Update Grafana to Grafana 12.0.0+security-01 for CVE-2025-4123 fix

https://grafana.com/blog/2025/05/21/grafana-security-release-high-severity-security-fix-for-cve-2025-4123/

Author: christian-stephen

README.md

@@ -170,7 +170,7 @@ Dashboards are provisioned directly from CRDs, which means any manual edits will
 | grafana.datasource.jsonData.timeInterval | string | `"5s"` | The time interval for Grafana to poll Prometheus. Specifies the frequency of data requests. |
 | grafana.enabled | string | `"-"` |  |
 | grafana.image.repository | string | `"grafana/grafana"` | Image repository for Grafana. |
-| grafana.image.tag | string | `"12.0.0"` | Tag for the Grafana image. |
+| grafana.image.tag | string | `"12.0.0-security-01"` | Tag for the Grafana image. |
 | grafana.ingress.className | string | `""` | Specifies the class of the Ingress controller. Required if the Kubernetes cluster includes multiple Ingress controllers. |
 | grafana.ingress.enabled | bool | `false` | Enable to create an Ingress resource for Grafana. Disabled by default. |
 | grafana.ingress.host | string | `""` | Hostname to use for the Ingress. Must be set if Ingress is enabled. |

values.yaml

@@ -94,7 +94,7 @@ grafana:
     # -- Image repository for Grafana.
     repository: grafana/grafana
     # -- Tag for the Grafana image.
-    tag: 12.0.0
+    tag: 12.0.0-security-01
   credentials:
     # -- Name of an existing secret for Grafana credentials. Leave empty to create a new secret.
     existingSecretName: ""