Grafana | v13.3.0

Grafana v13.3.0 released on 27-10-2026


Grafana v13.3.0 is out now. Administrators should prioritise upgrading to address a broad set of security fixes (10 CVEs) while gaining improvements to alerting, Git Sync and provisioning that improve reliability and UX.

See the download page and the what’s new highlights for CVE IDs, details and upgrade instructions.

What’s in this release

  • Security fixes for a broad set of issues — ten CVEs addressed across the codebase.
  • Major alerting and Import-to-GMA improvements: Config API data layer and notifications API boundary, AlertRule/RecordingRule/RuleSequence promoted to v1beta1, staged-import defaults, drag-and-drop YAML import, secret redaction and Mimir alertmanager_config support.
  • Provisioning and Git Sync robustness and UX work: generic Git OAuth connections, improved PR/branch preview handling, folder metadata protections, better handling of repo outages and last-checked timestamps for pulls.

Upgrade notes

  • Breaking change — the plugins marketplace config.ini section has been renamed from marketplace to plugins_marketplace; update config files and any plugin integrations accordingly.
  • If you need to revert, restore the previous marketplace section name in your config.ini so older plugin expectations remain satisfied when running an earlier Grafana version.

Share your upgrade experience or report any issues on Grafana’s GitHub so others can follow what worked or where problems remain.

Related posts

Loki | v3.7.9

Loki v3 7 9: security dependency upgrades and Go 1 26 10, ingester WAL concurrency fix preventing data loss, API request size limits, LogQL accumulator fix

Grafana | v13.3.0

Grafana v13 3 0: security fixes for 10 CVEs, major alerting and Import to GMA updates, Git Sync robustness, UI and plugin fixes, breaking config rename

Prometheus | v3.15.1

Prometheus v3 15 1: container images distrust emSign ECC Root CA G3 and Comodo AAA Services root, rebuilt with Go 1 27 3, x net v0 60 0, upgrade to v3 15 1