Shipped · Observability

What perses/perses shipped

The public repository of Perses · github.com/perses/perses

Written by FoxPlug from the repository's own releases; not affiliated with Perses. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/perses/perses; Perses did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for perses, free

Week of November 2, 2026

What shipped

Why it matters

This week ships a patch release that tightens which URL schemes dashboard and panel links may use, which changes behavior for dashboards that relied on other schemes. Admins also gain a cap on ephemeral dashboard lifetimes, and several percli login and config bugs are fixed. The perses/common v0.32.0 upgrade renames HTTP metrics, so anyone scraping them should check their setup.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Perses 0.55.1 is out: dashboard, panel, table and trace panel links now only allow relative URLs and an allowlist of schemes. Also this week: admins can cap ephemeral dashboard TTL, percli whoami accepts the Kubernetes login, and perses/common v0.32.0 renames HTTP metrics.

Post for LinkedIn

Perses 0.55.1 is released. Dashboard links, panel links, table data links and trace panel links are now restricted to relative URLs and an allowlist of schemes, so dashboards using another scheme will need updating. Also this week: admins can set an optional max_ttl for ephemeral dashboards, percli whoami accepts the Kubernetes login, percli reports unreadable config files instead of ignoring them, the search bar regression from the redesign is fixed, and OIDC/OAuth login keeps api_prefix in the redirect path. The upgrade to perses/common v0.32.0 renames HTTP metrics, so check your scraping setup.

Week of October 26, 2026

What shipped

Why it matters

This week covers the CLI and API needed to validate dashboards offline: the schema endpoints, the matching client methods, percli schema get and a lint --schema mode. Several fixes improve day-to-day use: the search bar reports API errors and hides resources it cannot list, datasource changes refresh every project, and percli delete accepts a directory. The UI moves to React 19 as a breaking change.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: UI on React 19, new percli schema get command, lint --schema for offline dashboard validation, and schema methods in the Go client. Fixes in the search bar, datasource refreshing and percli delete.

Post for LinkedIn

This week in Perses: the UI now runs on React 19, with published packages and plugins still supporting React 18. Dashboard schema work landed for offline validation: the schema endpoints, matching Go client methods, a percli schema get command and a --schema flag for percli lint. The search bar now shows API errors and skips resources that cannot be listed, datasource changes refresh the lists of all projects, and percli delete supports the --directory flag.

Week of October 12, 2026

What shipped

Why it matters

This week brought release candidate 0.55.0-rc.1 with several fixes: CUE dependencies are downloaded before vendoring in percli plugin builds, the variable display field is now optional, and default queries are added on the plugin side. The search bar also received a general improvement, the release branch was merged back into main, and a CI lint failure affecting open pull requests was resolved.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

0.55.0-rc.1 is out: percli plugin build now downloads all CUE deps before vendoring, variable display is optional, and default queries move to the plugin side. Search bar improvements landed, and a lint failure hitting all open PRs is fixed.

Post for LinkedIn

Release candidate 0.55.0-rc.1 is available this week. It fixes percli plugin builds so all CUE dependencies are downloaded before vendoring, makes the variable display field optional with omitempty, and removes the useEffect for adding default queries since that is now handled on the plugin side. The search bar received a general improvement, release v0.55 was merged back into main to resolve conflicts, the spec, shared and plugins modules were bumped, and a go lint failure that affected all open pull requests was fixed.

Week of October 5, 2026

What shipped

Why it matters

This week brings a breaking configuration change and a security tightening around what the datasource proxy can reach and what headers it returns, so upgrades need attention. Dashboard duplication across projects and a Grafana migration that preserves time range, refresh interval and timezone make day to day dashboard work easier. The Go SDK also gains annotation support and a simpler datasource selector constructor.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

0.55 work this week: datasource proxy targets are validated to prevent SSRF, caller credentials are no longer forwarded, and encryption_key is required when auth is enabled. Dashboards can be duplicated into another project, Grafana migration keeps time range, refresh interval an

Post for LinkedIn

This week's 0.55 work touches configuration, proxy security and dashboards. The datasource proxy now validates its targets to prevent SSRF, no longer forwards the credentials the client uses against Perses to the datasource, and its response headers are hardened. Also breaking: when auth is enabled, encryption_key must be provided. Dashboards can now be duplicated into another project where you can create dashboards. Grafana migration keeps the default time range, refresh interval and timezone instead of always using one hour. The Go SDK gains an annotation package and a NewSelector convenience constructor for datasource options.

Week of September 28, 2026

What shipped

Why it matters

This week includes the 0.55.0-beta.4 release addressing multiple production concerns: SQL proxy security fixes prevent datasource TLS leaks and unintended data exports, HTTP handling improvements reduce resource waste through connection reuse and timeout bounds, and file database atomicity prevents data corruption from concurrent access.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

0.55.0-beta.4 released: SQL proxy security fixes, bounded HTTP timeouts, connection reuse per datasource, atomic file database writes, and improved plugin extraction performance.

Post for LinkedIn

Perses 0.55.0-beta.4 is out with critical security and performance improvements. SQL proxy now properly isolates TLS configs between datasources and rejects unintended data exports. HTTP proxy reuses connections and enforces configurable timeouts to prevent resource exhaustion. File database writes are atomic, and plugin extraction skips already-processed archives. See the release notes for complete details.

Week of September 21, 2026

What shipped

Why it matters

Closes a security vulnerability allowing file exfiltration through secrets. directly addresses startup performance complaints. Several bugfixes improve reliability with mixed permissions and identity providers.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V0.55.0-beta.3 shipped: faster plugin loading with concurrent extraction, improved caching for static assets, tighter security on file references in secrets, and better validation for wildcard permissions.

Post for LinkedIn

V0.55.0-beta.3 is out with security improvements, performance gains, and reliability fixes. Plugin archives now extract in parallel for faster startup. Secrets are restricted to allowed directories, preventing file exfiltration. Static asset caching is improved. Wildcard permissions mixed with specific project access are properly validated. User names from Kubernetes and OIDC are safely decoded.

Week of September 14, 2026

What shipped

Why it matters

This week delivers several usability improvements including dashboard lock mode, better tab navigation, and configurable refresh intervals. Authentication and deployment flexibility are enhanced through OIDC custom properties and improved terminal detection. Bug fixes address query parameter preservation and HTTP error handling.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V0.55.0-beta.2 prep: dashboard lock mode, new tab opening, configurable refresh intervals, OIDC custom login properties, and improved caching for static assets.

Post for LinkedIn

This week's updates to Perses bring meaningful improvements to dashboard management and deployment flexibility. Dashboard lock mode prevents accidental modifications, tabs now open in new windows, and users can configure custom refresh intervals. Authentication gains flexibility with OIDC custom login property support, while static asset caching and query parameter preservation improve overall performance and reliability.

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-10.

Is this your repo? Ask us to remove this page.