chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v5.1.0

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
grafana/plugin-ci-workflows	action	major	ci-cd-workflows/v4.3.0 → ci-cd-workflows/v5.1.0

---

Release Notes

grafana/plugin-ci-workflows (grafana/plugin-ci-workflows)

vci-cd-workflows/v5.1.0: ci-cd-workflows: v5.1.0

Compare Source

🎉 Features

• ci: setup Go version from go.mod if possible (#​465) (5d5ab0a)

🐛 Bug Fixes

• tests: fix act checkout in pull_request events (#​463) (56388a7)

⚡ Performance Improvements

• ci: cache mage, Trufflehog and golangci-lint binaries (#​467) (b736834)

✅ Tests

• act: add plugin-validator tests (#​457) (82db8bf)

🔧 Chores

• deps: update actions/create-github-app-token action to v2.2.1 (#​475) (eeaa07a)
• deps: update actions/setup-node action to v6 (#​362) (69022ab)
• deps: update peter-evans/create-pull-request action to v8 (#​478) (8f4d6ea)
• main: release plugins-frontend-e2e-against-stack 1.0.1 (#​432) (d3ca365)

vci-cd-workflows/v5.0.0: ci-cd-workflows: v5.0.0

Compare Source

⚠ BREAKING CHANGES

• ci: universal-zip-url-* outputs are now URLs rather than paths
• deps: Update default Node version to 24 LTS (#​439)
• deps: Update default golangci-lint version to 2.7.2 (#​439)
• deps: Update default Go version to 1.25 (#​439)
• ci: use pm-detect to understand nodejs package manager (#​204)

---

The package-manager input has been removed from ci.yml. If you were using it, please remove it from your workflow. The correct package manager will now be detected automatically from the plugin's source code. Supported package managers are npm, yarn and pnpm.

---

golangci-lint has been bumped from v1 to v2 in order to support Go 1.25. The config file format for golangci-lint has changed and has to be migrated. Please follow golangci-lint's migration guide for more information. If you want to revert to Go 1.24 and golangci-lint v1, add the following to both your CI and your CD workflows:

inputs:
  go-version: "1.24"
  golangci-lint-version: "1.64.8"

🎉 Features

• ci: use pm-detect to understand nodejs package manager (#​204) (e739fbe)

🐛 Bug Fixes

• ci: universal-zip-url-* outputs are now URLs rather than paths (b5e3ec2)
• ci: do not copy backend into the "dist" folder (b5e3ec2)
• use local exec for playwright test (#​451) (b27d62d)

✅ Tests

• act: add pre-generated dist mockdata for test plugins (#​417) (cb33db6)
• add concurrency to pr-checks-test-ci workflow (630b056)
• pin actions in pr-checks-test-ci workflow (630b056)
• run smoke tests with act (#​389) (0f2f7c6)
• use local repository for release please manifest tag when running act (630b056)

🔧 Chores

• build and package plugin in its directory, better support for artifact prefix (#​438) (dbbcc52)
• deps: update actions/checkout action to v5.0.1 (#​413) (8c591cd)
• deps: update actions/checkout action to v6 (#​437) (949a63c)
• deps: update actions/checkout action to v6.0.1 (#​455) (aec5016)
• deps: update actions/create-github-app-token action to v2.2.0 (#​435) (5b2407c)
• deps: update actions/setup-go action to v6.1.0 (#​436) (5f5e089)
• deps: Update default Go version to 1.25 (b1f1b22)
• deps: Update default golangci-lint version to 2.7.2 (b1f1b22)
• deps: Update default Node version to 24 LTS (b1f1b22)
• deps: update grafana/shared-workflows/trigger-argo-workflow action to v1.2.1 (#​433) (6c260c0)
• deps: update peter-evans/create-pull-request action to v7.0.9 (#​434) (55c4108)
• deps: update pnpm/action-setup action to v4.2.0 (#​450) (5fbf8e6)
• deps: update softprops/action-gh-release action to v2.5.0 (#​452) (48548e8)
• deps: update step-security/harden-runner action to v2.13.3 (#​456) (fccf74b)
• main: release plugins-frontend-e2e-against-stack 1.0.0 (#​430) (6443ba2)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.