chore(main): release ci-cd-workflows 9.0.0 (#744)

Co-authored-by: grafana-plugins-platform-bot[bot] <144369747+grafana-plugins-platform-bot[bot]@users.noreply.github.com>

Author: grafana-plugins-platform-bot[bot]

.github/workflows/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [9.0.0](https://github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v8.0.1...ci-cd-workflows/v9.0.0) (2026-05-28)
+
+
+### ⚠ BREAKING CHANGES
+
+* **ci:** use `package_json_file` in `pnpm/action-setup` ([#752](https://github.com/grafana/plugin-ci-workflows/issues/752))
+
+### 🎉 Features
+
+* **ci:** use `package_json_file` in `pnpm/action-setup` ([#752](https://github.com/grafana/plugin-ci-workflows/issues/752)) ([919febd](https://github.com/grafana/plugin-ci-workflows/commit/919febdc1eca10453811eaeeab304c35f99fc28f))
+* **playwright:** add max-parallel and customizable timeouts, add docker logs on Grafana startup failure ([#711](https://github.com/grafana/plugin-ci-workflows/issues/711)) ([a879e03](https://github.com/grafana/plugin-ci-workflows/commit/a879e03d59ec00233a141273ad7d10d0fbbff526))
+
+
+### 🔧 Chores
+
+* **deps:** update default Go version to 1.26 ([#745](https://github.com/grafana/plugin-ci-workflows/issues/745)) ([2ba6cdd](https://github.com/grafana/plugin-ci-workflows/commit/2ba6cdd6b3dafd2053500b64ff19951dadf1e208))
+* **security:** test plugins: harden security and update packages ([#746](https://github.com/grafana/plugin-ci-workflows/issues/746)) ([1215545](https://github.com/grafana/plugin-ci-workflows/commit/1215545ec6ab4d35f9a0cd7d1e4ba10cd7de93d6))
+
 ## [8.0.1](https://github.com/grafana/plugin-ci-workflows/compare/ci-cd-workflows/v8.0.0...ci-cd-workflows/v8.0.1) (2026-05-22)
 
 

.github/workflows/cd.yml

@@ -776,7 +776,7 @@ jobs:
 
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v9.0.0
     needs:
       - setup
     with:
@@ -995,7 +995,7 @@ jobs:
 
       - name: Check and create stub
         id: check-and-create-stub
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-and-create-stub@ci-cd-workflows/v9.0.0
         if: ${{ matrix.environment != 'prod' && matrix.environment != 'prod-canary' }}
         with:
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
@@ -1005,13 +1005,13 @@ jobs:
 
       - name: Check artifact ZIP(s)
         id: check-artifact-zips
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts@ci-cd-workflows/v9.0.0
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           plugin-id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
 
       - name: Publish to catalog
-        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@main
+        uses: grafana/plugin-ci-workflows/actions/plugins/publish/publish@ci-cd-workflows/v9.0.0
         with:
           zips: ${{ needs.upload-to-gcs-release.outputs.gcs-zip-urls }}
           environment: ${{ matrix.environment == 'prod-canary' && 'prod' || matrix.environment }}
@@ -1328,7 +1328,7 @@ jobs:
           permission_set: website-docs
 
       - name: Publish docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/publish@ci-cd-workflows/v9.0.0
         with:
           id: ${{ fromJSON(needs.ci.outputs.plugin).id }}
           version: ${{ fromJSON(needs.ci.outputs.plugin).version }}
@@ -1377,7 +1377,7 @@ jobs:
 
       - name: Parse changelog
         id: changelog
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/changelog@ci-cd-workflows/v9.0.0
         with:
           changelog-path: ${{ inputs.plugin-directory }}/CHANGELOG.md
 

.github/workflows/ci.yml

@@ -376,7 +376,7 @@ env:
 jobs:
   check-for-release-channel:
     name: Check for release channel
-    uses: grafana/plugin-ci-workflows/.github/workflows/check-release-channel.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/check-release-channel.yml@ci-cd-workflows/v9.0.0
     with:
       DO-NOT-USE-allow-pinned-commit-hashes: ${{ inputs.DO-NOT-USE-allow-pinned-commit-hashes }}
 
@@ -483,7 +483,7 @@ jobs:
 
       - name: Setup
         id: setup
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@ci-cd-workflows/v9.0.0
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           node-version: ${{ fromJson(steps.tooling-versions.outputs.result).nodeVersion }}
@@ -554,7 +554,7 @@ jobs:
 
       - name: Test and build frontend
         id: frontend
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/frontend@ci-cd-workflows/v9.0.0
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           secrets: ${{ (fromJson(steps.workflow-context.outputs.result).isTrusted && inputs.frontend-secrets != '') && inputs.frontend-secrets || '' }}
@@ -563,7 +563,7 @@ jobs:
       - name: Test and build backend
         id: backend
         if: ${{ steps.check-for-backend.outputs.has-backend == 'true' }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/backend@ci-cd-workflows/v9.0.0
         with:
           github-token: ${{ steps.generate-github-token.outputs.token || '' }}
           plugin-directory: ${{ inputs.plugin-directory }}
@@ -572,7 +572,7 @@ jobs:
 
       - name: Package universal ZIP
         id: universal-zip
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@ci-cd-workflows/v9.0.0
         with:
           universal: "true"
           dist-folder: ${{ inputs.plugin-directory }}/dist
@@ -583,7 +583,7 @@ jobs:
 
       - name: Package os/arch ZIPs
         id: os-arch-zips
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/package@ci-cd-workflows/v9.0.0
         with:
           universal: "false"
           dist-folder: ${{ inputs.plugin-directory }}/dist
@@ -594,7 +594,7 @@ jobs:
 
       - name: Trufflehog secrets scanning
         if: ${{ inputs.run-trufflehog == true }}
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/trufflehog@ci-cd-workflows/v9.0.0
         with:
           trufflehog-version: ${{ inputs.trufflehog-version || env.DEFAULT_TRUFFLEHOG_VERSION }}
           folder: ${{ inputs.plugin-directory }}/dist-artifacts
@@ -741,11 +741,11 @@ jobs:
         shell: bash
 
       - name: Test docs
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/docs/test@ci-cd-workflows/v9.0.0
 
   playwright:
     name: Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright.yml@ci-cd-workflows/v9.0.0
     if: ${{ inputs.run-playwright == true }}
     needs:
       - test-and-build
@@ -772,7 +772,7 @@ jobs:
 
   playwright-docker:
     name: Plugins - Dockerized Playwright E2E tests
-    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@main
+    uses: grafana/plugin-ci-workflows/.github/workflows/playwright-docker.yml@ci-cd-workflows/v9.0.0
     if: ${{ inputs.run-playwright-docker == true }}
     needs:
       - test-and-build

.github/workflows/playwright-docker.yml

@@ -193,6 +193,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@ci-cd-workflows/v9.0.0
         with:
           results: ${{ needs.playwright-tests.result }}

.github/workflows/playwright.yml

@@ -148,7 +148,7 @@ jobs:
 
       - name: Setup
         id: setup
-        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@main
+        uses: grafana/plugin-ci-workflows/actions/internal/plugins/setup@ci-cd-workflows/v9.0.0
         with:
           plugin-directory: ${{ inputs.plugin-directory }}
           node-version: ${{ inputs.node-version }}
@@ -315,6 +315,6 @@ jobs:
     if: always()
     steps:
       - name: Check matrix job status
-        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@main
+        uses: grafana/plugin-ci-workflows/actions/internal/check-matrix-status@ci-cd-workflows/v9.0.0
         with:
           results: ${{ needs.playwright-tests.result }}

.release-please-manifest.json

@@ -1,6 +1,6 @@
 {
   "actions/plugins/publish/publish": "2.0.1",
-  ".": "8.0.1",
+  ".": "9.0.0",
   "actions/plugins/version-bump-changelog": "2.0.0",
   "actions/plugins/publish/change-plugin-scope": "1.0.0",
   "actions/plugins/release-please": "2.0.1",

examples/base/provisioned-plugin-auto-cd/publish.yaml

@@ -32,7 +32,7 @@ permissions: {}
 jobs:
   cd:
     name: CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v8.0.1
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v9.0.0
     permissions:
       contents: write
       pull-requests: read

examples/base/provisioned-plugin-auto-cd/push.yaml

@@ -17,7 +17,7 @@ permissions: {}
 jobs:
   cd:
     name: CI / CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v8.0.1
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v9.0.0
     permissions:
       contents: write
       pull-requests: read

examples/base/provisioned-plugin-manual-deployment/publish.yaml

@@ -32,7 +32,7 @@ permissions: {}
 jobs:
   cd:
     name: CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v8.0.1
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v9.0.0
     permissions:
       contents: write
       pull-requests: read

examples/base/provisioned-plugin-manual-deployment/push.yaml

@@ -17,7 +17,7 @@ permissions: {}
 jobs:
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v8.0.1
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v9.0.0
     permissions:
       contents: read
       id-token: write