Blame SPECS/grafana.spec

6ad68d
# gobuild and gotest macros are not available on CentOS Stream
6ad68d
# remove once BZ 1965292 is resolved
6ad68d
# definitions lifted from Fedora 34 podman.spec
6ad68d
%if ! 0%{?gobuild:1}
6ad68d
%define gobuild(o:) GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" -a -v -x %{?**};
6ad68d
%endif
6ad68d
%if ! 0%{?gotest:1}
6ad68d
%define gotest() GO111MODULE=off go test -buildmode pie -compiler gc -ldflags "${LDFLAGS:-} -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" %{?**};
6ad68d
%endif
6ad68d
50fcc5
%global grafana_arches %{lua: go_arches = {}
50fcc5
  for arch in rpm.expand("%{go_arches}"):gmatch("%S+") do
50fcc5
    go_arches[arch] = 1
50fcc5
  end
50fcc5
  for arch in rpm.expand("%{nodejs_arches}"):gmatch("%S+") do
50fcc5
    if go_arches[arch] then
50fcc5
      print(arch .. " ")
50fcc5
  end
50fcc5
end}
50fcc5
28ad2d
# Specify if the frontend will be compiled as part of the build or
28ad2d
# is attached as a webpack tarball (in case of an unsuitable nodejs version on the build system)
28ad2d
%define compile_frontend 0
28ad2d
897738
%if 0%{?rhel}
897738
%define enable_fips_mode 1
897738
%else
897738
%define enable_fips_mode 0
897738
%endif
897738
50fcc5
Name:             grafana
ad1bcd
Version:          7.5.15
83f9de
Release:          4%{?dist}
50fcc5
Summary:          Metrics dashboard and graph editor
50fcc5
License:          ASL 2.0
50fcc5
URL:              https://grafana.org
50fcc5
50fcc5
# Source0 contains the tagged upstream sources
50fcc5
Source0:          https://github.com/grafana/grafana/archive/v%{version}/%{name}-%{version}.tar.gz
50fcc5
28ad2d
# Source1 contains the bundled Go and Node.js dependencies
897738
# Note: In case there were no changes to this tarball, the NVR of this tarball
6ad68d
# lags behind the NVR of this package.
6ad68d
Source1:          grafana-vendor-%{version}-1.tar.xz
50fcc5
28ad2d
%if %{compile_frontend} == 0
28ad2d
# Source2 contains the precompiled frontend
897738
# Note: In case there were no changes to this tarball, the NVR of this tarball
6ad68d
# lags behind the NVR of this package.
6ad68d
Source2:          grafana-webpack-%{version}-1.tar.gz
28ad2d
%endif
6b5415
28ad2d
# Source3 contains Grafana configuration defaults for distributions
28ad2d
Source3:          distro-defaults.ini
6b5415
ad1bcd
# Source4 contains the Makefile to create the vendor and webpack bundles
28ad2d
Source4:          Makefile
6b5415
28ad2d
# Source5 contains the script to build the frontend
28ad2d
Source5:          build_frontend.sh
50fcc5
28ad2d
# Source6 contains the script to generate the list of bundled nodejs packages
28ad2d
Source6:          list_bundled_nodejs_packages.py
6b5415
ad1bcd
# Source7 contains the script to create the vendor and webpack bundles in a container
ad1bcd
Source7:          create_bundles_in_container.sh
ad1bcd
6b5415
# Patches
28ad2d
Patch1:           001-wrappers-grafana-cli.patch
28ad2d
Patch2:           002-manpages.patch
28ad2d
897738
# resolve symlinks before comparing paths
28ad2d
# BUILD/src/github.com/grafana/grafana -> BUILD/grafana-X.Y.Z
897738
Patch3:           003-fix-dashboard-abspath-test.patch
28ad2d
28ad2d
# Required for s390x
28ad2d
# the golden files include memory dumps from a x86 machine
28ad2d
# integers are stored as little endian on x86, but as big endian on s390x
28ad2d
# therefore loading this memory dump fails on s390x
28ad2d
Patch4:           004-skip-x86-goldenfiles-tests.patch
28ad2d
897738
Patch5:           005-remove-unused-dependencies.patch
897738
897738
Patch6:           006-fix-gtime-test-32bit.patch
897738
897738
Patch8:           008-remove-unused-frontend-crypto.patch
897738
897738
# The Makefile removes a few files with crypto implementations
897738
# from the vendor tarball, which are not used in Grafana.
897738
# This patch removes all references to the deleted files.
897738
Patch9:           009-patch-unused-backend-crypto.patch
897738
897738
# This patch modifies the x/crypto/pbkdf2 function to use OpenSSL
897738
# if FIPS mode is enabled.
897738
Patch10:          010-fips.patch
50fcc5
ad1bcd
Patch11:          011-use-hmac-sha-256-for-password-reset-tokens.patch
ad1bcd
ad1bcd
Patch12:          012-support-go1.18.patch
ad1bcd
ad1bcd
Patch13:          013-CVE-2021-23648.patch
ad1bcd
ad1bcd
Patch14:          014-CVE-2022-21698.patch
ad1bcd
Patch15:          015-CVE-2022-21698.vendor.patch
ad1bcd
Patch16:          016-fix-CVE-2022-31107.patch
83f9de
Patch17:          017-fix-CVE-2022-39229.patch
6ad68d
50fcc5
# Intersection of go_arches and nodejs_arches
50fcc5
ExclusiveArch:    %{grafana_arches}
50fcc5
897738
BuildRequires:    systemd, golang, go-srpm-macros
28ad2d
%if 0%{?fedora} >= 31
28ad2d
BuildRequires:    go-rpm-macros
28ad2d
%endif
897738
28ad2d
%if %{compile_frontend}
897738
BuildRequires:    nodejs >= 1:14, yarnpkg
897738
%endif
897738
897738
%if %{enable_fips_mode}
897738
BuildRequires:    openssl-devel
28ad2d
%endif
6b5415
50fcc5
# omit golang debugsource, see BZ995136 and related
0d3998
%global           dwz_low_mem_die_limit 0
50fcc5
%global           _debugsource_template %{nil}
50fcc5
50fcc5
%global           GRAFANA_USER %{name}
50fcc5
%global           GRAFANA_GROUP %{name}
50fcc5
%global           GRAFANA_HOME %{_datadir}/%{name}
50fcc5
50fcc5
# grafana-server service daemon uses systemd
50fcc5
%{?systemd_requires}
50fcc5
Requires(pre):    shadow-utils
50fcc5
6b5415
%if 0%{?fedora} || 0%{?rhel} > 7
28ad2d
Recommends: grafana-pcp
50fcc5
%endif
50fcc5
28ad2d
Obsoletes:        grafana-cloudwatch < 7.3.6-1
28ad2d
Obsoletes:        grafana-elasticsearch < 7.3.6-1
28ad2d
Obsoletes:        grafana-azure-monitor < 7.3.6-1
28ad2d
Obsoletes:        grafana-graphite < 7.3.6-1
28ad2d
Obsoletes:        grafana-influxdb < 7.3.6-1
28ad2d
Obsoletes:        grafana-loki < 7.3.6-1
28ad2d
Obsoletes:        grafana-mssql < 7.3.6-1
28ad2d
Obsoletes:        grafana-mysql < 7.3.6-1
28ad2d
Obsoletes:        grafana-opentsdb < 7.3.6-1
28ad2d
Obsoletes:        grafana-postgres < 7.3.6-1
28ad2d
Obsoletes:        grafana-prometheus < 7.3.6-1
28ad2d
Obsoletes:        grafana-stackdriver < 7.3.6-1
28ad2d
Provides:         grafana-cloudwatch = 7.3.6-1
28ad2d
Provides:         grafana-elasticsearch = 7.3.6-1
28ad2d
Provides:         grafana-azure-monitor = 7.3.6-1
28ad2d
Provides:         grafana-graphite = 7.3.6-1
28ad2d
Provides:         grafana-influxdb = 7.3.6-1
28ad2d
Provides:         grafana-loki = 7.3.6-1
28ad2d
Provides:         grafana-mssql = 7.3.6-1
28ad2d
Provides:         grafana-mysql = 7.3.6-1
28ad2d
Provides:         grafana-opentsdb = 7.3.6-1
28ad2d
Provides:         grafana-postgres = 7.3.6-1
28ad2d
Provides:         grafana-prometheus = 7.3.6-1
28ad2d
Provides:         grafana-stackdriver = 7.3.6-1
28ad2d
28ad2d
# vendored golang and node.js build dependencies
28ad2d
# this is for security purposes, if nodejs-foo ever needs an update,
28ad2d
# affected packages can be easily identified.
28ad2d
# Note: generated by the Makefile (see README.md)
897738
Provides: bundled(golang(cloud.google.com/go/storage)) = 1.13.0
28ad2d
Provides: bundled(golang(github.com/BurntSushi/toml)) = 0.3.1
28ad2d
Provides: bundled(golang(github.com/VividCortex/mysqlerr)) = 0.0.0-20170204212430.6c6b55f8796f
897738
Provides: bundled(golang(github.com/aws/aws-sdk-go)) = 1.37.20
28ad2d
Provides: bundled(golang(github.com/beevik/etree)) = 1.1.0
28ad2d
Provides: bundled(golang(github.com/benbjohnson/clock)) = 0.0.0-20161215174838.7dc76406b6d3
28ad2d
Provides: bundled(golang(github.com/bradfitz/gomemcache)) = 0.0.0-20190913173617.a41fca850d0b
897738
Provides: bundled(golang(github.com/centrifugal/centrifuge)) = 0.13.0
897738
Provides: bundled(golang(github.com/cortexproject/cortex)) = 1.4.1-0.20201022071705.85942c5703cf
28ad2d
Provides: bundled(golang(github.com/davecgh/go-spew)) = 1.1.1
897738
Provides: bundled(golang(github.com/denisenkom/go-mssqldb)) = 0.0.0-20200910202707.1e08a3fab204
28ad2d
Provides: bundled(golang(github.com/facebookgo/inject)) = 0.0.0-20180706035515.f23751cae28b
897738
Provides: bundled(golang(github.com/fatih/color)) = 1.10.0
28ad2d
Provides: bundled(golang(github.com/gchaincl/sqlhooks)) = 1.3.0
897738
Provides: bundled(golang(github.com/getsentry/sentry-go)) = 0.10.0
28ad2d
Provides: bundled(golang(github.com/go-macaron/binding)) = 0.0.0-20190806013118.0b4f37bab25b
28ad2d
Provides: bundled(golang(github.com/go-macaron/gzip)) = 0.0.0-20160222043647.cad1c6580a07
897738
Provides: bundled(golang(github.com/go-sourcemap/sourcemap)) = 2.1.3+incompatible
28ad2d
Provides: bundled(golang(github.com/go-sql-driver/mysql)) = 1.5.0
28ad2d
Provides: bundled(golang(github.com/go-stack/stack)) = 1.8.0
28ad2d
Provides: bundled(golang(github.com/gobwas/glob)) = 0.2.3
897738
Provides: bundled(golang(github.com/golang/mock)) = 1.5.0
28ad2d
Provides: bundled(golang(github.com/golang/protobuf)) = 1.4.3
ad1bcd
Provides: bundled(golang(github.com/google/go-cmp)) = 0.5.7
897738
Provides: bundled(golang(github.com/google/uuid)) = 1.2.0
897738
Provides: bundled(golang(github.com/gosimple/slug)) = 1.9.0
897738
Provides: bundled(golang(github.com/grafana/grafana-aws-sdk)) = 0.4.0
28ad2d
Provides: bundled(golang(github.com/grafana/grafana-plugin-model)) = 0.0.0-20190930120109.1fc953a61fb4
897738
Provides: bundled(golang(github.com/grafana/grafana-plugin-sdk-go)) = 0.88.0
897738
Provides: bundled(golang(github.com/grafana/loki)) = 1.6.2-0.20201026154740.6978ee5d7387
897738
Provides: bundled(golang(github.com/grpc-ecosystem/go-grpc-middleware)) = 1.2.2
897738
Provides: bundled(golang(github.com/hashicorp/go-hclog)) = 0.15.0
897738
Provides: bundled(golang(github.com/hashicorp/go-plugin)) = 1.4.0
897738
Provides: bundled(golang(github.com/hashicorp/go-version)) = 1.2.1
28ad2d
Provides: bundled(golang(github.com/inconshreveable/log15)) = 0.0.0-20180818164646.67afb5ed74ec
28ad2d
Provides: bundled(golang(github.com/influxdata/influxdb-client-go/v2)) = 2.2.0
897738
Provides: bundled(golang(github.com/jaegertracing/jaeger)) = 1.22.1-0.20210304164023.2fff3ca58910
897738
Provides: bundled(golang(github.com/jmespath/go-jmespath)) = 0.4.0
ad1bcd
Provides: bundled(golang(github.com/json-iterator/go)) = 1.1.12
897738
Provides: bundled(golang(github.com/lib/pq)) = 1.9.0
897738
Provides: bundled(golang(github.com/linkedin/goavro/v2)) = 2.10.0
897738
Provides: bundled(golang(github.com/magefile/mage)) = 1.11.0
28ad2d
Provides: bundled(golang(github.com/mattn/go-isatty)) = 0.0.12
897738
Provides: bundled(golang(github.com/mattn/go-sqlite3)) = 1.14.6
897738
Provides: bundled(golang(github.com/mwitkow/go-conntrack)) = 0.0.0-20190716064945.2f068394615f
28ad2d
Provides: bundled(golang(github.com/opentracing/opentracing-go)) = 1.2.0
28ad2d
Provides: bundled(golang(github.com/patrickmn/go-cache)) = 2.1.0+incompatible
28ad2d
Provides: bundled(golang(github.com/pkg/errors)) = 0.9.1
ad1bcd
Provides: bundled(golang(github.com/prometheus/client_golang)) = 1.11.1
28ad2d
Provides: bundled(golang(github.com/prometheus/client_model)) = 0.2.0
ad1bcd
Provides: bundled(golang(github.com/prometheus/common)) = 0.26.0
28ad2d
Provides: bundled(golang(github.com/robfig/cron)) = 0.0.0-20180505203441.b41be1df6967
897738
Provides: bundled(golang(github.com/robfig/cron/v3)) = 3.0.1
28ad2d
Provides: bundled(golang(github.com/russellhaering/goxmldsig)) = 1.1.0
28ad2d
Provides: bundled(golang(github.com/smartystreets/goconvey)) = 1.6.4
897738
Provides: bundled(golang(github.com/stretchr/testify)) = 1.7.0
28ad2d
Provides: bundled(golang(github.com/teris-io/shortid)) = 0.0.0-20171029131806.771a37caa5cf
28ad2d
Provides: bundled(golang(github.com/timberio/go-datemath)) = 0.1.1-0.20200323150745.74ddef604fff
28ad2d
Provides: bundled(golang(github.com/ua-parser/uap-go)) = 0.0.0-20190826212731.daf92ba38329
28ad2d
Provides: bundled(golang(github.com/uber/jaeger-client-go)) = 2.25.0+incompatible
28ad2d
Provides: bundled(golang(github.com/unknwon/com)) = 1.0.1
897738
Provides: bundled(golang(github.com/urfave/cli/v2)) = 2.3.0
28ad2d
Provides: bundled(golang(github.com/weaveworks/common)) = 0.0.0-20201119133501.0619918236ec
28ad2d
Provides: bundled(golang(github.com/xorcare/pointer)) = 1.1.0
28ad2d
Provides: bundled(golang(github.com/yudai/gojsondiff)) = 1.0.0
897738
Provides: bundled(golang(go.opentelemetry.io/collector)) = 0.21.0
897738
Provides: bundled(golang(golang.org/x/crypto)) = 0.0.0-20201221181555.eec23a3978ad
ad1bcd
Provides: bundled(golang(golang.org/x/net)) = 0.0.0-20211015210444.4f30a5c0130f
897738
Provides: bundled(golang(golang.org/x/oauth2)) = 0.0.0-20210113205817.d3ed898aa8a3
ad1bcd
Provides: bundled(golang(golang.org/x/sync)) = 0.0.0-20210220032951.036812b2e83c
28ad2d
Provides: bundled(golang(golang.org/x/time)) = 0.0.0-20200630173020.3af7569d3a1e
ad1bcd
Provides: bundled(golang(gonum.org/v1/gonum)) = 0.11.0
897738
Provides: bundled(golang(google.golang.org/api)) = 0.40.0
897738
Provides: bundled(golang(google.golang.org/grpc)) = 1.36.0
897738
Provides: bundled(golang(gopkg.in/ini.v1)) = 1.62.0
28ad2d
Provides: bundled(golang(gopkg.in/ldap.v3)) = 3.0.2
897738
Provides: bundled(golang(gopkg.in/macaron.v1)) = 1.4.0
28ad2d
Provides: bundled(golang(gopkg.in/mail.v2)) = 2.3.1
28ad2d
Provides: bundled(golang(gopkg.in/redis.v5)) = 5.2.9
897738
Provides: bundled(golang(gopkg.in/square/go-jose.v2)) = 2.5.1
897738
Provides: bundled(golang(gopkg.in/yaml.v2)) = 2.4.0
28ad2d
Provides: bundled(golang(xorm.io/core)) = 0.7.3
897738
Provides: bundled(golang(xorm.io/xorm)) = 0.8.2
897738
Provides: bundled(npm(@babel/core)) = 7.6.4
ad1bcd
Provides: bundled(npm(@babel/core)) = 7.6.4
28ad2d
Provides: bundled(npm(@babel/plugin-proposal-nullish-coalescing-operator)) = 7.8.3
28ad2d
Provides: bundled(npm(@babel/plugin-proposal-optional-chaining)) = 7.8.3
897738
Provides: bundled(npm(@babel/plugin-syntax-dynamic-import)) = 7.7.4
897738
Provides: bundled(npm(@babel/preset-env)) = 7.7.4
ad1bcd
Provides: bundled(npm(@babel/preset-env)) = 7.7.4
897738
Provides: bundled(npm(@babel/preset-react)) = 7.8.3
28ad2d
Provides: bundled(npm(@babel/preset-typescript)) = 7.8.3
ad1bcd
Provides: bundled(npm(@braintree/sanitize-url)) = 6.0.0
ad1bcd
Provides: bundled(npm(@cypress/webpack-preprocessor)) = 4.1.3
ad1bcd
Provides: bundled(npm(@emotion/core)) = 10.0.21
28ad2d
Provides: bundled(npm(@emotion/core)) = 10.0.21
897738
Provides: bundled(npm(@grafana/api-documenter)) = 7.11.2
28ad2d
Provides: bundled(npm(@grafana/api-extractor)) = 7.10.1
897738
Provides: bundled(npm(@grafana/aws-sdk)) = 0.0.3
ad1bcd
Provides: bundled(npm(@grafana/aws-sdk)) = 0.0.3
897738
Provides: bundled(npm(@grafana/eslint-config)) = 2.3.0
ad1bcd
Provides: bundled(npm(@grafana/eslint-config)) = 2.3.0
ad1bcd
Provides: bundled(npm(@grafana/slate-react)) = 0.22.9-grafana
28ad2d
Provides: bundled(npm(@grafana/slate-react)) = 0.22.9-grafana
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@grafana/tsconfig)) = 1.0.0rc1
ad1bcd
Provides: bundled(npm(@iconscout/react-unicons)) = 1.1.4
ad1bcd
Provides: bundled(npm(@mochajs/json-file-reporter)) = 1.2.0
ad1bcd
Provides: bundled(npm(@popperjs/core)) = 2.5.4
897738
Provides: bundled(npm(@popperjs/core)) = 2.5.4
897738
Provides: bundled(npm(@reduxjs/toolkit)) = 1.5.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-commonjs)) = 16.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-commonjs)) = 16.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-commonjs)) = 16.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-commonjs)) = 16.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-commonjs)) = 16.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-image)) = 2.0.5
ad1bcd
Provides: bundled(npm(@rollup/plugin-json)) = 4.1.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-node-resolve)) = 10.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-node-resolve)) = 10.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-node-resolve)) = 10.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-node-resolve)) = 10.0.0
ad1bcd
Provides: bundled(npm(@rollup/plugin-node-resolve)) = 10.0.0
28ad2d
Provides: bundled(npm(@rtsao/plugin-proposal-class-properties)) = 7.0.1-patch.1
897738
Provides: bundled(npm(@sentry/browser)) = 5.25.0
ad1bcd
Provides: bundled(npm(@sentry/browser)) = 5.25.0
897738
Provides: bundled(npm(@sentry/types)) = 5.24.2
897738
Provides: bundled(npm(@sentry/utils)) = 5.24.2
ad1bcd
Provides: bundled(npm(@storybook/addon-controls)) = 6.1.15
ad1bcd
Provides: bundled(npm(@storybook/addon-essentials)) = 6.1.15
ad1bcd
Provides: bundled(npm(@storybook/addon-knobs)) = 6.1.15
ad1bcd
Provides: bundled(npm(@storybook/addon-storysource)) = 6.1.15
ad1bcd
Provides: bundled(npm(@storybook/react)) = 6.1.15
ad1bcd
Provides: bundled(npm(@storybook/theming)) = 6.1.15
ad1bcd
Provides: bundled(npm(@testing-library/jest-dom)) = 5.11.5
897738
Provides: bundled(npm(@testing-library/jest-dom)) = 5.11.5
897738
Provides: bundled(npm(@testing-library/react)) = 11.1.2
28ad2d
Provides: bundled(npm(@testing-library/react-hooks)) = 3.2.1
28ad2d
Provides: bundled(npm(@testing-library/user-event)) = 12.1.3
28ad2d
Provides: bundled(npm(@torkelo/react-select)) = 3.0.8
ad1bcd
Provides: bundled(npm(@torkelo/react-select)) = 3.0.8
28ad2d
Provides: bundled(npm(@types/angular)) = 1.6.56
28ad2d
Provides: bundled(npm(@types/angular-route)) = 1.7.0
28ad2d
Provides: bundled(npm(@types/antlr4)) = 4.7.1
ad1bcd
Provides: bundled(npm(@types/classnames)) = 2.2.7
ad1bcd
Provides: bundled(npm(@types/classnames)) = 2.2.7
28ad2d
Provides: bundled(npm(@types/classnames)) = 2.2.7
28ad2d
Provides: bundled(npm(@types/clipboard)) = 2.0.1
ad1bcd
Provides: bundled(npm(@types/command-exists)) = 1.2.0
28ad2d
Provides: bundled(npm(@types/common-tags)) = 1.8.0
ad1bcd
Provides: bundled(npm(@types/common-tags)) = 1.8.0
ad1bcd
Provides: bundled(npm(@types/d3)) = 5.7.2
28ad2d
Provides: bundled(npm(@types/d3)) = 5.7.2
897738
Provides: bundled(npm(@types/d3-force)) = 1.2.1
ad1bcd
Provides: bundled(npm(@types/d3-interpolate)) = 1.3.1
28ad2d
Provides: bundled(npm(@types/d3-scale-chromatic)) = 1.3.1
897738
Provides: bundled(npm(@types/debounce-promise)) = 3.1.3
ad1bcd
Provides: bundled(npm(@types/deep-freeze)) = 0.1.2
28ad2d
Provides: bundled(npm(@types/enzyme)) = 3.10.3
28ad2d
Provides: bundled(npm(@types/enzyme-adapter-react-16)) = 1.0.6
ad1bcd
Provides: bundled(npm(@types/expect-puppeteer)) = 3.3.1
28ad2d
Provides: bundled(npm(@types/file-saver)) = 2.0.1
ad1bcd
Provides: bundled(npm(@types/fs-extra)) = 8.1.0
ad1bcd
Provides: bundled(npm(@types/hoist-non-react-statics)) = 3.3.1
ad1bcd
Provides: bundled(npm(@types/hoist-non-react-statics)) = 3.3.1
28ad2d
Provides: bundled(npm(@types/hoist-non-react-statics)) = 3.3.1
ad1bcd
Provides: bundled(npm(@types/inquirer)) = 6.5.0
28ad2d
Provides: bundled(npm(@types/is-hotkey)) = 0.1.1
897738
Provides: bundled(npm(@types/jest)) = 26.0.12
ad1bcd
Provides: bundled(npm(@types/jest)) = 26.0.12
ad1bcd
Provides: bundled(npm(@types/jest)) = 26.0.12
ad1bcd
Provides: bundled(npm(@types/jest)) = 26.0.12
ad1bcd
Provides: bundled(npm(@types/jest)) = 26.0.12
ad1bcd
Provides: bundled(npm(@types/jquery)) = 3.3.38
ad1bcd
Provides: bundled(npm(@types/jquery)) = 3.3.38
28ad2d
Provides: bundled(npm(@types/jquery)) = 3.3.38
28ad2d
Provides: bundled(npm(@types/jsurl)) = 1.2.28
28ad2d
Provides: bundled(npm(@types/lodash)) = 4.14.123
ad1bcd
Provides: bundled(npm(@types/lodash)) = 4.14.123
ad1bcd
Provides: bundled(npm(@types/lodash)) = 4.14.123
ad1bcd
Provides: bundled(npm(@types/lodash)) = 4.14.123
28ad2d
Provides: bundled(npm(@types/lru-cache)) = 5.1.0
ad1bcd
Provides: bundled(npm(@types/marked)) = 1.1.0
28ad2d
Provides: bundled(npm(@types/md5)) = 2.1.33
ad1bcd
Provides: bundled(npm(@types/mock-raf)) = 1.0.2
ad1bcd
Provides: bundled(npm(@types/moment)) = 2.13.0
28ad2d
Provides: bundled(npm(@types/moment-timezone)) = 0.5.13
28ad2d
Provides: bundled(npm(@types/mousetrap)) = 1.6.3
28ad2d
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/node)) = 10.14.1
ad1bcd
Provides: bundled(npm(@types/papaparse)) = 5.2.0
28ad2d
Provides: bundled(npm(@types/papaparse)) = 5.2.0
ad1bcd
Provides: bundled(npm(@types/papaparse)) = 5.2.0
ad1bcd
Provides: bundled(npm(@types/prettier)) = 1.18.3
28ad2d
Provides: bundled(npm(@types/prismjs)) = 1.16.0
ad1bcd
Provides: bundled(npm(@types/puppeteer-core)) = 1.9.0
ad1bcd
Provides: bundled(npm(@types/react)) = 16.9.9
897738
Provides: bundled(npm(@types/react)) = 16.9.9
ad1bcd
Provides: bundled(npm(@types/react)) = 16.9.9
ad1bcd
Provides: bundled(npm(@types/react-beautiful-dnd)) = 12.1.2
28ad2d
Provides: bundled(npm(@types/react-beautiful-dnd)) = 12.1.2
ad1bcd
Provides: bundled(npm(@types/react-color)) = 3.0.1
ad1bcd
Provides: bundled(npm(@types/react-custom-scrollbars)) = 4.0.5
ad1bcd
Provides: bundled(npm(@types/react-dev-utils)) = 9.0.4
897738
Provides: bundled(npm(@types/react-dom)) = 16.9.2
897738
Provides: bundled(npm(@types/react-grid-layout)) = 1.1.1
ad1bcd
Provides: bundled(npm(@types/react-icons)) = 2.2.7
28ad2d
Provides: bundled(npm(@types/react-loadable)) = 5.5.2
28ad2d
Provides: bundled(npm(@types/react-redux)) = 7.1.7
28ad2d
Provides: bundled(npm(@types/react-select)) = 3.0.8
ad1bcd
Provides: bundled(npm(@types/react-select)) = 3.0.8
ad1bcd
Provides: bundled(npm(@types/react-table)) = 7.0.12
ad1bcd
Provides: bundled(npm(@types/react-test-renderer)) = 16.9.1
28ad2d
Provides: bundled(npm(@types/react-test-renderer)) = 16.9.1
28ad2d
Provides: bundled(npm(@types/react-transition-group)) = 4.2.3
ad1bcd
Provides: bundled(npm(@types/react-transition-group)) = 4.2.3
28ad2d
Provides: bundled(npm(@types/react-virtualized-auto-sizer)) = 1.0.0
28ad2d
Provides: bundled(npm(@types/react-window)) = 1.8.1
ad1bcd
Provides: bundled(npm(@types/recompose)) = 0.30.7
28ad2d
Provides: bundled(npm(@types/redux-logger)) = 3.0.7
28ad2d
Provides: bundled(npm(@types/redux-mock-store)) = 1.0.2
28ad2d
Provides: bundled(npm(@types/reselect)) = 2.2.0
ad1bcd
Provides: bundled(npm(@types/rimraf)) = 2.0.3
ad1bcd
Provides: bundled(npm(@types/rollup-plugin-visualizer)) = 2.6.0
ad1bcd
Provides: bundled(npm(@types/rollup-plugin-visualizer)) = 2.6.0
ad1bcd
Provides: bundled(npm(@types/rollup-plugin-visualizer)) = 2.6.0
ad1bcd
Provides: bundled(npm(@types/rollup-plugin-visualizer)) = 2.6.0
ad1bcd
Provides: bundled(npm(@types/rollup-plugin-visualizer)) = 2.6.0
ad1bcd
Provides: bundled(npm(@types/semver)) = 6.0.2
ad1bcd
Provides: bundled(npm(@types/sinon)) = 7.5.2
ad1bcd
Provides: bundled(npm(@types/slate)) = 0.47.1
28ad2d
Provides: bundled(npm(@types/slate)) = 0.47.1
28ad2d
Provides: bundled(npm(@types/slate-plain-serializer)) = 0.6.1
28ad2d
Provides: bundled(npm(@types/slate-react)) = 0.22.5
ad1bcd
Provides: bundled(npm(@types/slate-react)) = 0.22.5
ad1bcd
Provides: bundled(npm(@types/slate-react)) = 0.22.5
ad1bcd
Provides: bundled(npm(@types/systemjs)) = 0.20.6
ad1bcd
Provides: bundled(npm(@types/systemjs)) = 0.20.6
897738
Provides: bundled(npm(@types/testing-library__jest-dom)) = 5.9.5
28ad2d
Provides: bundled(npm(@types/testing-library__react-hooks)) = 3.1.0
28ad2d
Provides: bundled(npm(@types/tinycolor2)) = 1.4.1
ad1bcd
Provides: bundled(npm(@types/tinycolor2)) = 1.4.1
ad1bcd
Provides: bundled(npm(@types/tmp)) = 0.1.0
28ad2d
Provides: bundled(npm(@types/uuid)) = 8.3.0
ad1bcd
Provides: bundled(npm(@types/webpack)) = 4.39.3
897738
Provides: bundled(npm(@typescript-eslint/eslint-plugin)) = 4.15.0
ad1bcd
Provides: bundled(npm(@typescript-eslint/eslint-plugin)) = 4.15.0
ad1bcd
Provides: bundled(npm(@typescript-eslint/parser)) = 4.15.0
897738
Provides: bundled(npm(@typescript-eslint/parser)) = 4.15.0
ad1bcd
Provides: bundled(npm(@visx/event)) = 1.3.0
ad1bcd
Provides: bundled(npm(@visx/gradient)) = 1.0.0
ad1bcd
Provides: bundled(npm(@visx/scale)) = 1.4.0
ad1bcd
Provides: bundled(npm(@visx/shape)) = 1.4.0
ad1bcd
Provides: bundled(npm(@visx/tooltip)) = 1.3.0
28ad2d
Provides: bundled(npm(@welldone-software/why-did-you-render)) = 4.0.6
897738
Provides: bundled(npm(@wojtekmaj/enzyme-adapter-react-17)) = 0.3.1
28ad2d
Provides: bundled(npm(abortcontroller-polyfill)) = 1.4.0
897738
Provides: bundled(npm(angular)) = 1.8.2
28ad2d
Provides: bundled(npm(angular-bindonce)) = 0.3.1
28ad2d
Provides: bundled(npm(angular-mocks)) = 1.6.6
897738
Provides: bundled(npm(angular-route)) = 1.8.2
897738
Provides: bundled(npm(angular-sanitize)) = 1.8.2
28ad2d
Provides: bundled(npm(antlr4)) = 4.8.0
ad1bcd
Provides: bundled(npm(apache-arrow)) = 0.16.0
28ad2d
Provides: bundled(npm(autoprefixer)) = 9.7.4
897738
Provides: bundled(npm(axios)) = 0.21.1
ad1bcd
Provides: bundled(npm(axios)) = 0.21.1
28ad2d
Provides: bundled(npm(babel-core)) = 7.0.0-bridge.0
897738
Provides: bundled(npm(babel-jest)) = 26.6.3
ad1bcd
Provides: bundled(npm(babel-jest)) = 26.6.3
28ad2d
Provides: bundled(npm(babel-loader)) = 8.0.6
ad1bcd
Provides: bundled(npm(babel-loader)) = 8.0.6
ad1bcd
Provides: bundled(npm(babel-plugin-angularjs-annotate)) = 0.10.0
28ad2d
Provides: bundled(npm(babel-plugin-angularjs-annotate)) = 0.10.0
28ad2d
Provides: bundled(npm(baron)) = 3.0.3
ad1bcd
Provides: bundled(npm(blink-diff)) = 1.0.13
28ad2d
Provides: bundled(npm(brace)) = 0.11.1
28ad2d
Provides: bundled(npm(calculate-size)) = 1.1.1
28ad2d
Provides: bundled(npm(centrifuge)) = 2.6.4
ad1bcd
Provides: bundled(npm(chalk)) = 1.1.3
ad1bcd
Provides: bundled(npm(chance)) = 1.1.4
ad1bcd
Provides: bundled(npm(classnames)) = 2.2.6
ad1bcd
Provides: bundled(npm(classnames)) = 2.2.6
28ad2d
Provides: bundled(npm(classnames)) = 2.2.6
28ad2d
Provides: bundled(npm(clean-webpack-plugin)) = 3.0.0
28ad2d
Provides: bundled(npm(clipboard)) = 2.0.4
ad1bcd
Provides: bundled(npm(combokeys)) = 3.0.1
ad1bcd
Provides: bundled(npm(command-exists)) = 1.2.8
ad1bcd
Provides: bundled(npm(commander)) = 2.17.1
ad1bcd
Provides: bundled(npm(commander)) = 2.17.1
ad1bcd
Provides: bundled(npm(commander)) = 2.17.1
28ad2d
Provides: bundled(npm(common-tags)) = 1.8.0
ad1bcd
Provides: bundled(npm(common-tags)) = 1.8.0
ad1bcd
Provides: bundled(npm(concurrently)) = 4.1.0
ad1bcd
Provides: bundled(npm(copy-to-clipboard)) = 3.3.1
ad1bcd
Provides: bundled(npm(copy-webpack-plugin)) = 5.1.2
28ad2d
Provides: bundled(npm(core-js)) = 1.2.7
897738
Provides: bundled(npm(css-loader)) = 3.4.2
ad1bcd
Provides: bundled(npm(css-loader)) = 3.4.2
ad1bcd
Provides: bundled(npm(cypress)) = 6.3.0
ad1bcd
Provides: bundled(npm(cypress-file-upload)) = 4.0.7
ad1bcd
Provides: bundled(npm(d3)) = 5.15.0
28ad2d
Provides: bundled(npm(d3)) = 5.15.0
897738
Provides: bundled(npm(d3-force)) = 1.2.1
28ad2d
Provides: bundled(npm(d3-scale-chromatic)) = 1.5.0
28ad2d
Provides: bundled(npm(dangerously-set-html-content)) = 1.0.6
897738
Provides: bundled(npm(debounce-promise)) = 3.1.2
ad1bcd
Provides: bundled(npm(deep-freeze)) = 0.0.1
ad1bcd
Provides: bundled(npm(emotion)) = 10.0.27
28ad2d
Provides: bundled(npm(emotion)) = 10.0.27
ad1bcd
Provides: bundled(npm(emotion)) = 10.0.27
ad1bcd
Provides: bundled(npm(enzyme)) = 3.11.0
28ad2d
Provides: bundled(npm(enzyme)) = 3.11.0
ad1bcd
Provides: bundled(npm(enzyme-adapter-react-16)) = 1.15.2
28ad2d
Provides: bundled(npm(enzyme-to-json)) = 3.4.4
897738
Provides: bundled(npm(es-abstract)) = 1.18.0-next.1
28ad2d
Provides: bundled(npm(es6-promise)) = 4.2.8
28ad2d
Provides: bundled(npm(es6-shim)) = 0.35.5
28ad2d
Provides: bundled(npm(eslint)) = 2.13.1
ad1bcd
Provides: bundled(npm(eslint)) = 2.13.1
897738
Provides: bundled(npm(eslint-config-prettier)) = 7.2.0
ad1bcd
Provides: bundled(npm(eslint-config-prettier)) = 7.2.0
ad1bcd
Provides: bundled(npm(eslint-plugin-jsdoc)) = 31.6.1
897738
Provides: bundled(npm(eslint-plugin-jsdoc)) = 31.6.1
897738
Provides: bundled(npm(eslint-plugin-no-only-tests)) = 2.4.0
897738
Provides: bundled(npm(eslint-plugin-prettier)) = 3.3.1
ad1bcd
Provides: bundled(npm(eslint-plugin-prettier)) = 3.3.1
897738
Provides: bundled(npm(eslint-plugin-react)) = 7.22.0
897738
Provides: bundled(npm(eslint-plugin-react-hooks)) = 4.2.0
ad1bcd
Provides: bundled(npm(eslint-plugin-react-hooks)) = 4.2.0
28ad2d
Provides: bundled(npm(eventemitter3)) = 3.1.2
ad1bcd
Provides: bundled(npm(eventemitter3)) = 3.1.2
ad1bcd
Provides: bundled(npm(execa)) = 0.7.0
ad1bcd
Provides: bundled(npm(execa)) = 0.7.0
ad1bcd
Provides: bundled(npm(execa)) = 0.7.0
ad1bcd
Provides: bundled(npm(expect-puppeteer)) = 4.1.1
28ad2d
Provides: bundled(npm(expect.js)) = 0.3.1
28ad2d
Provides: bundled(npm(expose-loader)) = 0.7.5
28ad2d
Provides: bundled(npm(fast-text-encoding)) = 1.0.0
897738
Provides: bundled(npm(file-loader)) = 5.0.2
ad1bcd
Provides: bundled(npm(file-loader)) = 5.0.2
28ad2d
Provides: bundled(npm(file-saver)) = 2.0.2
28ad2d
Provides: bundled(npm(fork-ts-checker-webpack-plugin)) = 1.0.0
ad1bcd
Provides: bundled(npm(fork-ts-checker-webpack-plugin)) = 1.0.0
ad1bcd
Provides: bundled(npm(fs-extra)) = 0.30.0
ad1bcd
Provides: bundled(npm(fuzzy)) = 0.1.3
28ad2d
Provides: bundled(npm(gaze)) = 1.1.3
897738
Provides: bundled(npm(glob)) = 7.1.3
ad1bcd
Provides: bundled(npm(globby)) = 6.1.0
ad1bcd
Provides: bundled(npm(hoist-non-react-statics)) = 2.5.5
28ad2d
Provides: bundled(npm(hoist-non-react-statics)) = 2.5.5
ad1bcd
Provides: bundled(npm(hoist-non-react-statics)) = 2.5.5
ad1bcd
Provides: bundled(npm(html-loader)) = 0.5.5
28ad2d
Provides: bundled(npm(html-loader)) = 0.5.5
28ad2d
Provides: bundled(npm(html-webpack-harddisk-plugin)) = 1.0.1
28ad2d
Provides: bundled(npm(html-webpack-plugin)) = 3.2.0
ad1bcd
Provides: bundled(npm(html-webpack-plugin)) = 3.2.0
28ad2d
Provides: bundled(npm(husky)) = 4.2.1
28ad2d
Provides: bundled(npm(immutable)) = 3.8.2
ad1bcd
Provides: bundled(npm(immutable)) = 3.8.2
ad1bcd
Provides: bundled(npm(inquirer)) = 0.12.0
28ad2d
Provides: bundled(npm(is-hotkey)) = 0.1.4
897738
Provides: bundled(npm(jest)) = 26.6.3
ad1bcd
Provides: bundled(npm(jest)) = 26.6.3
ad1bcd
Provides: bundled(npm(jest-canvas-mock)) = 2.3.0
897738
Provides: bundled(npm(jest-canvas-mock)) = 2.3.0
ad1bcd
Provides: bundled(npm(jest-coverage-badges)) = 1.1.2
28ad2d
Provides: bundled(npm(jest-date-mock)) = 1.0.8
ad1bcd
Provides: bundled(npm(jest-environment-jsdom-fifteen)) = 1.0.2
ad1bcd
Provides: bundled(npm(jest-junit)) = 6.4.0
897738
Provides: bundled(npm(jest-matcher-utils)) = 26.0.0
897738
Provides: bundled(npm(jquery)) = 3.5.1
ad1bcd
Provides: bundled(npm(jquery)) = 3.5.1
ad1bcd
Provides: bundled(npm(json-markup)) = 1.1.3
28ad2d
Provides: bundled(npm(jsurl)) = 0.1.5
897738
Provides: bundled(npm(lerna)) = 3.22.1
ad1bcd
Provides: bundled(npm(less)) = 3.11.1
ad1bcd
Provides: bundled(npm(less-loader)) = 5.0.0
28ad2d
Provides: bundled(npm(lint-staged)) = 10.0.7
28ad2d
Provides: bundled(npm(load-grunt-tasks)) = 5.1.0
897738
Provides: bundled(npm(lodash)) = 4.17.21
ad1bcd
Provides: bundled(npm(lodash)) = 4.17.21
ad1bcd
Provides: bundled(npm(lodash)) = 4.17.21
ad1bcd
Provides: bundled(npm(lodash)) = 4.17.21
ad1bcd
Provides: bundled(npm(lodash)) = 4.17.21
ad1bcd
Provides: bundled(npm(lodash)) = 4.17.21
28ad2d
Provides: bundled(npm(lru-cache)) = 4.1.5
ad1bcd
Provides: bundled(npm(lru-memoize)) = 1.1.0
ad1bcd
Provides: bundled(npm(marked)) = 2.0.1
28ad2d
Provides: bundled(npm(md5)) = 2.2.1
ad1bcd
Provides: bundled(npm(md5-file)) = 4.0.0
28ad2d
Provides: bundled(npm(memoize-one)) = 4.1.0
ad1bcd
Provides: bundled(npm(memoize-one)) = 4.1.0
ad1bcd
Provides: bundled(npm(mini-css-extract-plugin)) = 0.7.0
28ad2d
Provides: bundled(npm(mini-css-extract-plugin)) = 0.7.0
28ad2d
Provides: bundled(npm(mocha)) = 7.0.1
ad1bcd
Provides: bundled(npm(mock-raf)) = 1.0.1
28ad2d
Provides: bundled(npm(module-alias)) = 2.2.2
28ad2d
Provides: bundled(npm(moment)) = 2.24.0
ad1bcd
Provides: bundled(npm(moment)) = 2.24.0
ad1bcd
Provides: bundled(npm(moment)) = 2.24.0
28ad2d
Provides: bundled(npm(moment-timezone)) = 0.5.28
28ad2d
Provides: bundled(npm(monaco-editor)) = 0.20.0
ad1bcd
Provides: bundled(npm(monaco-editor)) = 0.20.0
28ad2d
Provides: bundled(npm(monaco-editor-webpack-plugin)) = 1.9.0
28ad2d
Provides: bundled(npm(mousetrap)) = 1.6.5
28ad2d
Provides: bundled(npm(mousetrap-global-bind)) = 1.1.0
28ad2d
Provides: bundled(npm(mutationobserver-shim)) = 0.3.3
28ad2d
Provides: bundled(npm(ngtemplate-loader)) = 2.0.1
28ad2d
Provides: bundled(npm(nodemon)) = 2.0.2
897738
Provides: bundled(npm(optimize-css-assets-webpack-plugin)) = 5.0.4
ad1bcd
Provides: bundled(npm(optimize-css-assets-webpack-plugin)) = 5.0.4
ad1bcd
Provides: bundled(npm(ora)) = 4.0.3
897738
Provides: bundled(npm(papaparse)) = 5.3.0
ad1bcd
Provides: bundled(npm(papaparse)) = 5.3.0
ad1bcd
Provides: bundled(npm(pixelmatch)) = 5.1.0
ad1bcd
Provides: bundled(npm(pngjs)) = 2.3.1
28ad2d
Provides: bundled(npm(postcss-browser-reporter)) = 0.6.0
ad1bcd
Provides: bundled(npm(postcss-flexbugs-fixes)) = 4.2.0
ad1bcd
Provides: bundled(npm(postcss-loader)) = 3.0.0
28ad2d
Provides: bundled(npm(postcss-loader)) = 3.0.0
ad1bcd
Provides: bundled(npm(postcss-preset-env)) = 6.7.0
28ad2d
Provides: bundled(npm(postcss-reporter)) = 6.0.1
897738
Provides: bundled(npm(prettier)) = 2.0.5
ad1bcd
Provides: bundled(npm(prettier)) = 2.0.5
ad1bcd
Provides: bundled(npm(pretty-format)) = 21.2.1
ad1bcd
Provides: bundled(npm(pretty-format)) = 21.2.1
ad1bcd
Provides: bundled(npm(pretty-format)) = 21.2.1
ad1bcd
Provides: bundled(npm(pretty-format)) = 21.2.1
897738
Provides: bundled(npm(prismjs)) = 1.21.0
28ad2d
Provides: bundled(npm(prop-types)) = 15.7.2
ad1bcd
Provides: bundled(npm(puppeteer-core)) = 1.18.1
ad1bcd
Provides: bundled(npm(rc-cascader)) = 1.0.1
28ad2d
Provides: bundled(npm(rc-cascader)) = 1.0.1
ad1bcd
Provides: bundled(npm(rc-drawer)) = 3.1.3
ad1bcd
Provides: bundled(npm(rc-slider)) = 9.6.4
ad1bcd
Provides: bundled(npm(rc-time-picker)) = 3.7.3
28ad2d
Provides: bundled(npm(re-resizable)) = 6.2.0
897738
Provides: bundled(npm(react)) = 16.13.1
ad1bcd
Provides: bundled(npm(react)) = 16.13.1
897738
Provides: bundled(npm(react-beautiful-dnd)) = 13.0.0
ad1bcd
Provides: bundled(npm(react-beautiful-dnd)) = 13.0.0
ad1bcd
Provides: bundled(npm(react-calendar)) = 2.19.2
ad1bcd
Provides: bundled(npm(react-color)) = 2.18.0
ad1bcd
Provides: bundled(npm(react-custom-scrollbars)) = 4.2.1
ad1bcd
Provides: bundled(npm(react-dev-utils)) = 10.2.1
ad1bcd
Provides: bundled(npm(react-docgen-typescript-loader)) = 3.7.2
ad1bcd
Provides: bundled(npm(react-dom)) = 17.0.1
897738
Provides: bundled(npm(react-dom)) = 17.0.1
897738
Provides: bundled(npm(react-grid-layout)) = 1.2.0
28ad2d
Provides: bundled(npm(react-highlight-words)) = 0.16.0
ad1bcd
Provides: bundled(npm(react-highlight-words)) = 0.16.0
ad1bcd
Provides: bundled(npm(react-hook-form)) = 5.1.3
28ad2d
Provides: bundled(npm(react-hot-loader)) = 4.8.0
ad1bcd
Provides: bundled(npm(react-icons)) = 2.2.7
ad1bcd
Provides: bundled(npm(react-is)) = 16.8.0
28ad2d
Provides: bundled(npm(react-loadable)) = 5.5.0
ad1bcd
Provides: bundled(npm(react-monaco-editor)) = 0.36.0
ad1bcd
Provides: bundled(npm(react-popper)) = 2.2.4
897738
Provides: bundled(npm(react-popper)) = 2.2.4
28ad2d
Provides: bundled(npm(react-redux)) = 7.2.0
28ad2d
Provides: bundled(npm(react-reverse-portal)) = 2.0.1
897738
Provides: bundled(npm(react-select-event)) = 5.1.0
897738
Provides: bundled(npm(react-sizeme)) = 2.6.12
28ad2d
Provides: bundled(npm(react-split-pane)) = 0.1.89
ad1bcd
Provides: bundled(npm(react-storybook-addon-props-combinations)) = 1.1.0
ad1bcd
Provides: bundled(npm(react-table)) = 7.0.0
28ad2d
Provides: bundled(npm(react-test-renderer)) = 16.10.2
ad1bcd
Provides: bundled(npm(react-test-renderer)) = 16.10.2
ad1bcd
Provides: bundled(npm(react-transition-group)) = 4.3.0
897738
Provides: bundled(npm(react-transition-group)) = 4.3.0
28ad2d
Provides: bundled(npm(react-use)) = 13.27.0
28ad2d
Provides: bundled(npm(react-virtualized-auto-sizer)) = 1.0.2
28ad2d
Provides: bundled(npm(react-window)) = 1.8.5
ad1bcd
Provides: bundled(npm(recompose)) = 0.25.1
28ad2d
Provides: bundled(npm(redux)) = 3.7.2
28ad2d
Provides: bundled(npm(redux-logger)) = 3.0.6
28ad2d
Provides: bundled(npm(redux-mock-store)) = 1.5.4
28ad2d
Provides: bundled(npm(redux-thunk)) = 2.3.0
28ad2d
Provides: bundled(npm(regenerator-runtime)) = 0.11.1
28ad2d
Provides: bundled(npm(regexp-replace-loader)) = 1.0.1
ad1bcd
Provides: bundled(npm(replace-in-file)) = 4.1.3
ad1bcd
Provides: bundled(npm(replace-in-file-webpack-plugin)) = 1.0.6
28ad2d
Provides: bundled(npm(reselect)) = 4.0.0
ad1bcd
Provides: bundled(npm(resolve-as-bin)) = 2.1.0
28ad2d
Provides: bundled(npm(rimraf)) = 2.6.3
ad1bcd
Provides: bundled(npm(rimraf)) = 2.6.3
ad1bcd
Provides: bundled(npm(rollup)) = 0.63.5
ad1bcd
Provides: bundled(npm(rollup)) = 0.63.5
ad1bcd
Provides: bundled(npm(rollup)) = 0.63.5
ad1bcd
Provides: bundled(npm(rollup)) = 0.63.5
ad1bcd
Provides: bundled(npm(rollup)) = 0.63.5
ad1bcd
Provides: bundled(npm(rollup-plugin-copy)) = 3.3.0
ad1bcd
Provides: bundled(npm(rollup-plugin-sourcemaps)) = 0.6.3
ad1bcd
Provides: bundled(npm(rollup-plugin-sourcemaps)) = 0.6.3
ad1bcd
Provides: bundled(npm(rollup-plugin-sourcemaps)) = 0.6.3
ad1bcd
Provides: bundled(npm(rollup-plugin-sourcemaps)) = 0.6.3
ad1bcd
Provides: bundled(npm(rollup-plugin-sourcemaps)) = 0.6.3
ad1bcd
Provides: bundled(npm(rollup-plugin-terser)) = 7.0.2
ad1bcd
Provides: bundled(npm(rollup-plugin-terser)) = 7.0.2
ad1bcd
Provides: bundled(npm(rollup-plugin-terser)) = 7.0.2
ad1bcd
Provides: bundled(npm(rollup-plugin-terser)) = 7.0.2
ad1bcd
Provides: bundled(npm(rollup-plugin-terser)) = 7.0.2
ad1bcd
Provides: bundled(npm(rollup-plugin-typescript2)) = 0.29.0
ad1bcd
Provides: bundled(npm(rollup-plugin-typescript2)) = 0.29.0
ad1bcd
Provides: bundled(npm(rollup-plugin-typescript2)) = 0.29.0
ad1bcd
Provides: bundled(npm(rollup-plugin-typescript2)) = 0.29.0
ad1bcd
Provides: bundled(npm(rollup-plugin-typescript2)) = 0.29.0
ad1bcd
Provides: bundled(npm(rollup-plugin-visualizer)) = 4.2.0
ad1bcd
Provides: bundled(npm(rollup-plugin-visualizer)) = 4.2.0
ad1bcd
Provides: bundled(npm(rollup-plugin-visualizer)) = 4.2.0
ad1bcd
Provides: bundled(npm(rollup-plugin-visualizer)) = 4.2.0
ad1bcd
Provides: bundled(npm(rollup-plugin-visualizer)) = 4.2.0
28ad2d
Provides: bundled(npm(rst2html)) = 1.0.4
28ad2d
Provides: bundled(npm(rxjs)) = 6.5.5
ad1bcd
Provides: bundled(npm(rxjs)) = 6.5.5
28ad2d
Provides: bundled(npm(rxjs-spy)) = 7.5.1
897738
Provides: bundled(npm(sass)) = 1.27.0
ad1bcd
Provides: bundled(npm(sass)) = 1.27.0
28ad2d
Provides: bundled(npm(sass-lint)) = 1.12.1
28ad2d
Provides: bundled(npm(sass-loader)) = 8.0.2
ad1bcd
Provides: bundled(npm(sass-loader)) = 8.0.2
28ad2d
Provides: bundled(npm(search-query-parser)) = 1.5.4
ad1bcd
Provides: bundled(npm(semver)) = 5.7.1
ad1bcd
Provides: bundled(npm(simple-git)) = 1.132.0
28ad2d
Provides: bundled(npm(sinon)) = 8.1.1
ad1bcd
Provides: bundled(npm(sinon)) = 8.1.1
ad1bcd
Provides: bundled(npm(slate)) = 0.47.8
28ad2d
Provides: bundled(npm(slate)) = 0.47.8
28ad2d
Provides: bundled(npm(slate-plain-serializer)) = 0.7.10
ad1bcd
Provides: bundled(npm(storybook-dark-mode)) = 1.0.4
28ad2d
Provides: bundled(npm(style-loader)) = 1.1.3
ad1bcd
Provides: bundled(npm(style-loader)) = 1.1.3
ad1bcd
Provides: bundled(npm(systemjs)) = 0.20.19
ad1bcd
Provides: bundled(npm(systemjs-plugin-css)) = 0.1.37
ad1bcd
Provides: bundled(npm(terser-webpack-plugin)) = 1.4.5
897738
Provides: bundled(npm(terser-webpack-plugin)) = 1.4.5
28ad2d
Provides: bundled(npm(tether)) = 1.4.7
28ad2d
Provides: bundled(npm(tether-drop)) = 1.5.0
28ad2d
Provides: bundled(npm(tinycolor2)) = 1.4.1
ad1bcd
Provides: bundled(npm(tinycolor2)) = 1.4.1
ad1bcd
Provides: bundled(npm(tinycolor2)) = 1.4.1
ad1bcd
Provides: bundled(npm(ts-jest)) = 26.4.4
897738
Provides: bundled(npm(ts-jest)) = 26.4.4
ad1bcd
Provides: bundled(npm(ts-loader)) = 6.2.1
ad1bcd
Provides: bundled(npm(ts-loader)) = 6.2.1
ad1bcd
Provides: bundled(npm(ts-loader)) = 6.2.1
ad1bcd
Provides: bundled(npm(ts-loader)) = 6.2.1
ad1bcd
Provides: bundled(npm(ts-node)) = 9.0.0
ad1bcd
Provides: bundled(npm(ts-node)) = 9.0.0
897738
Provides: bundled(npm(ts-node)) = 9.0.0
28ad2d
Provides: bundled(npm(tslib)) = 1.10.0
ad1bcd
Provides: bundled(npm(tslib)) = 1.10.0
28ad2d
Provides: bundled(npm(tti-polyfill)) = 0.2.2
ad1bcd
Provides: bundled(npm(tween-functions)) = 1.2.0
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
897738
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(typescript)) = 3.9.7
ad1bcd
Provides: bundled(npm(uplot)) = 1.6.9
ad1bcd
Provides: bundled(npm(url-loader)) = 2.2.0
28ad2d
Provides: bundled(npm(uuid)) = 3.3.3
897738
Provides: bundled(npm(visjs-network)) = 4.25.0
897738
Provides: bundled(npm(webpack)) = 4.41.5
ad1bcd
Provides: bundled(npm(webpack)) = 4.41.5
28ad2d
Provides: bundled(npm(webpack-bundle-analyzer)) = 3.6.0
28ad2d
Provides: bundled(npm(webpack-cleanup-plugin)) = 0.5.1
28ad2d
Provides: bundled(npm(webpack-cli)) = 3.3.10
897738
Provides: bundled(npm(webpack-dev-server)) = 3.11.1
ad1bcd
Provides: bundled(npm(webpack-filter-warnings-plugin)) = 1.2.1
28ad2d
Provides: bundled(npm(webpack-merge)) = 4.2.2
28ad2d
Provides: bundled(npm(whatwg-fetch)) = 3.0.0
ad1bcd
Provides: bundled(npm(xss)) = 1.0.6
ad1bcd
Provides: bundled(npm(yaml)) = 1.7.2
ad1bcd
Provides: bundled(npm(yaml)) = 1.7.2
28ad2d
Provides: bundled(npm(zone.js)) = 0.7.8
50fcc5
50fcc5
50fcc5
%description
50fcc5
Grafana is an open source, feature rich metrics dashboard and graph editor for
50fcc5
Graphite, InfluxDB & OpenTSDB.
50fcc5
50fcc5
50fcc5
%prep
50fcc5
%setup -q -T -D -b 0
50fcc5
%setup -q -T -D -b 1
28ad2d
%if %{compile_frontend} == 0
28ad2d
# remove bundled plugins source, otherwise they'll get merged
28ad2d
# with the compiled bundled plugins when extracting the webpack
28ad2d
rm -r plugins-bundled
28ad2d
%setup -q -T -D -b 2
28ad2d
%endif
28ad2d
50fcc5
%patch1 -p1
50fcc5
%patch2 -p1
50fcc5
%patch3 -p1
28ad2d
%ifarch s390x
0d3998
%patch4 -p1
6b5415
%endif
28ad2d
%patch5 -p1
28ad2d
%patch6 -p1
897738
%patch8 -p1
897738
%patch9 -p1
897738
%if %{enable_fips_mode}
897738
%patch10 -p1
897738
%endif
ad1bcd
%if 0%{?fedora} || 0%{?rhel} > 8
6ad68d
%patch11 -p1
ad1bcd
%endif
ad1bcd
%patch12 -p1
ad1bcd
%patch13 -p1
ad1bcd
%patch14 -p1
ad1bcd
%patch15 -p1
ad1bcd
%patch16 -p1
83f9de
%patch17 -p1
50fcc5
50fcc5
# Set up build subdirs and links
50fcc5
mkdir -p %{_builddir}/src/github.com/grafana
28ad2d
ln -s %{_builddir}/%{name}-%{version} \
50fcc5
    %{_builddir}/src/github.com/grafana/grafana
50fcc5
50fcc5
50fcc5
%build
28ad2d
# Build the frontend
28ad2d
%if %{compile_frontend}
28ad2d
%{SOURCE5}
28ad2d
%endif
6b5415
28ad2d
# Build the backend
28ad2d
cd %{_builddir}/src/github.com/grafana/grafana
28ad2d
export GOPATH=%{_builddir}
50fcc5
83f9de
# required since RHEL 8.8 to fix the following error:
83f9de
# "imports crypto/boring: build constraints exclude all Go files in /usr/lib/golang/src/crypto/boring"
83f9de
# can be removed in a future Go release
83f9de
export GOEXPERIMENT=boringcrypto
83f9de
6b5415
# see grafana-X.X.X/build.go
6b5415
export LDFLAGS="-X main.version=%{version} -X main.buildstamp=${SOURCE_DATE_EPOCH}"
6b5415
for cmd in grafana-cli grafana-server; do
28ad2d
    %gobuild -o %{_builddir}/bin/${cmd} ./pkg/cmd/${cmd}
6b5415
done
50fcc5
50fcc5
28ad2d
%install
0d3998
# dirs, shared files, public html, webpack
50fcc5
install -d %{buildroot}%{_sbindir}
6b5415
install -d %{buildroot}%{_datadir}/%{name}
6b5415
install -d %{buildroot}%{_libexecdir}/%{name}
28ad2d
cp -a conf public plugins-bundled %{buildroot}%{_datadir}/%{name}
50fcc5
0d3998
# wrappers
0d3998
install -p -m 755 packaging/wrappers/grafana-cli %{buildroot}%{_sbindir}/%{name}-cli
0d3998
0d3998
# binaries
28ad2d
install -p -m 755 %{_builddir}/bin/%{name}-server %{buildroot}%{_sbindir}
28ad2d
install -p -m 755 %{_builddir}/bin/%{name}-cli %{buildroot}%{_libexecdir}/%{name}
0d3998
50fcc5
# man pages
50fcc5
install -d %{buildroot}%{_mandir}/man1
50fcc5
install -p -m 644 docs/man/man1/* %{buildroot}%{_mandir}/man1
50fcc5
50fcc5
# config dirs
50fcc5
install -d %{buildroot}%{_sysconfdir}/%{name}
28ad2d
install -d %{buildroot}%{_sysconfdir}/%{name}/provisioning
28ad2d
install -d %{buildroot}%{_sysconfdir}/%{name}/provisioning/dashboards
28ad2d
install -d %{buildroot}%{_sysconfdir}/%{name}/provisioning/datasources
28ad2d
install -d %{buildroot}%{_sysconfdir}/%{name}/provisioning/notifiers
28ad2d
install -d %{buildroot}%{_sysconfdir}/%{name}/provisioning/plugins
50fcc5
install -d %{buildroot}%{_sysconfdir}/sysconfig
50fcc5
50fcc5
# config defaults
28ad2d
install -p -m 640 %{SOURCE3} %{buildroot}%{_sysconfdir}/%{name}/grafana.ini
6b5415
install -p -m 640 conf/ldap.toml %{buildroot}%{_sysconfdir}/%{name}/ldap.toml
28ad2d
install -p -m 644 %{SOURCE3} %{buildroot}%{_datadir}/%{name}/conf/defaults.ini
50fcc5
install -p -m 644 packaging/rpm/sysconfig/grafana-server \
50fcc5
    %{buildroot}%{_sysconfdir}/sysconfig/grafana-server
50fcc5
50fcc5
# config database directory and plugins
6b5415
install -d -m 750 %{buildroot}%{_sharedstatedir}/%{name}
50fcc5
install -d -m 755 %{buildroot}%{_sharedstatedir}/%{name}/plugins
50fcc5
50fcc5
# log directory
50fcc5
install -d %{buildroot}%{_localstatedir}/log/%{name}
50fcc5
50fcc5
# systemd service files
50fcc5
install -d %{buildroot}%{_unitdir} # only needed for manual rpmbuilds
50fcc5
install -p -m 644 packaging/rpm/systemd/grafana-server.service \
50fcc5
    %{buildroot}%{_unitdir}
50fcc5
50fcc5
# daemon run pid file config for using tmpfs
50fcc5
install -d %{buildroot}%{_tmpfilesdir}
50fcc5
echo "d %{_rundir}/%{name} 0755 %{GRAFANA_USER} %{GRAFANA_GROUP} -" \
50fcc5
    > %{buildroot}%{_tmpfilesdir}/%{name}.conf
50fcc5
50fcc5
%pre
50fcc5
getent group %{GRAFANA_GROUP} >/dev/null || groupadd -r %{GRAFANA_GROUP}
50fcc5
getent passwd %{GRAFANA_USER} >/dev/null || \
50fcc5
    useradd -r -g %{GRAFANA_GROUP} -d %{GRAFANA_HOME} -s /sbin/nologin \
50fcc5
    -c "%{GRAFANA_USER} user account" %{GRAFANA_USER}
50fcc5
exit 0
50fcc5
50fcc5
%preun
50fcc5
%systemd_preun grafana-server.service
50fcc5
50fcc5
%post
50fcc5
%systemd_post grafana-server.service
6b5415
# create grafana.db with secure permissions on new installations
6b5415
# otherwise grafana-server is creating grafana.db on first start
6b5415
# with world-readable permissions, which may leak encrypted datasource
6b5415
# passwords to all users (if the secret_key in grafana.ini was not changed)
6b5415
6b5415
# https://bugzilla.redhat.com/show_bug.cgi?id=1805472
6b5415
if [ "$1" = 1 ] && [ ! -f %{_sharedstatedir}/%{name}/grafana.db ]; then
6b5415
    touch %{_sharedstatedir}/%{name}/grafana.db
6b5415
fi
6b5415
6b5415
# apply secure permissions to grafana.db if it exists
6b5415
# (may not exist on upgrades, because users can choose between sqlite/mysql/postgres)
6b5415
if [ -f %{_sharedstatedir}/%{name}/grafana.db ]; then
6b5415
    chown %{GRAFANA_USER}:%{GRAFANA_GROUP} %{_sharedstatedir}/%{name}/grafana.db
6b5415
    chmod 640 %{_sharedstatedir}/%{name}/grafana.db
6b5415
fi
6b5415
6b5415
# required for upgrades
6b5415
chmod 640 %{_sysconfdir}/%{name}/grafana.ini
6b5415
chmod 640 %{_sysconfdir}/%{name}/ldap.toml
50fcc5
50fcc5
%postun
50fcc5
%systemd_postun_with_restart grafana-server.service
50fcc5
50fcc5
50fcc5
%check
28ad2d
# Test frontend
28ad2d
%if %{compile_frontend}
897738
node_modules/.bin/jest
28ad2d
%endif
28ad2d
28ad2d
# Test backend
50fcc5
cd %{_builddir}/src/github.com/grafana/grafana
28ad2d
export GOPATH=%{_builddir}
28ad2d
28ad2d
# in setting_test.go there is a unit test which checks if 10 days are 240 hours
28ad2d
# which is usually true except if the dayligt saving time change falls into the last 10 days, then it's either 239 or 241 hours...
28ad2d
# let's set the time zone to a time zone without daylight saving time
28ad2d
export TZ=GMT
28ad2d
6ad68d
# GO111MODULE=on automatically skips vendored macaron sources in pkg/macaron
6ad68d
# GO111MODULE=off doesn't skip them, and fails with an error due to the canoncial import path
6ad68d
rm -r pkg/macaron
6ad68d
83f9de
# required since RHEL 8.8 to fix the following error:
83f9de
# "imports crypto/boring: build constraints exclude all Go files in /usr/lib/golang/src/crypto/boring"
83f9de
# can be removed in a future Go release
83f9de
export GOEXPERIMENT=boringcrypto
83f9de
83f9de
%gotest "-tags=integration" ./pkg/...
50fcc5
897738
%if %{enable_fips_mode}
ad1bcd
OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryption
897738
%endif
50fcc5
50fcc5
%files
6b5415
# binaries and wrappers
50fcc5
%{_sbindir}/%{name}-server
50fcc5
%{_sbindir}/%{name}-cli
6b5415
%{_libexecdir}/%{name}
50fcc5
50fcc5
# config files
50fcc5
%config(noreplace) %{_sysconfdir}/sysconfig/grafana-server
28ad2d
%dir %{_sysconfdir}/%{name}
28ad2d
%attr(0755, root, %{GRAFANA_GROUP}) %dir %{_sysconfdir}/%{name}/provisioning
28ad2d
%attr(0755, root, %{GRAFANA_GROUP}) %dir %{_sysconfdir}/%{name}/provisioning/dashboards
28ad2d
%attr(0750, root, %{GRAFANA_GROUP}) %dir %{_sysconfdir}/%{name}/provisioning/datasources
28ad2d
%attr(0755, root, %{GRAFANA_GROUP}) %dir %{_sysconfdir}/%{name}/provisioning/notifiers
28ad2d
%attr(0755, root, %{GRAFANA_GROUP}) %dir %{_sysconfdir}/%{name}/provisioning/plugins
28ad2d
%attr(0640, root, %{GRAFANA_GROUP}) %config(noreplace) %{_sysconfdir}/%{name}/grafana.ini
28ad2d
%attr(0640, root, %{GRAFANA_GROUP}) %config(noreplace) %{_sysconfdir}/%{name}/ldap.toml
50fcc5
6b5415
# config database directory and plugins
28ad2d
%attr(0750, %{GRAFANA_USER}, %{GRAFANA_GROUP}) %dir %{_sharedstatedir}/%{name}
28ad2d
%attr(-,    %{GRAFANA_USER}, %{GRAFANA_GROUP}) %dir %{_sharedstatedir}/%{name}/plugins
50fcc5
28ad2d
# shared directory and all files therein
6b5415
%{_datadir}/%{name}
50fcc5
%attr(-, root, %{GRAFANA_GROUP}) %{_datadir}/%{name}/conf/*
50fcc5
50fcc5
# systemd service file
50fcc5
%{_unitdir}/grafana-server.service
50fcc5
28ad2d
# Grafana configuration to dynamically create /run/grafana/grafana.pid on tmpfs
28ad2d
%{_tmpfilesdir}/%{name}.conf
28ad2d
50fcc5
# log directory - grafana.log is created by grafana-server, and it does it's own log rotation
50fcc5
%attr(0755, %{GRAFANA_USER}, %{GRAFANA_GROUP}) %dir %{_localstatedir}/log/%{name}
50fcc5
50fcc5
# man pages for grafana binaries
50fcc5
%{_mandir}/man1/%{name}-server.1*
50fcc5
%{_mandir}/man1/%{name}-cli.1*
50fcc5
50fcc5
# other docs and license
50fcc5
%license LICENSE
28ad2d
%doc CHANGELOG.md CODE_OF_CONDUCT.md CONTRIBUTING.md GOVERNANCE.md ISSUE_TRIAGE.md MAINTAINERS.md NOTICE.md
28ad2d
%doc PLUGIN_DEV.md README.md ROADMAP.md SECURITY.md SUPPORT.md UPGRADING_DEPENDENCIES.md WORKFLOW.md
50fcc5
50fcc5
28ad2d
%changelog
83f9de
* Mon Oct 31 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
83f9de
- resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
83f9de
- resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
83f9de
- resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
83f9de
- resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
83f9de
- run integration tests in check phase
83f9de
- update FIPS patch with latest changes in Go packaging
83f9de
ad1bcd
* Wed Aug 10 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
ad1bcd
- resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
ad1bcd
- resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
ad1bcd
- resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
ad1bcd
- resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
ad1bcd
- resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
ad1bcd
- resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
ad1bcd
- resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
ad1bcd
- resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
ad1bcd
- resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal
ad1bcd
ad1bcd
* Wed Jul 20 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-2
ad1bcd
- resolve CVE-2022-31107 grafana: OAuth account takeover
ad1bcd
ad1bcd
* Fri Apr 22 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
ad1bcd
- update to 7.5.15 tagged upstream community sources, see CHANGELOG
ad1bcd
- resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
ad1bcd
- resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
ad1bcd
- resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
ad1bcd
- resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
ad1bcd
- resolve CVE-2021-23648 sanitize-url: XSS
ad1bcd
- resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
ad1bcd
- declare Node.js dependencies of subpackages
ad1bcd
- make vendor and webpack tarballs reproducible
ad1bcd
6ad68d
* Thu Dec 16 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
6ad68d
- resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
6ad68d
- resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files
6ad68d
6ad68d
* Mon Oct 11 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-1
6ad68d
- update to 7.5.11 tagged upstream community sources, see CHANGELOG
6ad68d
- resolve CVE-2021-39226
6ad68d
6ad68d
* Thu Sep 30 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.10-1
6ad68d
- update to 7.5.10 tagged upstream community sources, see CHANGELOG
6ad68d
897738
* Mon Aug 16 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.9-3
897738
- rebuild to resolve CVE-2021-34558
897738
897738
* Thu Jul 08 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.9-2
897738
- remove unused dependency property-information
897738
- always include FIPS patch in SRPM
897738
897738
* Fri Jun 25 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.9-1
897738
- update to 7.5.9 tagged upstream community sources, see CHANGELOG
897738
897738
* Mon Jun 21 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
897738
- update to 7.5.8 tagged upstream community sources, see CHANGELOG
897738
- remove unused dependencies selfsigned, http-signature and gofpdf
897738
897738
* Fri Jun 11 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
897738
- remove unused cryptographic implementations
897738
- use cryptographic functions from OpenSSL if FIPS mode is enabled
897738
897738
* Tue May 25 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-1
897738
- update to 7.5.7 tagged upstream community sources, see CHANGELOG
897738
28ad2d
* Fri Jan 22 2021 Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
28ad2d
- change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
28ad2d
- add pcp-redis-datasource to allow_loading_unsigned_plugins config option
50fcc5
28ad2d
* Mon Dec 21 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
28ad2d
- update to 7.3.6 tagged upstream community sources, see CHANGELOG
28ad2d
- remove dependency on SAML (not supported in the open source version of Grafana)
50fcc5
28ad2d
* Wed Nov 25 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
28ad2d
- update to 7.3.4 tagged upstream community sources, see CHANGELOG
28ad2d
- bundle golang dependencies
28ad2d
- optionally bundle node.js dependencies and build and test frontend as part of the specfile
28ad2d
- merge all datasources into main grafana package
28ad2d
- change default provisioning path to /etc/grafana/provisioning
28ad2d
- resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170
50fcc5
28ad2d
* Thu Aug 20 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-3
28ad2d
- apply patch for CVE-2020-13430 also to sources, not only to compiled webpack
50fcc5
28ad2d
* Wed Aug 19 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-2
28ad2d
- security fix for CVE-2020-13430
50fcc5
6b5415
* Fri Jun 05 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-1
6b5415
- update to 6.7.4 tagged upstream community sources, see CHANGELOG
6b5415
- security fix for CVE-2020-13379
6b5415
6b5415
* Tue Apr 28 2020 Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.3-1
6b5415
- update to 6.7.3 tagged upstream community sources, see CHANGELOG
6b5415
- add scripts to list Go dependencies and bundled npmjs dependencies
6b5415
- set Grafana version in Grafana UI and grafana-cli --version
6b5415
- declare README.md as documentation of datasource plugins
6b5415
- create grafana.db on first installation (fixes RH BZ #1805472)
6b5415
- change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
6b5415
- change permissions of /var/lib/grafana/grafana.db to 640 and
6b5415
  user/group grafana:grafana (CVE-2020-12458)
6b5415
- change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)
6b5415
6b5415
* Wed Feb 26 2020 Mark Goodwin <mgoodwin@redhat.com> 6.6.2-1
6b5415
- added patch0 to set the version string correctly
6b5415
- removed patch 004-xerrors.patch, it's now upstream
6b5415
- added several patches for golang vendored vrs build dep differences
6b5415
- added patch to move grafana-cli binary to libexec dir
6b5415
- update to 6.6.2 tagged upstream community sources, see CHANGELOG
6b5415
0d3998
* Wed Nov 20 2019 Mark Goodwin <mgoodwin@redhat.com> 6.3.6-1
0d3998
- add weak depenency on grafana-pcp
0d3998
- add patch to mute shellcheck SC1090 for grafana-cli
0d3998
- update to 6.3.6 upstream community sources, see CHANGELOG
0d3998
0d3998
* Thu Sep 05 2019 Mark Goodwin <mgoodwin@redhat.com> 6.3.5-1
0d3998
- drop uaparser patch now it's upstream
0d3998
- add xerrors patch, see https://github.com/golang/go/issues/32246
0d3998
- use vendor sources on rawhide until modules are fully supported
0d3998
- update to latest upstream community sources, see CHANGELOG
0d3998
0d3998
* Fri Aug 30 2019 Mark Goodwin <mgoodwin@redhat.com> 6.3.4-1
0d3998
- include fix for CVE-2019-15043
0d3998
- add patch for uaparser on 32bit systems
0d3998
- update to latest upstream community sources, see CHANGELOG
0d3998
0d3998
* Wed Jul 31 2019 Mark Goodwin <mgoodwin@redhat.com> 6.2.5-1
0d3998
- update to latest upstream community sources, see CHANGELOG
0d3998
0d3998
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 6.2.2-2
0d3998
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
50fcc5
50fcc5
* Fri Jun 07 2019 Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
50fcc5
- split out some datasource plugins to sub-packages
50fcc5
- update to latest upstream community sources, see CHANGELOG
50fcc5
50fcc5
* Wed Jun 05 2019 Mark Goodwin <mgoodwin@redhat.com> 6.2.1-1
50fcc5
- update to latest upstream community sources, see CHANGELOG
50fcc5
50fcc5
* Fri May 24 2019 Mark Goodwin <mgoodwin@redhat.com> 6.2.0-1
50fcc5
- update to latest upstream community sources
50fcc5
- drop a couple of patches
50fcc5
50fcc5
* Wed May 08 2019 Mark Goodwin <mgoodwin@redhat.com> 6.1.6-2
50fcc5
- add conditional unbundle_vendor_sources macro
50fcc5
50fcc5
* Tue Apr 30 2019 Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
50fcc5
- update to latest upstream stable release 6.1.6, see CHANGELOG
50fcc5
- includes jQuery 3.4.0 security update
50fcc5
50fcc5
* Wed Apr 24 2019 Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
50fcc5
- update to latest upstream stable release 6.1.4, see CHANGELOG
50fcc5
- use gobuild and gochecks macros, eliminate arch symlinks
50fcc5
- re-enable grafana-debugsource package
50fcc5
- fix GRAFANA_GROUP typo
50fcc5
- fix more modes for brp-mangle-shebangs
50fcc5
- vendor source unbundling now done in prep after patches
50fcc5
- remove all rhel and fedora conditional guff
50fcc5
50fcc5
* Tue Apr 16 2019 Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
50fcc5
- update to latest upstream stable release 6.1.3, see CHANGELOG
50fcc5
- unbundle all vendor sources, replace with BuildRequires, see
50fcc5
  the long list of blocker BZs linked to BZ#1670656
50fcc5
- BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
50fcc5
- tweak make_webpack to no longer use grunt, switch to prod build
50fcc5
- add ExclusiveArch lua script (thanks quantum.analyst)
50fcc5
- move db directory and plugins to /var/lib/grafana
50fcc5
- split out into 6 patches, ready for upstream PRs
50fcc5
- add check to run go tests for gating checks
50fcc5
50fcc5
* Thu Apr 04 2019 Mark Goodwin <mgoodwin@redhat.com> 6.1.0-1
50fcc5
- update to latest upstream stable release 6.1.0, see CHANGELOG
50fcc5
50fcc5
* Thu Mar 21 2019 Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
50fcc5
- bump to latest upstream stable release 6.0.2-1
50fcc5
- unbundle almost all remaining vendor code, see linked blockers in BZ#1670656
50fcc5
50fcc5
* Fri Mar 15 2019 Mark Goodwin <mgoodwin@redhat.com> 6.0.1-3
50fcc5
- bump to latest upstream stable release 6.0.1-1
50fcc5
50fcc5
* Thu Mar 14 2019 Mark Goodwin <mgoodwin@redhat.com> 6.0.1-2
50fcc5
- unbundle and add BuildRequires for golang-github-rainycape-unidecode-devel
50fcc5
50fcc5
* Thu Mar 07 2019 Mark Goodwin <mgoodwin@redhat.com> 6.0.1-1
50fcc5
- update to v6.0.1 upstream sources, tweak distro config, re-do patch
50fcc5
- simplify make_webpack.sh script (Elliott Sales de Andrade)
50fcc5
- vendor/github.com/go-ldap is now gone, so don't unbundle it
50fcc5
50fcc5
* Thu Mar 07 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-11
50fcc5
- tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656)
50fcc5
- build debuginfo package again
50fcc5
- unbundle BuildRequires for golang-github-hashicorp-version-devel
50fcc5
- remove some unneeded development files
50fcc5
- remove macros from changelog and other rpmlint tweaks
50fcc5
50fcc5
* Fri Feb 22 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-10
50fcc5
- tweak spec for available and unavailable (bundled) golang packages
50fcc5
50fcc5
* Wed Feb 20 2019 Xavier Bachelot <xavier@bachelot.org> 5.4.3-9
50fcc5
- Remove extraneous slash (cosmetic)
50fcc5
- Create directories just before moving stuff in them
50fcc5
- Truncate long lines
50fcc5
- Group all golang stuff
50fcc5
- Simplify BuildRequires/bundled Provides
50fcc5
- Sort BuildRequires/bundled Provides
50fcc5
- Fix bundled go packages Provides
50fcc5
50fcc5
* Fri Feb 15 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-8
50fcc5
- add BuildRequires (and unbundle) vendor sources available in Fedora
50fcc5
- declare Provides for remaining (bundled) vendor go sources
50fcc5
- do not attempt to unbundle anything on RHEL < 7 or Fedora < 28
50fcc5
50fcc5
* Thu Feb 07 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-7
50fcc5
- further refinement for spec doc section from Xavier Bachelot
50fcc5
- disable debug_package to avoid empty debugsourcefiles.list
50fcc5
50fcc5
* Wed Feb 06 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-6
50fcc5
- further refinement following review by Xavier Bachelot
50fcc5
50fcc5
* Tue Feb 05 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-5
50fcc5
- further refinement following review by Xavier Bachelot
50fcc5
50fcc5
* Fri Feb 01 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-4
50fcc5
- further spec updates after packaging review
50fcc5
- reworked post-install scriplets
50fcc5
50fcc5
* Thu Jan 31 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-3
50fcc5
- tweak FHS patch, update spec after packaging review
50fcc5
50fcc5
* Wed Jan 30 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.3-2
50fcc5
- add patch to be standard FHS compliant, remove phantomjs
50fcc5
- update to v5.4.3 upstream community sources
50fcc5
50fcc5
* Wed Jan 09 2019 Mark Goodwin <mgoodwin@redhat.com> 5.4.2-1
50fcc5
- update to v5.4.2 upstream community sources
50fcc5
50fcc5
* Thu Oct 18 2018 Mark Goodwin <mgoodwin@redhat.com> 5.3.1-1
50fcc5
- update to v5.3.1 upstream community sources
50fcc5
50fcc5
* Tue Oct 02 2018 Mark Goodwin <mgoodwin@redhat.com> 5.2.5-1
50fcc5
- native RPM spec build with current tagged v5.2.5 sources