From c4c9bd881b53897854abbe11bc134bbcf4282466 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 8 Nov 2026 07:42:45 +0000 Subject: [PATCH 1/2] chore(deps): Bump the grafana-stack group across 1 directory with 4 updates Bumps the grafana-stack group with 4 updates in the /stacks/observability directory: grafana/loki, grafana/grafana, grafana/alloy and grafana/grafana-image-renderer. Updates `grafana/loki` from 3.7.8 to 3.7.9 Updates `grafana/grafana` from 13.2.4 to 13.3.0 Updates `grafana/alloy` from v1.20.1 to v1.21.3 Updates `grafana/grafana-image-renderer` from v5.12.7 to v5.12.10 --- updated-dependencies: - dependency-name: grafana/alloy dependency-version: v1.21.3 dependency-type: direct:production dependency-group: grafana-stack - dependency-name: grafana/grafana dependency-version: 13.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grafana-stack - dependency-name: grafana/grafana-image-renderer dependency-version: v5.12.10 dependency-type: direct:production dependency-group: grafana-stack - dependency-name: grafana/loki dependency-version: 3.7.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: grafana-stack ... Signed-off-by: dependabot[bot] --- stacks/observability/compose.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/stacks/observability/compose.yaml b/stacks/observability/compose.yaml index 3b4543b0..1a8b822a 100644 --- a/stacks/observability/compose.yaml +++ b/stacks/observability/compose.yaml @@ -391,7 +391,7 @@ services: # --------------------------------------------------------------------------- loki: <<: *service-defaults - image: grafana/loki:3.7.8@sha256:1107dd5274e0ada47e42472b7a7e71f3b2a2fe878878108f3e2f9e51528f0193 + image: grafana/loki:3.7.9@sha256:0db216b630ae1f348a1584c67f3cead8b4c1fc839169a39501db664744158e28 container_name: loki user: "10001:10001" # 1.5x the 1015 MiB peak — the tightest ratio and the largest number, which @@ -792,7 +792,7 @@ services: # grafana/grafana, not grafana/grafana-oss: Grafana stopped publishing # -oss after 13.0.2 (2026-06-02) and ships the same OSS edition here, so # the old repository's last tag went stale with no bump to follow (#988). - image: grafana/grafana:13.2.4@sha256:dbbc38ea21103cefb50396340cd88afec779c7e070b0a7bf5a75b4ce46651d3f + image: grafana/grafana:13.3.0@sha256:488984b716c0862639f91a698adbe2862677a5a07bad42da5f03f3030883b205 container_name: grafana # 2.4x the 540 MiB peak. Grafana is the second-spikiest service here — 139 # MiB median, and three excursions past 350 MiB RSS in fourteen days (540, @@ -1079,7 +1079,7 @@ services: # record for `prometheus` aimed at this container, and remote_write started # dialling Alloy instead of Prometheus. config.alloy reads ALLOY_HOSTNAME # from the environment instead; the header of that file has the whole story. - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: alloy # 1024 rather than the shared 512: this is the one service that walks # cgroups, tails the journal and talks to the Docker socket, so it has more @@ -1329,7 +1329,7 @@ services: # reports its error to capture-screenshots.sh. labels: homelab.logs: "off" - image: grafana/grafana-image-renderer:v5.12.7@sha256:a643fd3ee669ff1b6927d5589c37ee1078b52fc76cea9a7bf8e247357e9d9dd1 + image: grafana/grafana-image-renderer:v5.12.10@sha256:a7970b826f6e477461e02bf5463d92634e9ad27d525e4e50296978a2e592d2d7 container_name: renderer environment: # The renderer loads the dashboard in a headless Chromium, and Chromium From b49b2f293b1ec64e3583ee85c104d9787cfed9c1 Mon Sep 17 00:00:00 2001 From: Garrett Allen <98648590+Gerrrt@users.noreply.github.com> Date: Sun, 8 Nov 2026 13:39:01 -0800 Subject: [PATCH 2/2] chore(deps): carry the Grafana and Alloy bumps to the five other stacks lab, sensor, soc, bloodhound and analyst all mount observability's alloy/config.alloy, so check_image_pins.py requires their Alloy to match it digest for digest (#848). This moves all five to Alloy v1.21.3 with observability, and lab's Loki and Grafana to 3.7.9 and 13.3.0, as the separate Dependabot PRs #1287, #1289, #1292, #1293 and #1295 proposed. Co-Authored-By: Claude Opus 5.5 --- stacks/analyst/compose.yaml | 2 +- stacks/bloodhound/compose.yaml | 2 +- stacks/lab/compose.yaml | 6 +++--- stacks/sensor/compose.yaml | 2 +- stacks/soc/compose.yaml | 2 +- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/stacks/analyst/compose.yaml b/stacks/analyst/compose.yaml index cc641aa4..88def608 100644 --- a/stacks/analyst/compose.yaml +++ b/stacks/analyst/compose.yaml @@ -111,7 +111,7 @@ services: # render-config.sh writes both anyway. # --------------------------------------------------------------------------- alloy: - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: analyst-alloy restart: unless-stopped logging: *default-logging diff --git a/stacks/bloodhound/compose.yaml b/stacks/bloodhound/compose.yaml index 27aebd58..b485ee8d 100644 --- a/stacks/bloodhound/compose.yaml +++ b/stacks/bloodhound/compose.yaml @@ -269,7 +269,7 @@ services: # the API paths queried, not the query results. # --------------------------------------------------------------------------- alloy: - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: bloodhound-alloy restart: unless-stopped logging: *default-logging diff --git a/stacks/lab/compose.yaml b/stacks/lab/compose.yaml index 1b4732c5..d8837363 100644 --- a/stacks/lab/compose.yaml +++ b/stacks/lab/compose.yaml @@ -188,7 +188,7 @@ services: # --------------------------------------------------------------------------- loki: <<: *service-defaults - image: grafana/loki:3.7.8@sha256:1107dd5274e0ada47e42472b7a7e71f3b2a2fe878878108f3e2f9e51528f0193 + image: grafana/loki:3.7.9@sha256:0db216b630ae1f348a1584c67f3cead8b4c1fc839169a39501db664744158e28 container_name: lab-loki user: "10001:10001" # The estate's block, as on prometheus above (#845), including the /tmp @@ -292,7 +292,7 @@ services: # grafana/grafana, not grafana/grafana-oss: Grafana stopped publishing # -oss after 13.0.2 (2026-06-02) and ships the same OSS edition here, so # the old repository's last tag went stale with no bump to follow (#988). - image: grafana/grafana:13.2.4@sha256:dbbc38ea21103cefb50396340cd88afec779c7e070b0a7bf5a75b4ce46651d3f + image: grafana/grafana:13.3.0@sha256:488984b716c0862639f91a698adbe2862677a5a07bad42da5f03f3030883b205 container_name: lab-grafana # The estate's block, as on prometheus above (#845), including the one # tmpfs Grafana needs — it extracts plugins into /tmp — and the variable @@ -442,7 +442,7 @@ services: alloy: <<: *service-defaults - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: lab-alloy pids_limit: 1024 cap_drop: [ALL] diff --git a/stacks/sensor/compose.yaml b/stacks/sensor/compose.yaml index 923fb346..9dc6f9e5 100644 --- a/stacks/sensor/compose.yaml +++ b/stacks/sensor/compose.yaml @@ -199,7 +199,7 @@ services: # typed by hand still labels the host correctly. # --------------------------------------------------------------------------- alloy: - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: sensor-alloy restart: unless-stopped logging: *default-logging diff --git a/stacks/soc/compose.yaml b/stacks/soc/compose.yaml index 3e9b3971..1704d3ce 100644 --- a/stacks/soc/compose.yaml +++ b/stacks/soc/compose.yaml @@ -652,7 +652,7 @@ services: # --------------------------------------------------------------------------- alloy: <<: *service-defaults - image: grafana/alloy:v1.20.1@sha256:2aa2099af76c0098d4af7a4d6e48f86cb66dc1a000222ad927a1c67c6542d13f + image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4 container_name: soc-alloy pids_limit: 1024 # A bound, not a measurement: re-derive from process_resident_memory_bytes