Update module github.com/grafana/grafana-plugin-sdk-go to v0.250.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/grafana/grafana-plugin-sdk-go	v0.246.0 -> v0.250.0

GitHub Vulnerability Alerts

CVE-2024-8986

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin.

If credentials are included in the repository URI (for instance, to allow for fetching of private dependencies), the final binary will contain the full URI, including said credentials.

---

Release Notes

grafana/grafana-plugin-sdk-go (github.com/grafana/grafana-plugin-sdk-go)

v0.250.0

Compare Source

This is a security release addressing CVE-2024-8986.

What's Changed

• Remove repo info from binary by @​andresmgot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1091

Full Changelog: grafana/grafana-plugin-sdk-go@v0.249.0...v0.250.0

Compatibility

### github.com/grafana/grafana-plugin-sdk-go/build
#### incompatible changes
Info.Branch: removed
Info.Build: removed
Info.Hash: removed
Info.PR: removed
Info.Repo: removed
### summary
v0.250.0 is a valid semantic version for this release.

v0.249.0

Compare Source

What's Changed

• build(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1085
• Query conversion handler by @​andresmgot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1078
• SQLUtil: Mark errors regarding duplicate column names as downstream by @​idastambuk in https://github.com/grafana/grafana-plugin-sdk-go/pull/1087
• Parse Interval: Mark invalid syntax errors as downstream by @​idastambuk in https://github.com/grafana/grafana-plugin-sdk-go/pull/1088
• Mark no such host error as downstream by @​iwysiu in https://github.com/grafana/grafana-plugin-sdk-go/pull/1089

New Contributors

• @​idastambuk made their first contribution in https://github.com/grafana/grafana-plugin-sdk-go/pull/1087

Full Changelog: grafana/grafana-plugin-sdk-go@v0.248.0...v0.249.0

Compatibility

### github.com/grafana/grafana-plugin-sdk-go/backend
#### compatible changes
ConvertObjectsFunc.ConvertObjects: added
ConvertQueryFunc: added
QueryConversionHandler: added
QueryConversionResponse: added
ServeOpts.QueryConversionHandler: added
### summary
v0.249.0 is a valid semantic version for this release.

v0.248.0

Compare Source

What's Changed

• JSON: Ensure all fields types work as expected when they are the first field in a frame by @​ryantxu in https://github.com/grafana/grafana-plugin-sdk-go/pull/1080
• Chore: Fix DeepCopyInto for DataQuery by @​toddtreece in https://github.com/grafana/grafana-plugin-sdk-go/pull/1081

Full Changelog: grafana/grafana-plugin-sdk-go@v0.247.0...v0.248.0

Compatibility

gorelease -base v0.247.0 -version v0.248.0
### summary
v0.248.0 is a valid semantic version for this release.

v0.247.0

Compare Source

What's Changed

• fix: return response with errorsource instead of nil by @​njvrzm in https://github.com/grafana/grafana-plugin-sdk-go/pull/1069
• Chore: Update max bytes reader middleware error message by @​itsmylife in https://github.com/grafana/grafana-plugin-sdk-go/pull/1072
• build(deps): bump github.com/prometheus/client_golang from 1.20.0 to 1.20.3 by @​dependabot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1073
• build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1076
• build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.0 by @​dependabot in https://github.com/grafana/grafana-plugin-sdk-go/pull/1074

Full Changelog: grafana/grafana-plugin-sdk-go@v0.246.0...v0.247.0

Compatibility

❯ gorelease -base v0.246.0 -version v0.247.0      
### summary
v0.247.0 is a valid semantic version for this release.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/prometheus/client_golang	v1.20.1 -> v1.20.3
google.golang.org/grpc	v1.65.0 -> v1.66.0