chore(deps): update grafana/plugin-ci-workflows/ci-cd-workflows action to v6.0.0

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change	Pending
grafana/plugin-ci-workflows	action	major	ci-cd-workflows/v5.1.0 → ci-cd-workflows/v6.0.0	ci-cd-workflows/v6.1.0

---

Release Notes

grafana/plugin-ci-workflows (grafana/plugin-ci-workflows)

vci-cd-workflows/v6.0.0: ci-cd-workflows: v6.0.0

Compare Source

⚠ BREAKING CHANGES

• playwright: remove version and image arguments (#​507)

GRAFANA_VERSION and GRAFANA_IMAGE aren't being passed to Playwright anymore.

For consumers of the shared workflows that wants to detect Grafana version within plugin-e2e tests, there's an alternative approach using the official API:

test('should be possible to enable advanced mode', async ({ grafanaVersion, alertRuleEditPage }) => {
   test.skip(semver.lt(grafanaVersion, '11.6.0'), 'Advanced mode is not supported in Grafana versions < 11.6.0');
   // test code
});

---

• cd: allow releasing to prod from non-main branches (#​378)

Calls to cd.yml must be adjusted to include an additional permission: pull-requests: read, otherwise the workflow will fail with the following error:

Invalid workflow file: ...
The workflow is not valid. .github/workflows/publish.yaml (...): Error calling workflow 'grafana/plugin-ci-workflows/.github/workflows/cd.yml@.... The workflow is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'.

Example on the required changes to cd.yml:

jobs:
  cd:
    name: CD
    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
    permissions:
      contents: write
+     pull-requests: read
      id-token: write
      attestations: write

---

🎉 Features

• cd: allow releasing to prod from non-main branches (#​378) (e1cf5f6)
• ci: add warning when ci and cd workflows are not on the same reference (#​492) (4e9ca04)
• ci: support react image in e2e matrix (#​496) (6d8cb8c)
• playwright: remove version and image arguments (#​507) (f70e822)

✅ Tests

• act: add gcom mock, cd.yml changes for testing (#​501) (e3f1779)
• act: fix validator tests (#​506) (3c93dda)

🔧 Chores

• ci: run golangci-lint on internal go packages (#​485) (303148f)
• deps: update actions/attest-build-provenance action to v3.1.0 (#​484) (ba9c56e)
• deps: update actions/cache action to v5 (#​481) (3eaee5a)
• deps: update stefanzweifel/git-auto-commit-action action to v7.1.0 (#​483) (f9a22aa)
• deps: update step-security/harden-runner action to v2.14.0 (#​477) (cdab179)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.