Merge remote-tracking branch 'origin/main' into korniltsev/frontend-vibe-coding

Author: korniltsev

.github/workflows/backport.yml

@@ -0,0 +1,56 @@
+name: Backport PR Creator
+on:
+  pull_request:
+    types:
+      - closed
+      - labeled
+
+jobs:
+  main:
+    # We don't run the backporting for PRs from forks because those can't access "pyroscope-development-app" secrets in vault.
+    # We don't use GitHub actions app (secrets.GITHUB_TOKEN) because PRs created by the bot don't trigger CI.
+    # Also only run if the PR is merged, as an extra safe-guard.
+    if: ${{ ! github.event.pull_request.head.repo.fork && github.event.pull_request.merged == true }}
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: "read"
+      id-token: "write"
+      pull-requests: "write"
+    steps:
+      - name: Checkout Actions
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          repository: "grafana/grafana-github-actions"
+          persist-credentials: false
+          path: ./actions
+          ref: 066cbcd084b61558d99d13c76f835c49e31b4670
+
+      - name: Install Actions
+        run: npm install --production --prefix ./actions
+
+      - id: get-secrets
+        uses: grafana/shared-workflows/actions/get-vault-secrets@28361cdb22223e5f1e34358c86c20908e7248760
+        with:
+          repo_secrets: |
+            GITHUB_APP_ID=pyroscope-development-app:app-id
+            GITHUB_APP_PRIVATE_KEY=pyroscope-development-app:private-key
+
+      - name: Generate token
+        id: app-token
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        with:
+          app-id: ${{ env.GITHUB_APP_ID }}
+          private-key: ${{ env.GITHUB_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: |
+            pyroscope
+
+      - name: Run backport
+        uses: ./actions/backport
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          labelsToAdd: backport
+          # The provided token needs read permissions for organization members if you want to remove the default reviewers.
+          removeDefaultReviewers: false
+          title: "[{{base}}] {{originalTitle}}"

.github/workflows/e2e.yaml

@@ -12,6 +12,9 @@ concurrency:
   cancel-in-progress: true
 permissions:
   contents: read
+env:
+  LANG: en_US.UTF-8
+  LC_ALL: en_US.UTF-8
 jobs:
   regular-path:
     strategy:
@@ -40,7 +43,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev
       - run: make build
       - name: Cypress run
-        uses: cypress-io/github-action@108b8684ae52e735ff7891524cbffbcd4be5b19f # v6.7.16
+        uses: cypress-io/github-action@b8ba51a856ba5f4c15cf39007636d4ab04f23e3c # v6.10.2
         with:
           wait-on: http://localhost:4040/ready
           start: make run
@@ -74,7 +77,7 @@ jobs:
       - name: run nginx with /foobar/
         run: docker compose -f scripts/base-url/docker-compose.yaml up -d
       - name: Cypress run
-        uses: cypress-io/github-action@108b8684ae52e735ff7891524cbffbcd4be5b19f # v6.7.16
+        uses: cypress-io/github-action@b8ba51a856ba5f4c15cf39007636d4ab04f23e3c # v6.10.2
         with:
           wait-on: http://localhost:8080/foobar/ready
           start: |

.github/workflows_disabled/backport.yml

@@ -366,7 +366,7 @@ $(BIN)/mage: Makefile go.mod
 
 $(BIN)/mockery: Makefile go.mod
 	@mkdir -p $(@D)
-	GOBIN=$(abspath $(@D)) $(GO) install github.com/vektra/mockery/v2@v2.45.0
+	GOBIN=$(abspath $(@D)) $(GO) install github.com/vektra/mockery/v2@v2.53.4
 
 # Note: When updating the goreleaser version also update .github/workflow/release.yml and .git/workflow/weekly-release.yaml
 $(BIN)/goreleaser: Makefile go.mod