eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Upgrade Grafana 12.3.3 → 12.4.2

Browse source 
Patches 7 CVEs including CVE-2026-27880 (unauthenticated OOM DoS, CVSS 7.5).
No config changes needed — alerting pending period behavior change is a net
improvement for our NoData/Error rules.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-04-02 11:21:26 -07:00
commit 4c547745bf
3 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
containers/grafana/Dockerfile
View file

@ -1,4 +1,4 @@
ARG CONTAINER_APP_VERSION=12.3.3 ARG CONTAINER_APP_VERSION=12.4.2
FROM alpine:3.22 FROM alpine:3.22

1
docs/changelog.d/upgrade-grafana-12.4.2.infra.md Normal file
View file

@ -0,0 +1 @@
Upgrade Grafana from 12.3.3 to 12.4.2 — patches 7 CVEs including an unauthenticated DoS (CVE-2026-27880).

4
service-versions.yaml
View file

@ -97,8 +97,8 @@ services:
- name: grafana - name: grafana
type: argocd type: argocd
last-reviewed: 2026-02-23 last-reviewed: 2026-04-02
current-version: "12.3.3" current-version: "12.4.2"
upstream-source: https://github.com/grafana/grafana/releases upstream-source: https://github.com/grafana/grafana/releases
notes: Home-built container from Alpine; upgraded from Helm to Kustomize notes: Home-built container from Alpine; upgraded from Helm to Kustomize