grafana: 13.1.4 -> 13.1.6

Fixes CVE-2026-15815, CVE-2026-76154, CVE-2026-14199,  CVE-2026-19475.

ChangeLog:
* https://github.com/grafana/grafana/releases/tag/v13.1.5
* https://github.com/grafana/grafana/releases/tag/v13.1.6
This commit is contained in:
Maximilian Bosch
2026-09-19 12:56:16 +02:00
parent ae47c40f85
commit 69bec82fe3

View File

@@ -21,7 +21,7 @@
buildGoModule (finalAttrs: {
pname = "grafana";
version = "13.1.4";
version = "13.1.6";
subPackages = [
"pkg/cmd/grafana"
@@ -33,7 +33,7 @@ buildGoModule (finalAttrs: {
owner = "grafana";
repo = "grafana";
rev = "v${finalAttrs.version}";
hash = "sha256-Ki3P6ukIj7KgF9sIcJGdO7NXA2ZLIyWFOIHRUZ5uiVk=";
hash = "sha256-w3/QReBRp1fGy6WHiCJS/YRerIpyoW9sBjiOZ1+a5h0=";
};
# borrowed from: https://github.com/NixOS/nixpkgs/blob/d70d9425f49f9aba3c49e2c389fe6d42bac8c5b0/pkgs/development/tools/analysis/snyk/default.nix#L20-L22
@@ -49,12 +49,12 @@ buildGoModule (finalAttrs: {
# Since this is not a dependency attribute the buildPackages has to be specified.
offlineCache = buildPackages.yarn-berry_4-fetcher.fetchYarnBerryDeps {
inherit (finalAttrs) src missingHashes;
hash = "sha256-wL2m4z/d6NkXYOSBGjju3EQZElTgI2MLK/fYzNucNKU=";
hash = "sha256-4SGm/S5ighzWOdDYB5Na2Gfv2USbWtV6TKSOyJO7yYI=";
};
disallowedRequisites = [ finalAttrs.offlineCache ];
vendorHash = "sha256-OrjNdnDB1lfiig14Ojg24zXa/gOilfZWY4j9hpBZAoQ=";
vendorHash = "sha256-i5XwCA9ghUMUp6xYbM/WuVEF48xbbAq5qBWp3Auxg3o=";
# Grafana seems to just set it to the latest version available
# nowadays.