Skip to content

chore: bump @grafana/create-plugin configuration to 7.7.0#761

Open
grafana-oss-big-tent[bot] wants to merge 5 commits into
mainfrom
update-grafana-create-plugin-7.7.0
Open

chore: bump @grafana/create-plugin configuration to 7.7.0#761
grafana-oss-big-tent[bot] wants to merge 5 commits into
mainfrom
update-grafana-create-plugin-7.7.0

Conversation

@grafana-oss-big-tent

Copy link
Copy Markdown
Contributor

Bumps @grafana/create-plugin configuration from 7.0.0 to 7.7.0.

Notes for reviewer:
This is an auto-generated PR which ran @grafana/create-plugin update.
Please consult the create-plugin CHANGELOG.md to understand what may have changed.
Please review the changes thoroughly before merging.

Fix TypeScript 6 compatibility: baseUrl is deprecated in TS6 (error TS5101) and must be replaced with an equivalent paths entry to preserve non-relative import resolution.
Fix ts-node compatibility with the latest @grafana/tsconfig: outdated module/moduleResolution/target overrides break TypeScript 5/6 builds, replaced with nodenext/nodenext/es2022.
Security: replace insecure inline `npx --yes @grafana/sign-plugin@latest` sign script with a locked @grafana/sign-plugin devDependency to prevent arbitrary code execution from a compromised @latest publish.
@grafana-oss-big-tent grafana-oss-big-tent Bot requested a review from a team as a code owner June 1, 2026 00:53
@github-project-automation github-project-automation Bot moved this to Backlog in OSS Big Tent Jun 1, 2026

@yesoreyeram yesoreyeram left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot - Use the pinned version of @grafana/sign-plugin

@github-project-automation github-project-automation Bot moved this from Backlog to Awaiting Response in OSS Big Tent Jul 2, 2026

Copilot AI commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

@copilot - Use the pinned version of @grafana/sign-plugin

Done — changed "@grafana/sign-plugin": "^3.2.2" to the exact pinned version "3.3.0" in package.json and updated yarn.lock accordingly (commit chore: pin @grafana/sign-plugin to exact version 3.3.0).

Copilot AI requested a review from yesoreyeram July 2, 2026 04:54
@yesoreyeram yesoreyeram enabled auto-merge (squash) July 2, 2026 05:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

No open projects
Status: Awaiting Response

Development

Successfully merging this pull request may close these issues.

2 participants