Change8

v12.4.4

📦 grafanaView on GitHub →
6 features🐛 6 fixes🔧 4 symbols

Summary

This release introduces several enhancements, including improved dashboard browsing and dependency updates for Docker and Go. It also resolves multiple bugs across Alerting, Jaeger, and PostgreSQL data sources, alongside addressing several security vulnerabilities.

✨ New Features

  • Improved visibility and flow for elements when browsing dashboards at different zoom levels.
  • Updated Alpine-based Docker images to version 3.23.4.
  • Updated internal Go version to 1.26.3.
  • Graphite data source now strips the tagged path from `tags.name` when `aliasSub` wrapping is detected.
  • Library Panels now return HTTP 403 (Forbidden) instead of HTTP 500 for insufficient permission errors.
  • Sanitized header values to printable ASCII for improved gRPC compatibility in plugins.

🐛 Bug Fixes

  • Fixed an issue where AlertManagerPicker visibility was incorrectly checked against Alertmanager datasources.
  • Fixed Alerting to treat 'not found' errors when fetching plugins as 'not installed'.
  • Fixed Mixed panels not updating correctly on time-range changes when using stale upstream data sources.
  • Fixed log event timestamp unit conversion in the Jaeger trace view.
  • Fixed PostgreSQL data source to allow the `sql_engine` to return results for EXPLAIN queries.
  • Addressed multiple security vulnerabilities (CVE-2026-9029, CVE-2026-33382, CVE-2026-42127, CVE-2026-42129, CVE-2026-10601, CVE-2026-8609, CVE-2026-8595).

Affected Symbols