Repository navigation
Conversation
dependabot
Bot
added
dependencies
Gerrrt
enabled auto-merge (squash)
November 7, 2026 03:57
…pdates Bumps the grafana-stack group with 4 updates in the /stacks/observability directory: grafana/loki, grafana/grafana, grafana/alloy and grafana/grafana-image-renderer. Updates `grafana/loki` from 3.7.8 to 3.7.9 Updates `grafana/grafana` from 13.2.4 to 13.3.0 Updates `grafana/alloy` from v1.20.1 to v1.21.3 Updates `grafana/grafana-image-renderer` from v5.12.7 to v5.12.10 --- updated-dependencies: - dependency-name: grafana/alloy dependency-version: v1.21.3 dependency-type: direct:production dependency-group: grafana-stack - dependency-name: grafana/grafana dependency-version: 13.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grafana-stack - dependency-name: grafana/grafana-image-renderer dependency-version: v5.12.10 dependency-type: direct:production dependency-group: grafana-stack - dependency-name: grafana/loki dependency-version: 3.7.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: grafana-stack ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/docker_compose/stacks/observability/grafana-stack-f5abcf7900
branch
from
November 8, 2026 07:42
8f1bc69 to
c4c9bd8
Compare
lab, sensor, soc, bloodhound and analyst all mount observability's alloy/config.alloy, so check_image_pins.py requires their Alloy to match it digest for digest (#848). This moves all five to Alloy v1.21.3 with observability, and lab's Loki and Grafana to 3.7.9 and 13.3.0, as the separate Dependabot PRs #1287, #1289, #1292, #1293 and #1295 proposed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Gerrrt
changed the title
This was referenced Nov 8, 2026
Gerrrt
deleted the
dependabot/docker_compose/stacks/observability/grafana-stack-f5abcf7900
branch
November 8, 2026 21:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
Moves the Grafana stack images in every stack that pins them, in one PR:
stacks/observability: Loki 3.7.8 → 3.7.9, Grafana 13.2.4 → 13.3.0, Alloy v1.20.1 → v1.21.3, grafana-image-renderer v5.12.7 → v5.12.10 (Dependabot's commit)stacks/lab: Loki 3.7.9, Grafana 13.3.0, Alloy v1.21.3, the same digestsstacks/sensor,soc,bloodhound,analyst: Alloy v1.21.3, the same digestWhy
lab, sensor, soc, bloodhound and analyst mount observability's
alloy/config.alloy, socheck_image_pins.pyfails any PR that moves one stack's Alloy without the others (#848). Each of Dependabot's separate PRs failed Validate configs that way..github/dependabot.ymlsays to carry the bump to the other five stacks on one PR and close the rest. This PR replaces #1287, #1289, #1292, #1293 and #1295; the lab lines match #1287's diff exactly.Blast radius
Grafana, Loki and Alloy on the observability host and lab; Alloy on the sensor, soc, bloodhound and analyst guests. If Alloy v1.21.3 can't read the shared config, those hosts stop shipping logs and metrics. If Grafana 13.3.0 regresses, dashboards stop working. Both show up on the first deploy.
secrets/*.sops.yamlVerification
scripts/check_image_pins.py:image pins OK … 15 shared-config pin pair(s) identical. This is the step that failed on the separate PRs.make validate: all checks passed, 42 skipped because there is no Docker daemon here. That covers actionlint, markdownlint, promtool/amtool, Loki rules, Caddyfile and glance checks, healthcheck probes, gitleaks, ruff and ansible-lint. CI runs them.Not run: a trivy scan of the new digests.
cve-scan.ymlfiles issues when dispatched, and there's no Docker here to runscan-images.sh. The scheduled Monday scan covers them once this merges.make validatepasses (with the skips above)Deployed to the lab and confirmed working
Docs updated (
docs/, service README, ordocs/roadmap.md): none needed, prose never pins a versionRefs #848.
🤖 Generated with Claude Code