Grafana

Summary

Updated Alpine‑based Docker images to 3.24.1.

Summary

Docker images upgraded to Alpine 3.24.1

Summary

Updated Docker Alpine‑based images to version 3.24.1.

Summary

Upgrade Alpine‑based Docker images to version 3.24.1.

Summary

Updated Docker Alpine base images to version 3.24.1.

Summary

Bumped Alpine‑based Docker images to 3.23.4 and updated Go runtime to 1.26.3.

Summary

Updated Alpine‑based Docker images to version 3.23.4.

Summary

Dashboards now support annotations and include performance improvements for the dashboard endpoint.

Summary

Improve dashboard browsing by making elements visible and flow better when zoomed

Summary

Added new dashboard and provisioning features: k8s format in saved dashboards, v2 dashboard support, public root URL setting, refined folder handling, repo uniqueness by URL/branch/path, and component upgrades (Alpine, Go, nanogit).

Summary

Fix error when updating Alertmanager config with autogenerated receivers

Summary

Fix multiple security vulnerabilities by addressing CVE‑2026‑28374, CVE‑2026‑28376, CVE‑2026‑28383, CVE‑2026‑28380, CVE‑2026‑33376, CVE‑2026‑28379, CVE‑2026‑33377, CVE‑2026‑33378, CVE‑2026‑33381, and CVE‑2026‑33380.

Summary

Fixed multiple high‑severity CVEs (CVE‑2026‑28374, CVE‑2026‑28376, CVE‑2026‑28379, CVE‑2026‑28380, CVE‑2026‑28383).

Summary

Patch multiple security vulnerabilities (CVE-2026-28374, 28376, 28379, 28380, 28383)

Summary

Patched multiple security vulnerabilities (CVE-2026-28374, -28376, -28383, -28380, -28379, -33376, -33377, -33378, -33380, -33381, -33382).

Summary

Dashboard now retains user’s timezone preference when converting from V1 to V2.

Summary

Updated Go runtime to version 1.25.9

Summary

Added protection to prevent cross‑org CRUD actions on public dashboards

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27876, CVE‑2026‑27877, CVE‑2026‑28375, CVE‑2026‑27879, CVE‑2026‑27880).

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27876, CVE‑2026‑27877, CVE‑2026‑28375, CVE‑2026‑27879, CVE‑2026‑27880)

Summary

Fixed multiple security vulnerabilities (CVE-2026-27876, CVE-2026-27877, CVE-2026-28375, CVE-2026-27879).

Summary

Fix security vulnerability CVE-2026-33375

Summary

Improved accessibility: voice‑over support in Analytics tab and prevented time‑zone menu auto‑open on focus.

Summary

Fixed various bugs reported in previous versions.

Summary

Fixed security vulnerability CVE‑2026‑33375

Summary

Fixed security vulnerability CVE‑2026‑33375

Summary

Updated Go runtime to version 1.25.8.

Summary

Upgrade Go runtime to version 1.25.8

Summary

Upgrade Go runtime to version 1.25.8.

Summary

Upgrade Go runtime to version 1.25.8

Summary

Added AccessControl cache invalidation on datasource deletion, upgraded Go to 1.25.8, and introduced support for custom CA certificates in the Image Renderer.

Summary

Added extensive Alerting enhancements: new RBAC permissions, UI improvements, saved searches, AI analysis integration, performance upgrades, and revamped notification configuration.

Summary

Fixes datasource variable templating in dashboard export functionality.

Summary

Fixed datasource variable templating in dashboard export.

Summary

Added a new download page

Summary

Fixed datasource variable templating in dashboard export

Summary

Added size limits for expanded notification templates in Alerting.

Summary

Added size limits for expanded notification templates in Alerting.

Summary

Added configurable limits for the size of expanded notification templates in Alerting.

Summary

Added size limits for expanded alert notification templates.

Summary

Added size limits for expanded alert notification templates.

Summary

Introduced security enhancements for the download page.

Summary

Added security enhancements to the download page

Summary

Added security fixes in version 12.1.6

Summary

Security update released for version 11.6.10+security-01

Summary

Added missing dashboard scope checks and required sign‑in for avatars, improving security.

Summary

Add missing dashboard scope check to API and require sign‑in for Avatar, tightening security;

Summary

Added missing scope check for dashboard API calls and enforced sign‑in for avatar requests, improving security.

Summary

Added missing scope check to the dashboard API.

Summary

Add missing scope check to the dashboard API

Summary

Updated alerting dependency and bumped Go to v1.25.5

Summary

Updated alerting and Go dependencies; added PluginContext for plugins when scenes are disabled.

Summary

Added PluginContext support for plugins when scenes are disabled and updated alerting dependency; upgraded Go runtime to v1.25.5.

Summary

Updated alerting dependency and added PluginContext support for plugins when scenes are disabled.

Summary

Updated alerting dependency and fixed contacts point issues

Summary

Introduced numerous new features: lazy hooks and automatic PATCH headers for API clients, alerting enrichment UI with AI helper, jitter support for periodic alert storage, new "Switch" variable type, MapLibre base layer for Geomap, and G...

Summary

Fixed Alerting unmarshalling issue for GettableStatus time intervals.

Summary

Fixed unmarshalling of GettableStatus in Alerting to correctly handle time intervals.

Summary

Reduced memory usage when fetching user permissions in access control.

Summary

Fixed unmarshalling of GettableStatus in alerting to correctly handle time intervals.

Summary

Fixed security vulnerability CVE-2025-41115 in SCIM (Enterprise).

Summary

Fixed security vulnerability CVE-2025-41115 in the SCIM (Enterprise) component.

Summary

Fixed CVE‑2025‑41115 vulnerability in SCIM component (Enterprise)

Summary

Upgrade Go runtime to 1.25.3 and update related libraries (golangci‑lint, golang.org/x/net).

Summary

Updated Go to 1.25.2 and 1.25.3 with golangci‑lint and net package upgrades

Summary

Updated Go runtime to 1.25.3 (including golangci‑lint 2.5.0 and golang.org/x/net 0.45.0).

Summary

Added proper batching and configurable settings for Loki analytics exports (Enterprise).

Summary

Updated Go runtime to 1.25.3, upgraded golangci‑lint to v2.5.0 and golang.org/x/net to v0.45.0

Summary

Extensive Alerting enhancements: AI helper feedback buttons, GMA export, contact point filters, enrichment UI, new feature toggles, JSON support in Prometheus conversion API, and expanded rule evaluation options.

Summary

Updated alerting module with new features and fixed mute/active interval conflicts

Summary

Update alerting module and add enterprise auditing controls for recording datasource query request/response bodies, with accompanying documentation.

Summary

Update alerting module (ID 110001).

Summary

Add Auditing settings to control recording of datasource query request and response bodies (Enterprise).

Summary

Add rule group name validation to the Prometheus conversion API

Summary

Upgrade Go runtime to version 1.24.6

Summary

Alerting package upgraded to incorporate NewTLSClient changes (PR 108817).

Summary

Updated Go runtime to version 1.24.6

Summary

Updated the embedded Go runtime to version 1.24.6.

Summary

Added OAuth2 support for alerting webhook receivers and Azure/Entra workload identity authentication, plus experimental nanogit mode for Git Sync provisioning.

Summary

Resolved several bugs in the 12.0.3 release.

Summary

Bump go-viper and mapstructure dependencies to v2.3.0.

Summary

Update go‑viper/mapstructure/v2 dependency to version 2.3.0.

Summary

Bumped github.com/go‑viper/mapstructure/v2 to version 2.3.0

Summary

Update github.com/go‑viper/mapstructure/v2 to v2.3.0

Summary

Stop passing response headers for Grafana Pyroscope and Parca datasource profiles

Summary

Profiles: stop passing response headers for Grafana, Pyroscope, and Parca datasources

Summary

Fixed security vulnerabilities CVE-2025-6023 and CVE-2025-6197

Summary

Patched security vulnerabilities CVE‑2025‑6023 and CVE‑2025‑6197.

Summary

Fixed security vulnerabilities CVE-2025-6023 and CVE-2025-6197.

Summary

Fixes multiple bugs in the release.

Summary

Updated the download page with new highlights

Summary

Updated Go to v1.24.4 and upgraded openfga to v1.8.13, addressing CVE‑2025‑48371.

Summary

Upgrade Go runtime to v1.24.4.

Summary

Updated Go to v1.24.4 and upgraded openfga to v1.8.13, addressing CVE‑2025‑48371.

Summary

Fixed security vulnerability CVE‑2025‑3415.

Summary

Fixed CVE-2025-3415 security vulnerability