Update Helm release grafana to v12.7.1#3520
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Contributor
Triage: YELLOW -- possible breakage, reviewer requestedGrafana 13.1.0 was released the same day as this PR (June 23, 2026), and its upstream release notes are not yet published. While the chart templates are unchanged and the deployment already runs Grafana 13.0.x, the lack of documented breaking changes for the new minor version warrants a quick review before merge.
Required actions
Update summary
|
| Surface | Value |
|---|---|
| Manifest | rpi5/vm/grafana.yaml (ArgoCD Application) |
| Namespace | vm |
| Deployment strategy | Recreate |
| Persistence | PVC enabled, 5Gi, local-path StorageClass |
| initChownData | disabled (initChownData.enabled: false) |
| Admin credentials | existingSecret: grafana-admin (keys: admin-user, admin-password) |
| Plugins | victoriametrics-metrics-datasource, victoriametrics-logs-datasource |
| Datasources | VictoriaMetrics (http://vmsingle-main.vm.svc:8428), VictoriaLogs (http://vlsingle-main.vm.svc:9428) |
| Sidecar dashboards | enabled, searchNamespace: ALL, label grafana_dashboard: "1" |
| Ingress | grafana.anshulg.direct, TLS via cert-manager/letsencrypt, Traefik |
| Resources | requests: 100m CPU / 256Mi RAM; limits: 1Gi RAM |
| Image tag override | none (uses chart appVersion default: 13.1.0) |
| Sidecar image override | none (uses chart default: kiwigrid/k8s-sidecar:2.8.0) |
| grafana.ini overrides | server.domain, server.root_url |
| Feature flags | none set |
| Image Renderer | disabled |
| ServiceMonitor | disabled |
Cluster fit
- Architectures required by cluster: amd64, arm64 (rpi5)
- Architectures supported by new version:
grafana/grafana:13.1.0— confirmedlinux/amd64,linux/arm/v7,linux/arm64✅;kiwigrid/k8s-sidecar:2.8.0— not directly verified but 2.7.4 supported arm64 and this is a minor bump (low risk) - Kubernetes API versions used in manifest sources: chart templates SHA unchanged; no new API versions introduced
- Minimum K8s version stated by dep:
^1.25.0-0(unchanged between old and new chart) - Peer dependency check: cert-manager (Ingress TLS annotation present, no version constraint from chart); Traefik (Ingress class
traefik, no version constraint from chart) — both unchanged
Gaps
- Grafana 13.1.0 upgrade guide not yet published: The
upgrade-v13.1docs page returned 404 as of the PR date (June 23, 2026 — same day as the release). Breaking changes for 13.1.0 could not be verified from official documentation. Based on Grafana's stated policy (breaking changes reserved for major releases, minor releases may have small API payload changes announced in changelog/What's New), the risk is low, but the gap is noted. - kiwigrid/k8s-sidecar 2.8.0 changelog not verified: Architecture support and changelog for the sidecar bump were not directly confirmed; inferred from the minor version increment pattern.
- Grafana 13.1.0 GitHub release tag not found: The tag
v13.1.0was not present in the grafana/grafana GitHub releases at query time (the latest GitHub release wasv13.0.3). The Docker Hub image13.1.0was confirmed published. This discrepancy may indicate a release pipeline difference between GitHub tags and Docker Hub, or that 13.1.0 is a nightly/pre-release build promoted to stable. The download page atgrafana.com/grafana/download/13.1.0confirms it as a stable release dated June 23, 2026.
Upstream changelog
I now have all the information I need. The CHANGELOG confirms that Grafana 13.1.0 is not yet in the CHANGELOG (it was released on June 23, 2026, the same day as the helm chart update, but the GitHub release tag and CHANGELOG entry haven't been published yet). The chart's appVersion was bumped from 13.0.2 to 13.1.0, but the upstream Grafana 13.1.0 release notes are not yet available in the CHANGELOG.
Let me compile the complete output:
grafana (Helm Chart) 12.4.9 → 12.6.0
Summary
- Artifact type: Helm chart
- Input format: SemVer chart version
- Resolved references: Chart tags
grafana-12.4.9(commit660c1c08bf29c5440aeedb27f7236bb80efa80f0),grafana-12.5.0(commit517d46f3c036a63ff1f0d91a46b6a43a3374cb76), andgrafana-12.6.0(commit80ef7adba5c5f3c732c02bb4b64a83e9751f977a) on the grafana-community/helm-charts repository - Versions in range: 12.5.0, 12.6.0 (no pre-releases, no skipped intermediate versions)
- Source repo: grafana-community/helm-charts
- Primary sources used:
- GitHub Releases for chart version 12.5.0
- GitHub Releases for chart version 12.6.0
- Pull request Update Helm release cert-manager to v1.17.0 #627 (chart 12.5.0 update)
- Pull request Update ghcr.io/ansg191-lab/pp-tree-importer2:main Docker digest to 4bc78cb #630 (chart 12.6.0 update)
- Upstream Grafana CHANGELOG
- Grafana 13.1.0 download page
- Versioning scheme: SemVer (chart version); upstream Grafana app uses SemVer
- Major version boundary crossed: No (chart stays in 12.x; upstream Grafana app stays in 13.x, bumping from 13.0.2 → 13.1.0 — a minor bump within the already-crossed major boundary)
- Confidence: Medium — The chart changes are fully documented via pull requests and diffs. However, the upstream Grafana 13.1.0 release notes are not yet published on GitHub (no
v13.1.0tag exists; the CHANGELOG onmaindoes not yet contain a 13.1.0 section as of the research date). The Grafana download page confirms 13.1.0 was released June 23, 2026, but detailed release notes are unavailable.
Breaking Changes
None found in the Helm chart itself (both changes are pure image tag bumps with no values.yaml structural changes, no template changes, no API changes).
For the upstream Grafana app 13.0.2 → 13.1.0 bump: Grafana 13.1.0 release notes are not yet published in the upstream GitHub CHANGELOG or as a GitHub release tag. The "What's new in 13.1" documentation page does not yet exist at grafana.com/docs/grafana/latest/whatsnew/whats-new-in-v13-1/. No breaking changes can be confirmed or ruled out for this minor version bump at this time.
Other Notable Changes
Chart 12.5.0 (merged 2026-06-23):
- Bumped
appVersion(Grafana container image) from13.0.2→13.1.0(docker.io/grafana/grafana). OnlyChart.yamlwas modified (2 additions, 2 deletions).
Chart 12.6.0 (merged 2026-06-23):
- Bumped
quay.io/kiwigrid/k8s-sidecarsidecar image from2.7.4→2.8.0invalues.yaml. The k8s-sidecar 2.8.0 release adds support forppc64leandriscv64architectures and includes dependency bumps (no functional changes for existing architectures). Chart.yamlversion bumped from12.5.0→12.6.0.
Deprecations Introduced
None found in the chart range. Grafana 13.1.0 upstream deprecations unknown (release notes not yet published).
Gaps and Caveats
- Grafana 13.1.0 release notes unavailable: The upstream Grafana
v13.1.0GitHub release tag does not exist as of research time (June 23, 2026). TheCHANGELOG.mdonmainbranch does not contain a13.1.0section. The Grafana "What's new in 13.1" documentation page returns 404. The download page atgrafana.com/grafana/download/13.1.0confirms the release date as June 23, 2026, but no changelog content is accessible. This is likely a same-day release where the GitHub release and docs have not yet been published. Breaking changes in Grafana 13.1.0 cannot be assessed. - Grafana 13.0.x breaking changes (already in range): The chart's
appVersionwas already at13.0.2before this update. The major Grafana 13.0 breaking changes (Angular removal, Elasticsearch core datasource removal,grafana-cli/grafana-servercommand removal,server.enable_gzipdefault change, etc.) were introduced in the previous chart version and are not part of this update's delta. - No migration guide found at standard paths (
UPGRADING.md,MIGRATING.md) in the helm-charts repo for this range. - Both chart releases were auto-merged on the same calendar day (2026-06-23) within hours of each other, both triggered by Renovate bot.
Provenance
Perfect! Now let me check the release notes and verify the publisher information:
Based on my comprehensive analysis, I can now provide the provenance verdict:
Provenance verdict: grafana 12.4.9 → 12.6.0
Verdict
trusted
Both versions are legitimate releases from the grafana-community/helm-charts repository with proper source correspondence, consistent publisher identity, and normal release patterns. The update is a routine minor version bump that updates the underlying Grafana application and the k8s-sidecar dependency.
Resolved references
- Artifact type: Helm chart
- Old:
grafana-12.4.9(released 2026-06-22T19:01:46Z, commit660c1c08bf29c5440aeedb27f7236bb80efa80f0) - New:
grafana-12.6.0(released 2026-06-23T18:10:01Z, commit80ef7adba5c5f3c732c02bb4b64a83e9751f977a) - Declared source repo:
https://github.com/grafana-community/helm-charts(verified) - Publisher namespace:
grafana-community(old) →grafana-community(new) — same
Indicators
| Severity | Category | Finding | Evidence |
|---|---|---|---|
| info | publisher_change | Publisher identity consistent across versions | Both Chart.yaml files list identical maintainers: Jan-Otto Kröpke and Quentin Bisson |
| info | source_correspondence | Both versions have corresponding git tags and releases | Old: tag grafana-12.4.9 at commit 660c1c08, New: tag grafana-12.6.0 at commit 80ef7adba5c5f3c732c02bb4b64a83e9751f977a |
| info | build_provenance | Renovate bot authored the release commit | Commit 80ef7adba5c5f3c732c02bb4b64a83e9751f977a authored by renovate[bot] with standard commit message pattern |
| info | metadata_drift | Chart version incremented from 12.5.0 to 12.6.0 | Chart.yaml version field changed in commit patch |
| info | metadata_drift | App version updated from 13.0.2 to 13.1.0 | Chart.yaml appVersion field reflects upstream Grafana release |
| info | metadata_drift | k8s-sidecar dependency updated from 2.7.4 to 2.8.0 | values.yaml sidecar.image.tag changed in commit patch |
Source ↔ artifact correspondence
- Old version anchor: Git tag
grafana-12.4.9at commit660c1c08bf29c5440aeedb27f7236bb80efa80f0(verified via GitHub releases API) - New version anchor: Git tag
grafana-12.6.0at commit80ef7adba5c5f3c732c02bb4b64a83e9751f977a(verified via GitHub releases API) - Method: GitHub release tags and commit SHAs; Chart.yaml version field matches tag name
Signatures and attestations
| Old | New | |
|---|---|---|
| Cosign signature present | unknown | unknown |
| Signing identity | n/a | n/a |
| SLSA provenance present | unknown | unknown |
| Builder identity | n/a | n/a |
| SBOM attached | unknown | unknown |
Note: Helm charts are not typically signed with cosign or SLSA provenance in this ecosystem. Verification is via GitHub release artifacts and git tag correspondence. No regression detected.
Metadata drift
- Chart version: 12.5.0 → 12.6.0 (expected: minor version bump)
- App version: 13.0.2 → 13.1.0 (expected: upstream Grafana release bump)
- k8s-sidecar tag: 2.7.4 → 2.8.0 (expected: dependency update)
- Maintainers: identical across both versions (no change)
- Sources: identical across both versions (no change)
- Home URL: identical across both versions (no change)
All metadata changes are consistent with documented release notes and expected dependency updates.
Typosquat / confusable check
- Nearest popular alternative names checked:
grafana(official),grafana-loki,grafana-tempo,grafana-mcp(all in same repo) - Findings: None. The package is the official Grafana Helm chart from the legitimate grafana-community organization. No confusable alternatives detected.
Repo health
- Ownership transfer in last 90d: No
- Archived: No
- New committers in version range: No (renovate[bot] is the standard automation account for dependency updates)
- Workflow file changes affecting release pipeline: No changes to release workflow between versions
The repository shows normal maintenance patterns with automated dependency updates via renovate[bot], consistent with the project's established practices documented in prior verdicts.
Gaps
- Cryptographic signature verification: Helm charts in this ecosystem typically rely on GitHub release integrity and git tag verification rather than cosign signatures. No regression in signing practices detected.
- Private registry access: Not applicable; chart is published on public GitHub releases.
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/grafana-12.x
branch
from
e41a56e to
b3bf643
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/grafana-12.x
branch
from
b3bf643 to
fa13ae4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
12.4.9→12.7.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
grafana-community/helm-charts (grafana)
v12.7.1Compare Source
The leading tool for querying and visualizing time series and metrics.
What's Changed
New Contributors
Full Changelog: grafana-community/helm-charts@grafana-12.7.0...grafana-12.7.1
v12.7.0Compare Source
The leading tool for querying and visualizing time series and metrics.
What's Changed
Full Changelog: grafana-community/helm-charts@loki-18.1.0...grafana-12.7.0
v12.6.0Compare Source
The leading tool for querying and visualizing time series and metrics.
What's Changed
Full Changelog: grafana-community/helm-charts@loki-18.0.1...grafana-12.6.0
v12.5.0Compare Source
The leading tool for querying and visualizing time series and metrics.
What's Changed
Full Changelog: grafana-community/helm-charts@synthetic-monitoring-agent-1.13.0...grafana-12.5.0
Configuration
📅 Schedule: (in timezone America/Los_Angeles)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.