chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v6.1.0 (#2246)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[grafana/plugin-ci-workflows](https://redirect.github.com/grafana/plugin-ci-workflows)
| action | major | `ci-cd-workflows/v5.1.0` → `ci-cd-workflows/v6.1.0` |

---

### Release Notes

<details>
<summary>grafana/plugin-ci-workflows
(grafana/plugin-ci-workflows)</summary>

###
[`vci-cd-workflows/v6.1.0`](https://redirect.github.com/grafana/plugin-ci-workflows/releases/tag/ci-cd-workflows/v6.1.0):
ci-cd-workflows: v6.1.0

[Compare
Source](https://redirect.github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v6.0.0...ci-cd-workflows/v6.1.0)

##### 🎉 Features

- **cd:** export ci outputs in cd job
([#&#8203;518](https://redirect.github.com/grafana/plugin-ci-workflows/issues/518))
([ce2d1bb](ce2d1bb873))

###
[`vci-cd-workflows/v6.0.0`](https://redirect.github.com/grafana/plugin-ci-workflows/releases/tag/ci-cd-workflows/v6.0.0):
ci-cd-workflows: v6.0.0

[Compare
Source](https://redirect.github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v5.1.0...ci-cd-workflows/v6.0.0)

##### ⚠ BREAKING CHANGES

- **playwright:** remove version and image arguments
([#&#8203;507](https://redirect.github.com/grafana/plugin-ci-workflows/issues/507))

`GRAFANA_VERSION` and `GRAFANA_IMAGE` aren't being passed to Playwright
anymore.

For consumers of the shared workflows that wants to detect Grafana
version within plugin-e2e tests, there's an alternative approach using
the [official
API](https://grafana.com/developers/plugin-tools/e2e-test-a-plugin/):

```ts
test('should be possible to enable advanced mode', async ({ grafanaVersion, alertRuleEditPage }) => {
   test.skip(semver.lt(grafanaVersion, '11.6.0'), 'Advanced mode is not supported in Grafana versions < 11.6.0');
   // test code
});
```

***

- **cd:** allow releasing to prod from non-main branches
([#&#8203;378](https://redirect.github.com/grafana/plugin-ci-workflows/issues/378))

Calls to `cd.yml` must be adjusted to include an additional permission:
`pull-requests: read`, otherwise the workflow will fail with the
following error:

```
Invalid workflow file: ...
The workflow is not valid. .github/workflows/publish.yaml (...): Error calling workflow 'grafana/plugin-ci-workflows/.github/workflows/cd.yml@.... The workflow is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'.
```

Example on the required changes to `cd.yml`:

```diff
jobs:
  cd:
    name: CD
    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
    permissions:
      contents: write
+     pull-requests: read
      id-token: write
      attestations: write
```

***

##### 🎉 Features

- **cd:** allow releasing to prod from non-main branches
([#&#8203;378](https://redirect.github.com/grafana/plugin-ci-workflows/issues/378))
([e1cf5f6](e1cf5f6083))
- **ci:** add warning when ci and cd workflows are not on the same
reference
([#&#8203;492](https://redirect.github.com/grafana/plugin-ci-workflows/issues/492))
([4e9ca04](4e9ca04ed0))
- **ci:** support react image in e2e matrix
([#&#8203;496](https://redirect.github.com/grafana/plugin-ci-workflows/issues/496))
([6d8cb8c](6d8cb8c524))
- **playwright:** remove version and image arguments
([#&#8203;507](https://redirect.github.com/grafana/plugin-ci-workflows/issues/507))
([f70e822](f70e822660))

##### ✅ Tests

- **act:** add gcom mock, cd.yml changes for testing
([#&#8203;501](https://redirect.github.com/grafana/plugin-ci-workflows/issues/501))
([e3f1779](e3f1779be6))
- **act:** fix validator tests
([#&#8203;506](https://redirect.github.com/grafana/plugin-ci-workflows/issues/506))
([3c93dda](3c93dda78d))

##### 🔧 Chores

- **ci:** run golangci-lint on internal go packages
([#&#8203;485](https://redirect.github.com/grafana/plugin-ci-workflows/issues/485))
([303148f](303148fcc6))
- **deps:** update actions/attest-build-provenance action to v3.1.0
([#&#8203;484](https://redirect.github.com/grafana/plugin-ci-workflows/issues/484))
([ba9c56e](ba9c56e299))
- **deps:** update actions/cache action to v5
([#&#8203;481](https://redirect.github.com/grafana/plugin-ci-workflows/issues/481))
([3eaee5a](3eaee5a68d))
- **deps:** update stefanzweifel/git-auto-commit-action action to v7.1.0
([#&#8203;483](https://redirect.github.com/grafana/plugin-ci-workflows/issues/483))
([f9a22aa](f9a22aa894))
- **deps:** update step-security/harden-runner action to v2.14.0
([#&#8203;477](https://redirect.github.com/grafana/plugin-ci-workflows/issues/477))
([cdab179](cdab179fe0))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

## Need help?
You can ask for more help in the following Slack channel:
#proj-renovate-self-hosted. In that channel you can also find ADR and
FAQ docs in the Resources section.

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44Mi4zIiwidXBkYXRlZEluVmVyIjoiNDIuODIuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicGx1Z2luLWNpLXdvcmtmbG93cyJdfQ==-->

---------

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: Zoltán Bedi <zoltan.bedi@gmail.com>

.github/workflows/push.yaml

@@ -12,7 +12,7 @@ on:
 jobs:
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v5.1.0
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v6.1.0
     with:
       go-version: '1.25.5'
       golangci-lint-version: '2.7.2'