From 0e5577e0882d2eb1f5fd6c178303dbc2d7e28805 Mon Sep 17 00:00:00 2001
From: "renovate-sh-app[bot]"
<219655108+renovate-sh-app[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 11:27:00 +0000
Subject: [PATCH] chore(deps): update
grafana/plugin-ci-workflows/ci-cd-workflows action to v6.1.0 (#2246)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[grafana/plugin-ci-workflows](https://redirect.github.com/grafana/plugin-ci-workflows)
| action | major | `ci-cd-workflows/v5.1.0` โ `ci-cd-workflows/v6.1.0` |
---
### Release Notes
grafana/plugin-ci-workflows
(grafana/plugin-ci-workflows)
###
[`vci-cd-workflows/v6.1.0`](https://redirect.github.com/grafana/plugin-ci-workflows/releases/tag/ci-cd-workflows/v6.1.0):
ci-cd-workflows: v6.1.0
[Compare
Source](https://redirect.github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v6.0.0...ci-cd-workflows/v6.1.0)
##### ๐ Features
- **cd:** export ci outputs in cd job
([#518](https://redirect.github.com/grafana/plugin-ci-workflows/issues/518))
([ce2d1bb](https://redirect.github.com/grafana/plugin-ci-workflows/commit/ce2d1bb8737d7fef78d2c3e7889907b3e34df36b))
###
[`vci-cd-workflows/v6.0.0`](https://redirect.github.com/grafana/plugin-ci-workflows/releases/tag/ci-cd-workflows/v6.0.0):
ci-cd-workflows: v6.0.0
[Compare
Source](https://redirect.github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v5.1.0...ci-cd-workflows/v6.0.0)
##### โ BREAKING CHANGES
- **playwright:** remove version and image arguments
([#507](https://redirect.github.com/grafana/plugin-ci-workflows/issues/507))
`GRAFANA_VERSION` and `GRAFANA_IMAGE` aren't being passed to Playwright
anymore.
For consumers of the shared workflows that wants to detect Grafana
version within plugin-e2e tests, there's an alternative approach using
the [official
API](https://grafana.com/developers/plugin-tools/e2e-test-a-plugin/):
```ts
test('should be possible to enable advanced mode', async ({ grafanaVersion, alertRuleEditPage }) => {
test.skip(semver.lt(grafanaVersion, '11.6.0'), 'Advanced mode is not supported in Grafana versions < 11.6.0');
// test code
});
```
***
- **cd:** allow releasing to prod from non-main branches
([#378](https://redirect.github.com/grafana/plugin-ci-workflows/issues/378))
Calls to `cd.yml` must be adjusted to include an additional permission:
`pull-requests: read`, otherwise the workflow will fail with the
following error:
```
Invalid workflow file: ...
The workflow is not valid. .github/workflows/publish.yaml (...): Error calling workflow 'grafana/plugin-ci-workflows/.github/workflows/cd.yml@.... The workflow is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'.
```
Example on the required changes to `cd.yml`:
```diff
jobs:
cd:
name: CD
uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
permissions:
contents: write
+ pull-requests: read
id-token: write
attestations: write
```
***
##### ๐ Features
- **cd:** allow releasing to prod from non-main branches
([#378](https://redirect.github.com/grafana/plugin-ci-workflows/issues/378))
([e1cf5f6](https://redirect.github.com/grafana/plugin-ci-workflows/commit/e1cf5f6083704fd837f4ec11761dd397b74f0929))
- **ci:** add warning when ci and cd workflows are not on the same
reference
([#492](https://redirect.github.com/grafana/plugin-ci-workflows/issues/492))
([4e9ca04](https://redirect.github.com/grafana/plugin-ci-workflows/commit/4e9ca04ed0b13a33baf41d6cd53ce6fedb8cf683))
- **ci:** support react image in e2e matrix
([#496](https://redirect.github.com/grafana/plugin-ci-workflows/issues/496))
([6d8cb8c](https://redirect.github.com/grafana/plugin-ci-workflows/commit/6d8cb8c5240cc11619c221beb201ee07e5ee855c))
- **playwright:** remove version and image arguments
([#507](https://redirect.github.com/grafana/plugin-ci-workflows/issues/507))
([f70e822](https://redirect.github.com/grafana/plugin-ci-workflows/commit/f70e82266068fbe7cdfa97a5120d4e616ab1275f))
##### โ
Tests
- **act:** add gcom mock, cd.yml changes for testing
([#501](https://redirect.github.com/grafana/plugin-ci-workflows/issues/501))
([e3f1779](https://redirect.github.com/grafana/plugin-ci-workflows/commit/e3f1779be66d8a2c7051adb0a42beb73184c5bea))
- **act:** fix validator tests
([#506](https://redirect.github.com/grafana/plugin-ci-workflows/issues/506))
([3c93dda](https://redirect.github.com/grafana/plugin-ci-workflows/commit/3c93dda78df9f6ac587e2c7e116ac7b1e04627a3))
##### ๐ง Chores
- **ci:** run golangci-lint on internal go packages
([#485](https://redirect.github.com/grafana/plugin-ci-workflows/issues/485))
([303148f](https://redirect.github.com/grafana/plugin-ci-workflows/commit/303148fcc64f3ecbca42d2eda4142dceafa2296b))
- **deps:** update actions/attest-build-provenance action to v3.1.0
([#484](https://redirect.github.com/grafana/plugin-ci-workflows/issues/484))
([ba9c56e](https://redirect.github.com/grafana/plugin-ci-workflows/commit/ba9c56e2992bc28da40bce896349d7122c03e3f1))
- **deps:** update actions/cache action to v5
([#481](https://redirect.github.com/grafana/plugin-ci-workflows/issues/481))
([3eaee5a](https://redirect.github.com/grafana/plugin-ci-workflows/commit/3eaee5a68d81c66037d8ba723d4070cb0e1be850))
- **deps:** update stefanzweifel/git-auto-commit-action action to v7.1.0
([#483](https://redirect.github.com/grafana/plugin-ci-workflows/issues/483))
([f9a22aa](https://redirect.github.com/grafana/plugin-ci-workflows/commit/f9a22aa89487aa54a299a0c3b1e59e0832b7a0b9))
- **deps:** update step-security/harden-runner action to v2.14.0
([#477](https://redirect.github.com/grafana/plugin-ci-workflows/issues/477))
([cdab179](https://redirect.github.com/grafana/plugin-ci-workflows/commit/cdab179fe05abb011a6b236c45426d4c6004f8af))
---
### Configuration
๐
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
๐ฆ **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
โป **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
๐ **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
## Need help?
You can ask for more help in the following Slack channel:
#proj-renovate-self-hosted. In that channel you can also find ADR and
FAQ docs in the Resources section.
---------
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: Zoltรกn Bedi
---
.github/workflows/publish.yaml | 3 ++-
.github/workflows/push.yaml | 2 +-
2 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index aa3b8c1..de26e2f 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -3,6 +3,7 @@ run-name: Deploy ${{ inputs.branch }} to ${{ inputs.environment }} by @${{ githu
permissions:
attestations: write
contents: write
+ pull-requests: read
id-token: write
on:
@@ -27,7 +28,7 @@ on:
jobs:
cd:
name: CD
- uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v5.1.0
+ uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v6.1.0
with:
golangci-lint-version: '2.7.2'
go-version: '1.25.5'
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index b6c860b..e236bb3 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -12,7 +12,7 @@ on:
jobs:
ci:
name: CI
- uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v5.1.0
+ uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v6.1.0
with:
go-version: '1.25.5'
golangci-lint-version: '2.7.2'