* Telegraf v1.38.3 (#7126)

* Updating changelog

* Updating plugin list

* Updating product version

* Updating plugins

---------

Co-authored-by: Jason Stirnaman <jstirnaman@influxdata.com>

* chore(ci): add lockfile-lint PR check to prevent yarn.lock injection (#7114)

Add a GitHub Actions workflow that validates yarn.lock on every PR,
ensuring all resolved URLs use HTTPS and point to registry.yarnpkg.com.
Prevents lockfile injection attacks where a PR modifies resolved URLs
to fetch packages from attacker-controlled hosts.

Uses lockfile-lint@5.0.0 via npx (no new dependencies in package.json).
SHA-pinned actions, sparse checkout of yarn.lock only, least-privilege
permissions.

* chore(deps): bump dompurify from 3.3.3 to 3.4.0 (#7109)

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.3...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Release Chronograf v1.11.1 (#7105)

* Release Chronograf v1.11.1

* Update content/chronograf/v1/about_the_project/release-notes.md

Co-authored-by: Jason Stirnaman <jstirnaman@influxdata.com>

* Update content/chronograf/v1/about_the_project/release-notes.md

Co-authored-by: Jason Stirnaman <jstirnaman@influxdata.com>

* Update content/chronograf/v1/about_the_project/release-notes.md

---------

Co-authored-by: Jason Stirnaman <jstirnaman@influxdata.com>
Co-authored-by: Daniel Campbell <metalwhirlwind@gmail.com>

* feat(products): add oss_repo field for products with public repos (#7106)

Adds `oss_repo` to data/products.yml for products that have a public
GitHub repository. Each entry captures the repo name and the product's
default branch. Presence of the field indicates the product has a public
repo; absence indicates it does not (e.g., v3 Enterprise, Cloud
Dedicated, Cloud Serverless, Clustered, Enterprise v1).

This separates repo identity from `namespace`, which currently conflates
URL path / menu grouping with GitHub repo name. Templates can derive
issue, source, or release URLs from `oss_repo.name` + `oss_repo.branch`
without hardcoded product fixups.

For multi-version products (influxdb OSS v1/v2), `branch` uses a
version-keyed map consistent with other versioned fields like
`content_path` and `latest_patches`.

Groundwork for #7095 feedback-button routing redesign.

Co-authored-by: Claude <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Sven Rebhan <36194019+srebhan@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jakub Bednář <jakub.bednar@gmail.com>
Co-authored-by: Daniel Campbell <metalwhirlwind@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>