@grafana/create-plugin 7.7.0-canary.2656.26454058960.0 → 7.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/CHANGELOG.md +347 -314
  2. package/dist/codemods/migrations/migrations.js +1 -1
  3. package/package.json +27 -27
  4. package/src/codemods/migrations/migrations.ts +1 -1
  5. package/templates/backend/go.mod +7 -7
  6. package/templates/backend-app/go.mod +7 -7
  7. package/templates/backend/.vscode/launch.json +0 -33
  8. package/templates/backend-app/.vscode/launch.json +0 -33
package/dist/codemods/migrations/migrations.js CHANGED
@@ -63,7 +63,7 @@ var defaultMigrations = [
63
63
  },
64
64
  {
65
65
  name: "011-secure-sign-script",
66
- version: "7.6.2",
66
+ version: "7.6.3",
67
67
  description: "Security: replace insecure inline `npx --yes @grafana/sign-plugin@latest` sign script with a locked @grafana/sign-plugin devDependency to prevent arbitrary code execution from a compromised @latest publish.",
68
68
  scriptPath: import.meta.resolve("./scripts/011-secure-sign-script.js")
69
69
  }
package/package.json CHANGED
@@ -1,7 +1,8 @@
1
1
  {
2
2
  "name": "@grafana/create-plugin",
3
- "version": "7.7.0-canary.2656.26454058960.0",
3
+ "version": "7.7.1",
4
4
  "repository": {
5
+ "type": "git",
5
6
  "directory": "packages/create-plugin",
6
7
  "url": "https://github.com/grafana/plugin-tools"
7
8
  },
@@ -25,35 +26,34 @@
25
26
  "typecheck": "tsc --noEmit"
26
27
  },
27
28
  "dependencies": {
28
- "@babel/parser": "^7.28.5",
29
- "@ivanmaxlogiudice/gitignore": "^0.0.2",
30
- "change-case": "^5.4.0",
31
- "debug": "^4.3.4",
32
- "enquirer": "^2.4.1",
33
- "find-up": "^8.0.0",
34
- "glob": "^13.0.0",
35
- "handlebars": "^4.7.8",
36
- "jsonc-parser": "^3.3.1",
37
- "minimist": "^1.2.8",
38
- "recast": "^0.23.11",
39
- "semver": "^7.3.5",
40
- "title-case": "^4.3.0",
41
- "valibot": "^1.2.0",
42
- "which": "^6.0.0",
43
- "yaml": "^2.7.0"
29
+ "@babel/parser": "7.29.0",
30
+ "@ivanmaxlogiudice/gitignore": "0.0.2",
31
+ "change-case": "5.4.4",
32
+ "debug": "4.4.3",
33
+ "enquirer": "2.4.1",
34
+ "find-up": "8.0.0",
35
+ "glob": "13.0.6",
36
+ "handlebars": "4.7.9",
37
+ "jsonc-parser": "3.3.1",
38
+ "minimist": "1.2.8",
39
+ "recast": "0.23.11",
40
+ "semver": "7.7.2",
41
+ "title-case": "4.3.2",
42
+ "valibot": "1.2.0",
43
+ "which": "6.0.1",
44
+ "yaml": "2.9.0"
44
45
  },
45
46
  "devDependencies": {
46
- "@libs/output": "^1.0.3",
47
- "@libs/version": "^1.0.2",
48
- "@types/glob": "^9.0.0",
49
- "@types/minimist": "^1.2.5",
50
- "@types/semver": "^7.7.1",
51
- "@types/tmp": "^0.2.6",
52
- "@types/which": "^3.0.4",
53
- "tmp": "^0.2.5"
47
+ "@libs/output": "1.0.3",
48
+ "@libs/version": "1.0.2",
49
+ "@types/glob": "9.0.0",
50
+ "@types/minimist": "1.2.5",
51
+ "@types/semver": "7.7.1",
52
+ "@types/tmp": "0.2.6",
53
+ "@types/which": "3.0.4",
54
+ "tmp": "0.2.5"
54
55
  },
55
56
  "engines": {
56
57
  "node": ">=20"
57
- },
58
- "gitHead": "9f2c76337454a475c2d4769c1fa76b1d2019ad0a"
58
+ }
59
59
  }
package/src/codemods/migrations/migrations.ts CHANGED
@@ -73,7 +73,7 @@ export default [
73
73
  },
74
74
  {
75
75
  name: '011-secure-sign-script',
76
- version: '7.6.2',
76
+ version: '7.6.3',
77
77
  description:
78
78
  'Security: replace insecure inline `npx --yes @grafana/sign-plugin@latest` sign script with a locked @grafana/sign-plugin devDependency to prevent arbitrary code execution from a compromised @latest publish.',
79
79
  scriptPath: import.meta.resolve('./scripts/011-secure-sign-script.js'),
package/templates/backend/go.mod CHANGED
@@ -1,7 +1,7 @@
1
1
  module github.com/{{ kebabCase orgName }}/{{ kebabCase pluginName }}
2
2
 
3
3
 
4
- go 1.25.5
4
+ go 1.26.3
5
5
 
6
6
  require github.com/grafana/grafana-plugin-sdk-go v0.285.0
7
7
 
@@ -72,13 +72,13 @@ require (
72
72
  go.opentelemetry.io/proto/otlp v1.9.0 // indirect
73
73
  go.yaml.in/yaml/v2 v2.4.3 // indirect
74
74
  golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 // indirect
75
- golang.org/x/mod v0.30.0 // indirect
76
- golang.org/x/net v0.48.0 // indirect
77
- golang.org/x/sync v0.19.0 // indirect
78
- golang.org/x/sys v0.40.0 // indirect
75
+ golang.org/x/mod v0.35.0 // indirect
76
+ golang.org/x/net v0.55.0 // indirect
77
+ golang.org/x/sync v0.20.0 // indirect
78
+ golang.org/x/sys v0.45.0 // indirect
79
79
  golang.org/x/telemetry v0.0.0-20251111182119-bc8e575c7b54 // indirect
80
- golang.org/x/text v0.32.0 // indirect
81
- golang.org/x/tools v0.39.0 // indirect
80
+ golang.org/x/text v0.37.0 // indirect
81
+ golang.org/x/tools v0.44.0 // indirect
82
82
  golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
83
83
  google.golang.org/genproto v0.0.0-20210630183607-d20f26d13c79 // indirect
84
84
  google.golang.org/grpc v1.78.0 // indirect
package/templates/backend-app/go.mod CHANGED
@@ -1,7 +1,7 @@
1
1
  module github.com/{{ kebabCase orgName }}/{{ kebabCase pluginName }}
2
2
 
3
3
 
4
- go 1.25.5
4
+ go 1.26.3
5
5
 
6
6
  require github.com/grafana/grafana-plugin-sdk-go v0.285.0
7
7
 
@@ -72,13 +72,13 @@ require (
72
72
  go.opentelemetry.io/proto/otlp v1.9.0 // indirect
73
73
  go.yaml.in/yaml/v2 v2.4.3 // indirect
74
74
  golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 // indirect
75
- golang.org/x/mod v0.30.0 // indirect
76
- golang.org/x/net v0.48.0 // indirect
77
- golang.org/x/sync v0.19.0 // indirect
78
- golang.org/x/sys v0.40.0 // indirect
75
+ golang.org/x/mod v0.35.0 // indirect
76
+ golang.org/x/net v0.55.0 // indirect
77
+ golang.org/x/sync v0.20.0 // indirect
78
+ golang.org/x/sys v0.45.0 // indirect
79
79
  golang.org/x/telemetry v0.0.0-20251111182119-bc8e575c7b54 // indirect
80
- golang.org/x/text v0.32.0 // indirect
81
- golang.org/x/tools v0.39.0 // indirect
80
+ golang.org/x/text v0.37.0 // indirect
81
+ golang.org/x/tools v0.44.0 // indirect
82
82
  golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
83
83
  google.golang.org/genproto v0.0.0-20210630183607-d20f26d13c79 // indirect
84
84
  google.golang.org/grpc v1.78.0 // indirect
package/templates/backend/.vscode/launch.json DELETED
@@ -1,33 +0,0 @@
1
- {
2
- "version": "0.2.0",
3
- "configurations": [
4
- {
5
- "name": "Standalone debug mode",
6
- "type": "go",
7
- "request": "launch",
8
- "mode": "debug",
9
- "program": "${workspaceFolder}/pkg",
10
- "env": {},
11
- "args": [
12
- "-standalone"
13
- ]
14
- },
15
- {
16
- "name": "Attach to plugin backend in docker",
17
- "type": "go",
18
- "request": "attach",
19
- "mode": "remote",
20
- "port": 2345,
21
- "host": "127.0.0.1",
22
- "showLog": true,
23
- "trace": "log",
24
- "logOutput": "rpc",
25
- "substitutePath": [
26
- {
27
- "from": "${workspaceFolder}",
28
- "to": "/root/{{ pluginId }}"
29
- }
30
- ]
31
- }
32
- ]
33
- }
package/templates/backend-app/.vscode/launch.json DELETED
@@ -1,33 +0,0 @@
1
- {
2
- "version": "0.2.0",
3
- "configurations": [
4
- {
5
- "name": "Standalone debug mode",
6
- "type": "go",
7
- "request": "launch",
8
- "mode": "debug",
9
- "program": "${workspaceFolder}/pkg",
10
- "env": {},
11
- "args": [
12
- "-standalone"
13
- ]
14
- },
15
- {
16
- "name": "Attach to plugin backend in docker",
17
- "type": "go",
18
- "request": "attach",
19
- "mode": "remote",
20
- "port": 2345,
21
- "host": "127.0.0.1",
22
- "showLog": true,
23
- "trace": "log",
24
- "logOutput": "rpc",
25
- "substitutePath": [
26
- {
27
- "from": "${workspaceFolder}",
28
- "to": "/root/{{ pluginId }}"
29
- }
30
- ]
31
- }
32
- ]
33
- }