Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the all-node-dependencies group across 1 directory with 29 updates

Open
Number: #406
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 05, 2025 at 03:12 PM UTC
(4 months ago)
Updated: May 12, 2025 at 02:46 PM UTC
(4 months ago)
Labels:
dependencies javascript
Description:

Bumps the all-node-dependencies group with 29 updates in the / directory:

Package From To
@grafana/runtime 11.5.2 12.0.0
@grafana/schema 11.5.2 12.0.0
@grafana/ui 11.5.2 12.0.0
react-router-dom 7.3.0 7.5.3
@babel/core 7.26.10 7.27.1
@eslint/eslintrc 3.3.0 3.3.1
@eslint/js 9.22.0 9.26.0
@grafana/plugin-e2e 1.19.0 2.0.0
@playwright/test 1.50.1 1.52.0
@swc/core 1.11.9 1.11.24
@swc/helpers 0.5.15 0.5.17
@swc/jest 0.2.37 0.2.38
@testing-library/react 16.2.0 16.3.0
@types/node 22.13.10 22.15.3
@types/semver 7.5.8 7.7.0
@typescript-eslint/eslint-plugin 8.26.1 8.31.1
@typescript-eslint/parser 8.26.1 8.31.1
cspell 8.17.5 9.0.0
eslint 9.22.0 9.26.0
eslint-config-prettier 10.1.1 10.1.2
eslint-plugin-jsdoc 50.6.6 50.6.11
eslint-plugin-prettier 5.2.3 5.4.0
eslint-plugin-react 7.37.4 7.37.5
eslint-webpack-plugin 5.0.0 5.0.1
fork-ts-checker-webpack-plugin 9.0.2 9.1.0
glob 11.0.1 11.0.2
sass 1.85.1 1.87.0
typescript 5.8.2 5.8.3
webpack 5.98.0 5.99.7

Updates @grafana/runtime from 11.5.2 to 12.0.0

Release notes

Sourced from @​grafana/runtime's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Bug fixes

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/runtime's changelog.

11.6.1 (2025-04-23)

Features and enhancements

Bug fixes

11.5.4 (2025-04-23)

Features and enhancements

Bug fixes

... (truncated)

Commits
  • c04fd54 Chore: Update version in release-12.0.0 branch (#104059)
  • 50499fa Dashboards: Add a config setting that limits the number of series that will b...
  • 8ebce76 UserStorage: multiple improvements (#103779)
  • 3607356 i18n: Update internationalization/dates.ts to use locale (#103731)
  • 0533883 Sidecar: Remove experimental Sidecar implementation (#103786)
  • 39dcff2 Plugin Extensions: Clean up the deprecated APIs (#102102)
  • 63af403 Live: Remove queryOverLive and live-service-web-worker experimental feature f...
  • f96e4e9 Frontend: Remove Angular (#99760)
  • 9ea1c20 Plugin Extensions: Move observable extension apis from the unstable entrypoin...
  • 135fbf6 data sources: feature toggle: route explore queries to the new query service ...
  • Additional commits viewable in compare view

Updates @grafana/schema from 11.5.2 to 12.0.0

Release notes

Sourced from @​grafana/schema's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Bug fixes

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/schema's changelog.

11.6.1 (2025-04-23)

Features and enhancements

Bug fixes

11.5.4 (2025-04-23)

Features and enhancements

Bug fixes

... (truncated)

Commits

Updates @grafana/ui from 11.5.2 to 12.0.0

Release notes

Sourced from @​grafana/ui's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Bug fixes

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/ui's changelog.

11.6.1 (2025-04-23)

Features and enhancements

Bug fixes

11.5.4 (2025-04-23)

Features and enhancements

Bug fixes

... (truncated)

Commits

Updates react-router-dom from 7.3.0 to 7.5.3

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.15
    • react-router-dom@6.4.0-pre.15

react-router-dom-v5-compat@6.4.0-pre.11

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.11
    • react-router-dom@6.4.0-pre.11

react-router-dom-v5-compat@6.4.0-pre.10

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.10
    • react-router-dom@6.4.0-pre.10

react-router-dom-v5-compat@6.4.0-pre.9

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.9
    • react-router-dom@6.4.0-pre.9

react-router-dom-v5-compat@6.4.0-pre.8

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.8
    • react-router-dom@6.4.0-pre.8
Changelog

Sourced from react-router-dom's changelog.

7.5.3

Patch Changes

  • Updated dependencies:
    • react-router@7.5.3

7.5.2

Patch Changes

  • Updated dependencies:
    • react-router@7.5.2

7.5.1

Patch Changes

  • Updated dependencies:
    • react-router@7.5.1

7.5.0

Patch Changes

  • Updated dependencies:
    • react-router@7.5.0

7.4.1

Patch Changes

  • Updated dependencies:
    • react-router@7.4.1

7.4.0

Patch Changes

  • Updated dependencies:
    • react-router@7.4.0
Commits

Updates @babel/core from 7.26.10 to 7.27.1

Release notes

Sourced from @​babel/core's releases.

v7.27.1 (2025-04-30)

Thanks @​kermanx and @​woaitsAryan for your first PRs!

:eyeglasses: Spec Compliance

:bug: Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
    • #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
    • #17080 Fix start of TSParameterProperty (@​JLHwung)
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator

:nail_care: Polish

  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

:house: Internal

  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone<...

    Description has been truncated

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
react-router-dom
Ecosystem:
npm
Version Change:
7.3.0 → 7.5.3
Update Type:
Minor
Package:
eslint
Ecosystem:
npm
Version Change:
9.22.0 → 9.26.0
Update Type:
Minor
Package:
sass
Ecosystem:
npm
Version Change:
1.85.1 → 1.87.0
Update Type:
Minor
Package:
@types/node
Ecosystem:
npm
Version Change:
22.13.10 → 22.15.3
Update Type:
Minor
Package:
eslint-config-prettier
Ecosystem:
npm
Version Change:
10.1.1 → 10.1.2
Update Type:
Patch
Package:
webpack
Ecosystem:
npm
Version Change:
5.98.0 → 5.99.7
Update Type:
Minor
Package:
@babel/core
Ecosystem:
npm
Version Change:
7.26.10 → 7.27.1
Update Type:
Minor
Package:
eslint-plugin-react
Ecosystem:
npm
Version Change:
7.37.4 → 7.37.5
Update Type:
Patch
Package:
typescript
Ecosystem:
npm
Version Change:
5.8.2 → 5.8.3
Update Type:
Patch
Package:
@typescript-eslint/parser
Ecosystem:
npm
Version Change:
8.26.1 → 8.31.1
Update Type:
Minor
Package:
@eslint/js
Ecosystem:
npm
Version Change:
9.22.0 → 9.26.0
Update Type:
Minor
Package:
@swc/core
Ecosystem:
npm
Version Change:
1.11.9 → 1.11.24
Update Type:
Patch
Package:
@playwright/test
Ecosystem:
npm
Version Change:
1.50.1 → 1.52.0
Update Type:
Minor
Package:
@typescript-eslint/eslint-plugin
Ecosystem:
npm
Version Change:
8.26.1 → 8.31.1
Update Type:
Minor
Package:
eslint-plugin-prettier
Ecosystem:
npm
Version Change:
5.2.3 → 5.4.0
Update Type:
Minor
Package:
eslint-plugin-jsdoc
Ecosystem:
npm
Version Change:
50.6.6 → 50.6.11
Update Type:
Patch
Package:
@testing-library/react
Ecosystem:
npm
Version Change:
16.2.0 → 16.3.0
Update Type:
Minor
Package:
glob
Ecosystem:
npm
Version Change:
11.0.1 → 11.0.2
Update Type:
Patch
Package:
cspell
Ecosystem:
npm
Version Change:
8.17.5 → 9.0.0
Update Type:
Major
Package:
@grafana/schema
Ecosystem:
npm
Version Change:
11.5.2 → 12.0.0
Update Type:
Major
Package:
fork-ts-checker-webpack-plugin
Ecosystem:
npm
Version Change:
9.0.2 → 9.1.0
Update Type:
Minor
Package:
@swc/jest
Ecosystem:
npm
Version Change:
0.2.37 → 0.2.38
Update Type:
Patch
Package:
@eslint/eslintrc
Ecosystem:
npm
Version Change:
3.3.0 → 3.3.1
Update Type:
Patch
Package:
eslint-webpack-plugin
Ecosystem:
npm
Version Change:
5.0.0 → 5.0.1
Update Type:
Patch
Package:
@swc/helpers
Ecosystem:
npm
Version Change:
0.5.15 → 0.5.17
Update Type:
Patch
Package:
@types/semver
Ecosystem:
npm
Version Change:
7.5.8 → 7.7.0
Update Type:
Minor
Package:
@grafana/runtime
Ecosystem:
npm
Version Change:
11.5.2 → 12.0.0
Update Type:
Major
Package:
@grafana/ui
Ecosystem:
npm
Version Change:
11.5.2 → 12.0.0
Update Type:
Major
Package:
@grafana/plugin-e2e
Ecosystem:
npm
Version Change:
1.19.0 → 2.0.0
Update Type:
Major
Security Advisories
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
GHSA-92cp-5422-2mw7 CVE-2025-29923 LOW
### Impact The issue only occurs when the `CLIENT SETINFO` command times out during connection establishment. The following circumstances can cause such a timeout: 1. The client is configured to ...
Grafana's datasource proxy API allows authorization checks to be bypassed
GHSA-9j65-rv5x-4vrf CVE-2025-3454 MODERATE
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauth...
jwt-go allows excessive memory allocation during header parsing
GHSA-mh63-6h87-95cp CVE-2025-30204 HIGH
### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](...
Grafana vulnerable to authenticated users bypassing dashboard, folder permissions
GHSA-3px7-c4j3-576r CVE-2025-3260 HIGH
A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions (v0alpha1, ...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 992928
UUID: 3039997900
Node ID: PR_kwDODs5kj86U9IrE
Host: GitHub
Repository: grafana/timestream-datasource