Any plans for upgrading to Grafana 9?
Closed this issue · 8 comments
Hi there,
are there any plans for upgrading this prometheus-boshrelease to a newer grafana version (e.g. version 9) or will this repo stay on the grafana 7.x.y version?
Thanks!
Hi @nrekretep ,
I myself am not quite sure about if we can use that new grafana version (due to the new license) in here, that is the reason I did not bump it so far.
:-/
thank you for answering my question. The licensing of open source software still seems to be uncertain territory especially when it comes to AGPLv3.
There is a blog post with Q&A about the license change (https://grafana.com/blog/2021/04/20/qa-with-our-ceo-on-relicensing/). I am not sure if bosh-prometheus falls into the same category as the question about "Cloud Foundry", but maybe it helps to clarify things.
Hi @nrekretep ,
thanks for sharing that. I saw that blogpost when the license change was done and also the section about "Cloud Foundry" but still I am not sure. I tried to find other open sources projects that are using grafana and see if they bumped beyond v7 but wasn't able to find any. I think everyone is uncertain about that.
Grafana 7.x is now EOL and not receiving security fixes for the likes of https://grafana.com/blog/2022/09/20/grafana-security-releases-new-versions-with-moderate-severity-security-fixes-for-cve-2022-35957-and-cve-2022-36062/
That's a good point. After some searching I wasn't able to find an official EOL policy for grafana. There are some posts according to which there is a n -1 support policy.
This would mean that with the release of grafana 9.x the support for grafana 7.x has ended.
From the above mentioned cve it is hard to tell, at least for me, if there will never be any new security fixes in grafana 7.x or if this cve just does not exist in grafana 7.x and therefore does not need fixing.
But nevertheless eol of 7.x is around the corner or has already arrived and there should be a statement about how this project will handle this.
I will try to look into this issue next week. Current plan would be to release one version with Grafana 8 first and then another one with Grafana 9.
We just released a new release including Grafana8 from here we will soon proceed to Grafana9.
@nrekretep @risicle happy to announce that within v28.0.0 we bumped Grafana to v9.