Files
96a0185cb3 deps(go): bump grafana-app-sdk to 0.56.0 + misc Go deps; migrate to authlib AuthInfo.GetAccessToken + app-sdk ClientGenerator (#132)
Consolidates the Dependabot minor/patch Go-dep bumps that move together
through the workspace dependency graph. The same deps repeat across many
module go.mod files, and apps/provisioning + apps/secret already pin
grafana-app-sdk@0.56.0 on main, so the whole workspace must move as one
coherent set rather than 23 trivial PRs.

Direct dependency bumps (exact Dependabot targets, all within current major):
- github.com/grafana/grafana-app-sdk            0.53.2 -> 0.56.0
    (root + apps/advisor, alerting/notifications, alerting/rules,
     correlations, dashboard, iam, playlist, plugins, shorturl)
- github.com/grafana/grafana-aws-sdk            1.4.3  -> 1.4.5  (root)
- github.com/beevik/etree                       1.4.1  -> 1.6.0  (root)
- github.com/russellhaering/goxmldsig           1.4.0  -> 1.6.0  (root)
- github.com/opentracing-contrib/go-grpc        0.1.2  -> 0.1.3  (root)
- gocloud.dev                                   0.44.0 -> 0.46.0 (root)
- cloud.google.com/go/kms                       1.25.0 -> 1.31.0 (root)
- buf.build/gen/go/parca-dev/parca/connectrpc/go and protocolbuffers/go
    -> 1.20.0-/1.36.11-20260523035409-ca8a9e862107.1 (root)
- golang.org/x/net was already at 0.55.0 on main (no change needed).

grafana-plugin-sdk-go is carried to 0.291.1 transitively (required by
grafana-aws-sdk@1.4.5); it still exports QueryTypeDefinitionSpec.Examples
so the query schema code compiles. The explicit bump to 0.292.1 is NOT
taken here (see below).

Transitive consequences of grafana-app-sdk@0.56.0 (faithful to what
Dependabot itself produces via MVS): k8s.io/* 0.35.3 -> 0.36.x,
grafana/authlib + authlib/types advanced, go directive 1.26.1 -> 1.26.2
(app-sdk@0.56.0 declares go 1.26.2; go.work synced to match — the
member modules already required 1.26.2 on main).

Source changes required to compile against the bumped SDKs (mirrors
upstream grafana/grafana exactly, no unrelated drift):
- authlib types.AuthInfo gained GetAccessToken(); implement it on the
  three identity.Requester types — StaticRequester, SignedInUser and
  authn.Identity — each adding an AccessToken field + getter alongside
  the existing GetIDToken.
- grafana-app-sdk resource.ClientGenerator now requires DiscoveryClient()
  (and already required GetCustomRouteClient); implement both on
  lazyClientGenerator and on the plugins install test fake.

Verification (Go workspace == CI build model; GOWORK on):
go build ./... PASSES for root and all nine bumped app modules and
pkg/apimachinery; go test -short PASSES for every app module,
pkg/apimachinery/identity, and the touched root packages
(services/user, services/authn, services/apiserver). Heavy root-wide
test suites were not run.

Deferred (left to their open Dependabot PRs): grafana-plugin-sdk-go
0.292.1. That release removes QueryTypeDefinitionSpec.Examples and the
QueryExample type, which requires a non-trivial upstream feature refactor
of pkg/registry/apis/query/queryschema (examples move to
data.QueryExamples) that is beyond a dependency bump.

Co-authored-by: Antje Worring <worringantje@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-17 05:18:22 -07:00

46 lines
1.1 KiB
Plaintext

go 1.26.2
// The `skip:golangci-lint` comment tag is used to exclude the package from the `golangci-lint` GitHub Action.
// The module at the root of the repo (`.`) is excluded because ./pkg/... is included manually in the `golangci-lint` configuration.
use (
. // skip:golangci-lint
./apps/advisor
./apps/alerting/alertenrichment
./apps/alerting/historian
./apps/alerting/notifications
./apps/alerting/rules
./apps/annotation
./apps/collections
./apps/correlations
./apps/dashboard
./apps/dashvalidator
./apps/example
./apps/folder
./apps/iam
./apps/logsdrilldown
./apps/playlist
./apps/plugins
./apps/preferences
./apps/provisioning
./apps/quotas
./apps/scope
./apps/secret
./apps/shorturl
./pkg/aggregator
./pkg/apimachinery
./pkg/apiserver
./pkg/build
./pkg/build/wire // skip:golangci-lint
./pkg/codegen
./pkg/plugins
./pkg/plugins/codegen
./pkg/promlib
./pkg/semconv
./pkg/storage/unified/resource/kv
)
replace github.com/prometheus/alertmanager => github.com/grafana/prometheus-alertmanager v0.25.1-0.20260112162805-d29cc9cf7f0f
replace github.com/crewjam/saml => github.com/grafana/saml v0.4.15-0.20240917091248-ae3bbdad8a56