opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2026-03-13 15:29:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

Security: Upgrade @grafana/llm to 1.0.3 to fix CVE-2026-25536 (#120154)

Browse Source
This commit is contained in:
Hugo Häggmark
2026-03-12 12:59:03 +01:00
committed by GitHub
parent 56756f9167
commit 219e4b3907
3 changed files with 48 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package.json
View File

@@ -299,7 +299,7 @@
"@grafana/google-sdk": "0.3.5",
"@grafana/i18n": "workspace:*",
"@grafana/lezer-logql": "0.2.9",
"@grafana/llm": "1.0.2",
"@grafana/llm": "1.0.3",
"@grafana/monaco-logql": "^0.0.8",
"@grafana/o11y-ds-frontend": "workspace:*",
"@grafana/plugin-ui": "^0.13.1",

2
public/app/plugins/datasource/loki/package.json
View File

@@ -7,7 +7,7 @@
"@emotion/css": "11.13.5",
"@grafana/data": "13.0.0-pre",
"@grafana/lezer-logql": "0.2.9",
"@grafana/llm": "1.0.2",
"@grafana/llm": "1.0.3",
"@grafana/monaco-logql": "^0.0.8",
"@grafana/runtime": "13.0.0-pre",
"@grafana/schema": "13.0.0-pre",

75
yarn.lock
View File

@@ -3006,7 +3006,7 @@ __metadata:
"@grafana/data": "npm:13.0.0-pre"
"@grafana/e2e-selectors": "npm:13.0.0-pre"
"@grafana/lezer-logql": "npm:0.2.9"
"@grafana/llm": "npm:1.0.2"
"@grafana/llm": "npm:1.0.3"
"@grafana/monaco-logql": "npm:^0.0.8"
"@grafana/plugin-configs": "npm:13.0.0-pre"
"@grafana/runtime": "npm:13.0.0-pre"
@@ -3693,11 +3693,11 @@ __metadata:
languageName: node
linkType: hard
"@grafana/llm@npm:1.0.2":
version: 1.0.2
resolution: "@grafana/llm@npm:1.0.2"
"@grafana/llm@npm:1.0.3":
version: 1.0.3
resolution: "@grafana/llm@npm:1.0.3"
dependencies:
"@modelcontextprotocol/sdk": "npm:^1.25.1"
"@modelcontextprotocol/sdk": "npm:^1.26.0"
publint: "npm:^0.3.12"
react-use: "npm:^17.6.0"
semver: "npm:^7.6.3"
@@ -3707,7 +3707,7 @@ __metadata:
"@grafana/runtime": ^10.4.0 || ^11 || ^12
react: ^18
rxjs: ^7.8.2
checksum: 10/867a0845dd57c63b9d833549d12f36b112d3b0577bcb87ca7b829210917ea11dce39a6cbd59f5fbc2613daaf4d6b83bab98cd81273c04f3f9aa9478c81f1c7db
checksum: 10/4d78ddd4a3de4ac2abbe2b2c2c819153540caa37bffe6528fcfebdc26b4621d84ec17663f2866bc5d60af9145b0bc298a23f598e784a3e46b1a0d66b0b08bbf5
languageName: node
linkType: hard
@@ -6004,9 +6004,9 @@ __metadata:
languageName: node
linkType: hard
"@modelcontextprotocol/sdk@npm:^1.25.1":
version: 1.25.3
resolution: "@modelcontextprotocol/sdk@npm:1.25.3"
"@modelcontextprotocol/sdk@npm:^1.26.0":
version: 1.27.1
resolution: "@modelcontextprotocol/sdk@npm:1.27.1"
dependencies:
"@hono/node-server": "npm:^1.19.9"
ajv: "npm:^8.17.1"
@@ -6016,14 +6016,15 @@ __metadata:
cross-spawn: "npm:^7.0.5"
eventsource: "npm:^3.0.2"
eventsource-parser: "npm:^3.0.0"
express: "npm:^5.0.1"
express-rate-limit: "npm:^7.5.0"
jose: "npm:^6.1.1"
express: "npm:^5.2.1"
express-rate-limit: "npm:^8.2.1"
hono: "npm:^4.11.4"
jose: "npm:^6.1.3"
json-schema-typed: "npm:^8.0.2"
pkce-challenge: "npm:^5.0.0"
raw-body: "npm:^3.0.0"
zod: "npm:^3.25 || ^4.0"
zod-to-json-schema: "npm:^3.25.0"
zod-to-json-schema: "npm:^3.25.1"
peerDependencies:
"@cfworker/json-schema": ^4.1.1
zod: ^3.25 || ^4.0
@@ -6032,7 +6033,7 @@ __metadata:
optional: true
zod:
optional: false
checksum: 10/e4e38845ecfeaee124860ac2dfe378d2a4e8a09bd085b77124c9047b944826cff1776f97c11eaa56b0d83e164518a064f19c0be3046fa4307ba05dbe2ec325a1
checksum: 10/3cb0d61cfb916e555c85b4a527e772f88fcf9c6abacbe5eb5e965aac7c898190c416341ab3b3cba8c2d5f5ce4d513279fba3ad7784a0903d7ccd335decc55395
languageName: node
linkType: hard
@@ -18841,16 +18842,18 @@ __metadata:
languageName: node
linkType: hard
"express-rate-limit@npm:^7.5.0":
version: 7.5.0
resolution: "express-rate-limit@npm:7.5.0"
"express-rate-limit@npm:^8.2.1":
version: 8.3.1
resolution: "express-rate-limit@npm:8.3.1"
dependencies:
ip-address: "npm:10.1.0"
peerDependencies:
express: ^4.11 || 5 || ^5.0.0-beta.1
checksum: 10/eff34c83bf586789933a332a339b66649e2cca95c8e977d193aa8bead577d3182ac9f0e9c26f39389287539b8038890ff023f910b54ebb506a26a2ce135b92ca
express: ">= 4.11"
checksum: 10/dd97bfc48c01a6d4c5433203232b5e7a1e55e21322bde49033e5f8c4339584fe671a94096144a0810f4ea21dcec8aaaf15823109627e609f8ed1bc5912a345cf
languageName: node
linkType: hard
"express@npm:^5.0.1":
"express@npm:^5.2.1":
version: 5.2.1
resolution: "express@npm:5.2.1"
dependencies:
@@ -20449,7 +20452,7 @@ __metadata:
"@grafana/google-sdk": "npm:0.3.5"
"@grafana/i18n": "workspace:*"
"@grafana/lezer-logql": "npm:0.2.9"
"@grafana/llm": "npm:1.0.2"
"@grafana/llm": "npm:1.0.3"
"@grafana/monaco-logql": "npm:^0.0.8"
"@grafana/o11y-ds-frontend": "workspace:*"
"@grafana/plugin-e2e": "npm:3.4.0"
@@ -21075,6 +21078,13 @@ __metadata:
languageName: node
linkType: hard
"hono@npm:^4.11.4":
version: 4.12.7
resolution: "hono@npm:4.12.7"
checksum: 10/fed37e612730491ba9456f8f68f1b8727a5298cd839fff9641a0b7a95b1e8567a05abb819d32621b40988f166b01140cf7d573c9218dee2741004f48e09564d5
languageName: node
linkType: hard
"hookified@npm:^1.10.0":
version: 1.11.0
resolution: "hookified@npm:1.11.0"
@@ -21973,6 +21983,13 @@ __metadata:
languageName: node
linkType: hard
"ip-address@npm:10.1.0":
version: 10.1.0
resolution: "ip-address@npm:10.1.0"
checksum: 10/a6979629d1ad9c1fb424bc25182203fad739b40225aebc55ec6243bbff5035faf7b9ed6efab3a097de6e713acbbfde944baacfa73e11852bb43989c45a68d79e
languageName: node
linkType: hard
"ip-address@npm:^9.0.5":
version: 9.0.5
resolution: "ip-address@npm:9.0.5"
@@ -23592,10 +23609,10 @@ __metadata:
languageName: node
linkType: hard
"jose@npm:^6.1.1":
version: 6.1.3
resolution: "jose@npm:6.1.3"
checksum: 10/9626c51e8c3792b505e954f3094698c182208617b62dfb27269230f31e57560b083985ed8128b8a9753aa92daf18d3a2341cc826d149503f14569abe87d42389
"jose@npm:^6.1.3":
version: 6.2.1
resolution: "jose@npm:6.2.1"
checksum: 10/12f06a76ac743eb48314e662e02b141f6e4644dbcbdb1cd083c3867b1f72f1e148a67ebf4978d0d5adeb62f4be1572feee76f1849cbc32f8af1457ec9f788299
languageName: node
linkType: hard
@@ -35805,12 +35822,12 @@ __metadata:
languageName: node
linkType: hard
"zod-to-json-schema@npm:^3.25.0":
version: 3.25.0
resolution: "zod-to-json-schema@npm:3.25.0"
"zod-to-json-schema@npm:^3.25.1":
version: 3.25.1
resolution: "zod-to-json-schema@npm:3.25.1"
peerDependencies:
zod: ^3.25 || ^4
checksum: 10/cb932e20b5b5e64c75b2c34a7e6dae74b727292eab9e014b93c2607378b8cb1b227f80b429053ceb77c8e0dddc338837f9e534b2a658540ff60c9e4ffdc7cc19
checksum: 10/744dd370f4452c8db120de1475ea4d484a11df884c4636111d630e5e1351b8a7590d99cf14a2b9f21e7906f8b78721d958663a7973a40994e7d28770876674cc
languageName: node
linkType: hard