Update grafana/grafana Docker tag to v13

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/grafana	major	12.4.0 → 13.0.0

---

Release Notes

grafana/grafana (grafana/grafana)

v13.0.0

Compare Source

v12.4.3

Compare Source

Features and enhancements

• Analytics: Keep internal dashboard id #​121417, @​ryantxu
• Go: Update to 1.25.9 #​122095, @​macabu
• Reporting: Correctly apply appSubURL to report settings requests (Enterprise)

Bug fixes

• Alerting: Document Grafana HA Alertmanager cluster metrics prefix change in Grafana 12.4 #​121481, @​alexander-akhmetov

v12.4.2

Compare Source

Features and enhancements

• Analytics tab: Improve voice over accessibility (Enterprise)
• Dashboards a11y: Do not open time zonemenu on focus #​120388, @​idastambuk
• Dashboards: Resolve display names by identity in version history #​120273, @​ivanortegaalba
• Plugins: Forward AWS SDK credential chain env vars to external AWS plugins #​120209, @​kevinwcyu
• Public Dashboards: Prevent unintended CRUD operations from different orgs #​120457, @​mmandrus

Bug fixes

• IAM: Handle NULL team_member.external column to fix dashboard loading #​120179, @​difro
• Plugins: Fix installer IsDisabled condition #​120568, @​andresmgot
• Plugins: Forward PLUGIN_UNIX_SOCKET_DIR to plugin processes to fix tmp dir in restricted environments #​120275, @​HarshadaGawas05
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-27877
• Security: Fix CVE-2026-28375
• Security: Fix CVE-2026-27879
• Security: Fix CVE-2026-27880
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-33375

v12.4.1

Compare Source

Features and enhancements

• AccessControl: Invalidate scope resolver cache on datasource deletion #​118741, @​mihai-turdean
• Go: Update to 1.25.8 #​119693, @​macabu
• Rendering: Add support for custom CA certs in Image Renderer #​118859, @​mrevutskyi

Bug fixes

• AccessControl: Fix test utility for datasource deletion permissions cleanup (Enterprise)
• Alerting: Change scope for testing new receivers to use supported resource type. #​118495, @​yuri-tceretian
• Alerting: Fix CollateAlertRuleGroup migration for MariaDB compatibility #​119028, @​alexander-akhmetov

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

This change is 

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 13.x releases. But if you manually upgrade to 13.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.