Grafana v13.3.0 released on 27-10-2026

Grafana v13.3.0 is out now. Administrators should prioritise upgrading to address a broad set of security fixes (10 CVEs) while gaining improvements to alerting, Git Sync and provisioning that improve reliability and UX.
See the download page and the what’s new highlights for CVE IDs, details and upgrade instructions.
What’s in this release
- Security fixes for a broad set of issues — ten CVEs addressed across the codebase.
- Major alerting and Import-to-GMA improvements: Config API data layer and notifications API boundary, AlertRule/RecordingRule/RuleSequence promoted to v1beta1, staged-import defaults, drag-and-drop YAML import, secret redaction and Mimir alertmanager_config support.
- Provisioning and Git Sync robustness and UX work: generic Git OAuth connections, improved PR/branch preview handling, folder metadata protections, better handling of repo outages and last-checked timestamps for pulls.
Upgrade notes
- Breaking change — the plugins marketplace config.ini section has been renamed from
marketplacetoplugins_marketplace; update config files and any plugin integrations accordingly. - If you need to revert, restore the previous
marketplacesection name in yourconfig.iniso older plugin expectations remain satisfied when running an earlier Grafana version.
Share your upgrade experience or report any issues on Grafana’s GitHub so others can follow what worked or where problems remain.
