Changelog

1.0.5 (2026-11-09)

README: the Install section is removed, as the Grafana review of 1.0.4 asked; the plugin catalog page has its own Installation tab. No change to code, queries, settings or variables.

An API key is required. Anonymous access is no longer supported: the endoflife.ai API answers data requests only with a valid key from November 16, 2026, and the plugin now requires one at all times. A free key does not expire.
Save & test reports an authentication error whenever the API answers as anonymous, meaning no key is set or the key is not recognised. This includes provisioned data sources, so the result comes from the API's answer, not from the settings page. It reports success only for a valid key, with the key's tier and allowance.
The settings page marks the key as required. The settings text, the key placeholder, the screenshot caption and the README provisioning example now say a key is required.
Signed with a Grafana plugin signature.
No change to queries, frames or variables.

Plugin manifest links: the licence link is now named "License (End-User License Agreement)" and a Support link (https://endoflife.ai/contact) is added, as the Grafana plugin checks require. No change to queries, frames, settings or variables.

Save & test now returns an error when a saved API key is not recognised by the API (the API answers as anonymous). It returns success only when the key is valid or when no key is set, and says which. Found in the Grafana Marketplace review of 1.0.1.
The data source settings carry a non-secret flag recording whether a key is saved, so the test can tell "no key" from "wrong key"; the key itself is still stored encrypted and never sent to the browser. Existing installs pick the flag up the next time the key is saved or cleared.
No change to queries, frames or variables.

No functional change: the plugin queries, settings and output are the same as 1.0.0.
Build dependencies: two high-severity advisories cleared from the development toolchain. basic-ftp is pinned to 6.2.3 or later (CVE-2026-102990, reached only through the signing tool), and braces (CVE-2026-93687, no patched release) is no longer installed: the test runner moves to Jest 30 and the watch-mode lint plugin is dropped from the build configuration (linting itself is unchanged). source-map-js is pinned to 1.2.2 or later for a further advisory. None of these packages is bundled into the shipped plugin code.
Documentation: build and test steps and sample API outputs move from README.md to DEVELOPMENT.md; README.md keeps the user documentation.

First Marketplace release. Version score, Product versions and Batch query types, template variable queries, optional API key sent through the Grafana data proxy (never exposed to the browser), EULA and privacy note shipped in the package and linked from the plugin manifest.
Licence: the plugin is proprietary and licensed under the End-User Licence Agreement (EULA.md); the MIT licence file carried over from the 0.1 development build is replaced. README rewritten for the catalog.

First working version: Version score, Product versions and Batch query types, template variable queries, optional API key through the Grafana data proxy.