chore(main): release ci-cd-workflows 4.3.0 (#402)

Co-authored-by: grafana-plugins-platform-bot[bot] <144369747+grafana-plugins-platform-bot[bot]@users.noreply.github.com>

Author: grafana-plugins-platform-bot[bot]

.github/workflows/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [4.3.0](https://github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v4.2.0...ci-cd-workflows/v4.3.0) (2025-11-26)
+
+
+### 🎉 Features
+
+* add a more user-friendly error when pinning plugin-ci-workflows to a commit hash ([f2c945a](https://github.com/grafana/plugin-ci-workflows/commit/f2c945af2f13d37c5ebfa544b549f09fd01c56c1))
+* block workflow if pinned to a commit hash rather than a tag/branch reference ([f2c945a](https://github.com/grafana/plugin-ci-workflows/commit/f2c945af2f13d37c5ebfa544b549f09fd01c56c1))
+
+
+### 🐛 Bug Fixes
+
+* trust grafana-plugins-platform-bot[bot] ([#404](https://github.com/grafana/plugin-ci-workflows/issues/404)) ([dc5bcf5](https://github.com/grafana/plugin-ci-workflows/commit/dc5bcf59949e3a962289aaa43badf3f39f536de3))
+
+
+### 🔧 Chores
+
+* add ACTIONLINT_VERSION to simplify actionlint version bumps ([f422460](https://github.com/grafana/plugin-ci-workflows/commit/f42246017310591f720cd9f250037b90052b88bc))
+* add concurrency to actionlint job ([f422460](https://github.com/grafana/plugin-ci-workflows/commit/f42246017310591f720cd9f250037b90052b88bc))
+* changed warning message for rolling release channel detection ([f2c945a](https://github.com/grafana/plugin-ci-workflows/commit/f2c945af2f13d37c5ebfa544b549f09fd01c56c1))
+
 ## [4.2.0](https://github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v4.1.0...ci-cd-workflows/v4.2.0) (2025-11-24)
 
 

.github/workflows/cd.yml

@@ -413,7 +413,7 @@ jobs:
 
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v4.3.0
     needs:
       - setup
     with:
@@ -655,7 +655,7 @@ jobs:
           ENVIRONMENT: ${{ matrix.environment }}
 
       - name: Check and create stub
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@ci-cd-workflows/v4.3.0
         if: ${{ matrix.environment != 'prod' && matrix.environment != 'prod-canary' }}
         with:
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
@@ -664,13 +664,13 @@ jobs:
           gcloud-auth-token: ${{ steps.gcloud.outputs.id_token }}
 
       - name: Check artifact ZIP(s)
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@ci-cd-workflows/v4.3.0
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
 
       - name: Publish to catalog
-        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@main
+        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@ci-cd-workflows/v4.3.0
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           environment: ${{ matrix.environment == 'prod-canary' && 'prod' || matrix.environment }}
@@ -982,7 +982,7 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Publish docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@ci-cd-workflows/v4.3.0
         with:
           id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
           version: ${{ fromJSON(needs.ci.outputs.plugin).version }}
@@ -1019,7 +1019,7 @@ jobs:
 
       - name: Parse changelog
         id: changelog
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@ci-cd-workflows/v4.3.0
         with:
           changelog-path: ${{ inputs.plugin-directory }}/CHANGELOG.md
 

.github/workflows/ci.yml

@@ -402,7 +402,7 @@ jobs:
           INPUT_TESTING: ${{ inputs.testing }}
 
       - name: Setup
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@ci-cd-workflows/v4.3.0
         with:
           # The priority to setup the node version is:
           # 1. inputs.node-version
@@ -475,7 +475,7 @@ jobs:
         working-directory: ${{ inputs.plugin-directory }}
 
       - name: Test and build frontend
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@ci-cd-workflows/v4.3.0
         with:
           package-manager: ${{ inputs.package-manager }}
           plugin-directory: ${{ inputs.plugin-directory }}
@@ -484,15 +484,15 @@ jobs:
 
       - name: Test and build backend
         if: ${{ steps.check-for-backend.outputs.has-backend == 'true' }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@ci-cd-workflows/v4.3.0
         with:
           github-token: ${{ steps.generate-github-token.outputs.token }}
           plugin-directory: ${{ inputs.plugin-directory }}
           secrets: ${{ (fromJson(steps.workflow-context.outputs.result).isTrusted && inputs.backend-secrets != '') && inputs.backend-secrets || '' }}
 
       - name: Package universal ZIP
         id: universal-zip
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@ci-cd-workflows/v4.3.0
         with:
           universal: "true"
           dist-folder: dist
@@ -503,7 +503,7 @@ jobs:
 
       - name: Package os/arch ZIPs
         id: os-arch-zips
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@ci-cd-workflows/v4.3.0
         with:
           universal: "false"
           dist-folder: dist
@@ -514,7 +514,7 @@ jobs:
 
       - name: Trufflehog secrets scanning
         if: ${{ inputs.run-trufflehog == true }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@ci-cd-workflows/v4.3.0
         with:
           trufflehog-version: ${{ inputs.trufflehog-version || env.DEFAULT_TRUFFLEHOG_VERSION }}
           folder: dist-artifacts
@@ -639,11 +639,11 @@ jobs:
         shell: bash
 
       - name: Test docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@ci-cd-workflows/v4.3.0
 
   playwright:
     name: Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@ci-cd-workflows/v4.3.0
     if: ${{ inputs.run-playwright == true }}
     needs:
       - test-and-build
@@ -665,7 +665,7 @@ jobs:
 
   playwright-docker:
     name: Plugins - Dockerized Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@ci-cd-workflows/v4.3.0
     if: ${{ inputs.run-playwright-docker == true }}
     needs:
       - test-and-build

.github/workflows/playwright-docker.yml

@@ -165,6 +165,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@ci-cd-workflows/v4.3.0
         with:
           results: ${{ needs.playwright-tests.result }}

.github/workflows/playwright.yml

@@ -249,6 +249,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@ci-cd-workflows/v4.3.0
         with:
           results: ${{ needs.playwright-tests.result }}

.release-please-manifest.json

@@ -1,6 +1,6 @@
 {
   "actions/plugins/publish/publish": "2.0.1",
-  ".github/workflows": "4.2.0",
+  ".github/workflows": "4.3.0",
   "actions/plugins/version-bump-changelog": "1.1.0",
   "actions/plugins/publish/change-plugin-scope": "1.0.0",
   "actions/plugins/release-please": "1.0.1"

examples/base/provisioned-plugin-auto-cd/publish.yaml

@@ -32,7 +32,7 @@ permissions: {}
 jobs:
   cd:
     name: CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.2.0
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.3.0
     permissions:
       contents: write
       id-token: write

examples/base/provisioned-plugin-auto-cd/push.yaml

@@ -17,7 +17,7 @@ permissions: {}
 jobs:
   cd:
     name: CI / CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.2.0
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.3.0
     permissions:
       contents: write
       id-token: write

examples/base/provisioned-plugin-manual-deployment/publish.yaml

@@ -32,7 +32,7 @@ permissions: {}
 jobs:
   cd:
     name: CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.2.0
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v4.3.0
     permissions:
       contents: write
       id-token: write

examples/base/provisioned-plugin-manual-deployment/push.yaml

@@ -17,7 +17,7 @@ permissions: {}
 jobs:
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v4.2.0
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v4.3.0
     permissions:
       contents: read
       id-token: write