Download Latest Version 0.55.0 _ 2026-10-21 source code.zip (3.9 MB) Google Add to Preferred Sources
Home / v0.55.0
Name Modified Size InfoDownloads / Week
Parent folder
perses_0.55.0_checksums.txt 2026-10-21 1.5 kB
0
perses_0.55.0_darwin_amd64.tar.gz 2026-10-21 151.9 MB
0
perses_0.55.0_darwin_arm64.tar.gz 2026-10-21 148.7 MB
0
perses_0.55.0_linux_amd64.tar.gz 2026-10-21 151.0 MB
0
perses_0.55.0_linux_arm64.tar.gz 2026-10-21 146.9 MB
0
perses_0.55.0_linux_armv6.tar.gz 2026-10-21 148.8 MB
0
perses_0.55.0_windows_amd64.tar.gz 2026-10-21 152.1 MB
0
perses_0.55.0_windows_arm64.tar.gz 2026-10-21 147.2 MB
0
ui-sbom.cdx.json 2026-10-21 1.1 MB
0
0.55.0 _ 2026-10-21 source code.tar.gz 2026-10-21 2.9 MB
0
0.55.0 _ 2026-10-21 source code.zip 2026-10-21 3.9 MB
1 1 weekly downloads
README.md 2026-10-21 36.1 kB
0
Totals: 12 Items   1.1 GB 1

Welcome to the v0.55.0 release!

First of all, this release fixes a large number of security vulnerabilities, several of them critical. Most of them could be exploited without authentication with the default configuration. They include JWT forgery, SSRF and credential leaks through the datasource proxy, arbitrary file reads, and path traversals in the file system database. We strongly recommend upgrading as soon as possible. Some of these fixes require a configuration change: when authentication is enabled, an encryption key is now mandatory. The datasource proxy also denies loopback, link-local, cloud metadata and Kubernetes API destinations by default. Please read the upgrade guide and the new security considerations page before upgrading.

This release also comes with other breaking changes: the package @perses-dev/core and the old dashboard and datasource specifications have been removed, React 17 is no longer supported, Node 24 is now required, and the packages are published as ESM only.

On the dashboard side, you can now repeat a single panel, define annotations per panel, drag and drop panels between groups, and lock the plugin versions used by a dashboard. Prometheus exemplars are supported, the search has been rewritten on the backend, and two new plugins are available: Canvas and Json.

Finally, the datasource proxy, the native authorization, the plugin extraction, and the caching of static assets have all been made faster.

Core & UI

  • [SECURITY] Prevent path transversal attack when using project query parameter (#4485)
  • [SECURITY] Missing secret read permission when creating an embedded datasource in dashboard (#4487)
  • [SECURITY] Validate the value used in metadata.name (#4488)
  • [SECURITY] Ensure the project name parameter is valid for any HTTP methods (#4491)
  • [SECURITY] Protect the database against path transversal attack (#4492)
  • [SECURITY] Ensure the name parameter is also verified before being used (#4499)
  • [SECURITY] Restrict files referenced in secrets to allowed directories (#4503)
  • [SECURITY] Validate datasource proxy targets to prevent SSRF (#4518)
  • [SECURITY] SQL proxy: fix TLS handling, read-only enforcement and driver options (#4522)
  • [SECURITY] SQL proxy: reject INTO OUTFILE/DUMPFILE, document PostgreSQL file-reading functions (#4535)
  • [SECURITY] Config: when auth is enabled, encryption_key must be provided (#4550)
  • [SECURITY] Proxy: do not forward the caller credentials to the datasource (#4553)
  • [SECURITY] Harden the headers of the datasource proxy responses (#4558)
  • [FEATURE] New percli dac watch command (#3903)
  • [FEATURE] Add claim-based role assignment from OAuth/OIDC access tokens (#4172)
  • [FEATURE] Add server defaults for user preferences (#4268)
  • [FEATURE] Validate panel-level annotation definitions (#4299)
  • [FEATURE] Add panel repeat migration from grafana (#4328)
  • [FEATURE] Add disable_auto_refresh config (#4338)
  • [FEATURE] Add k8s user impersonation support (#4339)
  • [FEATURE] Add new search endpoint (#4355) (#4601)
  • [FEATURE] Consume panel-level annotations in the UI (#4356)
  • [FEATURE] Add default flag to datasource discovery configuration (#4368)
  • [FEATURE] Add dashboard lock mode (#4370)
  • [FEATURE] Enable decompress middleware for all route (#4381)
  • [FEATURE] Go SDK: add dashboard.Timezone option for Spec.timezone (#4386)
  • [FEATURE] Wire test datasource connection button into DatasourceDrawer (#4396)
  • [FEATURE] Add metrics+logs+traces demo dashboard to dev environment (#4402)
  • [FEATURE] Implement oauthPassThru, handles OIDC refreshToken as well (#4404)
  • [FEATURE] Support pre-computed bcrypt password hash for user provisioning (#4423)
  • [FEATURE] Add HTTP proxy header filtering policies (#4428)
  • [FEATURE] Add configurable refresh interval (#4432)
  • [FEATURE] Add annotation support to Go SDK (#4448)
  • [FEATURE] Add dynamic page title (#4489)
  • [FEATURE] Exposing complete dashboard and plugin CUE schema endpoint (#4505)
  • [FEATURE] Datasource proxy: bound the HTTP proxy timeout with the server config (#4525)
  • [ENHANCEMENT] Allow provisioning by watching folders (#4136)
  • [ENHANCEMENT] Allow opening dashboards and tabs in new tabs (#4252)
  • [ENHANCEMENT] Multi yaml file support for provisioning (#4332)
  • [ENHANCEMENT] Config: frontend.time_range.options is sorted in ascending order and values are verified (#4352)
  • [ENHANCEMENT] UI: use dashboard list from search endpoint (#4366)
  • [ENHANCEMENT] percli dac preview: add new flag --create-project (#4413)
  • [ENHANCEMENT] Support custom login property for the OIDC provider (#4468)
  • [ENHANCEMENT] CLI/LOGIN: check the terminal if it is interactive (#4469)
  • [ENHANCEMENT] Add Cache-Control headers for static UI assets (#4475)
  • [ENHANCEMENT] Improve the way the cache is set when serving static file (#4497)
  • [ENHANCEMENT] Support grouped important dashboards (#4506)
  • [ENHANCEMENT] Extract plugin archives in parallel (#4507)
  • [ENHANCEMENT] Proxy: reuse HTTP transport per saved datasource (#4521)
  • [ENHANCEMENT] Cache content-hashed fonts and images as immutable static assets (#4533)
  • [ENHANCEMENT] Skip the extraction of plugin archives already extracted (#4534)
  • [ENHANCEMENT] Allow duplicating a dashboard into another project (#4536)
  • [ENHANCEMENT] Native authorization: build the permission cache in linear time and deduplicate role binding subjects (#4540)
  • [ENHANCEMENT] Grafana migration: keep the default time range, refresh interval and timezone (#4555)
  • [ENHANCEMENT] Add NewSelector convenience constructor to go-sdk/datasource (#4557)
  • [BUGFIX] Align mdox docs checks (#4203)
  • [BUGFIX] Fix SecretSpec validation of mutually exclusive auth methods (#4269)
  • [BUGFIX] Fix data race when listing project resources across authorized projects (#4342)
  • [BUGFIX] Honor kubeconfig exec credential plugins during Kubernetes login (#4343)
  • [BUGFIX] Support curly braces ${} variable in variable validation (#4379)
  • [BUGFIX] Handle semver comparission with plugins that do not include v as version prefix (#4387)
  • [BUGFIX] Prevent infinite spinner when creating dashboards on an empty project (#4412)
  • [BUGFIX] Prefix OIDC/OAuth login redirect with api_prefix (#4433)
  • [BUGFIX] Default OIDC/OAuth redirect path to api_prefix, not router basename-relative root (#4437)
  • [BUGFIX] Include dashboard tags in project view search (#4446)
  • [BUGFIX] Fix drop of query parameter when redirection is running with api_prefix (#4449)
  • [BUGFIX] Fix error not well handled in perses http client for auth (#4450)
  • [BUGFIX] DaC SDK: fix panelgroup lib not resolving layout kind (#4470)
  • [BUGFIX] CUE SDK: fix wrong lib (#4471)
  • [BUGFIX] Safely decode user names for permission API (#4510)
  • [BUGFIX] Handle wildcard access mixed with specifying projects (#4511)
  • [BUGFIX] Make file database writes atomic (#4513)
  • [BUGFIX] Align percli new plugin output (#4523)
  • [BUGFIX] Missing secret read permission when creating an embedded datasource in ephemeralDashboard (#4524)
  • [BUGFIX] Native authorization: fix deadlock between permissions retrieval and cache refresh (#4537)
  • [BUGFIX] Emit datasource variable references as plain JSON/YAML strings (#4545)
  • [BUGFIX] OAuth passthrough: use the refreshed token in the current proxy request (#4554)
  • [BUGFIX] percli plugin build: download all CUE deps before vendoring them (#4564)
  • [BUGFIX] Dashboard CUE schema: accept dashboards without server metadata or with definition-based plugins (#4577)
  • [BUGFIX] Grafana migration: drop allValue when includeAll is off (#4606)
  • [BUGFIX] Fix gzip request bodies forwarded by the datasource proxy (#4613)
  • [BUGFIX] Dashboard CUE schema: make ListVariable allowAllValue and allowMultiple default to false (#4615)
  • [BREAKINGCHANGE] Remove @perses-dev/core package (#4325)
  • [BREAKINGCHANGE] Remove old dashboard and datasource specification (#4326)
  • [BREAKINGCHANGE] Upgrade to Node 24 (LTS) and remove CommonJS (#4380)
  • [BREAKINGCHANGE] Dropping React 17 (#4391)
  • [BREAKINGCHANGE] Upgrade TypeScript, Zod and React Hook Forms deps + remove TypeDoc (#4421)
  • [DOC] Improve percli dac watch doc to use provisioning watcher (#4298)
  • [DOC] Warn about usage of postgreSQL (#4306)
  • [DOC] Update migration doc (#4308)
  • [DOC] Fix link in getting started redirecting to the API (#4313)
  • [DOC] Update release doc (#4389)
  • [DOC] Fix typo knowm -> known (#4390)
  • [DOC] Fix typos in troubleshooting doc, client error message, and comments (#4394)
  • [DOC] Document the Annotation plugin kind (#4427)
  • [DOC] Fix configuration doc: discovery is an array (#4462)
  • [DOC] Add security considerations page (#4512)
  • [DOC] Complete the upgrade guide for v0.55.0 (#4561)
  • [DOC] Split upgrade guide per version (#4566)

Plugins improvements

Commits ## What's Changed * Update Nicolas Affiliation by @nicolastakashi in https://github.com/perses/perses/pull/4284 * Merge back release branch v0.54 to main by @Nexucis in https://github.com/perses/perses/pull/4286 * [ENHANCEMENT] Allow provisioning by watching folders by @celian-garcia in https://github.com/perses/perses/pull/4136 * [ignore] ignore upgrade cuelang.org/go in dependabot by @Nexucis in https://github.com/perses/perses/pull/4288 * [BUGFIX] check all markdown files in checkdocs by @vprashar2929 in https://github.com/perses/perses/pull/4203 * [IGNORE] Add upgrade guide about sql default value by @Gladorme in https://github.com/perses/perses/pull/4294 * [FEATURE] new `percli dac watch` command by @AntoineThebaud in https://github.com/perses/perses/pull/3903 * [ignore] add missing go.sum for test of watch cmd by @Nexucis in https://github.com/perses/perses/pull/4301 * [ignore] move metrics.md to api folder by @Nexucis in https://github.com/perses/perses/pull/4310 * [ignore] move metrics.md to api folder by @Nexucis in https://github.com/perses/perses/pull/4311 * [ignore] fix link in metrics.md by @Nexucis in https://github.com/perses/perses/pull/4312 * [DOC] Fix link in getting started redirecting to the API by @Nexucis in https://github.com/perses/perses/pull/4313 * [DOC] warn about usage of postgreSQL by @Nexucis in https://github.com/perses/perses/pull/4306 * [IGNORE] Add upgrade guide about package re-structure by @shahrokni in https://github.com/perses/perses/pull/4304 * [DOC] Update migration doc by @Nexucis in https://github.com/perses/perses/pull/4308 * Merge back release v0.54.0 to the main branch by @Nexucis in https://github.com/perses/perses/pull/4323 * Bump the gomod group across 3 directories with 12 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4324 * [BREAKINGCHANGE] Remove `@perses-dev/core` package by @Nexucis in https://github.com/perses/perses/pull/4325 * [ENHANCEMENT]: Multi yaml file support for provisioning by @prakhar29jain in https://github.com/perses/perses/pull/4332 * Bump hoverkraft-tech/compose-action from 3.0.0 to 3.1.0 in the actions group by @dependabot[bot] in https://github.com/perses/perses/pull/4345 * Fix SecretSpec validation of mutually exclusive auth methods by @chuenchen309 in https://github.com/perses/perses/pull/4269 * Bump github.com/zitadel/oidc/v3 from 3.48.1 to 3.49.1 in the gomod group across 1 directory by @dependabot[bot] in https://github.com/perses/perses/pull/4346 * [FEATURE] add k8s user impersonation support by @jgbernalp in https://github.com/perses/perses/pull/4339 * [BREAKINGCHANGE] Remove old dashboard and datasource specification by @Nexucis in https://github.com/perses/perses/pull/4326 * [ENHANCEMENT] update the statchart version to 0.14.0 by @shahrokni in https://github.com/perses/perses/pull/4354 * [IGNORE] Use readErrorFile when yaml unmarshalling is failing by @Nexucis in https://github.com/perses/perses/pull/4349 * [FEATURE] Add panel repeat migration from grafana by @adrianSepiol in https://github.com/perses/perses/pull/4328 * [ignore] trigger workflow to cleanup old docker image by @Nexucis in https://github.com/perses/perses/pull/4100 * [ENHANCEMENT] Config: `frontend.time_range.options` is sorted in ascending order and values are verified by @pujitha24 in https://github.com/perses/perses/pull/4352 * [FEATURE] Validate panel-level annotation definitions by @nicolastakashi in https://github.com/perses/perses/pull/4299 * [FEATURE] Consume panel-level annotations in the UI by @nicolastakashi in https://github.com/perses/perses/pull/4356 * Bump the gomod group across 3 directories with 5 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4361 * [IGNORE] Add Pyroscope datasource to Docker compose by @Gladorme in https://github.com/perses/perses/pull/4358 * Bump actions/checkout from 6 to 7 in the actions group by @dependabot[bot] in https://github.com/perses/perses/pull/4360 * [IGNORE] Replace ESlint and Prettier by Oxlint and Oxfmt + React Doctor + add AI doc + upgrade TypeScript version by @Gladorme in https://github.com/perses/perses/pull/4362 * [FEATURE] Add server defaults for user preferences by @PCRedHot in https://github.com/perses/perses/pull/4268 * [IGNORE] Enforce React Compiler rules and apply React best practices by @Gladorme in https://github.com/perses/perses/pull/4364 * [FEATURE] Add new search endpoint by @Nexucis in https://github.com/perses/perses/pull/4355 * [BUGFIX] Fix data race when listing project resources across authorized projects by @anxkhn in https://github.com/perses/perses/pull/4342 * [BUGFIX] Honor kubeconfig exec credential plugins during Kubernetes login by @anxkhn in https://github.com/perses/perses/pull/4343 * [IGNORE] Move from jest to vitest by @Nexucis in https://github.com/perses/perses/pull/4369 * [IGNORE] Upgrade goreleaser and huh go deps by @Nexucis in https://github.com/perses/perses/pull/4371 * Bump actions/checkout from 5 to 7 in the actions group by @dependabot[bot] in https://github.com/perses/perses/pull/4373 * Bump the gomod group across 3 directories with 4 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4376 * [BUGFIX] Support curly braces ${} variable in variable validation by @celian-garcia in https://github.com/perses/perses/pull/4379 * [FEATURE] Add claim-based role assignment from OAuth/OIDC access tokens by @gfierkasap in https://github.com/perses/perses/pull/4172 * [FEATURE] Enable decompress middleware for all route by @Nexucis in https://github.com/perses/perses/pull/4381 * [BUGFIX] handle semver comparission with plugins that do not include 'v' as version prefix by @jgbernalp in https://github.com/perses/perses/pull/4387 * Bump golang from 1.26 to 1.27 in the docker group across 1 directory by @dependabot[bot] in https://github.com/perses/perses/pull/4375 * [FEATURE] (go-sdk): add dashboard.Timezone option for Spec.timezone by @colivi in https://github.com/perses/perses/pull/4386 * [IGNORE] add client package to list of shared linked packages by @jgbernalp in https://github.com/perses/perses/pull/4388 * [BREAKINGCHANGE] Dropping React 17 by @Gladorme in https://github.com/perses/perses/pull/4391 * fix: correct 'not knowm' typo in the same_site error message by @vaibhav8a in https://github.com/perses/perses/pull/4390 * [IGNORE] Update to go 1.27 by @Nexucis in https://github.com/perses/perses/pull/4395 * [DOC] Fix typos in troubleshooting doc, client error message and comments by @mihhhir08 in https://github.com/perses/perses/pull/4394 * Bump the gomod group across 3 directories with 9 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4398 * [FEATURE] Wire test datasource connection button into DatasourceDrawer by @Nexucis in https://github.com/perses/perses/pull/4396 * [IGNORE] Upgrade plugins to latest betas by @celian-garcia in https://github.com/perses/perses/pull/4397 * [DOC] Update release doc by @Nexucis in https://github.com/perses/perses/pull/4389 * [IGNORE] Update perses cue dep to latest by @Nexucis in https://github.com/perses/perses/pull/4400 * [FEATURE] Add disable_auto_refresh config by @mixturesolutions in https://github.com/perses/perses/pull/4338 * [BREAKINGCHANGE] Upgrade to Node 24 (LTS) and remove CommonJS by @Gladorme in https://github.com/perses/perses/pull/4380 * [FEATURE] Add metrics+logs+traces demo dashboard to dev environment by @ibakshay in https://github.com/perses/perses/pull/4402 * [DOC] Improve ``percli dac watch`` doc to use provisioning watcher by @celian-garcia in https://github.com/perses/perses/pull/4298 * [BUGFIX] prevent infinite spinner when creating dashboards on an empty project by @jgbernalp in https://github.com/perses/perses/pull/4412 * Bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4415 * [ENHANCEMENT] `percli dac preview`: add new flag `--create-project` by @AntoineThebaud in https://github.com/perses/perses/pull/4413 * [IGNORE] provide shared singletons to module federation by @jgbernalp in https://github.com/perses/perses/pull/4409 * [BREAKINGCHANGE] Upgrade TypeScript, Zod and React Hook Forms deps + remove TypeDoc by @Gladorme in https://github.com/perses/perses/pull/4421 * [FEATURE] Add HTTP proxy header filtering policies by @Gladorme in https://github.com/perses/perses/pull/4428 * [FEATURE] support pre-computed bcrypt password hash for user provisioning by @robertpaschedag in https://github.com/perses/perses/pull/4423 * [BUGFIX] prefix OIDC/OAuth login redirect with api_prefix by @pujitha24 in https://github.com/perses/perses/pull/4433 * [DOC] Document the Annotation plugin kind by @7487 in https://github.com/perses/perses/pull/4427 * [BUGFIX] default OIDC/OAuth redirect path to api_prefix, not router basename-relative root by @pujitha24 in https://github.com/perses/perses/pull/4437 * [IGNORE] speedup windows install postgres by @Nexucis in https://github.com/perses/perses/pull/4438 * [IGNORE] cleanup old data for postgresql by @Nexucis in https://github.com/perses/perses/pull/4439 * [FEATURE]: implement oauthPassThru, handles OIDC refreshToken as well by @kubehubdev in https://github.com/perses/perses/pull/4404 * [FEATURE] add configurable refresh interval by @shahrokni in https://github.com/perses/perses/pull/4432 * [IGNORE] update vulnerable dependencies by @jgbernalp in https://github.com/perses/perses/pull/4447 * Bump actions/cache from 4 to 6 in the actions group by @dependabot[bot] in https://github.com/perses/perses/pull/4443 * Bump the gomod group across 1 directory with 7 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4444 * [BUGFIX] Fix drop of query parameter when redirection is running with api_prefix by @Nexucis in https://github.com/perses/perses/pull/4449 * Upgrade plugins to latest betas by @celian-garcia in https://github.com/perses/perses/pull/4452 * Release v0.55.0-beta.0 by @celian-garcia in https://github.com/perses/perses/pull/4453 * [IGNORE] bump perses/spec and shared packages by @Nexucis in https://github.com/perses/perses/pull/4458 * [IGNORE] Generate frontend SBOM on each PR + fix peer deps by @celian-garcia in https://github.com/perses/perses/pull/4454 * [BUGFIX] Fix error not well handled in perses http client for auth by @Nexucis in https://github.com/perses/perses/pull/4450 * [IGNORE] fix test silences creation by @jgbernalp in https://github.com/perses/perses/pull/4457 * [IGNORE] Prepare release v0.55.0-beta.1 by @celian-garcia in https://github.com/perses/perses/pull/4460 * [FEATURE] Add default flag to datasource discovery configuration by @gfierkasap in https://github.com/perses/perses/pull/4368 * [ENHANCEMENT] CLI/LOGIN: check the terminal if it is interactive by @Nexucis in https://github.com/perses/perses/pull/4469 * [IGNORE] Upgrade Perses dependencies and fix Snapgrid E2E tests by @Gladorme in https://github.com/perses/perses/pull/4472 * [ENHANCEMENT] Support custom login property for the OIDC provider by @pujitha24 in https://github.com/perses/perses/pull/4468 * [ENHANCEMENT] Add Cache-Control headers for static UI assets by @pujitha24 in https://github.com/perses/perses/pull/4475 * [BUGFIX] CUE SDK: fix wrong lib by @AntoineThebaud in https://github.com/perses/perses/pull/4471 * [DOC] Fix configuration doc: discovery is an array by @Nexucis in https://github.com/perses/perses/pull/4462 * [FEATURE] Add dashboard lock mode by @Gladorme in https://github.com/perses/perses/pull/4370 * [IGNORE] Implement verify function for OIDC Login Property by @Nexucis in https://github.com/perses/perses/pull/4476 * [ENHANCEMENT] Allow opening dashboards and tabs in new tabs by @ayanarukasar in https://github.com/perses/perses/pull/4252 * [IGNORE] bump perses shared package to 0.55.0-beta.12 by @Nexucis in https://github.com/perses/perses/pull/4479 * Prepare for release v0.55.0-beta.2 by @celian-garcia in https://github.com/perses/perses/pull/4478 * [BUGFIX] Prevent path transversal attack when using project query parameter by @Nexucis in https://github.com/perses/perses/pull/4485 * Bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4484 * Bump hoverkraft-tech/compose-action from 3.1.0 to 3.2.0 in the actions group by @dependabot[bot] in https://github.com/perses/perses/pull/4483 * [BUGFIX] Missing secret read permission when creating en embedded datasource in dashboard by @Nexucis in https://github.com/perses/perses/pull/4487 * [ENHANCEMENT] Validate the value used in `metadata.name` by @Nexucis in https://github.com/perses/perses/pull/4488 * [FEATURE] Add dynamic page title by @Gladorme in https://github.com/perses/perses/pull/4489 * [BUGFIX] Ensure the project name parameter is valid for any HTTP methods by @Nexucis in https://github.com/perses/perses/pull/4491 * [ENHANCEMENT] Protect the database against path transversal attack by @Nexucis in https://github.com/perses/perses/pull/4492 * Merge back release/v0.55 into main by @celian-garcia in https://github.com/perses/perses/pull/4480 * [IGNORE] Upgrade perses/spec perses/shared and plugins to last betas by @celian-garcia in https://github.com/perses/perses/pull/4493 * Prepare release v0.55.0-beta.3 by @celian-garcia in https://github.com/perses/perses/pull/4494 * [IGNORE] patch vulnerable dependencies by @jgbernalp in https://github.com/perses/perses/pull/4495 * [ENHANCEMENT] Improve the way the cache is set when serving static file by @Nexucis in https://github.com/perses/perses/pull/4497 * [BUGFIX] Ensure the name parameter is also verified before being used by @Nexucis in https://github.com/perses/perses/pull/4499 * [BREAKINGCHANGE] restrict files referenced in secrets to allowed directories by @Nexucis in https://github.com/perses/perses/pull/4503 * [IGNORE] Bump CUE to v0.17.1 by @AntoineThebaud in https://github.com/perses/perses/pull/4504 * [ENHANCEMENT] UI: use dashboard list from search endpoint by @Nexucis in https://github.com/perses/perses/pull/4366 * Restore "[FEATURE] Exposing complete dashboard and plugin CUE schema endpoint by @Nexucis in https://github.com/perses/perses/pull/4505 * [BUGFIX] safely decode user names for permission api by @jgbernalp in https://github.com/perses/perses/pull/4510 * [BUGFIX] DaC SDK: fix panelgroup lib not resolving layout kind by @AntoineThebaud in https://github.com/perses/perses/pull/4470 * [BUGFIX] handle wildcard access mixed with specifing projects by @jgbernalp in https://github.com/perses/perses/pull/4511 * [ENHANCEMENT] extract plugin archives in parallel by @Nexucis in https://github.com/perses/perses/pull/4507 * Bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4515 * [BUGFIX] make file database writes atomic by @riccardomenegazzo in https://github.com/perses/perses/pull/4513 * docs: add security considerations page by @CypherNova1337 in https://github.com/perses/perses/pull/4512 * [BUGFIX] Align percli new plugin output by @Gladorme in https://github.com/perses/perses/pull/4523 * [ENHANCEMENT] proxy: reuse HTTP transport per saved datasource by @Nexucis in https://github.com/perses/perses/pull/4521 * [BUGFIX] Missing secret read permission when creating en embedded datasource in ephemeralDashboard by @Nexucis in https://github.com/perses/perses/pull/4524 * [BUGFIX] SQL proxy: fix TLS handling, read-only enforcement and driver options by @Nexucis in https://github.com/perses/perses/pull/4522 * [FEATURE] datasource proxy: bound the HTTP proxy timeout with the server config by @Nexucis in https://github.com/perses/perses/pull/4525 * [IGNORE] make the download of plugin crash in case of error by @Nexucis in https://github.com/perses/perses/pull/4528 * [ignore] bump shared package to v0.55.0-beta.14 by @Nexucis in https://github.com/perses/perses/pull/4527 * [IGNORE] update plugins version by @Nexucis in https://github.com/perses/perses/pull/4529 * Release v0.55.0-beta.4 by @Nexucis in https://github.com/perses/perses/pull/4531 * merge back release/v0.55.0 to main by @Nexucis in https://github.com/perses/perses/pull/4532 * [ENHANCEMENT] Skip the extraction of plugin archives already extracted by @Nexucis in https://github.com/perses/perses/pull/4534 * [ENHANCEMENT] Cache content-hashed fonts and images as immutable static assets by @Nexucis in https://github.com/perses/perses/pull/4533 * [BUGFIX] include dashboard tags in project view search by @Sarthak-Shreshtha01 in https://github.com/perses/perses/pull/4446 * [ENHANCEMENT] SQL proxy: reject INTO OUTFILE/DUMPFILE and document PG file-reading functions by @CypherNova1337 in https://github.com/perses/perses/pull/4535 * [ENHANCEMENT] support grouped important dashboards by @AntoineThebaud with @Copilot in https://github.com/perses/perses/pull/4506 * Bump the gomod group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/perses/perses/pull/4549 * [IGNORE] Add benchmarks for the native authorization by @Nexucis in https://github.com/perses/perses/pull/4538 * [BUGFIX] Native authorization: fix deadlock between permissions retrieval and cache refresh by @Nexucis in https://github.com/perses/perses/pull/4537 * [BREAKINGCHANGE] Config: when auth is enabled, encryption_key must be provided by @Nexucis in https://github.com/perses/perses/pull/4550 * [FEATURE] Add annotation support to Go SDK by @Swayamcodes in https://github.com/perses/perses/pull/4448 * [BUGFIX] Proxy: do not forward the caller credentials to the datasource by @Nexucis in https://github.com/perses/perses/pull/4553 * [BUGFIX] OAuth passthrough: use the refreshed token in the current proxy request by @Nexucis in https://github.com/perses/perses/pull/4554 * [ENHANCEMENT] Native authorization: build the permission cache in linear time and deduplicate role binding subjects by @Nexucis in https://github.com/perses/perses/pull/4540 * [ENHANCEMENT] Allow duplicating a dashboard into another project by @AntoineThebaud in https://github.com/perses/perses/pull/4536 * [ENHANCEMENT] Grafana migration: keep the default time range, refresh interval and timezone by @rajusem in https://github.com/perses/perses/pull/4555 * [BREAKINGCHANGE] Emit datasource variable references as plain JSON strings by @asergeant01 in https://github.com/perses/perses/pull/4545 * [ENHANCEMENT] Add NewSelector convenience constructor to go-sdk/datasource by @asergeant01 in https://github.com/perses/perses/pull/4557 * [BUGFIX] harden the headers of the datasource proxy responses by @Nexucis in https://github.com/perses/perses/pull/4558 * [BREAKINGCHANGE] validate datasource proxy targets to prevent SSRF by @Nexucis in https://github.com/perses/perses/pull/4518 * [IGNORE] Move http and sql proxy impl to dedicated package by @Nexucis in https://github.com/perses/perses/pull/4559 * [DOC] Complete the upgrade guide for v0.55.0 by @Nexucis in https://github.com/perses/perses/pull/4561 * [ignore] fix e2e package version by @Nexucis in https://github.com/perses/perses/pull/4563 * [DOC] Split upgrade guide per version by @Nexucis in https://github.com/perses/perses/pull/4566 * [IGNORE] doc: Add documentation about Annotation usage by @Gladorme in https://github.com/perses/perses/pull/4530 * [ignore] bump plugins, shared and spec package by @Nexucis in https://github.com/perses/perses/pull/4565 * [IGNORE] Upgrade Oxlint and fix React Compiler errors by @Gladorme in https://github.com/perses/perses/pull/4481 * Release v0.55.0-rc.0 by @Nexucis in https://github.com/perses/perses/pull/4567 * Fix vulnerable dependencies 0.55 by @jgbernalp in https://github.com/perses/perses/pull/4572 * [IGNORE] Bump perses/spec, perses/shared and perses/plugins by @celian-garcia in https://github.com/perses/perses/pull/4585 * [IGNORE] Prepare release 0.55.0-rc.1 by @celian-garcia in https://github.com/perses/perses/pull/4587 * [BUGFIX] search index refresh v0.55 by @colivi in https://github.com/perses/perses/pull/4601 * [BUGFIX] Fix gzip request bodies forwarded by the datasource proxy by @Nexucis in https://github.com/perses/perses/pull/4613 * [BUGFIX] Dashboard CUE schema: accept dashboards without server metadata or with definition-based plugins by @ibakshay in https://github.com/perses/perses/pull/4577 * [BUGFIX] Dashboard CUE schema: make ListVariable allowAllValue and allowMultiple default to false by @ibakshay in https://github.com/perses/perses/pull/4615 * [BUGFIX] Grafana migration: drop allValue when includeAll is off by @rajusem in https://github.com/perses/perses/pull/4606 * Release v0.55.0 by @Nexucis in https://github.com/perses/perses/pull/4619

New Contributors

Full Changelog: https://github.com/perses/perses/compare/v0.54.0...v0.55.0

Source: README.md, updated 2026-10-21