Releases: grafana/plugin-ci-workflows
plugins-change-plugin-scope: v1.0.0
plugins-version-bump-changelog: v1.0.0
1.0.0 (2025-10-06)
🎉 Features
- version-bump-changelog: add version bump changelog generation workflow (#100) (da5ba9a)
- version-bump: also add package-lock.json to git changes (#174) (5376f13)
🐛 Bug Fixes
🔧 Chores
- deps: Bump actions/create-github-app-token (#109) (c1c4ff4)
- deps: update actions/checkout action to v4.3.0 (#229) (7e02ef2)
- deps: update actions/checkout action to v5 (#230) (d4ad142)
- deps: update actions/create-github-app-token action to v2.1.0 (#226) (486d5d6)
- deps: update actions/create-github-app-token action to v2.1.1 (#228) (d74d260)
- deps: update actions/create-github-app-token action to v2.1.4 (#312) (9e752b9)
- deps: update grafana/shared-workflows/get-vault-secrets action to v1.3.0 (#243) (929a251)
- Fix some Zizmor issues (#211) (5007dce)
- Use get-vault-secrets without exporting env variables (#130) (0ff10ef)
- version-bump-changelog: match titles to parse-changelog (#167) (125a404)
plugins-publish-publish: v1.2.0
ci-cd-workflows: v3.1.0
3.1.0 (2025-10-03)
🎉 Features
- ci: add job to check for workflows references in pr-checks.yml (#315) (2ae9272)
- workflows: fail ci for failed signs on ops and prod (#300) (25aadee)
🐛 Bug Fixes
Added an additional input for conditionally skipping triggering the Argo workflow for releasing provisioned plugins to Grafana Cloud.
Before this change, triggering the publish (CD) workflow from a non-main branch would always publish the plugin version to the catalog and deploy it to Grafana Cloud via Argo. With this change, it's possible to determine when Argo is triggered. Publishing to the catalog always happens, regardless if Argo is triggered or not. This is useful for deploying PRs to the dev catalog, without triggering a deployment to Grafana Cloud via Argo. After publishing the version to the dev catalog, Argo deployment to the whole cluster is skipped, and the PR's version can be installed on selected instances via ./gcom-dev CLI, following these instructions.
For the above to work, you must add this input to your CD workflow file (the one calling the cd.yml workflow file, usually .github/workflows/publish.yml):
# Trigger Argo Workflow only when deploying from main branch (do not deploy PRs to the whole cluster)
trigger-argo: ${{ github.event.inputs.branch == 'main' }}🔧 Chores
ci-cd-workflows: v3.0.0
3.0.0 (2025-09-26)
⚠ BREAKING CHANGES
- deps: Bump Go version used to build plugin from Go 1.23 to Go 1.24, bump golangci-lint to v1.64.8 (#292)
- deps: Bump default Node.js version used to build plugin from 20 to 22 (Active LTS) (#291)
🐛 Bug Fixes
- add prod-canary (#280) (df43691)
- bump e2e-versions to get plugin.json lookup fix (#307) (4fc11cc)
- worflows/ci: make .nvmrc be used over the default node version (#299) (2908cea)
🤖 Continuous Integrations
🔧 Chores
- add zizmor config and ignore "unpinned-uses" for plugin-ci-workflows references (#285) (1ad04f9)
- deps: Bump default Node.js version used to build plugin from 20 to 22 (Active LTS) (#291) (080c28b)
- deps: Bump Go version used to build plugin from Go 1.23 to Go 1.24, bump golangci-lint to v1.64.8 (#292) (124ff1c)
- deps: Bump Trufflehog to v3.90.6 (9c039a5)
- deps: update actions/checkout action to v5 (#286) (74a9e53)
- manually bumping version of e2e-versions action (#304) (2d617a5)
- pinning e2e-versions and wait-for-grafana (#301) (017fa07)
ci-cd-workflows: v2.0.0
2.0.0 (2025-09-09)
⚠ BREAKING CHANGES
- Add support for tagged releases (#282)
- deps: update actions/setup-go action to v6 (#274)
- Add support for pinning plugin-ci-workflows to semver tags (#216)
🎉 Features
- add step to cache playwright (#253) (061c113)
- add support for backend secrets (#255) (1cb7ddc)
- Add support for pinning plugin-ci-workflows to semver tags (#216) (8458e50)
📝 Documentation
🤖 Continuous Integrations
🔧 Chores
- deps: update actions/attest-build-provenance action to v3 (#268) (1a170e5)
- deps: update actions/checkout action to v5 (#230) (d4ad142)
- deps: update actions/github-script action to v8 (#277) (9a182f0)
- deps: update actions/setup-go action to v6 (#274) (66cf8ba)
- deps: update amannn/action-semantic-pull-request action to v6 (#234) (4179d5a)
- deps: update google-github-actions/auth action to v2.1.13 (#260) (7d4bfda)
- deps: update google-github-actions/auth action to v3 (#269) (4415c03)
- deps: update google-github-actions/setup-gcloud action to v2.2.1 (#250) (ebe7e7b)
- deps: update google-github-actions/setup-gcloud action to v3 (#251) (429f118)
- deps: update google-github-actions/upload-cloud-storage action to v2.2.4 (#271) (2103538)
- deps: update google-github-actions/upload-cloud-storage action to v3 (#272) (7634080)
- deps: update grafana/shared-workflows/get-vault-secrets action to v1.3.0 (#243) (929a251)
- deps: update grafana/shared-workflows/trigger-argo-workflow action to v1.2.0 (#247) (d613f64)
- deps: update softprops/action-gh-release action to v2.3.3 (#281) (e010fd3)
plugins-publish-publish: v1.1.0
ci-cd-workflows: v1.2.0
1.2.0 (2025-08-21)
🎉 Features
- add option to disable docs publishing alltogether (#237) (817b34f)
- add publish to catalog as pending option in ci and publish action (#240) (0086720)
- allow all workflows to set both node-version-file and node-version (#208) (29a45db)
- allow passing of secrets to frontend build steps (#222) (aebe053)
- ci: Add support for authenticating to NPM Google Artifact Registry (#224) (87549ef)
- playwright: env for GRAFANA_VERSION to allow the playwright config access (#206) (ab20c6a)
- publish: Sanity check ZIP files before publishing to catalog (#199) (f799b45)
- Switch runners for exported workflows to self-hosted ones (#217) (2851e10)
🐛 Bug Fixes
- cd: github draft optional, omit commits (#202) (200078a)
- ci: Fix NPM auth when running Playwright E2E tests (#231) (8da89c2)
- Fix test-docs and publish-docs steps failing (#225) (a17fdd6)
- pass node-version down from ci to playwright (#219) (840c01b)
🤖 Continuous Integrations
🔧 Chores
- deps: update actions/checkout action to v4.3.0 (#229) (7e02ef2)
- deps: update actions/create-github-app-token action to v2.1.0 (#226) (486d5d6)
- deps: update actions/create-github-app-token action to v2.1.1 (#228) (d74d260)
- deps: update actions/download-artifact action to v5 (#210) (3581472)
- deps: update google-github-actions/setup-gcloud action to v2.2.0 (#227) (6fe0d0b)
- deps: update googleapis/release-please-action action to v4.3.0 (#244) (b148a5a)
- Fix some Zizmor issues (#211) (5007dce)
plugins-publish-publish: v1.0.2
ci-cd-workflows: v1.1.2
1.1.2 (2025-08-05)
🐛 Bug Fixes
- moving secret fetching up (#163) (e478422)
- publish: Fix cd-style push events not being considered trusted (#198) (34e0b28)
- publish: Fix secrets not being passed to Playwright when publishing (#196) (71132a3)
📝 Documentation
🤖 Continuous Integrations
🔧 Chores
- deps: Bump google-github-actions/upload-cloud-storage (#189) (4a55c8d)
- deps: update google-github-actions/auth action to v2.1.11 (#176) (f0c05fe)
- deps: update google-github-actions/auth action to v2.1.12 (#201) (de83d72)
- deps: update google-github-actions/setup-gcloud action to v2.1.5 (#177) (3aa265b)
- deps: update step-security/harden-runner action to v2.13.0 (#179) (bb88fd6)