feat(helm/kube-prometheus-stack): update 83.4.0 ➼ 83.7.0

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
kube-prometheus-stack (source)	minor	83.4.0 → 83.7.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

prometheus-community/helm-charts (kube-prometheus-stack)

v83.7.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update https://github.com/kubernetes-monitoring/kubernetes-mixin digest to afc9733 by @​renovate[bot] in #​6858

Full Changelog: prometheus-community/helm-charts@prom-label-proxy-0.19.0...kube-prometheus-stack-83.7.0

v83.6.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update https://github.com/prometheus-operator/kube-prometheus digest to ac9a509 by @​renovate[bot] in #​6854

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-83.5.1...kube-prometheus-stack-83.6.0

v83.5.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @​renovate[bot] in #​6851

Full Changelog: prometheus-community/helm-charts@prometheus-operator-admission-webhook-0.38.1...kube-prometheus-stack-83.5.1

v83.5.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] add sessionPersistence support to alertm… by @​sebastiangaiser in #​6847

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-83.4.3...kube-prometheus-stack-83.5.0

v83.4.3

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Ensure version value is rendered as string by @​0-tae in #​6806

New Contributors

• @​0-tae made their first contribution in #​6806

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-83.4.2...kube-prometheus-stack-83.4.3

v83.4.2

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @​renovate[bot] in #​6843

Full Changelog: prometheus-community/helm-charts@prometheus-29.2.1...kube-prometheus-stack-83.4.2

v83.4.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Update quay.io/prometheus/prometheus Docker tag to v3.11.2 by @​renovate[bot] in #​6840

Full Changelog: prometheus-community/helm-charts@prometheus-nginx-exporter-1.20.10...kube-prometheus-stack-83.4.1

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	1314637
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/helmrelease/out00

--- HelmRelease: monitoring/kps Job: monitoring/kps-admission-create

+++ HelmRelease: monitoring/kps Job: monitoring/kps-admission-create

@@ -30,13 +30,13 @@

         heritage: Helm
         app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
         app.kubernetes.io/component: prometheus-operator-webhook
     spec:
       containers:
       - name: create
-        image: ghcr.io/jkroepke/kube-webhook-certgen:1.8.0
+        image: ghcr.io/jkroepke/kube-webhook-certgen:1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - create
         - --host=kps-operator,kps-operator.monitoring.svc
         - --namespace=monitoring
         - --secret-name=kps-admission
--- HelmRelease: monitoring/kps Job: monitoring/kps-admission-patch

+++ HelmRelease: monitoring/kps Job: monitoring/kps-admission-patch

@@ -30,13 +30,13 @@

         heritage: Helm
         app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
         app.kubernetes.io/component: prometheus-operator-webhook
     spec:
       containers:
       - name: patch
-        image: ghcr.io/jkroepke/kube-webhook-certgen:1.8.0
+        image: ghcr.io/jkroepke/kube-webhook-certgen:1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - patch
         - --webhook-name=kps-admission
         - --namespace=monitoring
         - --secret-name=kps-admission

[tinfoild]

kube/helmrelease/out00

[tinfoild]

kube/kustomization/out00

--- kube/deploy/core/monitoring/kps/app Kustomization: flux-system/1-core-monitoring-kps-app HelmRelease: monitoring/kps

+++ kube/deploy/core/monitoring/kps/app Kustomization: flux-system/1-core-monitoring-kps-app HelmRelease: monitoring/kps

@@ -12,13 +12,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 83.4.0
+      version: 83.7.0
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

[ciel-shieru]

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-24 03:57 UTC
🤖 Scanner: Ciel Security Scanner
🔗 PR: #5484 — feat(helm/kube-prometheus-stack): update 83.4.0 ➼ 83.7.0
📦 Packages checked: 1
🔍 Sources: NVD, OSV.dev, GHSA, GHSL, CISA KEV, FortiGuard, CVE.org, Changelog
⚠️ Vulnerabilities found: 0

---

Severity Summary

Severity	Count
CRITICAL	0
HIGH	0
MEDIUM / MODERATE	0
LOW	0
UNKNOWN / NEEDS VERIFICATION	0
Total	0

---

Results

Package: kube-prometheus-stack

• Ecosystem: Helm
• Old version: 83.4.0 — CLEAN
• New version: 83.7.0 — CLEAN

Vulnerabilities in version 83.4.0

No known vulnerabilities found.

Vulnerabilities in version 83.7.0

No known vulnerabilities found.

Source scan summary

Source	Status	Notes
OSV.dev	✅ Scanned	No results for this package
NVD	✅ Scanned	No CVEs found for "kube-prometheus-stack"
GHSA	✅ Scanned	No advisories for this package or related components
GHSL	✅ Scanned	No publications found
CISA KEV	✅ Scanned	No entries for this product
FortiGuard	✅ Scanned	No advisories found
CVE.org	✅ Scanned	No CVEs found for this package
Changelog	✅ Scanned	Dependency bumps and bug fixes only — no security patches

Changelog Security Highlights (83.4.0 → 83.7.0)

• No security-specific fixes were identified in the changelog for 83.4.1 through 83.7.0
• Changes include: dependency non-major updates, Prometheus image bump to v3.11.2, string rendering fix, session persistence support, and kubernetes-mixin digest updates

---

Recommendations

• MERGE PRIORITY: LOW — No security vulnerabilities found in either version. Merge at own discretion.

---

⚠️ This comment was posted by an automated security scanner (Ciel).
To re-scan, trigger the renovate-security-scanner skill.