feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.2.0)

renovate-bot commented

2026-09-13 18:10:05 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
ghcr.io/prometheus-community/charts/kube-prometheus-stack (source)	major	`88.2.0` → `91.2.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: (in timezone Europe/Rome)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/prometheus-community/charts/kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | major | `88.2.0` → `91.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/6) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate/container

type/major

labels

2026-09-13 18:10:05 +02:00

renovate-bot added 1 commit

2026-09-13 18:10:05 +02:00

feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.0.0)

Konflate 20 resources changed, 2 cautions

Details

Labeler / Labeler (pull_request) Successful in 4s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Failing after 33s

Details

38c17b0b13

lab-assistant-bot commented

2026-09-13 18:10:20 +02:00

Collaborator

konflate — summary

+1 added · 19 changed · −0 removed — 20 resources · 2 apps · 10 CRDs

⚠ Cautions

Job observability/kube-prometheus-stack-admission-create — spec.template changed — immutable on Job; the apply fails until the resource is recreated (or Flux force is enabled)
Job observability/kube-prometheus-stack-admission-patch — spec.template changed — immutable on Job; the apply fails until the resource is recreated (or Flux force is enabled)

Image changes

image	from	to
`ghcr.io/jkroepke/kube-webhook-certgen`	`1.8.5`	`1.8.8`
`quay.io/prometheus-operator/prometheus-operator`	`v0.93.0`	`v0.94.0`
`quay.io/prometheus/alertmanager`	`v0.33.1`	`v0.34.0`

View the full rendered diff →

_{konflate · rendered a1f7ef0 · advisory, not a gate}

### konflate — summary **+1 added · 19 changed · −0 removed** — 20 resources · 2 apps · 10 CRDs **⚠ Cautions** - `Job observability/kube-prometheus-stack-admission-create` — spec.template changed — immutable on Job; the apply fails until the resource is recreated (or Flux force is enabled) - `Job observability/kube-prometheus-stack-admission-patch` — spec.template changed — immutable on Job; the apply fails until the resource is recreated (or Flux force is enabled) **Image changes** | image | from | to | |---|---|---| | `ghcr.io/jkroepke/kube-webhook-certgen` | `1.8.5` | `1.8.8` | | `quay.io/prometheus-operator/prometheus-operator` | `v0.93.0` | `v0.94.0` | | `quay.io/prometheus/alertmanager` | `v0.33.1` | `v0.34.0` | [View the full rendered diff →](https://konflate.aresu.eu/#/pr/2087) <sub>konflate · rendered `a1f7ef0` · advisory, not a gate</sub>

forgejo-actions added the

area/kubernetes

label

2026-09-13 18:18:20 +02:00

renovate-bot force-pushed renovate/ghcr.io-prometheus-community-charts-kube-prometheus-stack-91.x from 38c17b0b13

Konflate 20 resources changed, 2 cautions

Details

Labeler / Labeler (pull_request) Successful in 4s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Failing after 33s

Details

to 97d616201b

Labeler / Labeler (pull_request) Successful in 4s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Konflate 20 resources changed, 2 cautions

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Successful in 54s

Details

2026-09-13 19:06:56 +02:00

Compare

renovate-bot changed title from ~~feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.0.0)~~ to feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.1.0)

2026-09-13 19:07:44 +02:00

lab-assistant-bot commented

2026-09-13 19:07:49 +02:00

Collaborator

⚠️ Automated recommendation: REQUEST CHANGES

Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)

Recommendation: Request Changes

This is a major version bump of kube-prometheus-stack (88.2.0 → 91.2.0) with significant changes beyond just version updates.

Version Mismatch

Issue: The PR title states 88.2.0 → 91.1.0 but the actual diff and git commit show 91.2.0. The title should accurately reflect the target version.

Changed Files Summary

kubernetes/apps/observability/kube-prometheus-stack/app/ocirepository.yaml — tag updated from 88.2.0 to 91.2.0

Key Concerns from Rendered Diff

RBAC Permission Changes (Major): The kube-prometheus-stack-operator ClusterRole has been refactored from wildcard permissions ('*') to explicit, granular permissions across monitoring.coreos.com resources. This is a significant change that may affect how the operator interacts with custom resources.
Alertmanager Version Bump: Updated from v0.33.1 to v0.34.0 — verify compatibility with existing Alertmanager configurations.
CRD Schema Changes: Multiple description field changes in Prometheus CRD schemas (e.g., key field description updated). These are documentation-level changes but could indicate schema evolution.
Image Updates: Inner container images are also bumped (e.g., alertmanager, potentially prometheus). Verify no breaking changes in environment variable handling.

Non-Blocking Caveats

OCI artifact pinning: Using tag (91.2.0) rather than SHA digest is correct per repository conventions for OCI artifacts.
No metadata.namespace on OCIRepository is intentional per repository conventions.

Action Required

Please verify and correct the version mismatch in the PR title. Additionally, given this is a major version jump spanning three minor versions (88.x → 91.x), manual review should confirm compatibility with existing PrometheusOperator resources, Alertmanager configurations, and any custom Grafana dashboards or recording rules that may depend on specific metric names or labels introduced/changed between versions.

⚠️ **Automated recommendation: REQUEST CHANGES** _Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)_ ## Recommendation: Request Changes This is a major version bump of `kube-prometheus-stack` (88.2.0 → 91.2.0) with significant changes beyond just version updates. ### Version Mismatch **Issue**: The PR title states `88.2.0 → 91.1.0` but the actual diff and git commit show `91.2.0`. The title should accurately reflect the target version. ### Changed Files Summary - `kubernetes/apps/observability/kube-prometheus-stack/app/ocirepository.yaml` — tag updated from `88.2.0` to `91.2.0` ### Key Concerns from Rendered Diff 1. **RBAC Permission Changes (Major)**: The `kube-prometheus-stack-operator` ClusterRole has been refactored from wildcard permissions (`'*'`) to explicit, granular permissions across `monitoring.coreos.com` resources. This is a significant change that may affect how the operator interacts with custom resources. 2. **Alertmanager Version Bump**: Updated from `v0.33.1` to `v0.34.0` — verify compatibility with existing Alertmanager configurations. 3. **CRD Schema Changes**: Multiple `description` field changes in Prometheus CRD schemas (e.g., `key` field description updated). These are documentation-level changes but could indicate schema evolution. 4. **Image Updates**: Inner container images are also bumped (e.g., alertmanager, potentially prometheus). Verify no breaking changes in environment variable handling. ### Non-Blocking Caveats - **OCI artifact pinning**: Using tag (`91.2.0`) rather than SHA digest is correct per repository conventions for OCI artifacts. - **No `metadata.namespace`** on OCIRepository is intentional per repository conventions. ### Action Required Please verify and correct the version mismatch in the PR title. Additionally, given this is a major version jump spanning three minor versions (88.x → 91.x), manual review should confirm compatibility with existing PrometheusOperator resources, Alertmanager configurations, and any custom Grafana dashboards or recording rules that may depend on specific metric names or labels introduced/changed between versions.

renovate-bot force-pushed renovate/ghcr.io-prometheus-community-charts-kube-prometheus-stack-91.x from 97d616201b

Labeler / Labeler (pull_request) Successful in 4s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Konflate 20 resources changed, 2 cautions

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Successful in 54s

Details

to a1f7ef0376

Labeler / Labeler (pull_request) Successful in 3s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Konflate 20 resources changed, 2 cautions

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Successful in 43s

Details

2026-09-13 20:07:30 +02:00

Compare

renovate-bot changed title from ~~feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.1.0)~~ to feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack (88.2.0 ➔ 91.2.0)

2026-09-13 20:08:19 +02:00