chore(deps): update grafana/grafana docker tag to v13

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/grafana	major	12.4.0 → 13.0.1

---

Release Notes

grafana/grafana (grafana/grafana)

v13.0.1

Compare Source

Features and enhancements

• Dashboard: Preserve timezone user-preference when converting V1 → V2 #​122673, @​ivanortegaalba
• Provisioning: Include dashboard validation errors in pull request comments #​122433, @​gttrigger

Bug fixes

• Unified storage: Skip migrations if dualwrite state shows they were already migrated #​122880, @​stephaniehingtgen

v12.4.3

Compare Source

Features and enhancements

• Analytics: Keep internal dashboard id #​121417, @​ryantxu
• Go: Update to 1.25.9 #​122095, @​macabu
• Reporting: Correctly apply appSubURL to report settings requests (Enterprise)

Bug fixes

• Alerting: Document Grafana HA Alertmanager cluster metrics prefix change in Grafana 12.4 #​121481, @​alexander-akhmetov

v12.4.2

Compare Source

Features and enhancements

• Analytics tab: Improve voice over accessibility (Enterprise)
• Dashboards a11y: Do not open time zonemenu on focus #​120388, @​idastambuk
• Dashboards: Resolve display names by identity in version history #​120273, @​ivanortegaalba
• Plugins: Forward AWS SDK credential chain env vars to external AWS plugins #​120209, @​kevinwcyu
• Public Dashboards: Prevent unintended CRUD operations from different orgs #​120457, @​mmandrus

Bug fixes

• IAM: Handle NULL team_member.external column to fix dashboard loading #​120179, @​difro
• Plugins: Fix installer IsDisabled condition #​120568, @​andresmgot
• Plugins: Forward PLUGIN_UNIX_SOCKET_DIR to plugin processes to fix tmp dir in restricted environments #​120275, @​HarshadaGawas05
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-27877
• Security: Fix CVE-2026-28375
• Security: Fix CVE-2026-27879
• Security: Fix CVE-2026-27880
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-27876
• Security: Fix CVE-2026-33375

v12.4.1

Compare Source

Features and enhancements

• AccessControl: Invalidate scope resolver cache on datasource deletion #​118741, @​mihai-turdean
• Go: Update to 1.25.8 #​119693, @​macabu
• Rendering: Add support for custom CA certs in Image Renderer #​118859, @​mrevutskyi

Bug fixes

• AccessControl: Fix test utility for datasource deletion permissions cleanup (Enterprise)
• Alerting: Change scope for testing new receivers to use supported resource type. #​118495, @​yuri-tceretian
• Alerting: Fix CollateAlertRuleGroup migration for MariaDB compatibility #​119028, @​alexander-akhmetov

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.