ci-cd-workflows: v6.0.0

6.0.0 (2026-01-19)

⚠ BREAKING CHANGES

• playwright: remove version and image arguments (#507)

GRAFANA_VERSION and GRAFANA_IMAGE aren't being passed to Playwright anymore.

For consumers of the shared workflows that wants to detect Grafana version within plugin-e2e tests, there's an alternative approach using the official API:

test('should be possible to enable advanced mode', async ({ grafanaVersion, alertRuleEditPage }) => {
   test.skip(semver.lt(grafanaVersion, '11.6.0'), 'Advanced mode is not supported in Grafana versions < 11.6.0');
   // test code
});

---

• cd: allow releasing to prod from non-main branches (#378)

Calls to cd.yml must be adjusted to include an additional permission: pull-requests: read, otherwise the workflow will fail with the following error:

Invalid workflow file: ...
The workflow is not valid. .github/workflows/publish.yaml (...): Error calling workflow 'grafana/plugin-ci-workflows/.github/workflows/cd.yml@.... The workflow is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'.

Example on the required changes to cd.yml:

jobs:
  cd:
    name: CD
    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
    permissions:
      contents: write
+     pull-requests: read
      id-token: write
      attestations: write

---

🎉 Features

• cd: allow releasing to prod from non-main branches (#378) (e1cf5f6)
• ci: add warning when ci and cd workflows are not on the same reference (#492) (4e9ca04)
• ci: support react image in e2e matrix (#496) (6d8cb8c)
• playwright: remove version and image arguments (#507) (f70e822)

✅ Tests

• act: add gcom mock, cd.yml changes for testing (#501) (e3f1779)
• act: fix validator tests (#506) (3c93dda)

🔧 Chores

• ci: run golangci-lint on internal go packages (#485) (303148f)
• deps: update actions/attest-build-provenance action to v3.1.0 (#484) (ba9c56e)
• deps: update actions/cache action to v5 (#481) (3eaee5a)
• deps: update stefanzweifel/git-auto-commit-action action to v7.1.0 (#483) (f9a22aa)
• deps: update step-security/harden-runner action to v2.14.0 (#477) (cdab179)