# changelog

author: Grafana Labs <support@grafana.com> - 0.34.4
changelog:
  - chore: release 0.34.4 (#1231)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: Update googleapis/release-please-action digest to a02a34c (#1235)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - refactor: use time durations in checks_extra for easier readability (#1215)
  * refactor: use time durations in checks_extra for easier readability
  * refactor: unexport constants as they are not used externally
  - chore: Update ghcr.io/grafana/chromium-swiftshader-alpine Docker tag to v133.0.6943.141-r0-3.21.3 (#1236)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: remove unused renovate-app.json
  - chore: Update ghcr.io/grafana/grafana-build-tools Docker tag to v0.40.3
  - chore: Update dependency go to v1.24.1 (#1233)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module github.com/golangci/golangci-lint to v1.64.6 (#1230)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module github.com/KimMachineGun/automemlimit to v0.7.1 (#1218)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update actions/create-github-app-token digest to 21cfef2 (#1232)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update docker/build-push-action action to v6.15.0


author: Grafana Labs <support@grafana.com> - 0.35.0
changelog:
  - chore: release 0.35.0 (#1247)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - fix: Use a global tenant ID when retrieving secrets information (#1260)
  We have several places that need a global tenant ID. We usually
  communicate this by using models.GlobalTenantID instead of just int64,
  but the GetTenant function takes a structure that doesn't make a
  distinction, because it would require updating the protocol buffer
  definition in a way that would be hard to handle.
  Fix the various locations that are using a local ID instead of a global
  ID.
  - chore: examples/kubernetes: default to a hardened `securityContext`
  - chore: Update module google.golang.org/grpc to v1.71.0
  - chore: Update module github.com/securego/gosec/v2 to v2.22.2
  - chore: Update dependency grafana/xk6-sm to v0.2.0 (#1161)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - feat: pass secret store from API (#1179)
  * feat: pass secret store from API
  * fix: store the token in a file
  * fix: use the URLEncoding
  * fix: revert accidental change
  * fix: use a colon for seperation
  This is what the pending upstream change uses.
  * chore: Update the gsm extension usage to pass a config file
  * feat: use the -gsm prefixed bianry when secrets are enabled
  - feat: Add the sm-k6-gsm binary for secrets (#1234)
  * feat: Add the sm-k6-gsm binary for secrets
  Depends on https://github.com/grafana/xk6-sm/pull/74
  * fix: Add the gsm binary to packages also
  - fix: Update version reporting logic (#1244)
  Go 1.24 added a way to obtain the version (extract from the current Git
  repo) from the running program. Switch to that instead of passing
  linker flags at build time.
  Update ./scripts/version to report the same string.
  - chore: Update grafana/shared-workflows digest to 68b38bb
  - chore: Update module github.com/mccutchen/go-httpbin/v2 to v2.17.1 (#1240)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module golang.org/x/net to v0.37.0 (#1245)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>


author: Grafana Labs <support@grafana.com> - 0.35.1
changelog:
  - chore: release 0.35.1 (#1266)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - fix: Pass Tenant ID to adhoc checks (#1267)
  It seems ad hoc checks have never used the tenant ID. The secrets
  handling code needs this information in order to be able to retrieve
  secrets.
  - fix: Report errors when retrieving secrets (#1265)
  Add some logging to GetSecretCredentials in order to make it easier to
  figure out if there's an issue retrieving secrets.


author: Grafana Labs <support@grafana.com> - 0.35.2
changelog:
  - chore: release 0.35.2 (#1270)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: Update actions/upload-artifact digest to ea165f8
  - chore(deps): bump github.com/mccutchen/go-httpbin/v2
  Bumps [github.com/mccutchen/go-httpbin/v2](https://github.com/mccutchen/go-httpbin) from 2.17.1 to 2.18.0.
  - [Release notes](https://github.com/mccutchen/go-httpbin/releases)
  - [Commits](https://github.com/mccutchen/go-httpbin/compare/v2.17.1...v2.18.0)
  ---
  updated-dependencies:
  - dependency-name: github.com/mccutchen/go-httpbin/v2
    dependency-type: direct:production
  ...


author: Grafana Labs <support@grafana.com> - 0.36.0
changelog:
  - chore: release 0.36.0 (#1272)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: ci: remove unused `Renovate reviewer` workflow
  - chore: Update actions/create-github-app-token digest to d72941d
  - fix: Make test reporting style configurable (#1261)
  This is not changing anything, simply allowing for the possibility to
  configure the test reporting style. This is helpful if you are making a
  change where many tests start to fail at once.
  - fix: Add a safety net in adhoc's defaultRunnerFactory (#1268)
  This is trying to test for possible mistakes in setting up ad-hoc checks
  in the future.
  - fix: Update Go version retrieval logic (#1262)
  `go list -m -f '{{.GoVersion}}'` works for standalone modules, but it
  doesn't work in a Go workspace. In the later case, the command reports
  the Go version of _all_ modules in the workspace.
  `go mod edit -json` on the other hand only reports the versin in the
  current module. Having to depend on jq like this is not ideal...
  - chore: runner/test: initialize metrics with a noop registry
  - feat: report metrics about requests made to remote runners


author: Grafana Labs <support@grafana.com> - 0.37.0
changelog:
  - chore: release 0.37.0 (#1283)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: Update module kernel.org/pub/linux/libs/security/libcap/cap to v1.2.75 (#1242)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update dependency go to v1.24.2 (#1285)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module github.com/miekg/dns to v1.1.65 (#1287)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module google.golang.org/grpc to v1.71.1 (#1288)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update actions/setup-go action to v5.4.0 (#1289)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module github.com/mccutchen/go-httpbin/v2 to v2.18.1 (#1286)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - fix: Synchronize makefiles with more recent versions (#1214)
  We have multiple versions of these files floating around. Synchronize
  the versions in this repo with the ones elsewhere, trying to avoid too
  many changes at once.
  This does remove the support for "bra", which was brought over from the
  grafana repo, and as far as I know, nobody is actually using here.
  Followup-to: 1982d52
  - chore: Update actions/cache action to v4.2.3 (#1275)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module gotest.tools/gotestsum to v1.12.1 (#1254)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update actions/download-artifact digest to 95815c3 (#1256)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - fix: Subtract the timeout from the token expiry, to ensure it will last for the duration (#1282)
  - fix: Remove second k6 binary for gsm (#1274)
  Now that we have a more recent k6 version in xk6-sm[1] we can consolidate. This
  change requires updating xk6-sm to the latest release.
  [1]: https://github.com/grafana/xk6-sm/pull/106
  - fix: Update policybot config
  - fix: Change how the secret store is handled (#1281)
  * fix: move handling of secrets store around
  In the current version of the code, the secret store is populated when
  the prober is created. The problem with that is that the prober is
  created *once* in the lifetime of the check, but the secret store needs
  to be updated more or less on a continuous basis (because it contains
  the token used to access the secrets).
  I'm sure there's a better way to handle this, but it took me a while to
  figure out the issue.
  Co-authored-by: Dougal Matthews <dougal@grafana.com>
  - feat: bust the tenant cache on the token expiry (#1279)
  * feat: bust the cache on token expiry
  * fix: rename ExpirationDate to Expiry
  - chore: examples: mount an emptydir volume in /tmp
  For some types of checks, such as HTTP checks with a custom certificate,
  the agent needs to be able to write the certificate to a temporary path.
  The `emptyDir` volume mounted on `/tmp` makes this possible while
  keeping `readOnlyRootFilesystem: true`.


author: Grafana Labs <support@grafana.com> - 0.37.1
changelog:
  - chore: release 0.37.1 (#1297)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: Update module golang.org/x/net to v0.38.0 [SECURITY] (#1296)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>


author: Grafana Labs <support@grafana.com> - 0.37.2
changelog:
  - chore: release 0.37.2 (#1299)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: Update module github.com/prometheus-community/pro-bing to v0.7.0 (#1290)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - fix: Resolve issues reported by zizmor, part 2 (#1303)
  - fix: Resolve issues reported by zizmor (#1302)
  - chore: Update dependency grafana/xk6-sm to v0.5.3 (#1301)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module github.com/rs/zerolog to v1.34.0 (#1291)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>
  - chore: Update module kernel.org/pub/linux/libs/security/libcap/cap to v1.2.76 (#1298)
  Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>


author: Grafana Labs <support@grafana.com> - 0.37.3
changelog:
  - chore: release 0.37.3 (#1308)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - fix: Adjust workflow permissions (#1307)


author: Grafana Labs <support@grafana.com> - 0.37.4
changelog:
  - chore: release 0.37.4 (#1312)
  Co-authored-by: sm-release-app[bot] <180338484+sm-release-app[bot]@users.noreply.github.com>
  - chore: release 0.37.4 (#1311)
  Release-As: 0.37.4
  - give id-token write permission to deploy job (#1309)


