Spet2026 (#229)

* fix: resolve React hooks warnings, memoize projects, and fix Go proto marshaling

* fix issue #221

* fix for #212

* fix issue #202

* address submission issues

Author: xiangshen-dk

CHANGELOG.md

@@ -6,6 +6,8 @@
 * Fix the query variable editor getting stuck on "Loading..." ([#212](https://github.com/GoogleCloudPlatform/cloud-logging-data-source-plugin/issues/212)). The editor no longer fetches buckets for an empty project or lists projects before they are needed; option lists load per scope, failures are shown inline instead of freezing the editor, and variable query errors (for example a disabled Cloud Resource Manager API) now surface in Grafana instead of silently producing no values. Selecting a scope is saved immediately
 * Fix an empty query text producing an unparseable filter (a leading `AND`); the time range alone is sent instead
 * Fix JWT authentication failing with "An error occurred within the plugin" when the data source is provisioned (YAML, Terraform, environment variables) and the private key contains literal `\n` escape sequences instead of line breaks ([#76](https://github.com/GoogleCloudPlatform/cloud-logging-data-source-plugin/issues/76), [#202](https://github.com/GoogleCloudPlatform/cloud-logging-data-source-plugin/issues/202)). The key is now read the same way as in the Google Cloud Monitoring data source, which also adds support for `privateKeyPath`. A key that still fails to parse produces an explanatory error instead of a generic one
+* Update golang.org/x/crypto to v0.56.0 to address GO-2026-6303, GO-2026-6354 and GO-2026-6355 flagged by govulncheck in the Grafana plugin review. The remaining GO-2026-5932 advisory concerns the unmaintained `openpgp` package, which this plugin does not use and which has no fixed version
+* README: link to public documentation for enabling the Cloud Resource Manager API and add the equivalent `gcloud` command
 
 ## 1.7.2 (2026-08-17)
 * Update dependencies to address security vulnerabilities flagged by the Grafana plugin review: js-yaml (CVE-2026-59869) and nanoid (CVE-2026-67213) in the frontend build toolchain

README.md

@@ -15,9 +15,17 @@ You need to enable the resource manager API. Otherwise, your cloud projects will
 
 You can follow the steps to enable it:
 
-1. Navigate to the [cloud resource manager API page](https://console.cloud.google.com/apis/library/cloudresourcemanager.googleapis.com) in GCP and select your project
+1. In the Google Cloud console, open **APIs & Services > Library**, select your project and search for **Cloud Resource Manager API**
 2. Press the `Enable` button
 
+Alternatively, enable it from the command line:
+
+```sh
+gcloud services enable cloudresourcemanager.googleapis.com --project=<your-project-id>
+```
+
+See [Enabling and disabling services](https://cloud.google.com/service-usage/docs/enable-disable) for details.
+
 ### Generate a JWT file & Assign IAM Permissions
 
 1. If you don't have a GCP project, add a new GCP project [here](https://cloud.google.com/resource-manager/docs/creating-managing-projects#console)

go.mod

@@ -99,12 +99,12 @@ require (
 	go.opentelemetry.io/otel/trace v1.44.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.54.0 // indirect
+	golang.org/x/crypto v0.56.0 // indirect
 	golang.org/x/exp v0.0.0-20260112195511-716be5621a96 // indirect
 	golang.org/x/net v0.57.0 // indirect
 	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/text v0.40.0 // indirect
+	golang.org/x/text v0.41.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260720211330-0afa2a65878a // indirect
 	google.golang.org/grpc v1.83.1 // indirect

go.sum

@@ -266,8 +266,8 @@ go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=
-golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk=
+golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y=
+golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I=
 golang.org/x/exp v0.0.0-20260112195511-716be5621a96 h1:Z/6YuSHTLOHfNFdb8zVZomZr7cqNgTJvA8+Qz75D8gU=
 golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
@@ -298,8 +298,8 @@ golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
 golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs=
-golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
+golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=