Catalog / Observability

Grafana changelog

Grafana is at 13.2.3, published 29 Sep 2026, 12 days ago.

Dashboard and alerting layer over time series and log stores.

SubscribeGrafana as markdown, for pasting into a model
Collected
72 releases back to 11 Feb 2026
Source
grafana/grafana
Project
grafana.com
Advisories
28 published newest 2023
Feed
RSS

Read on 28 of the 30 days on record, last today. Collection status

Version history

13.x23 releases
13.2.3

Download page What's new highlights Security Security: Fix CVE-2026-13719 Security: Fix CVE-2026-13720 Security: Fix CVE-2026-81841

securityadded
13.1.7

Download page What's new highlights Security Security: Fix CVE-2026-13719 Security: Fix CVE-2026-13720 Security: Fix CVE-2026-81841

securityadded
13.0.10

Download page What's new highlights Security Security: Fix CVE-2026-13719 Security: Fix CVE-2026-13720 Security: Fix CVE-2026-81841 Security: Fix CVE-2026-81842

securityadded
13.2.2

Download page What's new highlights Security Security: Fix CVE-2026-15815 Security: Fix CVE-2026-76154 Security: Fix CVE-2026-79656 Bug fixes Dashboards: Preserve query variable refresh setting on v2 dashboard import #132089, @grafana-write

securityaddedfixed
13.1.6

Download page What's new highlights Security Security: Fix CVE-2026-15815 Security: Fix CVE-2026-76154 Security: Fix CVE-2026-79656 Bug fixes Dashboards: Preserve query variable refresh setting on v2 dashboard import #132090, @grafana-write

securityaddedfixed
13.0.9

Download page What's new highlights Security Security: Fix CVE-2026-15815 Security: Fix CVE-2026-76154 Security: Fix CVE-2026-79656 Bug fixes Dashboards: Preserve query variable refresh setting on v2 dashboard import #132088, @grafana-write

securityaddedfixed
13.2.1

Download page What's new highlights Security Security: Fix CVE-2026-12704 Security: Fix CVE-2026-14199 Bug fixes Dashboards: Fix adhoc and groupby variable datasource on UI import #131819, @grafana-writer[bot] Packaging: Fix issue with bund

securityaddedfixed
13.1.5

Download page What's new highlights Security Security: Fix CVE-2026-12704 Security: Fix CVE-2026-14199 Security: Fix CVE-2026-19475

securityadded
13.0.8

Download page What's new highlights Security Security: Fix CVE-2026-12704 Security: Fix CVE-2026-14199 Security: Fix CVE-2026-19475 Bug fixes Dashboards: Fix version dates and user display names in the legacy version history page #131809, @

securityaddedfixed
13.2.0

Download page What's new highlights Security CVE-2026-17183 Features and enhancements Alerting: Add Import tab in alerting settings page #129051, @rodrigopk Alerting: Add notification template import to the import-to-GMA wizard #128329, @ro

breakingsecurityadded
13.1.4

Download page What's new highlights Security CVE-2026-17183 Bug fixes Reporting: batch dashboard lookups when listing reports (Enterprise)

securityaddedfixed
13.0.7

Download page What's new highlights Security CVE-2026-17183 Bug fixes Reporting: batch dashboard lookups when listing reports (Enterprise)

securityaddedfixed
13.1.2

Download page What's new highlights Bug fixes Logs Table: Fix missing results when logs stream #128946, @grafana-writer[bot] Logs Table: Fix mixed usage of field name and display name #128698, @grafana-writer[bot] Security: Fix CVE-2026-134

securityaddedfixed
13.1.1

Download page What's new highlights Features and enhancements Go: Update version to 1.26.5 #128015, @macabu Provisioning: Improve form errors for github connections #128177, @grafana-writer[bot] Provisioning: make sync per-resource write ti

addedfixedchanged
13.0.4

Download page What's new highlights Features and enhancements Alerting: Return 403 instead of 500 on contact point provenance mismatch #127815, @rwwiv Go: Update version to 1.26.5 #128016, @macabu Provisioning: Improve form errors for githu

addedfixedchanged
13.1.0

Download page What's new highlights Features and enhancements A11y: Remove interactivity from UserIcon if onClick is not provided #120284, @idastambuk Accessibility: Add aria-pressed state to FilterPill #123069, @ashharrison90 Accessibility

securityaddedfixed
13.0.3

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.24.1 #126548, @macabu Provisioning: Write _folder.json when creating dashboards in new folders #126323, @ferruvich Provisioning: Write _fold

addedfixed
13.0.2

Download page What's new highlights Features and enhancements Dashboards: Show k8s format in provisioned save #123045, @stephaniehingtgen Docker: Bump Alpine-based images to 3.23.4 #122938, @Proximyst Go: Update version to 1.26.3 #124454, @

securityaddedfixed
13.0.1+security-01

Download page What's new highlights Security: CVE-2026-28374 Security: CVE-2026-28376 Security: CVE-2026-28383 Security: CVE-2026-28380 Security: CVE-2026-33376 Security: CVE-2026-28379 Security: CVE-2026-33377 Security: CVE-2026-33378 Secu

securityadded
13.0.1

Download page What's new highlights Features and enhancements Dashboard: Preserve timezone user-preference when converting V1 → V2 #122673, @ivanortegaalba Provisioning: Include dashboard validation errors in pull request comments #122433,

addedfixed
12.x41 releases
12.4.12

Download page What's new highlights Security Security: Fix CVE-2026-13719 Security: Fix CVE-2026-13720 Security: Fix CVE-2026-81841 Security: Fix CVE-2026-81842 Bug fixes Unified Storage: Return 403 instead of 500 on namespace mismatch #133

securityaddedfixed
12.4.11

Download page What's new highlights Security Security: Fix CVE-2026-12704 Security: Fix CVE-2026-15815 Security: Fix CVE-2026-76154 Security: Fix CVE-2026-79656

securityadded
12.4.10

Download page What's new highlights Security Security: Fix CVE-2026-14199 Security: Fix CVE-2026-19475 Bug fixes Dashboards: Fix adhoc and groupby variable datasource on UI import #131821, @ivanortegaalba Dashboards: Fix version dates and u

securityaddedfixed
12.4.9

Download page What's new highlights Security CVE-2026-17183 Features and enhancements Dashboard Import: Labels in v2 schema #130428, @harisrozajac Bug fixes Azure Monitor: fix migration for dimension filters #130521, @olivierlemasle

securityaddedfixed
12.3.11

Download page What's new highlights Security CVE-2026-17183

securityadded
12.4.7

Download page What's new highlights Features and enhancements Dashboards: Get annotations and dashboard endpoint performance improvements #129780, @filewalkwithme Bug fixes DashboardDS: Fix Mixed panels with a time override stuck in permane

addedfixed
12.4.6

Download page What's new highlights Features and enhancements Alerting: Add protected fields authorization check to provisioning API #127940, @grafana-writer[bot] Alerting: Return 403 instead of 500 on contact point provenance mismatch #127

addedfixedchanged
12.3.9

Download page What's new highlights Features and enhancements Alerting: Return 403 instead of 500 on contact point provenance mismatch #127813, @rwwiv Go: Update version to 1.26.5 #128018, @macabu Bug fixes alerting: fix ORM table mapping b

addedfixedchanged
12.4.5

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.24.1 #126538, @macabu Bug fixes Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid #125769, @p

addedfixed
12.3.8

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.24.1 #126545, @macabu Bug fixes Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid #125523, @p

addedfixed
12.2.10

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.24.1 #126546, @macabu Bug fixes Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid #125518, @p

addedfixed
12.4.4

Download page What's new highlights Features and enhancements Browse dashboards: Make elements visible and flow better when zoomed #120678, @aocenas Docker: Bump Alpine-based images to 3.23.4 #123027, @Proximyst Go: Update version to 1.26.3

securityaddedfixed
12.3.7

Download page What's new highlights Features and enhancements Dashboards: Get annotations and dashboard endpoint performance improvements #121558, @filewalkwithme Docker: Bump Alpine-based images to 3.23.4 #123028, @Proximyst Go: Update ver

securityaddedchanged
12.2.9

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.23.4 #123031, @Proximyst Go: Update version to 1.26.3 #124458, @macabu Security: CVE-2026-33382 Security: CVE-2026-42127 Security: CVE-2026-

securityaddedchanged
12.4.3+security-02

Download page What's new highlights Security: CVE-2026-28374 Security: CVE-2026-28376 Security: CVE-2026-28383 Security: CVE-2026-28380 Security: CVE-2026-33376 Security: CVE-2026-28379 Security: CVE-2026-33377 Security: CVE-2026-33378 Secu

securityadded
12.3.6+security-04

Download page What's new highlights Bug fixes Alerting: Fix error when updating Alertmanager config with autogenerated receivers #113712, @moustafab Security: CVE-2026-28374 Security: CVE-2026-28376 Security: CVE-2026-28383 Security: CVE-20

securityaddedfixed
12.2.8+security-04

Download page What's new highlights Security: CVE-2026-28374 Security: CVE-2026-28376 Security: CVE-2026-28383 Security: CVE-2026-28380 Security: CVE-2026-33376 Security: CVE-2026-28379 Security: CVE-2026-33377 Security: CVE-2026-33378 Secu

securityadded
12.4.3

Download page What's new highlights Features and enhancements Analytics: Keep internal dashboard id #121417, @ryantxu Go: Update to 1.25.9 #122095, @macabu Reporting: Correctly apply appSubURL to report settings requests (Enterprise) Bug fi

addedfixedchanged
12.3.6

Download page What's new highlights Features and enhancements Public Dashboards: Prevent unintended CRUD operations from different orgs #120459, @mmandrus Bug fixes Security: Fixes CVE-2026-27876 Security: Fixes CVE-2026-27877 Security: Fix

securityaddedfixed
12.2.8

Download page What's new highlights Bug fixes Security: Fixes CVE-2026-27876 Security: Fixes CVE-2026-27877 Security: Fixes CVE-2026-28375 Security: Fixes CVE-2026-27879 Security: Fixes CVE-2026-27880 Security: Fixes CVE-2026-27876

securityaddedfixed
12.1.10

Download page What's new highlights Bug fixes Security: Fix CVE-2026-27876 Security: Fix CVE-2026-27877 Security: Fix CVE-2026-28375 Security: Fix CVE-2026-27879 Security: Fix CVE-2026-27880 Security: Fix CVE-2026-27876

securityaddedfixed
12.4.2

Download page What's new highlights Features and enhancements Analytics tab: Improve voice over accessibility (Enterprise) Dashboards a11y: Do not open time zonemenu on focus #120388, @idastambuk Dashboards: Resolve display names by identit

securityaddedfixed
12.3.6+security-01

Download page What's new highlights Bug fixes Security: Fix CVE-2026-33375

securityaddedfixed
12.2.8+security-01

Download page What's new highlights Bug fixes Security: Fix CVE-2026-33375

securityaddedfixed
12.1.10+security-01

Download page What's new highlights Bug fixes Security: Fix CVE-2026-33375

securityaddedfixed
12.4.1

Download page What's new highlights Features and enhancements AccessControl: Invalidate scope resolver cache on datasource deletion #118741, @mihai-turdean Go: Update to 1.25.8 #119693, @macabu Rendering: Add support for custom CA certs in

addedfixedchanged
12.3.5

Download page What's new highlights Features and enhancements Go: Update to 1.25.8 #119694, @macabu Rendering: Add support for custom CA certs in Image Renderer #118910, @mrevutskyi Bug fixes Dashboards: Fix start parameter in list versions

addedfixedchanged
12.2.7

Download page What's new highlights Features and enhancements Go: Update to 1.25.8 #119696, @macabu Rendering: Add support for custom CA certs in Image Renderer #118911, @mrevutskyi Bug fixes Dashboards: Fix start parameter in list versions

addedfixedchanged
12.1.9

Download page What's new highlights Features and enhancements Go: Update to 1.25.8 #119701, @macabu Rendering: Add support for custom CA certs in Image Renderer #118912, @mrevutskyi

addedchanged
12.4.0

Download page What's new highlights Features and enhancements API: Add missing scope check on dashboards #116885, @Proximyst Alerting Enrichment: Add new RBAC permissions for reading and writing enrichments (Enterprise) Alerting: Add Alert

addedfixedchanged
12.3.4

Download page What's new highlights Bug fixes Dashboard Export: Fix datasource variable templating in dashboard export #118327, @kristinademeshchik Provisioning: Bump nanogit v0.3.1 with missing objects fixes #118225, @MissingRoberto

addedfixed
12.2.6

Download page What's new highlights Bug fixes Dashboard Export: Fix datasource variable templating in dashboard export #118324, @kristinademeshchik

addedfixed
12.1.8

Download page What's new highlights Bug fixes Dashboard Export: Fix datasource variable templating in dashboard export #118321, @kristinademeshchik

addedfixed
12.3.3

Download page What's new highlights Features and enhancements Alerting: Add limits for the size of expanded notification templates #117709, @yuri-tceretian Correlations: Remove support for org_id=0 #116934, @gelicia Go: Update to 1.25.7 #11

securityaddedchanged
12.2.5

Download page What's new highlights Features and enhancements Alerting: Add limits for the size of expanded notification templates #117710, @yuri-tceretian Correlations: Remove support for org_id=0 #116958, @gelicia Go: Update to 1.25.7 #11

securityaddedchanged
12.1.7

Download page What's new highlights Features and enhancements Alerting: Add limits for the size of expanded notification templates #117711, @yuri-tceretian Correlations: Remove support for org_id=0 #116957, @gelicia Go: Update to 1.25.7 #11

securityaddedchanged
12.0.10

Download page What's new highlights Features and enhancements Alerting: Add limits for the size of expanded notification templates #117712, @yuri-tceretian Security(Public dashboards annotations): use dashboard timerange if time selection d

securityadded
11.x8 releases
11.6.16

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.24.1 #126547, @macabu Bug fixes Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid #125516, @p

addedfixed
11.6.15

Download page What's new highlights Features and enhancements Docker: Bump Alpine-based images to 3.23.4 #123032, @Proximyst Go: Update version to 1.26.3 #124459, @macabu Bug fixes DashboardDS: Fix Mixed panels not updating on time-range ch

securityaddedfixed
11.6.14+security-04

Download page What's new highlights Security: CVE-2026-28374 Security: CVE-2026-28376 Security: CVE-2026-28383 Security: CVE-2026-28380 Security: CVE-2026-33376 Security: CVE-2026-28379 Security: CVE-2026-33377 Security: CVE-2026-33378 Secu

securityadded
11.6.14

Download page What's new highlights Bug fixes Security: Fix CVE-2026-27876 Security: Fix CVE-2026-27877 Security: Fix CVE-2026-28375 Security: Fix CVE-2026-27879

securityaddedfixed
11.6.14+security-01

Download page What's new highlights Bug fixes Security: CVE-2026-33375

securityaddedfixed
11.6.13

Download page What's new highlights Features and enhancements Go: Update to 1.25.8 #119702, @macabu

addedchanged
11.6.11

Download page What's new highlights Features and enhancements Alerting: Add limits for the size of expanded notification templates #117713, @yuri-tceretian Correlations: Remove support for org_id=0 #116936, @gelicia Go: Update to 1.25.7 #11

securityaddedchanged