fix(container): update image ghcr.io/grafana-community/helm-charts/grafana (12.10.1 ➔ 12.10.3)

[drag0n141-bot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/grafana-community/helm-charts/grafana (source)	patch	12.10.1 → 12.10.3

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[drag0n141-bot]

--- HelmRelease: monitoring/grafana Deployment: monitoring/grafana

+++ HelmRelease: monitoring/grafana Deployment: monitoring/grafana

@@ -19,15 +19,15 @@

   template:
     metadata:
       labels:
         app.kubernetes.io/name: grafana
         app.kubernetes.io/instance: grafana
       annotations:
-        checksum/dashboards-json-config: e09265b93d8dbe4c23ec41bf3953d336d79306bfa4be7ce2a9fa93a1747a9e7e
+        checksum/dashboards-json-config: 5e96494f76292d559aea410713dd2f01797a9e0b76629b99c94bd9a6ed65152e
         checksum/sc-dashboard-provider-config: c942752180ddff51a3ab63b7d256cf3d856d90757b6f804cbc420562989d5a84
-        checksum/secret: 7eebaa6dab2332e79eac261de51233f3b6e100d08d37a51f2597d65dd74d951d
+        checksum/secret: 8bda2bbb9928d95090b7552ad6e4a98cef3b4d399800181a2cbae938a96d732b
         kubectl.kubernetes.io/default-container: grafana
     spec:
       serviceAccountName: grafana
       automountServiceAccountToken: true
       shareProcessNamespace: false
       securityContext:
@@ -65,13 +65,13 @@

             name: grafana-oidc-credentials
         image: ghcr.io/home-operations/postgres-init:18
         name: init-db
       enableServiceLinks: true
       containers:
       - name: grafana-sc-dashboard
-        image: quay.io/kiwigrid/k8s-sidecar:2.10.0
+        image: quay.io/kiwigrid/k8s-sidecar:2.10.1
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: grafana_dashboard
@@ -105,13 +105,13 @@

           seccompProfile:
             type: RuntimeDefault
         volumeMounts:
         - name: sc-dashboard-volume
           mountPath: /tmp/dashboards
       - name: grafana-sc-datasources
-        image: quay.io/kiwigrid/k8s-sidecar:2.10.0
+        image: quay.io/kiwigrid/k8s-sidecar:2.10.1
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: grafana_datasource
@@ -143,13 +143,13 @@

           seccompProfile:
             type: RuntimeDefault
         volumeMounts:
         - name: sc-datasources-volume
           mountPath: /etc/grafana/provisioning/datasources
       - name: grafana
-        image: docker.io/grafana/grafana:13.1.1
+        image: docker.io/grafana/grafana:13.1.2
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL

[drag0n141-bot]

--- kubernetes/apps/monitoring/grafana/app Kustomization: monitoring/grafana OCIRepository: monitoring/grafana

+++ kubernetes/apps/monitoring/grafana/app Kustomization: monitoring/grafana OCIRepository: monitoring/grafana

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 12.10.1
+    tag: 12.10.3
   url: oci://ghcr.io/grafana-community/helm-charts/grafana
 

[claude]

grafana (community helm chart): v12.10.1 → v12.10.2

Verdict: Safe to merge

This is a patch bump of the community-maintained Grafana Helm chart (grafana-community/helm-charts, the successor to the deprecated chart in grafana/helm-charts). The chart's appVersion (Grafana app itself) is unchanged at 13.1.1 — this release only bumps the bundled quay.io/kiwigrid/k8s-sidecar dependency image from v2.10.0 → v2.10.1.

That sidecar upgrade is purely additive: it exposes two new optional env vars, REQ_USERNAME_FILE and REQ_PASSWORD_FILE, for reading basic-auth credentials from files. No removals, renames, or behavior changes to existing functionality. kubernetes/apps/monitoring/grafana/app/helmrelease.yaml enables the sidecar for dashboards/datasources but doesn't reference basic-auth env vars at all, so there's nothing to adapt.

No actionable breaking changes, deprecations, or features worth adopting.

Sources consulted:

• https://github.com/grafana-community/helm-charts/releases/tag/grafana-12.10.2
• grafana-community/helm-charts@7d266b8
• kiwigrid/k8s-sidecar@2.10.0...2.10.1
• https://raw.githubusercontent.com/grafana-community/helm-charts/grafana-12.10.2/charts/grafana/Chart.yaml
• https://raw.githubusercontent.com/grafana-community/helm-charts/grafana-12.10.1/charts/grafana/Chart.yaml

[claude]

grafana (community helm chart): v12.10.1 → v12.10.3

Verdict: Safe to merge

This extends the range from a prior review (12.10.1 → 12.10.2, sidecar-only, approved) up to 12.10.3. The new increment (12.10.2 → 12.10.3) bumps the chart's bundled Grafana application itself from v13.1.1 → v13.1.2, which was not covered previously.

Grafana v13.1.2 release notes:

• Two Logs Table bug fixes (missing results during log streaming; mixed field-name/display-name usage) — this repo doesn't configure anything specific to the Logs Table feature in helmrelease.yaml, so these are net-positive, not actionable.
• One security fix: CVE-2026-13438. No public GHSA/advisory entry exists yet for this CVE (checked grafana/grafana security advisories and the GitHub Advisory Database — not found), so severity/impact details aren't available externally. Since the fix ships in this same version bump, merging the PR is itself the remediation — no additional repo changes are required either way.

No breaking changes or deprecations found in the chart changelog (12.10.2 → 12.10.3, which only bumps the docker.io/grafana/grafana tag) or in the Grafana v13.1.2 release notes.

Sources consulted:

• https://github.com/grafana-community/helm-charts/releases/tag/grafana-12.10.3
• https://raw.githubusercontent.com/grafana-community/helm-charts/grafana-12.10.3/charts/grafana/Chart.yaml
• https://raw.githubusercontent.com/grafana-community/helm-charts/grafana-12.10.2/charts/grafana/Chart.yaml
• https://github.com/grafana/grafana/releases/tag/v13.1.2
• https://grafana.com/security/security-advisories/