users (Enterprise)
- Auth: Fix SAML user IsExternallySynced not being set correctly #98487, @volcanonoodle
- Azure Monitor: Add safety around usage of frame.Meta.Custom struct #97766, @adamyeats
- Azure/GCM: Improve error display #96921, @aangelisc
- CloudWatch: Fix conditions for fetching wildcards #98648, @iwysiu
- CloudWatch: Fix interpolation of log groups when fetching fields #98054, @idastambuk
- Dashboard: Fixes issue with compatability of old DashboardModel.annotations #97328, @torkelo
- Dashboards: Fix issue where filtered panels would not react to variable changes #98718, @oscarkilhed
- Dashboards: Fixes week relative time ranges when weekStart was changed #98167, @torkelo
- Dashboards: Panel react for
timeFromandtimeShiftchanges using variables #98510, @Sergej-Vlasov - DateTimePicker: Fixes issue with date picker showing invalid date #97888, @torkelo
- Fix: Add support for datasource variable queries #98098, @sunker
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97162, @mgyongyosi
- Fix: Double encoding of URLs when using data proxy #98494, @s4kh
- Font: Disable contextual font ligatures #98521, @ashharrison90
- GrafanaUI: Fix inconsistent controlled/uncontrolled state in AutoSizeInput #96696, @joshhunt
- GrafanaUI: Revert: Fix inconsistent controlled/uncontrolled state in AutoSizeInput #97551, @itsmylife
- InfluxDB: Adhoc filters can use template vars as values #98567, @bossinc
- Library Panel: Fix issue where library panels did not display panel links. #98655, @yincongcyincong
- LibraryPanel: Fallback to panel title if library panel title is not set #99411, @ivanortegaalba
- Loki: Fix a bug when reading frames without values but warnings #97197, @svennergr
- Loki: Only hide a set of labels instead of every label starting with
__#98730, @svennergr - Org: Fix redirection logic to work consistently #96521, @yincongcyincong
- Panel inspect: Fix file names of data download included uninterpolated variable names. #98832, @alexrosenfeld10
- Scenes: Upgrade to 5.36.3 #98661, @ivanortegaalba
- Snapshot: Show proper breadcrumb path #98806, @ashharrison90
- Time Picker: Fix "Fiscal year start month" selection behaviour #98576, @ashharrison90
- Unified Storage: Add support for verify-full in postgres #96825, @chaudyg
- Unified Storage: Use tls preferred when grafana db using ssl #97378, @owensmallwood
- Usage Insights: Fix usage insight errors being logged as [object Object] #93502, @mmandrus
Breaking changes
- Loki: Default to
/labelsAPI withqueryparam instead of/seriesAPI #97935, @svennergr
Plugin development fixes & changes
- Grafana UI: Re-add react-router-dom as a dependency #97540, @leventebalogh
11.4.1 (2025-01-28)
Features and enhancements
- Security: Update to Go 1.23.5 - Backport to v11.4.x #99123, @Proximyst
- Security: Update to Go 1.23.5 - Backport to v11.4.x (Enterprise)
Bug fixes
- Alerting: AlertingQueryRunner should skip descendant nodes of invalid queries #97830, @gillesdemey
- Alerting: Fix alert rules unpausing after moving rule to different folder #97583, @santihernandezc
- Alerting: Fix label escaping in rule export #98649, @moustafab
- Alerting: Fix slack image uploading to use new api #98066, @moustafab
- Azure/GCM: Improve error display #97594, @aangelisc
- Dashboards: Fix issue where filtered panels would not react to variable changes #98734, @oscarkilhed
- Dashboards: Fixes issue with panel header showing even when hide time override was enabled #98747, @torkelo
- Dashboards: Fixes week relative time ranges when weekStart was changed #98269, @torkelo
- Dashboards: Panel react for
timeFromandtimeShiftchanges using variables #98659, @Sergej-Vlasov - DateTimePicker: Fixes issue with date picker showing invalid date #97971, @torkelo
- Fix: Add support for datasource variable queries #98119, @sunker
- InfluxDB: Adhoc filters can use template vars as values #98786, @bossinc
- LibraryPanel: Fallback to panel title if library panel title is not set #99410, @ivanortegaalba
Plugin development fixes & changes
- Grafana UI: Re-add react-router-dom as a dependency #98422, @leventebalogh
11.3.3 (2025-01-28)
Features and enhancements
- Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only #97576, @adamyeats
- Security: Update to Go 1.23.5 - Backport to v11.3.x #99124, @Proximyst
- Security: Update to Go 1.23.5 - Backport to v11.3.x (Enterprise)
Bug fixes
- Alerting: AlertingQueryRunner should skip descendant nodes of invalid queries #97829, @gillesdemey
- Azure/GCM: Improve error display #97593, @aangelisc
- Dashboard: Fixes issue with compatability of old DashboardModel.annotations #97467, @torkelo
- Dashboards: Fix issue where filtered panels would not react to variable changes #98733, @oscarkilhed
- Dashboards: Fixes issue with panel header showing even when hide time override was enabled #97389, @torkelo
- Dashboards: Fixes week relative time ranges when weekStart was changed #98268, @torkelo
- DateTimePicker: Fixes issue with date picker showing invalid date #97970, @torkelo
- Fix: Add support for datasource variable queries #98118, @sunker
- InfluxDB: Adhoc filters can use template vars as values #98785, @bossinc
- Unified Storage: Use tls preferred when grafana db using ssl #97379, @owensmallwood
Plugin development fixes & changes
- Grafana UI: Re-add react-router-dom as a dependency #98421, @leventebalogh
11.2.6 (2025-01-28)
Features and enhancements
- Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only #97565, @adamyeats
- Security: Update to Go 1.22.11 - Backport to v11.2.x #99125, @Proximyst
- Security: Update to Go 1.22.11 - Backport to v11.2.x (Enterprise)
Bug fixes
- Azure/GCM: Improve error display #97591, @aangelisc
11.1.11 (2025-01-28)
Features and enhancements
- Security: Update to Go 1.22.11 - Backport to v11.1.x #99126, @Proximyst
- Security: Update to Go 1.22.11 - Backport to v11.1.x (Enterprise)
Bug fixes
- Azure/GCM: Improve error display #97595, @aangelisc
11.0.10 (2025-01-28)
Features and enhancements
- Security: Update to Go 1.22.11 - Backport to v11.0.x #99127, @Proximyst
- Security: Update to Go 1.22.11 - Backport to v11.0.x (Enterprise)
Bug fixes
- Azure/GCM: Improve error display #97592, @aangelisc
10.4.15 (2025-01-28)
Features and enhancements
- Security: Update to Go 1.22.11 - Backport to v10.4.x #99128, @Proximyst
- Security: Update to Go 1.22.11 - Backport to v10.4.x (Enterprise)
Bug fixes
- Azure/GCM: Improve error display #97590, @aangelisc
11.4.0 (2024-12-05)
Features and enhancements
- Cloudwatch: OpenSearch PPL and SQL support in Logs Insights
11.3.2 (2024-12-04)
Features and enhancements
- Backport: Announcement Banners: Enable feature for all cloud tiers (Enterprise)
Bug fixes
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97262, @mgyongyosi
11.2.5 (2024-12-04)
Bug fixes
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97264, @mgyongyosi
11.1.10 (2024-12-04)
Bug fixes
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97261, @mgyongyosi
11.0.9 (2024-12-04)
Bug fixes
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97265, @mgyongyosi
10.4.14 (2024-12-04)
Bug fixes
- Fix: Do not fetch Orgs if the user is authenticated by apikey/sa or render key #97263, @mgyongyosi
11.3.1 (2024-11-19)
Features and enhancements
- Alerting: Make context deadline on AlertNG service startup configurable #96135, @fayzal-g
- MigrationAssistant: Restrict dashboards, folders and datasources by the org id of the signed in user #96345, @leandro-deveikis
- User: Check SignedInUser OrgID in RevokeInvite #95490, @mgyongyosi
Bug fixes
- Alerting: Fix escaping of silence matchers in utf8 mode #95347, @tomratcliffe
- Alerting: Fix overflow for long receiver names #95133, @gillesdemey
- Alerting: Fix saving advanced mode toggle state in the alert rule editor #95981, @alexander-akhmetov
- Alerting: Fix setting datasource uid, when datasource is string in old version #96273, @soniaAguilarPeiron
- Alerting: Force refetch prom rules when refreshing panel #96125, @soniaAguilarPeiron
- Anonymous User: Adds validator service for anonymous users #94994, @leandro-deveikis
- Anonymous User: Adds validator service for anonymous users (Enterprise)
- Azure Monitor: Support metric namespaces fallback #95155, @aangelisc
- Azure: Fix duplicated traces in multi-resource trace query #95247, @aangelisc
- Azure: Handle namespace request rejection #95909, @aangelisc
- CloudWatch: Interpolate region in log context query #94990, @iwysiu
- Dashboard datasource: Return annotations as series when query topic is "annotations" #95971, @kaydelaney
- Dashboard: Append orgId to URL #95963, @bfmatei
- Dashboards: Fixes performance issue expanding a row #95321, @torkelo
- Flame Graph: Fix crash when it receives empty data #96211, @yincongcyincong
- Folders: Add admin permissions upon creation of a folder w. SA #95365, @eleijonmarck
- Folders: Don't show error pop-up if the user can't fetch the root folder #95600, @IevaVasiljeva
- Migration: Remove table aliasing in delete statement to make it work for mariadb #95232, @kalleep
- ServerLock: Fix pg concurrency/locking issue #95935, @mgyongyosi
- Service Accounts: Run service account creation in transaction #94803, @IevaVasiljeva
- Table: Fix text wrapping applying to wrong field #95425, @codeincarnate
- Unified Storage: Use ssl_mode instead of sslmode #95662, @chaudyg
11.2.4 (2024-11-19)
Features and enhancements
- Alerting: Make context deadline on AlertNG service startup configurable #96133, @fayzal-g
- MigrationAssistant: Restrict dashboards, folders and datasources by the org id of the signed in user #96344, @leandro-deveikis
- Transformations: Add 'transpose' transform #95076, @jmdane
- User: Check SignedInUser OrgID in RevokeInvite #95489, @mgyongyosi
Bug fixes
- Alerting: Force refetch prom rules when refreshing panel #96124, @soniaAguilarPeiron
- Anonymous User: Adds validator service for anonymous users #94993, @leandro-deveikis
- Anonymous User: Adds validator service for anonymous users (Enterprise)
- Azure Monitor: Support metric namespaces fallback #95154, @aangelisc
- Azure: Fix duplicated traces in multi-resource trace query #95246, @aangelisc
- Azure: Handle namespace request rejection #95908, @aangelisc
- Folders: Add admin permissions upon creation of a folder w. SA #95416, @eleijonmarck
- Migration: Remove table aliasing in delete statement to make it work for mariadb #95231, @kalleep
- ServerLock: Fix pg concurrency/locking issue #95934, @mgyongyosi
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94959, @samjewell
11.1.9 (2024-11-19)
Features and enhancements
- Alerting: Make context deadline on AlertNG service startup configurable #96132, @fayzal-g
- User: Check SignedInUser OrgID in RevokeInvite #95488, @mgyongyosi
Bug fixes
- Alerting: Force refetch prom rules when refreshing panel #96123, @soniaAguilarPeiron
- Anonymous User: Adds validator service for anonymous users #94992, @leandro-deveikis
- Anonymous User: Adds validator service for anonymous users (Enterprise)
- Azure Monitor: Support metric namespaces fallback #95153, @aangelisc
- Azure: Fix duplicated traces in multi-resource trace query #95245, @aangelisc
- Azure: Handle namespace request rejection #95907, @aangelisc
- Migration: Remove table aliasing in delete statement to make it work for mariadb #95230, @kalleep
- Prometheus: Fix interpolating adhoc filters with template variables #95977, @cazeaux
- ServerLock: Fix pg concurrency/locking issue #95933, @mgyongyosi
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94969, @scottlepp
11.0.8 (2024-11-19)
Features and enhancements
- Alerting: Make context deadline on AlertNG service startup configurable #96131, @fayzal-g
- User: Check SignedInUser OrgID in RevokeInvite #95487, @mgyongyosi
Bug fixes
- Anonymous User: Adds validator service for anonymous users #95151, @leandro-deveikis
- Anonymous User: Adds validator service for anonymous users (Enterprise)
- Azure Monitor: Support metric namespaces fallback #95152, @aangelisc
- Azure: Fix duplicated traces in multi-resource trace query #95244, @aangelisc
- Azure: Handle namespace request rejection #95906, @aangelisc
- Migration: Remove table aliasing in delete statement to make it work for mariadb #95229, @kalleep
- Prometheus: Fix interpolating adhoc filters with template variables #95986, @cazeaux
- ServerLock: Fix pg concurrency/locking issue #95932, @mgyongyosi
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94971, @samjewell
10.4.13 (2024-11-19)
11.3.0+security-01 (2024-11-12)
Bug fixes
- MigrationAssistant: Fix Migration Assistant issue [CVE-2024-9476]
11.2.3+security-01 (2024-11-12)
- MigrationAssistant: Fix Migration Assistant issue [CVE-2024-9476]
10.4.12 (2024-11-08)
Bug fixes
11.3.0 (2024-10-22)
Features and enhancements
- Alerting: Add manage permissions UI logic for Contact Points #92885, @tomratcliffe
- Alerting: Allow linking to silence form with
__alert_rule_uid__value preset #93526, @tomratcliffe - Alerting: Hide query name when using simplified mode in the alert rule #93779, @soniaAguilarPeiron
- Alerting: Limit and clean up old alert rules versions #89754, @igloo12
- Alerting: Style nits for the simple query mode #93930, @soniaAguilarPeiron
- Alerting: Update texts in annotations step #93977, @soniaAguilarPeiron
- Alerting: Use useProduceNewAlertmanagerConfiguration for contact points #88456, @gillesdemey
- Auth: Attach external session info to Grafana session #93849, @mgyongyosi
- Auth: Replace jmespath/go-jmespath with jmespath-community/go-jmespath #94203, @mgyongyosi
- CloudMigrations: Add support for migration of Library Elements (Panels) resources #93898, @macabu
- Cloudwatch: Update grafana-aws-sdk #94155, @iwysiu
- Explore Logs: Preinstall for onprem Grafana instances #94221, @svennergr
- ExploreMetrics: Ensure compatibility with Incremental Querying #94355, @NWRichmond
- FieldConfig: Add support for Actions #92874, @adela-almasan
- Plugin Extensions: Require meta-data to be defined in
plugin.jsonduring development mode #93429, @leventebalogh - Reporting: Display template variables in the PDF (Enterprise)
- Tempo: Add deprecation notice for Aggregate By #94050, @joey-grafana
Bug fixes
- Alerting/Chore: Fix TimeRangeInput not working across multiple months #93622, @tomratcliffe
- Alerting: Fix default value for input in simple condition #94248, @soniaAguilarPeiron
- Alerting: Fix eval interval not being saved when creating a new group #93821, @tomratcliffe
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93940, @alexweav
- Alerting: Fix panics when attempting to create an Alertmanager after failing #94023, @santihernandezc
- DashboardScene: Fixes url issue with subpath when exiting edit mode #93962, @torkelo
- Dashboards: Enable scenes by default #93818, @ivanortegaalba
- Dashboards: Fixes view & edit keyboard shortcuts when grafana is behind a subpath #93955, @torkelo
- ElasticSearch: Fix errorsource in newInstanceSettings #93859, @iwysiu
- Reporting: Fix reports on multi-org instance (Enterprise)
- SubMenu: Fix expanding sub menu items on touch devices #93208, @yincongcyincong
11.2.3 (2024-10-22)
Bug fixes
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93947, @alexweav
- AzureMonitor: Fix App Insights portal URL for multi-resource trace queries #94475, @aangelisc
- Canvas: Allow API calls to grafana origin #94129, @adela-almasan
- Folders: Correctly show new folder button under root folder #94712, @IevaVasiljeva
- OrgSync: Do not set default Organization for a user to a non-existent Organization #94549, @mgyongyosi
- Plugins: Skip install errors if dependency plugin already exists #94717, @wbrowne
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94959, @samjewell
11.2.2+security-01 (2024-10-17)
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.2.1+security-01 (2024-10-17)
Features and enhancements
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.1.8 (2024-10-22)
Bug fixes
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93948, @alexweav
- AzureMonitor: Fix App Insights portal URL for multi-resource trace queries #94474, @aangelisc
- OrgSync: Do not set default Organization for a user to a non-existent Organization #94551, @mgyongyosi
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94969, @scottlepp
11.1.7+security-01 (2024-10-17)
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.1.6+security-01 (2024-10-17)
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.0.6+security-01 (2024-10-17)
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.0.5+security-01 (2024-10-17)
Bug fixes
- SQL Expressions: Fixes CVE-2024-9264
11.2.2 (2024-10-01)
Features and enhancements
- Chore: Bump Go to 1.22.7 #93353, @hairyhenderson
- Chore: Bump Go to 1.22.7 (Enterprise)
- Data sources: Hide the datasource redirection banner for users who can't interact with data sources #93103, @IevaVasiljeva
Bug fixes
- Alerting: Fix preview of silences when label name contains spaces #93051, @tomratcliffe
- Alerting: Make query wrapper match up datasource UIDs if necessary #93114, @tomratcliffe
- AzureMonitor: Deduplicate resource picker rows #93705, @aangelisc
- AzureMonitor: Improve resource picker efficiency #93440, @aangelisc
- AzureMonitor: Remove Basic Logs retention warning #93123, @aangelisc
- CloudWatch: Fix segfault when migrating legacy queries #93544, @iwysiu
- Correlations: Limit access to correlations page to users who can access Explore #93676, @ifrost
- DashboardScene: Fix broken error handling and error rendering #93690, @torkelo
- Plugins: Avoid returning 404 for
AutoEnabledapps #93488, @wbrowne
11.1.7 (2024-10-01)
Features and enhancements
- Chore: Bump Go to 1.22.7 #93355, @hairyhenderson
- Chore: Bump Go to 1.22.7 (Enterprise)
Bug fixes
- Alerting: Fix preview of silences when label name contains spaces #93050, @tomratcliffe
- Alerting: Make query wrapper match up datasource UIDs if necessary #93115, @tomratcliffe
- AzureMonitor: Deduplicate resource picker rows #93704, @aangelisc
- AzureMonitor: Improve resource picker efficiency #93439, @aangelisc
- AzureMonitor: Remove Basic Logs retention warning #93122, @aangelisc
- Correlations: Limit access to correlations page to users who can access Explore #93675, @ifrost
- Plugins: Avoid returning 404 for
AutoEnabledapps #93487, @wbrowne
11.0.7 (2024-10-22)
Bug fixes
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93949, @alexweav
- AzureMonitor: Fix App Insights portal URL for multi-resource trace queries #94489, @aangelisc
- Dashboard: Make dashboard search faster #94702, @knuzhdin
- OrgSync: Do not set default Organization for a user to a non-existent Organization #94552, @mgyongyosi
- ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability #94971, @samjewell
11.0.6 (2024-10-01)
Features and enhancements
- Chore: Bump Go to 1.22.7 #93358, @hairyhenderson
- Chore: Bump Go to 1.22.7 (Enterprise)
Bug fixes
- AzureMonitor: Deduplicate resource picker rows #93703, @aangelisc
- AzureMonitor: Improve resource picker efficiency #93438, @aangelisc
- Correlations: Limit access to correlations page to users who can access Explore #93674, @ifrost
- Plugins: Avoid returning 404 for
AutoEnabledapps #93486, @wbrowne
10.4.11 (2024-10-22)
Bug fixes
- Alerting: Fix broken panelId links #94686, @gillesdemey
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93946, @alexweav
- Dashboard: Make dashboard search faster #94703, @knuzhdin
10.4.10 (2024-10-01)
Features and enhancements
- Chore: Bump Go to 1.22.7 #93359, @hairyhenderson
- Chore: Bump Go to 1.22.7 (Enterprise)
Bug fixes
- AzureMonitor: Deduplicate resource picker rows #93702, @aangelisc
- Correlations: Limit access to correlations page to users who can access Explore #93673, @ifrost
10.3.12 (2024-10-22)
Bug fixes
- Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] #93945, @alexweav
- Dashboard: Make dashboard search faster #94704, @knuzhdin
10.3.11 (2024-10-01)
Features and enhancements
- Chore: Bump Go to 1.22.7 #93360, @hairyhenderson
- Chore: Bump Go to 1.22.7 (Enterprise)
Bug fixes
11.2.1 (2024-09-26)
Features and enhancements
- Alerting: Support for optimistic concurrency in priovisioning Tempate API #92251, @yuri-tceretian
- Logs panel: Enable displayedFields in dashboards and apps #92675, @matyax
- State timeline: Add pagination support #92257, @kevinputera
Bug fixes
- Authn: No longer hash service account token twice during authentication #92639, @kalleep
- CloudMigrations: Fix snapshot creation on Windows systems #92981, @macabu
- DashGPT: Fixes issue with generation on Safari #92952, @kaydelaney
- Dashboard: Fix Annotation runtime error when a data source does not support annotations #92830, @axelavargas
- Grafana SQL: Fix broken import in NumberInput component #92808, @chessman
- Logs: Show older logs button when infinite scroll is enabled and sort order is descending #92867, @matyax
- RBAC: Fix an issue with server admins not being able to manage users in orgs that they don't belong to #92274, @IevaVasiljeva
- RBAC: Fix an issue with server admins not being able to manage users in orgs that they don't belong to (Enterprise)
- Reporting: Disable dashboardSceneSolo when rendering PDFs the old way (Enterprise)
- Templating: Fix searching non-latin template variables #92893, @leeoniya
- TutorialCard: Fix link to tutorial not opening #92647, @eledobleefe
- Alerting: Fixed CVE-2024-8118.
Plugin development fixes & changes
- AutoSizeInput: Allow to be controlled by value #92999, @ivanortegaalba
11.1.6 (2024-09-26)
Features and enhancements
Bug fixes
- Templating: Fix searching non-latin template variables #92892, @leeoniya
- TutorialCard: Fix link to tutorial not opening #92646, @eledobleefe
Plugin development fixes & changes
11.0.5 (2024-09-26)
Features and enhancements
Bug fixes
- Provisioning: Prevent provisioning folder errors from failing startup #92588, @suntala
- TutorialCard: Fix link to tutorial not opening #92645, @eledobleefe
- Alerting: Fixed CVE-2024-8118.
10.4.9 (2024-09-26)
Features and enhancements
Bug fixes
- Provisioning: Prevent provisioning folder errors from failing startup #92591, @suntala
- Alerting: Fixed CVE-2024-8118.
10.3.10 (2024-09-26)
Bug fixes
- Alerting: Fixed CVE-2024-8118.
11.2.0 (2024-08-27)
Features and enhancements
- @grafana/data: Introduce new getTagKeys/getTagValues response interface #88369, @kaydelaney
- AWS: Update deprecated aws-sdk functions from env variable versions #89643, @iwysiu
- Alerting: Add ha_reconnect_timeout configuration option #88823, @JacobValdemar
- Alerting: Add setting for maximum allowed rule evaluation results #89468, @alexander-akhmetov
- Alerting: Add warning in telegram contact point #89397, @soniaAguilarPeiron
- Alerting: Central alert history part4 #90088, @soniaAguilarPeiron
- Alerting: Don't crash the page when trying to filter rules by regex #89466, @tomratcliffe
- Alerting: Enable remote primary mode using feature toggles #88976, @santihernandezc
- Alerting: Hide edit/view rule buttons according to deleting/creating state #90375, @tomratcliffe
- Alerting: Implement UI for grafana-managed recording rules #90360, @soniaAguilarPeiron
- Alerting: Improve performance of /api/prometheus for large numbers of alerts. #89268, @stevesg
- Alerting: Include a list of ref_Id and aggregated datasource UIDs to alerts when state reason is NoData #88819, @wasim-nihal
- Alerting: Instrument outbound requests for Loki Historian and Remote Alertmanager with tracing #89185, @alexweav
- Alerting: Limit instances on alert detail view unless in instances tab #89368, @gillesdemey
- Alerting: Make alert group editing safer #88627, @gillesdemey
- Alerting: Make whitespace more visible on labels #90223, @tomratcliffe
- Alerting: Remove option to return settings from api/v1/receivers and restrict provisioning action access #90861, @JacobsonMT
- Alerting: Resend resolved notifications for ResolvedRetention duration #88938, @JacobsonMT
- Alerting: Show Insights page only on cloud (when required ds's are available) #89679, @soniaAguilarPeiron
- Alerting: Show repeat interval in timing options meta #89414, @gillesdemey
- Alerting: Support median in reduce expressions #91119, @alexander-akhmetov
- Alerting: Track central ash interactions #90330, @soniaAguilarPeiron
- Alerting: Update alerting state history API to authorize access using RBAC #89579, @yuri-tceretian
- Alerting: Update warning message for Telegram parse_mode and default to empty value #89630, @tomratcliffe
- Alerting: Use Runbook URL label everywhere and add validation in the alert rule… #90523, @soniaAguilarPeiron
- Alerting: Use cloud notifier types for metadata on Cloud AMs #91054, @tomratcliffe
- Alerting: Use stable identifier of a group when export to HCL #90196, @KyriosGN0
- Alerting: Use stable identifier of a group,contact point,mute timing when export to HCL #90917, @KyriosGN0
- Alertmanager: Support limits for silences #90826, @santihernandezc
- Angular deprecation: Disable dynamic angular inspector if CheckForPluginUpdates is false #91194, @xnyo
- App events: Add "info" variant #89903, @Clarity-89
- Auth: Add org to role mappings support to AzureAD/Entra integration #88861, @mgyongyosi
- Auth: Add organization mapping configuration to the UI #90003, @mgyongyosi
- Auth: Add support for escaping colon characters in org_mapping #89951, @mgyongyosi
- Azure: Add new Azure infrastructure dashboards #88869, @yves-chan
- BrowseDashboards: Update results when starred param changes #89944, @Clarity-89
- Caching: Handle memcached reconnects #91498, @mmandrus
- Calendar: Add labels for next/previous month #89019, @ashharrison90
- Canvas: Element level data links #89079, @adela-almasan
- Canvas: Improved tooltip #90162, @adela-almasan
- Canvas: Support template variables in base URL of actions #91227, @nmarrs
- Chore: Add missing build elements to Dockerfile #89714, @azilly-de
- Chore: Add unit test for cloudmigration package #88868, @leandro-deveikis
- Chore: Commit results of bingo get #90256, @mmandrus
- CloudMigrations: Change onPremToCloudMigrations feature toggle to public preview #90757, @mmandrus
- CloudWatch: Add errorsource for QueryData #91085, @iwysiu
- CloudWatch: Update grafana-aws-sdk for updated metrics #91364, @iwysiu
- Cloudwatch: Clear cached PDC transport when PDC is disabled #91357, @njvrzm
- Cloudwatch: Metrics Query Builder should clear old query #88950, @iwysiu
- Cloudwatch: Remove awsDatasourcesNewFormStyling feature toggle #90128, @idastambuk
- Cloudwatch: Rename Metric Query to Metric Insights #89955, @idastambuk
- Cloudwatch: Round up endTime in GetMetricData to next minute #89341, @idastambuk
- Dashboard: Use preferred timezone on create #89833, @Clarity-89
- Datalinks: UX improvements #91352, @adela-almasan
- DateTimePicker: Add "timeZone" prop #90031, @Clarity-89
- Dynatrace: Add to list of DS with custom label logic #90258, @fabrizio-grafana
- Elasticsearch: Decouple backend from infra/http #90408, @njvrzm
- Elasticsearch: Decouple backend from infra/log #90527, @njvrzm
- Elasticsearch: Decouple backend from infra/tracing #90528, @njvrzm
- Explore: Add setting for default time offset #90401, @gelicia
- Feat: Extending report interaction with static context that can be appended to all interaction events #88927, @tolzhabayev
- Feature management: Add openSearchBackendFlowEnabled feature toggle #89208, @idastambuk
- Features: Add cloudwatchMetricInsightsCrossAccount feature toggle #89848, @idastambuk
- Features: Release Cloudwatch Metric Insights cross-account querying to public preview #91066, @idastambuk
- FlameGraph: Remove flameGraphItemCollapsing feature toggle #90190, @joey-grafana
- GCP: Update GKE monitoring dashboard #90091, @aangelisc
- GOps: Add Grafana SLO steps to IRM configuration tracker #88098, @obetomuniz
- Grafana: Enables use of encrypted certificates with password for https #91418, @leandro-deveikis
- IDToken: Add current user's DisplayName to the ID token #90992, @colin-stuart
- IDToken: Add current user's Username and UID to the ID token #90240, @mgyongyosi
- Keybinds: Allow move time range shortcuts (t left / t right) to be chained #88904, @joshhunt
- LibraryPanels: Use new folder picker when creating a library panel #89228, @joshhunt
- Log: Added panel support for filtering callbacks #88980, @matyax
- Logs: Add log line to content outline when clicking on datalinks #90207, @gtk-grafana
- Loki: Add option to issue forward queries #91181, @svennergr
- Loki: Added support for negative numbers in LogQL #88719, @matyax
- Loki: Also replace
stepwith vars #91031, @svennergr - Loki: Remove
instantquery type from Log queries #90137, @svennergr - Loki: Respect pre-selected filters in adhoc filter queries #89022, @ivanahuckova
- MSSQL: Password auth for Azure AD #89746, @bossinc
- Metrics: Add ability to disable classic histogram for HTTP metric #88315, @hairyhenderson
- Nav: Add items to saved #89908, @Clarity-89
- OpenAPI: Document the
/api/healthendpoint #88203, @julienduchesne - PanelChrome: Use labelledby for accessible title #88781, @tskarhed
- Plugins: Add filters by update available #91526, @oshirohugo
- Plugins: Add logs to for plugin management actions #90587, @oshirohugo
- Plugins: Disable install controls for provisioned plugin in cloud #90479, @oshirohugo
- Plugins: Expose functions to plugins for checking RBAC permissions #89047, @jackw
- Plugins: Improve levitate / breaking changes report in grafana/grafana #89822, @oshirohugo
- Plugins: Support > 1 levels of plugin dependencies #90174, @wbrowne
- Plugins: Update CLI check if plugin is already installed #91213, @wbrowne
- Prometheus: Deprecation message for SigV4 in core Prom #90250, @bohandley
- Prometheus: Reintroduce Azure audience override feature flag #90339, @aangelisc
- RBAC: Allow plugins to use scoped actions #90946, @gamab
- RBAC: Default to plugins.app:access for plugin includes #90969, @gamab
- Restore dashboards: Add RBAC #90270, @Clarity-89
- Revert: Calcs: Update diff percent to be a percent #91563, @Develer
- SAML: Add button to generate a certificate and private key (Enterprise)
- SSO: Make SAML certificate/private key optional (Enterprise)
- SearchV2: Support soft deletion #90217, @ryantxu
- Select: Add orange indicator to selected item #88695, @tskarhed
- Snapshots: Remove deprecated option snapshot_remove_expired #91231, @ryantxu
- Table panel: Add alt and title text options to image cell type #89930, @codeincarnate
- Tempo: Add toggle for streaming #88685, @fabrizio-grafana
- Tempo: Remove kind=server from metrics summary #89419, @joey-grafana
- Tempo: Run
go get#89335, @fabrizio-grafana - Tempo: TraceQL metrics step option #89434, @adrapereira
- Tempo: Virtualize tags select to improve performance #90269, @adrapereira
- Tempo: Virtualized search dropdowns for attribute values #88569, @RonanQuigley
- TimePicker: Improve screen reader support #89409, @tskarhed
- TimeRangePicker: Add weekStart prop #89650, @Clarity-89
- TimeRangePicker: Use week start #89765, @Clarity-89
- Tooltip: Add tooltip support to Histogram #89196, @adela-almasan
- Trace View: Add Session for this span button #89656, @javiruiz01
- Tracing: Add regex support for span filters #89885, @ektasorathia
- Transformations: Add variable support to select groupingToMatrix #88551, @kazeborja
- Transformations: Move transformation variables to general availability #89111, @samjewell
- Transformations: Promote add field from calc stat function cumulative and window calcs as generally available #91160, @nmarrs
- Transformations: Promote format string as generally available #91161, @nmarrs
- Transformations: Promote group to nested table as generally available #90253, @nmarrs
- Users: Add config option to control how often last_seen is updated #88721, @parambath92
- XYChart: Promote to generally available #91417, @nmarrs
Bug fixes
- Admin: Fixes logic for enabled a user #88117, @gonvee
- Alerting: Add validation for path separators in the rule group edit modal #90887, @gillesdemey
- Alerting: Allow future relative time #89405, @gillesdemey
- Alerting: Disable simplified routing when internal alert manager is disabled #90648, @soniaAguilarPeiron
- Alerting: Do not check evaluation interval for external rulers #89354, @gillesdemey
- Alerting: Do not count rule health for totals #89349, @gillesdemey
- Alerting: Fix Recording Rules creation issues #90362, @tomratcliffe
- Alerting: Fix contact point export 500 error and notifications/receivers missing settings #90342, @JacobsonMT
- Alerting: Fix permissions for prometheus rule endpoints #91409, @yuri-tceretian
- Alerting: Fix persisting result fingerprint that is used by recovery threshold #91224, @yuri-tceretian
- Alerting: Fix rule storage to filter by group names using case-sensitive comparison #88992, @yuri-tceretian
- Alerting: Fix saving telegram contact point to Cloud AM config #89182, @tomratcliffe
- Alerting: Fix setting of existing Telegram Chat ID value #89287, @tomratcliffe
- Alerting: Fix silencing from policy instances #90417, @soniaAguilarPeiron
- Alerting: Fix some status codes returned from provisioning API. #90117, @stevesg
- Alerting: Fix stale values associated with states that have gone to NoData, unify values calculation #89807, @alexweav
- Alerting: Refactor PromQL-style matcher parsing #90129, @gillesdemey
- Alerting: Skip fetching alerts for unsaved dashboards #90061, @gillesdemey
- Alerting: Skip loading alert rules for dashboards when disabled #89361, @gillesdemey
- Alerting: Support
utf8_strict_mode: falsein Mimir #90092, @gillesdemey - Alerting: Time interval Delete API to check for usages in alert rules #90500, @yuri-tceretian
- Analytics: Fix ApplicationInsights integration #89299, @ashharrison90
- Azure Monitor: Add validation for namespace field in AdvancedResourcePicker when entering a forward slash #89288, @adamyeats
- AzureMonitor: Fix out of bounds error when accessing
metricNamespaceArrayandresourceNameArrayinbuildResourceURI#89222, @adamyeats - BrowseDashboards: Prepend subpath to New Browse Dashboard actions #89109, @joshhunt
- CloudWatch: Fix labels for raw metric search queries #88943, @iwysiu
- CloudWatch: Fix raw queries with dimensions set #90348, @iwysiu
- Correlations: Fix wrong target data source name in the form #90340, @aocenas
- DashboardScene: Fixes issue removing override rule #89124, @torkelo
- DashboardScene: Fixes lack of re-render when updating field override properties #88796, @torkelo
- DataSourcePicker: Create new data source does not work for subpath #90536, @ivanortegaalba
- Docs: Add fixed role UUIDs to docs for terraform provisioning #89457, @Jguer
- Echo: Suppress errors from frontend-metrics API call failing #89379, @joshhunt
- Explore Metrics: Implement grouping with metric prefixes #89481, @itsmylife
- Fix: Portuguese Brazilian wasn't loading translations #89302, @JoaoSilvaGrafana
- Folders: Fix folder pagination for cloud instances with many folders #90008, @IevaVasiljeva
- Folders: Improve folder move permission checks #90588, @IevaVasiljeva
- InfluxDB: Fix query builder produces invalid SQL query when using wildcard column name #89032, @wasim-nihal
- Inspect: Include only BOM char for excel files #88994, @ivanortegaalba
- Jaeger: Fix calling of search query with the correct time range #90320, @EgorKluch
- Metrics: Fix internal metrics endpoint not accessible from browser if basic auth is enabled #86904, @wasim-nihal
- Notifications: Redact URL from errors #85687, @alexweav
- PDF: Fix layout for page-size panel after row (Enterprise)
- Panel: Fix text aliasing bug when panel is loading #89538, @ashharrison90
- Plugin extensions: Return react components from
usePluginComponents()#89237, @leventebalogh - Plugins: Ensure grafana cli can install multiple plugin dependencies #91230, @yincongcyincong
- Prometheus: Fix interpolating adhoc filters with template variables #88626, @cazeaux
- Prometheus: Fix query builder visualization when a query has by() clause for quantile #88480, @yuri-rs
- QueryEditor: Break with Scenes because the default query is not empty string #90583, @ivanortegaalba
- RBAC: Fix seeder failures when inserting duplicated permissions (Enterprise)
- RBAC: List only the folders that the user has access to #88599, @IevaVasiljeva
- Scenes/Dashboards: Fix issue where changes in panel height weren't saved #91125, @kaydelaney
- Scenes: Fixes issue with panel repeat height calculation #90221, @kaydelaney
- Scenes: Implement 't a' shortcut #89619, @kaydelaney
- Table Panel: Fix Image hover without datalinks #89751, @codeincarnate
- Table component: Fix sub-table rows not displaying correctly #89082, @codeincarnate
- Tempo: Fix grpc streaming support over pdc-agent #89883, @taylor-s-dean
- Tempo: Fix query history #89991, @joey-grafana
Breaking changes
- Folders: Allow folder editors and admins to create subfolders without any additional permissions #91215, @IevaVasiljeva
Plugin development fixes & changes
11.1.5 (2024-08-27)
Bug fixes
- Alerting: Fix permissions for prometheus rule endpoints #91414, @yuri-tceretian
- Alerting: Fix persisting result fingerprint that is used by recovery threshold #91290, @yuri-tceretian
- Auditing: Fix a possible crash when audit logger parses responses for failed requests (Enterprise)
- RBAC: Fix an issue with server admins not being able to manage users in orgs that they don't belong to #92273, @IevaVasiljeva
- RBAC: Fix an issue with server admins not being able to manage users in orgs that they dont belong to (Enterprise)
- RBAC: Fix seeder failures when inserting duplicated permissions (Enterprise)
- Snapshots: Fix panic when snapshot_remove_expired is true #91232, @ryantxu
- VizTooltip: Fix positioning at bottom and right edges on mobile #92137, @leeoniya
Plugin development fixes & changes
11.0.4 (2024-08-27)
Bug fixes
- Alerting: Fix persisting result fingerprint that is used by recovery threshold #91328, @yuri-tceretian
- Auditing: Fix a possible crash when audit logger parses responses for failed requests (Enterprise)
- RBAC: Fix seeder failures when inserting duplicated permissions (Enterprise)
- Snapshots: Fix panic when snapshot_remove_expired is true #91330, @ryantxu
10.4.8 (2024-08-27)
Bug fixes
- Alerting: Fix persisting result fingerprint that is used by recovery threshold #91331, @yuri-tceretian
- Auditing: Fix a possible crash when audit logger parses responses for failed requests (Enterprise)
- RBAC: Fix seeder failures when inserting duplicated permissions (Enterprise)
- Snapshots: Fix panic when snapshot_remove_expired is true #91329, @ryantxu
10.3.9 (2024-08-27)
11.1.4 (2024-08-14)
Bug fixes
- Swagger: Fixed CVE-2024-6837.
11.0.3 (2024-08-14)
Bug fixes
- Swagger: Fixed CVE-2024-6837.
10.4.7 (2024-08-14)
Bug fixes
- Swagger: Fixed CVE-2024-6837.
11.1.3 (2024-07-26)
Bug fixes
11.0.2 (2024-07-25)
Features and enhancements
- Alerting: Update grafana/alerting to c340765c985a12603bbdfcd10576ddfdbf9dc284 #90388, @yuri-tceretian
- Prometheus: Reintroduce Azure audience override feature flag #90558, @aangelisc
Bug fixes
- Alerting: Skip loading alert rules for dashboards when disabled #89904, @gillesdemey
- Folders: Improve folder move permission checks #90849, @IevaVasiljeva
- Folders: Improve folder move permission checks #90849, @IevaVasiljeva
- Folders: Improve folder move permission checks #90849, @IevaVasiljeva
10.4.6 (2024-07-25)
Features and enhancements
- Alerting: Update grafana/alerting to ce0d024b67ea714b06d0f5309025466f50e381ef #90389, @yuri-tceretian
- Prometheus: Reintroduce Azure audience override feature flag #90557, @aangelisc
Bug fixes
- Alerting: Fix panic in provisioning filter contacts by unknown name #90440, @JacobsonMT
- Alerting: Skip loading alert rules for dashboards when disabled [v10.4.x] #90331, @gillesdemey
- Echo: Suppress errors from frontend-metrics API call failing #89498, @joshhunt
11.1.1 (2024-07-25)
Bug fixes
- Alerting: Skip fetching alerts for unsaved dashboards #90074, @gillesdemey
- Alerting: Skip loading alert rules for dashboards when disabled #89905, @gillesdemey
- Alerting: Support
utf8_strict_mode: falsein Mimir #90148, @gillesdemey - Scenes: Fixes issue with panel repeat height calculation #90232, @kaydelaney
- Table Panel: Fix Image hover without datalinks #89922, @codeincarnate
- Tempo: Fix grpc streaming support over pdc-agent #90055, @taylor-s-dean
- RBAC: Allow plugins to use scoped actions #90946, @gamab
11.1.0 (2024-06-21)
Features and enhancements
- Tracing: Enable traces to profiles. #88896, @marefr
- Auth: Add org to role mappings support to Google integration. #88891, @kalleep
- Alerting: Support AWS SNS integration in Grafana. #88867, @yuri-tceretian
- Auth: Add org to role mappings support to Okta integration. #88770, @mgyongyosi
- Auth: Add org to role mappings support to Gitlab integration. #88751, @kalleep
- Cloudwatch: Use the metric map from grafana-aws-sdk. #88733, @iwysiu
- Alerting: Add option to use Redis in cluster mode for Alerting HA. #88696, @fayzal-g
- VizTooltip: Allow setting the
maxWidthoption. #88652, @adela-almasan - Auth: Add org to role mappings support to GitHub integration . #88537, @mgyongyosi
- CloudWatch: Handle permissions error and update docs. #88524, @iwysiu
- ** Alerting:** Correctly handle duplicating notification templates. #88487, @gillesdemey
- Alerting: Mute Timing service to prevent changing provenance status to none. #88462, @yuri-tceretian
- Alerting: Ensure we fetch AM config before saving new configuration. #88458, @tomratcliffe
- Alerting: Remove regex reference in silences filter tooltip. #88455, @tomratcliffe
- Cloudwatch: Update AWS DynamoDB Metrics. #88418, @LeonardoBoleli
- Alerting: Make regex notification routing preview consistent with notification policies implementation. #88413, @tomratcliffe
- DateTimePicker: Return cleared value in onChange. #88377, @Clarity-89
- NodeGraph: Add msagl and the layered layout code. #88375, @aocenas
- API: Add in theme support to /render/* endpoint. #88304, @timlevett
- Alerting: Add filters for RouteGetRuleStatuses. #88295, @fayzal-g
- Plugins: Update the
plugin.jsonschema with UI extensions meta-data. #88288, @leventebalogh - Auth: Update SAML lib to improve HTTP-Post binding. #88287, @mgyongyosi
- Tempo: Send current filters when retrieving tags for AdHocFilters. #88270, @joey-grafana
- Tempo: Support standard span convention. #88268, @fabrizio-grafana
- ValueFormats: Add Uruguay peso currency. #88260, @lfdominguez
- DateTimePicker: Add clearable prop. #88215, @Clarity-89
- Correlations: Enable feature toggle by default (on-prem). #88208, @ifrost
- Stat: Add percent change color modes. #88205, @drew08t
- Logs: Added multi-line display control to the "wrap lines" option. #88144, @matyax
- Tempo: Update lezer autocomplete (histogram, quantile) and add missing functions. #88131, @joey-grafana
- AnnotationsPlugin2: Implement support for rectangular annotations in Heatmap. #88107, @adrapereira
- CodeEditor: Improved styles when the code editor is loading. #88102, @NWRichmond
- CloudWatch: Add additional AWS/KinesisAnalytics metrics . #88101, @tristanburgess
- Cloudwatch: Add AWS/Events Metrics. #88097, @LeonardoBoleli
- Azure: Basic Logs support. #88025, @aangelisc
- Dashboard: Make dashboard search faster. #88019, @knuzhdin
- Alerting: Support custom API URL for PagerDuty integration. #88007, @gaurav1999
- Alerting: Add optional metadata via query param to silence GET requests. #88000, @JacobsonMT
- Store: Enable adding extra middleware. #87984, @Clarity-89
- Tempo: Don't modify the passed time range when using timeShiftEnabled. #87980, @aocenas
- InfluxDB: Introduce maxDataPoints setting for flux variable query editor. #87935, @itsmylife
- Alerting: New list view UI – Part 1. #87907, @gillesdemey
- NodeGraph: Remove msagl lib and layered layout option. #87905, @aocenas
- InfluxDB: Introduce custom variable support. #87903, @itsmylife
- Gops: Add tracking for data source check. #87886, @soniaAguilarPeiron
- AzureMonitor: Prometheus exemplars support . #87742, @aangelisc
- Feature Management: Move awsDatasourcesNewFormStyling to GA. #87696, @idastambuk
- TimeRangePicker: Announce to screen reader when time range is updated. #87692, @tskarhed
- Alerting: Template selector in contact points form. #87689, @soniaAguilarPeiron
- Azure: Load custom clouds from ini file. #87667, @JonCole
- Loki: Kick start your query now applies templates to the current query. #87658, @matyax
- Elasticsearch: Queries no longer executed while typing. #87652, @matyax
- Alerting: Add options to configure TLS for HA using Redis. #87567, @fayzal-g
- VizLegend: Represent line style in series legend and tooltip. #87558, @domasx2
- FeatureBadge: Update FeatureBadge to support current release stages. #87555, @ivanahuckova
- Logs: Infinite scrolling in Explore enabled by default. #87493, @matyax
- Plugins: Improve frontend loader cache. #87488, @jackw
- Chore: Upgrade go from 1.21.0 to 1.21.10. #87479, @stephaniehingtgen
- Chore: Upgrade go to 1.22.3. #87463, @stephaniehingtgen
- Team: Add an endpoint for bulk team membership updates. #87441, @IevaVasiljeva
- Flamegraph: Add collapse and expand group buttons to toolbar. #87395, @aocenas
- OIDC: Support Generic OAuth org to role mappings. #87394, @sathieu
- Search: Announce to screen reader when query returns no result. #87382, @tskarhed
- Logs: Added support for numeric log levels. #87366, @nailgun
- Prometheus: Place custom inputs first when using regex filter values in the query builder. #87360, @NWRichmond
- Alerting: Remove requirement for datasource query on rule read. #87349, @rwwiv
- Alerting: Add RBAC logic for silences creation. #87322, @tomratcliffe
- Alerting: Update silences creation to support
__alert_rule_uid__and move into drawer. #87320, @tomratcliffe - Flamegraph: Add diff mode color legend. #87319, @aocenas
- Dashboard: Keyboard and mouse panel shortcuts improvement. #87317, @tskarhed
- PanelHeaderCorner: Remove font-awesome icons. #87303, @Clarity-89
- Alerting: Add OAuth2 to HTTP settings for vanilla Alertmanager / Mimir. #87272, @gillesdemey
- Plugins: Allow apps to expose components. Update the extensions API. #87236, @leventebalogh
- Plugins: Catalog to show all plugins by default. #87168, @sympatheticmoose
- Prometheus: Ensure values in metric selector are visible. #87150, @NWRichmond
- Select: Add data-testid to Input. #87105, @Clarity-89
- Prometheus: Add native histogram types metric explorer to allow filter by type. #87090, @bohandley
- Prometheus: Add hints for native histograms. #87017, @bohandley
- Alerting: Reduce number of request fetching rules in the dashboard view using rtkq. #86991, @soniaAguilarPeiron
- Plugins: Make grafana-com API URL usage consistent. #86920, @oshirohugo
- Stack: Add size props. #86900, @Clarity-89
- Table Panel: Enable Text Wrapping. #86895, @codeincarnate
- Alerting: Get grafana-managed alert rule by UID. #86845, @fayzal-g
- Cloudwatch: Add Kendra metrics. #86809, @scottschreckengaust
- Auth: Added support to filter for parent teams in GitHub connector's team membership filter. #86754, @wasim-nihal
- Alerting: Hook up GMA silence APIs to new authentication handler. #86625, @JacobsonMT
- GeoMap: Pan and zoom keyboard support. #86573, @tskarhed
- Alerting: Optimize rule status gathering APIs when a limit is applied. #86568, @stevesg
- Plugins: Add an auto-generated part to the
plugin.jsonschema. #86520, @leventebalogh - Loki/Prometheus Query Editor: Disabled cmd/ctrl+f keybinding within the editor. #86418, @matyax
- Grafana packages: Remove E2E workspace. #86416, @sunker
- RefreshPicker: Change running state to be less distracting . #86405, @torkelo
- Prometheus: Cancellable label values requests. #86403, @NWRichmond
- SQLStore: Improve recursive CTE support detection. #86397, @mildwonkey
- CloudMonitoring: Ensure variables can be used in all variable queries. #86377, @aangelisc
- Common labels/displayed fields: Show label names with values. #86345, @matyax
- AuthZ: Further protect admin endpoints. #86285, @IevaVasiljeva
- Explore: Deprecate local storage singular datasource key. #86250, @gelicia
- Loki: Add label filters after label_format if present. #86124, @matyax
- Alerting: Immutable plugin rules and alerting plugins extensions. #86042, @konrad147
- Tempo: Group by template vars. #86022, @joey-grafana
- Short Links: Add setting for changing expiration time. #86003, @gelicia
- Prometheus: Add native histogram functions. #86002, @bohandley
- Plugins: Removed feature toggle pluginsDynamicAngularDetectionPatterns. #85956, @xnyo
- Plugins: Removed feature toggle enablePluginsTracingByDefault. #85953, @xnyo
- Tracing: Allow otel service name and attributes to be overridden from env. #85937, @marefr
- PanelChrome: Improve accessibility landmark markup. #85863, @tskarhed
- Gops: Add configuration tracker on the existing IRM page. #85838, @soniaAguilarPeiron
- CloudWatch: Add additional Glue metrics. #85798, @tristanburgess
- CloudWatch: Add labels for Metric Query type queries. #85766, @kevinwcyu
- Util: Support parsing and splitting strings enclosed in quotes in util.SplitString. #85735, @mgyongyosi
- Loki: Handle
X-Scope-OrgIDand tenant IDs. #85726, @fabrizio-grafana - CloudWatch: Add a Performance Insights and other missing metrics to aws/rds. #85680, @kgeckhart
- Prometheus: Respect dashboard queries when querying ad hoc filter labels. #85674, @itsmylife
- Pyroscope: Add adhoc filters support. #85601, @aocenas
- Table Panel: Update background colors to respect transparency. #85565, @codeincarnate
- Canvas: Add support for line animation. #85556, @adela-almasan
- Reducers: Add in basic Percentile Support. #85554, @timlevett
- Storage: Watch tests. #85496, @DanCech
- Plugins: Show update buttons when instance version is different. #85486, @oshirohugo
- Tempo: Always use time range even if timeShiftEnabled is false. #85477, @ogxd
- Alerting: Gops labels integration. #85467, @soniaAguilarPeiron
- Explore: Set X-Cache-Skip to true for query requests. #85460, @Elfo404
- Explore: Make Explore breadcrumb clickable. #85437, @Elfo404
- Prometheus: Fuzzy search for metric names in Code Mode. #85396, @NWRichmond
- Storage Api: Adds traces. #85391, @owensmallwood
- Storage Api: Add metrics. #85316, @owensmallwood
- Alerting: Improve paused alert visibility and allow pausing/resuming from alert list view. #85116, @tomratcliffe
- CloudWatch: Clarify match exact tooltip and docs. #85095, @iwysiu
- Alerting: Evaluation quick buttons. #85010, @gillesdemey
- Alerting: Add state history polling interval. #84837, @gillesdemey
- CloudWatch: Improve metric label parsing. #84835, @iwysiu
- Alerting: Improve template preview. #84798, @konrad147
- Alerting: New settings page. #84501, @gillesdemey
- Explore: Move Query History to be screen wide. #84321, @gelicia
- MixedDataSource: Support multi value data source variable that issues a query to each data source. #83356, @torkelo
- PluginExtensions: Make the extensions registry reactive. #83085, @mckn
- Loki: Use label/<name>/values API instead of series API for label values discovery. #83044, @yuri-rs
- Tempo: Escape backslash in span name for promsql query. #83024, @ttshivers
- Alerting: Export and provisioning rules into subfolders. #77450, @papagian
- Notification banner: Integrate with RBAC. (Enterprise)
- Auth: Assign users using SAML to AutoAssignOrgRole if no role matches. (Enterprise)
- Notification banner: Display preview. (Enterprise)
- Auth: Add None and Viewer roles as options to SAML UI config. (Enterprise)
- SAML: Add nonce to the generated script tag. (Enterprise)
- Notification banner: Add settings page. (Enterprise)
- Notification banner: Add API client. (Enterprise)
- Chore: Upgrade go version to 1.22.3. (Enterprise)
- Auditing: Correctly parse the URL for auditing through Loki. (Enterprise)
- Auditlog: Refactor action to post-action in default auditlogging. (Enterprise)
- Plugins: Make grafana-com API URL usage consistent. (Enterprise)
- Plugins: Make grafana-com API URL usage consistent. (Enterprise)
- Caching: Implement mtls-enabled memcached integration. (Enterprise)
- OpenAPI: Document the datasource caching API. (Enterprise)
Bug fixes
- Alerting: Fix go-swagger extraction and several embedded types from Alertmanager in Swagger docs. #88879, @alexweav
- DashboardScene: Fixes inspect with transforms issue. #88843, @torkelo
- Elasticsearch: Fix stripping of trailing slashes in datasource URLs. #88779, @ivanahuckova
- Loki: Fix editor history in wrong order. #88666, @svennergr
- Cli: Fix bug where password is hashed twice. #88589, @kalleep
- AzureMonitor: Fix bug detecting app insights queries. #88572, @aangelisc
- SSE: Fix threshold unmarshal to avoid panic. #88521, @yuri-tceretian
- Dashboard: Fix Variables query hides fields with non-supported datasources. #88516, @axelavargas
- Explore: Align time filters properly to day boundaries in query history. #88498, @aocenas
- Access Control: Clean up permissions for deprovisioned data sources. #88483, @IevaVasiljeva
- Dashboards: Correctly display Admin access to dashboards in the UI. #88439, @IevaVasiljeva
- LibraryPanels/RBAC: Ignore old folder permission check when deleting/patching lib panel. #88422, @kaydelaney
- LogsTable: Fix default sort by time. #88398, @svennergr
- Dashboards: Fix regression when deleting folder. #88311, @papagian
- Docker: Fix renderer plugin in custom Dockerfile. #88223, @AgnesToulet
- Alerting: Fix rules deleting when reordering whilst filtered. #88221, @tomratcliffe
- Alerting: Fix "copy link" not including full URL. #88210, @tomratcliffe
- Alerting: Fix typo in JSON response for rule export. #88028, @yuri-tceretian
- Alerting: Fix scheduler to sort rules before evaluation. #88006, @yuri-tceretian
- CloudMonitoring: Fix query type selection issue. #87990, @aangelisc
- Alerting: Assume built-in AM is receiving alerts in case of not having admin config. #87893, @soniaAguilarPeiron
- DashboardScene: Skip panel repeats when values are the same. #87788, @torkelo
- Alerting: Fix deleting rules when silencing/resuming rule from a panel alert tab. #87710, @soniaAguilarPeiron
- Dashboards: Don't set dashboard creator/updater if the action is done by an API key. #87704, @IevaVasiljeva
- Elasticsearch: Fix setting of default maxConcurrentShardRequests. #87703, @ivanahuckova
- Graphite: Fix alignment of elements in the query editor. #87662, @NWRichmond
- DashboardScene: Fixing major row repeat issues. #87539, @torkelo
- Alerting: Do not store series values from past evaluations in state manager for no reason. #87525, @alexweav
- RBAC: Update role picker in team page, fix a bug with roles being removed upon team setting update. #87519, @IevaVasiljeva
- Transformations: Fix true inner join in
joinByFieldtransformation. #87409, @baldm0mma - Alerting: Do not retry rule evaluations with "input data must be a wide series but got type long" style errors. #87343, @alexweav
- Tempo: Fix sorting for nested tables. #87214, @fabrizio-grafana
- Cloudwatch Logs: Fix bug where we did not return errors to user. #87190, @sarahzinger
- CloudWatch: Fix apostrophes in dimension values not being escaped. #87182, @kevinwcyu
- AnnotationList: Fix link for annotation with no panel or dashboard. #87048, @tskarhed
- Graphite: Fix splitting expressions in tag_value with template variables. #86958, @EduardZaydler
- SQL Query Editor: Fix label-for IDs, associate "Table" label. #86944, @timo
- SSO: Add SSO settings to secrets migrator. #86913, @dmihai
- Plugins: Preserve trailing slash in plugin proxy. #86859, @marefr
- TimeSeries: Improve keyboard focus and fix spacebar override. #86848, @tskarhed
- NodeGraph: Use values from fixedX/fixedY column for layout. #86643, @timo
- Alerting: Prevent simplified routing zero duration GroupInterval and RepeatInterval. #86561, @JacobsonMT
- Loki: Fix setting of tenant ID. #86433, @fabrizio-grafana
- DashboardScene: Fixes checkbox orienation in save forms. #86408, @torkelo
- CloudMonitoring: Correctly interpolate multi-valued template variables in PromQL queries. #86391, @aangelisc
- Expressions: Fix erroneous sorting of metrics and expressions. #86372, @NWRichmond
- CloudMonitoring: Allow a custom group by value. #86288, @aangelisc
- DataLinks: Fixes datalinks with onClick and variables in url not being interpolated . #86253, @gng0
- I18N: Fix untranslated descriptions in data source picker. #86216, @joshhunt
- RBAC: Fix global role deletion in hosted Grafana. #85980, @IevaVasiljeva
- Expression: Fix a bug of the display name of the threshold expression result. #85912, @lingyufei
- Alerting: Fix incorrect display of pending period in alert rule form. #85893, @tomratcliffe
- Alerting: Fix redirect after saving a notification template. #85667, @tomratcliffe
- Alerting: Get oncall metada only when we have alert manager configuration data. #85622, @soniaAguilarPeiron
- Alerting: Return better error for invalid time range on alert queries. #85611, @alexweav
- CloudWatch: Fix SageMaker MBP namespace typo. #85557, @tristanburgess
- Alerting: Only append
/alertmanagerwhen sending alerts to mimir targets if not already present. #85543, @alexweav - Alerting: Set mimir implementation in jsonData by default when creating a new a…. #85513, @soniaAguilarPeiron
- Alerting: Persist silence state immediately on Create/Delete . #84705, @JacobsonMT
- NodeGraph: Fix configuring arc colors with mixed case field names. #84609, @timo
- Auditing: Fix Loki URL parsing. (Enterprise)
- Provisioning: Add override option to role provisioning. (Enterprise)
- Alerting: Check pointers before use to prevent segfault. (Enterprise)
- Reporting: Fix UI errors when using linked variables. (Enterprise)
Breaking changes
Users that provision alert rules into folders whose titles contain slashes from now on they should escape them:
eg. if an alert group contains:
folder: folder_with_/_in_title
it should become:
folder: folder_with_\/_in_title Issue #77450
Deprecations
The grafana.explore.richHistory.activeDatasourceOnly local storage key is deprecated, and will be removed in Grafana 12. You may experience loss of your Explore query history or autocomplete data if you upgrade to Grafana 12 under 2 weeks of Grafana 11.1. Actual risk of data loss depends on your query history retention policy. Issue #86250
Plugin development fixes & changes
- Select: Change
Selectgroup headers to always be visible. #88178, @ashharrison90 - Select: Ensure virtualised menu scrolls active option into view when using arrow keys. #87743, @ashharrison90
- Switch: Improve disabled active state. #87694, @ashharrison90
- Button: Allow disabled button to still be focused. #87516, @JoaoSilvaGrafana
- GrafanaUI: Add
tabularprop to Text component for tabular numbers. #87440, @JoaoSilvaGrafana
11.0.1 (2024-06-21)
Bug fixes
- Echo: Suppress errors from frontend-metrics API call failing. #89493, @joshhunt
- Fix: Portuguese Brazilian wasn't loading translations. #89374, @JoaoSilvaGrafana
- Analytics: Fix ApplicationInsights integration. #89300, @ashharrison90
- DashboardScene: Fixes issue removing override rule. #89134, @torkelo
- BrowseDashboards: Prepend subpath to New Browse Dashboard actions. #89130, @joshhunt
- Alerting: Fix rule storage to filter by group names using case-sensitive comparison. #89063, @yuri-tceretian
- RBAC: List only the folders that the user has access to. #89015, @IevaVasiljeva
- DashboardScene: Fixes lack of re-render when updating field override properties. #88985, @torkelo
- DashboardScene: Fixes inspect with transforms issue. #88862, @torkelo
- AzureMonitor: Fix bug detecting app insights queries. #88787, @aangelisc
- Access Control: Clean up permissions for deprovisioned data sources. #88700, @IevaVasiljeva
- Loki: Fix editor history in wrong order. #88669, @svennergr
- SSE: Fix threshold unmarshal to avoid panic. #88651, @yuri-tceretian
- LibraryPanels/RBAC: Ignore old folder permission check when deleting/patching lib panel. #88493, @kaydelaney
- Dashboards: Correctly display Admin access to dashboards in the UI. #88473, @IevaVasiljeva
- LogsTable: Fix default sort by time. #88434, @svennergr
- Alerting: Fix rules deleting when reordering whilst filtered. #88285, @gillesdemey
- Alerting: Fix typo in JSON response for rule export. #88090, @yuri-tceretian
- CloudMonitoring: Fix query type selection issue. #88024, @aangelisc
- Alerting: Fix scheduler to sort rules before evaluation. #88021, @yuri-tceretian
- DashboardScene: Skip panel repeats when values are the same. #87896, @torkelo
- Alerting: Do not store series values from past evaluations in state manager for no reason. #87845, @alexweav
- DashboardScene: Fixing major row repeat issues. #87800, @torkelo
- DashboardScene: Fixes checkbox orienation in save forms. #86490, @torkelo
- Provisioning: Add override option to role provisioning. (Enterprise)
Breaking changes
If you had selected your language as "Português Brasileiro" previously, this will be reset. You have to select it again in your Preferences for the fix to be applied and the translations will then be shown. Issue #89374
11.0.0 (2024-05-14)
Features and enhancements
- Alerting: Add two sets of provisioning actions for rules and notifications . #87572, @yuri-tceretian
- Chore: Upgrade go to 1.21.10. #87472, @stephaniehingtgen
- Auth: Force lowercase login/email for users. #86985, @eleijonmarck
- Navigation: Add a return to previous button when navigating to different sections. #86797, @eledobleefe
- DashboardScene: Move add library panel view from grid item to drawer. #86409, @torkelo
- CloudWatch : Add missing AWS/ES metrics. #86271, @thepalbi
- Alerting: Reduce set of fields that could trigger alert state change. #86266, @benoittgt
- OAuth: Make sub claim required for generic oauth behind feature toggle. #86118, @kalleep
- Grafana E2E: Add deprecation notice and update docs. #85778, @sunker
- Loki: Remove API restrictions on resource calls. #85201, @svennergr
- Chore: Upgrade go to 1.21.10. (Enterprise)
Bug fixes
- AuthN: Fix signout redirect url. #87681, @kalleep
- CloudMonitoring: Improve legacy query migrations. #87648, @aangelisc
- Azure data sources: Set selected config type before save. #87632, @bossinc
- Loki: Fix log context when no label types are present. #87600, @svennergr
- DashboardScene: Fixes editing transformations after toggling table view. #87485, @torkelo
- DashboardDataSource: Fixes issue where sometimes untransformed data could be returned . #87484, @torkelo
- Provisioning: Look up provisioned folders by UID when possible. #87468, @DanCech
- Cloudwatch: Update grafana-aws-sdk to fix sts endpoints. #87345, @iwysiu
- Select: Fixes issue preserving search term (input) when selecting a value. #87249, @torkelo
- Alerting: Prevent search from locking the browser. #87230, @gillesdemey
- DashboardScene: Fixes issue referring to library panel in dashboard data source . #87173, @torkelo
- Data source: Maintain the default data source permissions when switching from unlicensed to licensed Grafana. #87142, @IevaVasiljeva
- Alerting: Allow deleting contact points referenced only by auto-generated policies. #87115, @gillesdemey
- Auth: Sign sigV4 request after adding headers. #87072, @iwysiu
- DashboardScene: Fixes issues with relative time range in panel edit. #87026, @torkelo
- DashboardScene: Fixes issue with dashboard links and variables. #87025, @torkelo
- SQLStore: Disable redundant create and drop unique index migrations on dashboard table. #86867, @papagian
- LogContext: Fix structured metadata labels being added as stream selectors. #86826, @svennergr
- DashboardScene: Fixes issue with editing panels that uses instanceState. #86824, @torkelo
- DashboardScene: Fixes deleting dirty dashboard. #86757, @torkelo
- Alerting: Take receivers into account when custom grouping Alertmanager groups. #86699, @konrad147
- LDAP: Fix listing all non-matching groups. #86689, @mgyongyosi
- Alerting: Fix simplified routing group by override. #86563, @JacobsonMT
- NodeGraph: Fix invisible arrow tips in Editor. #86548, @timo
- Dashboard: DashboardPageProxy - Use chaining operators to prevent runtime error. #86536, @axelavargas
- Cli: Check missing plugin parameter of plugin update command. #86522, @VergeDX
- DashboardScene: Fixes issue saving new dashboard from panel edit. #86480, @torkelo
- DashboardScene: Fixes minor issue transitioning between dashboards. #86475, @torkelo
- MSSQL: Add
SQL_VARIANTconverter and update test. #86469, @aangelisc - DashboardScene: Fixes react panels with old angular options. #86411, @torkelo
- Alerting: Fix simplified routes '...' groupBy creating invalid routes. #86376, @JacobsonMT
- AWS DataSource: Fix namespaces in sagemaker metrics. #86363, @tristanburgess
- DashboardScene: Fixes saving dashboard with angular panels . #86255, @torkelo
- DashboardScene: Fix empty row repeat issue. #86254, @torkelo
- Nodegraph: Fix issue with rendering single node. #86195, @aocenas
- Datasources: Add fixed width to name field in config editor. #86179, @sunker
- Alerting: Return a 400 and errutil error when trying to delete a contact point that is referenced by a policy. #86163, @alexweav
- Table Panel: Fix image disappearing when datalinks applied. #86160, @codeincarnate
- LibraryPanelRBAC: Fix issue with importing dashboards containing library panels. #86149, @kaydelaney
- DashboardScene: Fixes issue moving between dashboards. #86096, @torkelo
- Alerting: Fix evaluation metrics to not count retries. #86059, @stevesg
- Google Cloud Monitor: Fix interface conversion for incorrect type in
cloudMonitoringProm.run. #85928, @adamyeats - Dashboard: Allow
autorefresh option when saving a dashboard. #85922, @bfmatei - Time Zones: Fix relative time when using UTC timezone. #85779, @ashharrison90
- PostgreSQL: Fix the verify-ca mode. #85775, @gabor
- DashboardScene: Fixes issue with mobile responsive layout due to repeated grid item class. #85741, @torkelo
- DashboardScene: Fixes panel edit issue with clearing title not resulting in hover header mode . #85633, @torkelo
- Angular deprecation: Prefer local "angularDetected" value to the remote one. #85632, @xnyo
- Chore: Fix trailing spaces in prometheus min step. #85579, @euniceek
- SAML: Fix Authn request generation in case of HTTP-POST binding. (Enterprise)
- Reporting: Fix CSVs for library panels within folders. (Enterprise)
Breaking changes
The @grafana/e2e package is deprecated in Grafana 11.0.0. If your Grafana plugin has end-to-end tests that use @grafana/e2e, it's recommended to replace them with @grafana/plugin-e2e and Playwright. For information on how to migrate, please refer to the plugin-e2e docs. Issue #85778
Plugin development fixes & changes
- DateTimePicker: Alternate timezones now behave correctly. #87041, @ashharrison90
- TimeOfDayPicker: Fix text colours in light mode. #86776, @ashharrison90
11.0.0-preview
Features and enhancements
- Alerting: Editor role can access all provisioning API. #85022, @yuri-tceretian
- CloudWatch: Add additional AWS/SageMaker metrics. #85009, @tristanburgess
- SQLStore: Enable migration locking by default. #84983, @papagian
- Auth: Remove
oauth_skip_org_role_update_syncas an option. #84972, @eleijonmarck - Canvas: Add "infinite" pan / zoom functionality. #84968, @nmarrs
- InteractiveTable: Add expand all to column. #84966, @abannachGrafana
- Snapshots: Viewers can not create a Snapshot. #84952, @evictorero
- GenAI: Autogenerate title and description for panels and dashboards. #84933, @ivanortegaalba
- Canvas: Add corner radius option. #84873, @drew08t
- Alerting: Enable simplified routing FF by default. #84856, @JacobsonMT
- Auth: Enable case insensitive logins/emails by default. #84840, @eleijonmarck
- RBAC: Enable annotation permission update by default. #84787, @IevaVasiljeva
- Azure: Support multi-resource namespace (NetApp Volumes). #84779, @aangelisc
- Prometheus: Default support labels value endpoint with match param when prom type and version not set. #84778, @bohandley
- MSSQL: Add Windows AD/Kerberos auth. #84742, @asimpson
- Chore: Disable angular support by default. #84738, @tolzhabayev
- Elasticsearch: Remove xpack button and make includeFrozen not dependant on it. #84734, @ivanahuckova
- Plugins: Enable feature toggle
pluginsDynamicAngularDetectionPatternsby default. #84723, @xnyo - Plugins: Enable managedPluginsInstall by default. #84721, @oshirohugo
- Alerting: Stop persisting silences and nflog to disk. #84706, @JacobsonMT
- Histogram: Add support for stacking mode. #84693, @adela-almasan
- Datasource: Change query filtering. #84656, @sunker
- Feature toggles: Remove redshiftAsyncQueryDataSupport and athenaAsyncQueryDataSupport feature toggles. #84653, @idastambuk
- Teams: Display teams page to team reader if they also have the access to list team permissions. #84650, @IevaVasiljeva
- Plugins: Enable feature toggle
enablePluginsTracingByDefaultby default. #84645, @xnyo - NestedFolders: Enable nested folders by default. #84631, @zserge
- Canvas: Add direction options for connections. #84620, @drew08t
- CloudWatch: Static labels should use label name. #84611, @iwysiu
- Tempo: Deprecate old search. #84498, @joey-grafana
- Canvas: Support dashed connection lines. #84496, @Develer
- I18n: Add Brazilian Portuguese. #84461, @joshhunt
- I18n: Expose current UI language in @grafana/runtime config. #84457, @joshhunt
- Canvas: Add snapping to vertex edit. #84417, @drew08t
- CloudWatch Logs: Remove toggle for cloudWatchLogsMonacoEditor. #84414, @iwysiu
- Prometheus: Use frontend package in Prometheus DS with a feature toggle. #84397, @bohandley
- Alerting: Show error message when error is thrown after clicking create alert f…. #84367, @soniaAguilarPeiron
- Tempo: Remove Loki tab. #84346, @joey-grafana
- Storage: Add support for listing resource history. #84331, @DanCech
- Cloudwatch: Remove cloudWatchWildCardDimensionValues feature toggle. #84329, @iwysiu
- Plugin Extensions: Add prop types to component extensions. #84295, @leventebalogh
- Canvas: New basic elements. #84205, @Develer
- Tempo: Update TraceQLStreaming feature toggle stage. #84203, @joey-grafana
- Canvas: Add universal data link support. #84142, @nmarrs
- Chore: Remove repetitive words. #84132, @carrychair
- Documentation: Updated yaml for influxdb data sources. #84119, @ldomesjo
- Queries: Improve debug logging of metrics queries. #84048, @mmandrus
- Storage: Support listing deleted entities. #84043, @DanCech
- Explore: Remove deprecated
queryoption fromsplitOpen. #83973, @Elfo404 - Chore: Remove deprecated ExploreQueryFieldProps. #83972, @Elfo404
- Chore: Remove deprecated exploreId from QueryEditorProps. #83971, @Elfo404
- Alerting: Disallow invalid rule namespace UIDs in provisioning API. #83938, @rwwiv
- Auth: Set the default org after User login. #83918, @mgyongyosi
- Canvas: Add datalink support to rectangle and ellipse elements. #83870, @nmarrs
- NodeGraph: Edge color and stroke-dasharray support. #83855, @morrro01
- InfluxDB: Add configuration option for enabling insecure gRPC connections. #83834, @jmickey
- Plugins: Fetch instance provisioned plugins in cloud, to check full installation. #83784, @oshirohugo
- Alerting: Implement correct RBAC checks for creating new notification templates. #83767, @gillesdemey
- Library panels: Ensure all filters are visible on mobile . #83759, @ashharrison90
- AuthProxy: Allow disabling Auth Proxy cache. #83755, @Jguer
- Switch: Remove "transparent" prop. #83705, @Clarity-89
- Alerting: Allow inserting before or after existing policy. #83704, @gillesdemey
- Chore: Taint ArrayVector with
neverto further discourage. #83681, @joshhunt - Alerting: Remove legacy alerting. #83671, @gillesdemey
- Canvas: Add vertex control to connections. #83653, @drew08t
- Alerting: Disable legacy alerting for ever. #83651, @yuri-tceretian
- Table: Preserve filtered value state. #83631, @codeincarnate
- Canvas: Add ability to edit selected connections in the inline editor. #83625, @nmarrs
- Auth: Add all settings to Azure AD SSO config UI. #83618, @mgyongyosi
- Cfg: Add a setting to configure if the local file system is available. #83616, @mgyongyosi
- Server: Reload TLS certs without a server restart. #83589, @chalapat
- Accessibility: Improve landmark markup. #83576, @tskarhed
- Snapshots: Change default expiration. #83550, @evictorero
- Transformations: Add substring matcher to the 'Filter by Value' transformation. #83548, @timlevett
- Folders: Allow listing folders with write permission. #83527, @papagian
- Chore: Remove React 17 peer deps. #83524, @ashharrison90
- Alerting: Support deleting rule groups in the provisioning API. #83514, @joeblubaugh
- Cloudwatch: Bump grafana/aws-sdk-go to 0.24.0. #83480, @idastambuk
- Alerting: Stop persisting user-defined templates to disk. #83456, @JacobsonMT
- Transformer: Config from Query: set threshold colours. #83366, @LarsStegman
- CloudWatch: Refactor "getDimensionValuesForWildcards". #83335, @iwysiu
- CloudWatch: Fetch externalId from settings instead of env. #83332, @iwysiu
- Tracing: Add node graph panel suggestion. #83311, @joey-grafana
- Canvas: Add ability to rotate elements. #83295, @nmarrs
- Tempo: Add support for ad-hoc filters. #83290, @joey-grafana
- DataTrails: Sticky controls. #83286, @torkelo
- CloudWatch: Move SessionCache onto the instance. #83278, @iwysiu
- Alerting: Deprecate max_annotations_to_keep and max_annotation_age in [alerting] configuration section. #83266, @yuri-tceretian
- Annotation query: Render query result in alert box. #83230, @sunker
- Chore: Query oauth info from a new instance. #83229, @linoman
- CloudWatch: Add Firehose kms-related metrics. #83192, @thepalbi
- Chore: Add go workspace. #83191, @toddtreece
- Accessibility: Improve HelpModal markup. #83171, @tskarhed
- Chore: Delete Input Datasource. #83163, @jackw
- Traces: Add traces panel suggestion. #83089, @joey-grafana
- CloudWatch: Update AWS/EC2 metrics. #83039, @jangaraj
- CloudWatch: Update AWS/Lambda metrics. #83038, @jangaraj
- CloudWatch: Update AWS/ES metrics. #83037, @jangaraj
- CloudWatch: Update AWS/AutoScaling metrics. #83036, @jangaraj
- CloudWatch: Update AWS/Kafka metrics. #83035, @jangaraj
- Page: Use browser native scrollbars for the main page content. #82919, @joshhunt
- Parca: Apply template variables for labelSelector in query. #82910, @lzakharov
- Grafana/UI: Replace Splitter with useSplitter hook and refactor PanelEdit snapping logic to useSnappingSplitter hook . #82895, @torkelo
- Cloudwatch: Add linting to restrict imports from core. #82538, @idastambuk
- Grafana/icons: Add icons package. #82314, @Clarity-89
- Storage: Watch support. #82282, @DanCech
- Image Rendering: Add settings for default width, height and scale. #82040, @khushijain21
- AzureMonitor: User authentication support. #81918, @aangelisc
- Plugins: Disable uninstall while cloud uninstall is not completed. #81907, @oshirohugo
- Plugins: Disable update button when cloud install is not completed. #81716, @oshirohugo
- Expressions: Sql expressions with Duckdb. #81666, @scottlepp
- BarChart: TooltipPlugin2. #80920, @leeoniya
- Grafana: Replace magic number with a constant variable in response status. #80132, @rlaisqls
- Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read". #78289, @yuri-tceretian
- Alerting: Update provisioning API to support regular permissions. #77007, @yuri-tceretian
- Whitelabelling: Override version in UI from config. (Enterprise)
- Alerting: Remove legacy alerting. (Enterprise)
- Reporting: Delete Deprecated Endpoint for Single Dashboard. (Enterprise)
- Plugins: Add endpoint to get provisioned plugins from an instance. (Enterprise)
- Reporting: Delete Deprecated Endpoint for Scheduling. (Enterprise)
- Reporting: Delete Deprecated Endpoint for Email. (Enterprise)
Bug fixes
- RBAC: Fix access checks for interactions with RBAC roles in hosted Grafana. #85520, @IevaVasiljeva
- Keybindings: Replace mod+h as help shortcut with ? . #85449, @tskarhed
- RBAC: Fix slow user permission search query on MySQL. #85410, @gamab
- BrowseDashboards: Add subpath to URLs on Browse Dashboards page. #85354, @butkovv
- Dashboards: Fix issue where long ad-hoc values broke UI. #85290, @kaydelaney
- NodeGraph: Fix possible metadata mismatch between nodes in graph. #85261, @aocenas
- Alerting: Fix receiver inheritance when provisioning a notification policy. #85193, @julienduchesne
- AuthProxy: Fix missing session for ldap auth proxy users. #85136, @Jguer
- RBAC: Fix slow user permission search query on MySQL. #85058, @gamab
- CloudMonitoring: Only run query if filters are complete. #85004, @aangelisc
- BrowseDashboards: Add subpath to URLs on Browse Dashboards page. #84992, @butkovv
- Datasources: Fix expressions that reference hidden queries. #84977, @sunker
- Canvas: Fix crash when trying to add wind turbine element. #84962, @nmarrs
- InfluxDB: Fix alias interpolation when it has $__interval or multiple tags. #84940, @itsmylife
- Alerting: Stop returning autogen routes for non-admin on api/v2/status. #84864, @JacobsonMT
- Alerting: Fix broken panelId links. #84839, @gillesdemey
- Alerting: External AM fix parsing basic auth with escape characters. #84681, @JacobsonMT
- Alerting: Support PromQL-style matchers. #84672, @gillesdemey
- FolderPicker: Add permission filter to nested folder picker. #84644, @joshhunt
- RolePicker: Don't try to fetch roles for new form. #84630, @kalleep
- Pyroscope: Fix template variable support. #84477, @aocenas
- Scenes: Fix public dashboard email sharing section. #84467, @juanicabanas
- Alerting: Fix AlertsFolderView not showing rules when using nested folders. #84465, @soniaAguilarPeiron
- Jaeger: Fix flaky test. #84441, @fabrizio-grafana
- Scenes: Fix issue with discarding unsaved changes modal in new dashboards. #84369, @kaydelaney
- PostgreSQL: Display correct initial value for tls mode. #84356, @gabor
- Cloudwatch: Fix issue with Grafana Assume Role. #84315, @sarahzinger
- Playlists: Fix kiosk mode not activating when starting a playlist. #84262, @joshhunt
- Google Cloud Monitor: Fix
resbeing accessed after it becomesnilinpromql_query.go. #84223, @adamyeats - Elasticsearch: Fix using of individual query time ranges when querying. #84201, @ivanahuckova
- InfluxDB: Fix for wrong query generated with template variable and non regex operator on frontend mode. #84175, @wasim-nihal
- Prometheus: Remove < and > from Query Builder Label Matcher operations. #83981, @kylebrandt
- Worker: Use CorsWorker to avoid CORS issues. #83976, @ivanortegaalba
- Tempo: Fix by operator to support multiple arguments. #83947, @fabrizio-grafana
- Plugins Catalog: Fix plugin details page initial flickering. #83896, @leventebalogh
- Loki: Interpolate variables in live queries. #83831, @ivanahuckova
- Table Panel: Fix condition for showing footer options. #83801, @codeincarnate
- Alerting: Fix bug in screenshot service using incorrect limit. #83786, @grobinson-grafana
- Alerting: Fix editing Grafana folder via alert rule editor. #83771, @gillesdemey
- Cloudwatch: Fix new ConfigEditor to add the custom namespace field . #83762, @idastambuk
- LDAP: Fix LDAP users authenticated via auth proxy not being able to use LDAP active sync. #83715, @Jguer
- Elasticsearch: Fix adhoc filters not applied in frontend mode. #83592, @svennergr
- RBAC: Fix delete team permissions on team delete. #83442, @gamab
- Dashboards: Fixes issue where panels would not refresh if time range updated while in panel view mode. #83418, @kaydelaney
- AzureMonitor: Fix mishandled resources vs workspaces. #83184, @adamyeats
- Sql: Fix an issue with connection limits not updating when jsonData is updated. #83175, @jarben
- Alerting: Use time_intervals instead of the deprecated mute_time_intervals in a…. #83147, @soniaAguilarPeiron
- DataFrame: Improve typing of arrayToDataFrame helper and fix null/undefined handling. #83104, @aocenas
- Cloudwatch: Fix filter button issue in VariableEditor. #83082, @wilguo
- Alerting: Fix panic in provisioning filter contacts by unknown name. #83070, @JacobsonMT
- Search: Include collapsed panels in search v2. #83047, @suntala
- Plugins: Fix loading modules that only export a default. #82299, @sd2k
- Table: Fix units showing in footer after reductions without units. #82081, @codeincarnate
- AuthProxy: Invalidate previous cached item for user when changes are made to any header. #81445, @klesh
- Unit: Add SI prefix for empty unit. #79897, @raymalt
- Variables: Multi-select DataSource variables are inconsistently displayed in the Data source picker. #76039, @polibb
- SAML: Better error message for saml private key type errors. (Enterprise)
- Reporting: Fix monthly schedule text and modify monthly schedule inputs behavior. (Enterprise)
Breaking changes
In 9.3 we released a way to set case_insensitive_login to true. This enables, lowercased username, login for users signing up with Grafana, for more information read our blog post.
If you encounter any issues with users signing up, we recommend everyone to use lowercase in their login, username otherwise refer to the blog post for how to solve any of the users that can be conflicting with their login/username. Issue #84972
This is a breaking change for users who use uppercase in their login or emails. The users are by default now using lowercase as part of their login and emails.
Before this code change, users would be able to still log in as either aUser@user.com or auser@user.com, users are now only able to login and signup with grafana using lowercasing auser@user.com.
We recommend reviewing the blog post about using the CLI and why this is important for us to consolidate our security efforts. Issue #84840
This is a breaking change for users who have restricted the default access to annotation permissions by removing annotation related actions from the Viewer or Editor basic roles. In such cases we are not able to complete the permission migration automatically, and you will see the following log in your Grafana server logs: basic role permissions missing annotation permissions, skipping annotation permission migration. You will also notice that dashboard and folder permissions do not appear in the user interface. Don't worry, all the permissions that you assigned are still there, they are just not being displayed.
We recommend reviewing what annotation permissions you have revoked from the basic roles (you can reference our documentation to see what permissions are missing). If you are fine granting them back to the basic roles, do that, then run the following data base command: DELETE FROM migration_log WHERE migration_id="managed dashboard permissions annotation actions migration" and restart Grafana. This will make sure that the annotation permission migration gets run again, and this time it should succeed.
If you are not willing to grant the annotation permissions back to the basic roles, please disable annotationPermissionUpdate feature toggle (add annotationPermissionUpdate = false to [feature_toggles] in Grafana's configuration file) and reach out to Grafana's support team. When we can learn more about your use case, we will work with you to find a solution. Issue #84787
Angular support is turned off by default starting Grafana 11, you can find all the details in a dedicated documentation page.
Issue #84738
The xpack checkbox dependency for enabling the Include Frozen Indices functionality has been removed, allowing direct control over frozen indices inclusion. Users should review their datasource settings to ensure the "Include Frozen Indices" option is configured as desired, particularly if xpack was previously disabled. This change aims to simplify configuration options and may affect queries if settings are not adjusted accordingly. Issue #84734
For data sources that extend DataSourceWithBackend, the filterQuery method is now called before the data source query method. If the filterQuery method assumes that some kind of query migration happens before this method is called, you now need to do the migration inside this method.
Users of data source plugins that did not previously remove hidden queries will see a change of behaviour: Before this change, clicking the Disable query button had no impact on the query result, but starting from Grafana 11 responses associated with hidden queries will no longer be returned to the panel. Issue #84656
SystemJS is no longer exported from @grafana/runtime. Plugin developers should instead rely on importing modules / packages using standard TS import syntax and npm/yarn for package installation.
Issue #84561
We've removed the Loki tab from the Tempo data source. You can still access Logs through the Loki data source or can also create a link from Tempo to Loki via our trace to logs feature. Issue #84346
The query option in splitOpen was deprecated in 10.1 and is now being removed. Issue #83973
Since https://github.com/grafana/grafana/pull/38942 (Grafana 8.2.0) the ExploreQueryFieldProps type was deprecated and is now removed. Issue #83972
Since https://github.com/grafana/grafana/pull/38942 exploreId is no longer supplied to query editors in Explore. The property was deprecated in 10.3.0 and is now removed. If your query editor needs to know from which app is being rendered, you can check the app prop in QueryEditorProps. Issue #83971
The Vector interface that was deprecated in Grafana 10 has been further deprecated. Using it will now generate build-time Typescript errors, but remain working at runtime. If you're still using ArrayVector in your code, it should be removed immediately and replaced with plain arrays. Plugins compiled against older versions and depend on calling get/set will continue to work because the Array prototype still has a modified prototype. This will be removed in the future Issue #83681
In Grafana 11 the legacy alerting reaches the end-of-life. Users cannot enable it and Grafana will refuse to start if the settings are not updated to run the new Grafana Alerting. Migration from legacy alerting is not available as well. Grafana 10.4.x is the last version that offers the migration.
-
If the setting
[alerting].enableis set totrueGrafana will not start and emit the log message with recommendations to change the configuration -
Setting
[alerting].max_annotation_ageis replaced by[unified_alerting.state_history.annotations].max_age -
Setting
[alerting].max_annotations_to_keepis replaced by[unified_alerting.state_history.annotations].max_annotations_to_keep -
setting
[unified_alerting].execute_alertsdoes not fall back to the legacy[alerting].execute_alertsanymore. Instead, the default valuetrueis used. -
setting
[unified_alerting].evaluation_timeoutdoes not fall back to the legacy setting[alerting].evaluation_timeout_secondsin the case when it is either invalid or has the default value. Now, if the setting is invalid, it will cause Grafana to exit. -
setting
[unified_alerting].min_intervaldoes not fall back to the legacy setting[alerting].min_interval_secondsin the case when it is either invalid or has the default value. Now, if the setting is invalid, it will cause Grafana to exit. Issue #83651
We've removed React 17 as a peer dependency from our packages. Anyone using the new versions of these packages should ensure they've upgraded to React 18 following the upgrade steps: https://react.dev/blog/2022/03/08/react-18-upgrade-guide Issue #83524
We're adding a validation between the response of the ID token HD parameter and the list of allowed domains as an extra layer of security. In the event that the HD parameter doesn't match the list of allowed domains, we're denying access to Grafana.
If you set Google OAuth configuration using api_url, you might be using the legacy implementation of OAuth, which doesn't have the HD parameter describing the organisation the approved token comes from. This could break your login flow.
This feature can be turned off through the configuration toggle validate_hd . Anyone using the legacy Google OAuth configuration should turn off this validation if the ID Token response doesn't have the HD parameter. Issue #83229
The direct input datasource plugin has been removed in Grafana 11. It has been in alpha for 4 years and is superseded by TestData that ships with Grafana.
Issue #83163
The alert rule API methods now require more permissions for users to perform changes to rules. To create a new rule or update or delete an existing one, the user must have permission to read from the folder that stores the rules (i.e. permission folder:read in the scope of the rule's folder) and permission to read alert rules in that folder (i.e. permission alert.rules:read
The standard roles already have all required permissions, and therefore, neither OSS nor Grafana Enterprise users who use the fixed roles (standard roles provided by Grafana) are affected. Only Grafana Enterprise users who create custom roles can be affected Issue #78289
The deprecated endpoint for rendering pdf of a single dashboard GET /render/pdf/:dashboardID and report model fields dashboardId, dashboardName, dashboardUid, and templateVars have been removed. Only new endpoint GET /api/reports/render/pdfs accepting dashboards list is support moving forward Issue #6362
The deprecated old schedule setting with separate fields hour, minute, day have been removed. Only new schedule setting with startDate will be supported moving forward Issue #6329
The deprecated email field to send a report via /api/reports/email endpoint have been removed. Only emails field will be supported moving forward. Issue #6328