CircleCI: Update grabpl to 0.4.5 in order to include manifest with GEL (#24577)

* CircleCI: Update grabpl to 0.4.5
* GEL: Upgrade version

.circleci/config.yml

@@ -54,7 +54,7 @@ commands:
       - run:
       - run:
           name: "Install Grafana build pipeline tool"
           name: "Install Grafana build pipeline tool"
           command: |
           command: |
-            VERSION=0.4.4
+            VERSION=0.4.5
             curl -fLO https://grafana-downloads.storage.googleapis.com/grafana-build-pipeline/v${VERSION}/grabpl
             curl -fLO https://grafana-downloads.storage.googleapis.com/grafana-build-pipeline/v${VERSION}/grabpl
             chmod +x grabpl
             chmod +x grabpl
             mv grabpl /tmp
             mv grabpl /tmp
@@ -398,19 +398,25 @@ jobs:
               source scripts/build/gpg-test-vars.sh
               source scripts/build/gpg-test-vars.sh
             fi
             fi
 
 
+            # Necessary for signing bundled plugins
+            export GRAFANA_API_KEY=$GRAFANA_COM_API_KEY
             if [[ -n $CIRCLE_TAG ]]; then
             if [[ -n $CIRCLE_TAG ]]; then
               # A release build
               # A release build
-              /tmp/grabpl package --jobs 2 --edition oss $CIRCLE_TAG
+              /tmp/grabpl package --jobs 2 --edition oss --sign $CIRCLE_TAG
             elif [[ $CIRCLE_BRANCH == "chore/test-release-pipeline" ]]; then
             elif [[ $CIRCLE_BRANCH == "chore/test-release-pipeline" ]]; then
               # We're testing the release pipeline
               # We're testing the release pipeline
-              /tmp/grabpl package --jobs 2 --edition oss v6.7.0-beta1
+              /tmp/grabpl package --jobs 2 --edition oss --sign v6.7.0-beta1
             elif [[ $CIRCLE_BRANCH == "master" ]]; then
             elif [[ $CIRCLE_BRANCH == "master" ]]; then
               # A master build
               # A master build
-              /tmp/grabpl package --jobs 2 --edition oss --build-id $CIRCLE_WORKFLOW_ID
-            else
-              # A PR build
+              /tmp/grabpl package --jobs 2 --edition oss --sign --build-id $CIRCLE_WORKFLOW_ID
+            elif [[ -n "$CIRCLE_PR_NUMBER" ]]; then
+              # A forked forked PR build, don't sign as it requires an API secret
               /tmp/grabpl package --jobs 2 --edition oss --build-id $CIRCLE_WORKFLOW_ID --variants \
               /tmp/grabpl package --jobs 2 --edition oss --build-id $CIRCLE_WORKFLOW_ID --variants \
                 linux-x64,linux-x64-musl,osx64,win64
                 linux-x64,linux-x64-musl,osx64,win64
+            else
+              # A non-forked PR build
+              /tmp/grabpl package --jobs 2 --edition oss --sign --build-id $CIRCLE_WORKFLOW_ID --variants \
+                linux-x64,linux-x64-musl,osx64,win64
             fi
             fi
       - run:
       - run:
           name: Move artifacts
           name: Move artifacts
@@ -453,18 +459,25 @@ jobs:
       - run:
       - run:
           name: Package Grafana
           name: Package Grafana
           command: |
           command: |
+            # Necessary for signing bundled plugins
+            export GRAFANA_API_KEY=$GRAFANA_COM_API_KEY
+
             if [[ -n $CIRCLE_TAG ]]; then
             if [[ -n $CIRCLE_TAG ]]; then
               # A release build
               # A release build
-              /tmp/grabpl package --jobs 2 --edition enterprise $CIRCLE_TAG
+              /tmp/grabpl package --jobs 2 --edition enterprise --sign $CIRCLE_TAG
             elif [[ $CIRCLE_BRANCH == "chore/test-release-pipeline" ]]; then
             elif [[ $CIRCLE_BRANCH == "chore/test-release-pipeline" ]]; then
               # We're testing the release pipeline
               # We're testing the release pipeline
-              /tmp/grabpl package --jobs 2 --edition enterprise v6.7.0-beta1
+              /tmp/grabpl package --jobs 2 --edition enterprise --sign v6.7.0-beta1
             elif [[ $CIRCLE_BRANCH == "master" ]]; then
             elif [[ $CIRCLE_BRANCH == "master" ]]; then
               # A master build
               # A master build
-              /tmp/grabpl package --jobs 2 --edition enterprise --build-id $CIRCLE_WORKFLOW_ID
+              /tmp/grabpl package --jobs 2 --edition enterprise --sign --build-id $CIRCLE_WORKFLOW_ID
+            elif [[ -n "$CIRCLE_PR_NUMBER" ]]; then
+              # A forked forked PR build, don't sign as it requires an API secret
+              /tmp/grabpl package --jobs 2 --edition enterprise --build-id $CIRCLE_WORKFLOW_ID --variants \
+                linux-x64,linux-x64-musl,osx64,win64
             else
             else
               # A PR build
               # A PR build
-              /tmp/grabpl package --jobs 2 --edition enterprise --build-id $CIRCLE_WORKFLOW_ID --variants \
+              /tmp/grabpl package --jobs 2 --edition enterprise --sign --build-id $CIRCLE_WORKFLOW_ID --variants \
                 linux-x64,linux-x64-musl,osx64,win64
                 linux-x64,linux-x64-musl,osx64,win64
             fi
             fi
       - run:
       - run:

plugins-bundled/external.json

@@ -2,8 +2,8 @@
   "plugins": [
   "plugins": [
     {
     {
       "name": "gel",
       "name": "gel",
-      "version": "0.2.0",
-      "checksum": "059e06b927ab5ff0d75a1719a0a669ca3502b9a130f54261b196f4b23b775a61"
+      "version": "0.6.0",
+      "checksum": "eeab73565b0f167d3d576dc6da86d53419bff5bbb2ea927fae1cc2fe4b52f55f"
     }
     }
   ]
   ]
 }
 }