feat: add signoz-mcp-server

2026-07-16 13:53:25 +08:00
parent 35404c3674
commit 0351b31cf6
43 changed files with 263 additions and 62 deletions
@@ -53,7 +53,7 @@ These services require building custom Docker images from source.
 | [Apache Flink](./src/flink)                                    | 1.20.0              |
 | [Apache HBase](./src/hbase)                                    | 2.6                 |
 | [Apache HTTP Server](./src/apache)                             | 2.4.62              |
-| [Apache Kafka](./src/kafka)                                    | 7.8.0               |
+| [Apache Kafka](./src/kafka)                                    | 8.2.0               |
 | [Apache Pulsar](./src/pulsar)                                  | 4.0.7               |
 | [Apache RocketMQ](./src/rocketmq)                              | 5.3.1               |
 | [Archon](./apps/archon)                                        | latest              |
@@ -78,7 +78,7 @@ These services require building custom Docker images from source.
 | [DuckDB](./src/duckdb)                                         | v1.1.3              |
 | [Easy Dataset](./apps/easy-dataset)                            | 1.5.1               |
 | [EasyTier](./src/easytier)                                     | v2.6.0              |
-| [Elasticsearch](./src/elasticsearch)                           | 9.3.0               |
+| [Elasticsearch](./src/elasticsearch)                           | 9.4.2               |
 | [etcd](./src/etcd)                                             | 3.6.0               |
 | [FalkorDB](./src/falkordb)                                     | v4.14.11            |
 | [Firecrawl](./src/firecrawl)                                   | latest              |
@@ -91,7 +91,7 @@ These services require building custom Docker images from source.
 | [GitLab](./src/gitlab)                                         | 18.8.3-ce.0         |
 | [GoModel](./src/gomodel)                                       | v0.1.27             |
 | [GPUStack](./src/gpustack)                                     | v0.5.3              |
-| [Grafana](./src/grafana)                                       | 12.3.2              |
+| [Grafana](./src/grafana)                                       | 12.3.3              |
 | [Grafana Loki](./src/loki)                                     | 3.3.2               |
 | [Grafana Tempo](./src/tempo)                                   | 2.7.2               |
 | [Halo](./src/halo)                                             | 2.21.9              |
@@ -124,13 +124,13 @@ These services require building custom Docker images from source.
 | [Milvus Standalone Embed](./src/milvus-standalone-embed)       | v2.6.7              |
 | [Milvus Standalone](./src/milvus-standalone)                   | v2.6.7              |
 | [Minecraft Bedrock Server](./src/minecraft-bedrock-server)     | latest              |
-| [MinIO](./src/minio)                                           | 0.20260202          |
+| [MinIO](./src/minio)                                           | latest              |
 | [MLflow](./src/mlflow)                                         | v2.20.2             |
 | [OpenClaw](./apps/openclaw)                                    | 2026.2.3            |
 | [MongoDB ReplicaSet Single](./src/mongodb-replicaset-single)   | 8.2.3               |
 | [MongoDB ReplicaSet](./src/mongodb-replicaset)                 | 8.2.3               |
-| [MongoDB Standalone](./src/mongodb-standalone)                 | 8.2.3               |
-| [MySQL](./src/mysql)                                           | 9.4.0               |
+| [MongoDB Standalone](./src/mongodb-standalone)                 | 8.3.4               |
+| [MySQL](./src/mysql)                                           | 9.7.1               |
 | [n8n](./apps/n8n)                                              | 1.114.0             |
 | [Nanobot](./apps/nanobot)                                      | v0.1.3.post4        |
 | [Nacos](./src/nacos)                                           | v3.1.0              |
@@ -138,7 +138,7 @@ These services require building custom Docker images from source.
 | [NexaSDK](./src/nexa-sdk)                                      | v0.2.62             |
 | [Neo4j](./src/neo4j)                                           | 5.27.4              |
 | [Netdata](./src/netdata)                                       | latest              |
-| [Nginx](./src/nginx)                                           | 1.28.2              |
+| [Nginx](./src/nginx)                                           | 1.29.4              |
 | [Node Exporter](./src/node-exporter)                           | v1.8.2              |
 | [OceanBase](./src/oceanbase)                                   | 4.3.3               |
 | [Odoo](./src/odoo)                                             | 19.0                |
@@ -166,16 +166,16 @@ These services require building custom Docker images from source.
 | [Pogocache](./src/pogocache)                                   | 1.3.1               |
 | [Portainer](./src/portainer)                                   | 2.27.3-alpine       |
 | [Portkey AI Gateway](./src/portkey-gateway)                    | latest              |
-| [PostgreSQL](./src/postgres)                                   | 17.6                |
+| [PostgreSQL](./src/postgres)                                   | 17.10               |
 | [Prometheus](./src/prometheus)                                 | 3.5.1               |
 | [PyTorch](./src/pytorch)                                       | 2.6.0               |
 | [Qdrant](./src/qdrant)                                         | 1.15.4              |
-| [RabbitMQ](./src/rabbitmq)                                     | 4.2.3               |
+| [RabbitMQ](./src/rabbitmq)                                     | 4.2.4               |
 | [RAGFlow](./apps/ragflow)                                      | v0.24.0             |
 | [Ray](./src/ray)                                               | 2.42.1              |
 | [Redpanda](./src/redpanda)                                     | v24.3.1             |
 | [Redis Cluster](./src/redis-cluster)                           | 8.2.1               |
-| [Redis](./src/redis)                                           | 8.2.1               |
+| [Redis](./src/redis)                                           | 8.8.0               |
 | [Renovate](./src/renovate)                                     | 42.85.4-full        |
 | [Restate Cluster](./src/restate-cluster)                       | 1.5.3               |
 | [Restate](./src/restate)                                       | 1.5.3               |
@@ -183,7 +183,7 @@ These services require building custom Docker images from source.
 | [SearXNG](./src/searxng)                                       | 2025.1.20-1ce14ef99 |
 | [Selenium](./src/selenium)                                     | 144.0-20260120      |
 | [Shannon](./apps/shannon)                                      | v0.3.1              |
-| [SigNoz](./src/signoz)                                         | v0.131.1            |
+| [SigNoz](./src/signoz)                                         | v0.132.2            |
 | [Sim](./apps/sim)                                              | latest              |
 | [Skyvern](./apps/skyvern)                                      | v1.0.31             |
 | [Stable Diffusion WebUI](./apps/stable-diffusion-webui-docker) | latest              |
@@ -233,6 +233,7 @@ These services require building custom Docker images from source.
 | [Redis MCP](./mcp-servers/redis)                        | latest  |
 | [Rust Filesystem](./mcp-servers/rust-mcp-filesystem)    | latest  |
 | [Sequential Thinking](./mcp-servers/sequentialthinking) | latest  |
+| [SigNoz MCP Server](./mcp-servers/signoz-mcp-server)    | v0.8.0  |
 | [SQLite](./mcp-servers/sqlite)                          | latest  |
 | [Tavily](./mcp-servers/tavily)                          | latest  |
 | [Text to GraphQL](./mcp-servers/text-to-graphql)        | latest  |
@@ -53,7 +53,7 @@ docker compose exec redis redis-cli ping
 | [Apache Flink](./src/flink)                                    | 1.20.0              |
 | [Apache HBase](./src/hbase)                                    | 2.6                 |
 | [Apache HTTP Server](./src/apache)                             | 2.4.62              |
-| [Apache Kafka](./src/kafka)                                    | 7.8.0               |
+| [Apache Kafka](./src/kafka)                                    | 8.2.0               |
 | [Apache Pulsar](./src/pulsar)                                  | 4.0.7               |
 | [Apache RocketMQ](./src/rocketmq)                              | 5.3.1               |
 | [Archon](./apps/archon)                                        | latest              |
@@ -78,7 +78,7 @@ docker compose exec redis redis-cli ping
 | [DuckDB](./src/duckdb)                                         | v1.1.3              |
 | [Easy Dataset](./apps/easy-dataset)                            | 1.5.1               |
 | [EasyTier](./src/easytier)                                     | v2.6.0              |
-| [Elasticsearch](./src/elasticsearch)                           | 9.3.0               |
+| [Elasticsearch](./src/elasticsearch)                           | 9.4.2               |
 | [etcd](./src/etcd)                                             | 3.6.0               |
 | [FalkorDB](./src/falkordb)                                     | v4.14.11            |
 | [Firecrawl](./src/firecrawl)                                   | latest              |
@@ -91,7 +91,7 @@ docker compose exec redis redis-cli ping
 | [GitLab](./src/gitlab)                                         | 18.8.3-ce.0         |
 | [GoModel](./src/gomodel)                                       | v0.1.27             |
 | [GPUStack](./src/gpustack)                                     | v0.5.3              |
-| [Grafana](./src/grafana)                                       | 12.3.2              |
+| [Grafana](./src/grafana)                                       | 12.3.3              |
 | [Grafana Loki](./src/loki)                                     | 3.3.2               |
 | [Grafana Tempo](./src/tempo)                                   | 2.7.2               |
 | [Halo](./src/halo)                                             | 2.21.9              |
@@ -124,13 +124,13 @@ docker compose exec redis redis-cli ping
 | [Milvus Standalone Embed](./src/milvus-standalone-embed)       | v2.6.7              |
 | [Milvus Standalone](./src/milvus-standalone)                   | v2.6.7              |
 | [Minecraft Bedrock Server](./src/minecraft-bedrock-server)     | latest              |
-| [MinIO](./src/minio)                                           | 0.20260202          |
+| [MinIO](./src/minio)                                           | latest              |
 | [MLflow](./src/mlflow)                                         | v2.20.2             |
 | [OpenClaw](./apps/openclaw)                                    | 2026.2.3            |
 | [MongoDB ReplicaSet Single](./src/mongodb-replicaset-single)   | 8.2.3               |
 | [MongoDB ReplicaSet](./src/mongodb-replicaset)                 | 8.2.3               |
-| [MongoDB Standalone](./src/mongodb-standalone)                 | 8.2.3               |
-| [MySQL](./src/mysql)                                           | 9.4.0               |
+| [MongoDB Standalone](./src/mongodb-standalone)                 | 8.3.4               |
+| [MySQL](./src/mysql)                                           | 9.7.1               |
 | [n8n](./apps/n8n)                                              | 1.114.0             |
 | [Nanobot](./apps/nanobot)                                      | v0.1.3.post4        |
 | [Nacos](./src/nacos)                                           | v3.1.0              |
@@ -138,7 +138,7 @@ docker compose exec redis redis-cli ping
 | [NexaSDK](./src/nexa-sdk)                                      | v0.2.62             |
 | [Neo4j](./src/neo4j)                                           | 5.27.4              |
 | [Netdata](./src/netdata)                                       | latest              |
-| [Nginx](./src/nginx)                                           | 1.28.2              |
+| [Nginx](./src/nginx)                                           | 1.29.4              |
 | [Node Exporter](./src/node-exporter)                           | v1.8.2              |
 | [OceanBase](./src/oceanbase)                                   | 4.3.3               |
 | [Odoo](./src/odoo)                                             | 19.0                |
@@ -166,16 +166,16 @@ docker compose exec redis redis-cli ping
 | [Pogocache](./src/pogocache)                                   | 1.3.1               |
 | [Portainer](./src/portainer)                                   | 2.27.3-alpine       |
 | [Portkey AI Gateway](./src/portkey-gateway)                    | latest              |
-| [PostgreSQL](./src/postgres)                                   | 17.6                |
+| [PostgreSQL](./src/postgres)                                   | 17.10               |
 | [Prometheus](./src/prometheus)                                 | 3.5.1               |
 | [PyTorch](./src/pytorch)                                       | 2.6.0               |
 | [Qdrant](./src/qdrant)                                         | 1.15.4              |
-| [RabbitMQ](./src/rabbitmq)                                     | 4.2.3               |
+| [RabbitMQ](./src/rabbitmq)                                     | 4.2.4               |
 | [RAGFlow](./apps/ragflow)                                      | v0.24.0             |
 | [Ray](./src/ray)                                               | 2.42.1              |
 | [Redpanda](./src/redpanda)                                     | v24.3.1             |
 | [Redis Cluster](./src/redis-cluster)                           | 8.2.1               |
-| [Redis](./src/redis)                                           | 8.2.1               |
+| [Redis](./src/redis)                                           | 8.8.0               |
 | [Renovate](./src/renovate)                                     | 42.85.4-full        |
 | [Restate Cluster](./src/restate-cluster)                       | 1.5.3               |
 | [Restate](./src/restate)                                       | 1.5.3               |
@@ -183,7 +183,7 @@ docker compose exec redis redis-cli ping
 | [SearXNG](./src/searxng)                                       | 2025.1.20-1ce14ef99 |
 | [Selenium](./src/selenium)                                     | 144.0-20260120      |
 | [Shannon](./apps/shannon)                                      | v0.3.1              |
-| [SigNoz](./src/signoz)                                         | v0.131.1            |
+| [SigNoz](./src/signoz)                                         | v0.132.2            |
 | [Sim](./apps/sim)                                              | latest              |
 | [Skyvern](./apps/skyvern)                                      | v1.0.31             |
 | [Stable Diffusion WebUI](./apps/stable-diffusion-webui-docker) | latest              |
@@ -233,6 +233,7 @@ docker compose exec redis redis-cli ping
 | [Redis MCP](./mcp-servers/redis)                        | latest |
 | [Rust Filesystem](./mcp-servers/rust-mcp-filesystem)    | latest |
 | [Sequential Thinking](./mcp-servers/sequentialthinking) | latest |
+| [SigNoz MCP Server](./mcp-servers/signoz-mcp-server)    | v0.8.0 |
 | [SQLite](./mcp-servers/sqlite)                          | latest |
 | [Tavily](./mcp-servers/tavily)                          | latest |
 | [Text to GraphQL](./mcp-servers/text-to-graphql)        | latest |
@@ -0,0 +1,35 @@
+# Optional registry prefix prepended to the official image name; include a trailing slash when set.
+GLOBAL_REGISTRY=
+
+# Official SigNoz MCP Server image version.
+SIGNOZ_MCP_SERVER_VERSION=v0.8.0
+
+# Host address for the MCP endpoint; keep loopback unless using an authenticated reverse proxy.
+SIGNOZ_MCP_SERVER_HOST_BIND=127.0.0.1
+
+# Host port mapped to the MCP server's internal port 8000.
+SIGNOZ_MCP_SERVER_PORT_OVERRIDE=8000
+
+# SigNoz base URL without an API path, preferably using HTTPS for remote instances.
+SIGNOZ_URL=
+
+# SigNoz API key with viewer, editor, or admin access; do not use an ingestion key.
+SIGNOZ_API_KEY=
+
+# Application log level, such as debug, info, warning, or error.
+LOG_LEVEL=info
+
+# Maximum CPU cores available to the service.
+SIGNOZ_MCP_SERVER_CPU_LIMIT=1.0
+
+# Maximum memory available to the service.
+SIGNOZ_MCP_SERVER_MEMORY_LIMIT=512M
+
+# CPU cores reserved for the service.
+SIGNOZ_MCP_SERVER_CPU_RESERVATION=0.1
+
+# Memory reserved for the service.
+SIGNOZ_MCP_SERVER_MEMORY_RESERVATION=128M
+
+# Container timezone using an IANA timezone name.
+TZ=UTC
@@ -0,0 +1,62 @@
+# SigNoz MCP Server
+
+The official SigNoz MCP Server exposes SigNoz observability data and tools to Model Context Protocol (MCP) clients over HTTP.
+
+## Included Service
+
+- `signoz-mcp-server`: Official stateless HTTP MCP server. Its MCP endpoint is `http://localhost:8000/mcp` by default.
+
+## Prerequisites
+
+- An existing SigNoz instance reachable from the container.
+- A SigNoz API key created in **Settings > API Keys**.
+
+## Quick Start
+
+```bash
+cp .env.example .env
+```
+
+Edit `.env` and set `SIGNOZ_URL` to the SigNoz base URL without an API path, plus `SIGNOZ_API_KEY`. Configuring both is recommended for a simple single-instance setup. They default to empty so HTTP clients that support per-request credentials can supply them instead.
+
+```bash
+docker compose up -d
+```
+
+Configure the MCP client to use:
+
+```text
+http://localhost:8000/mcp
+```
+
+## Key Environment Variables
+
+| Variable                               | Default  | Description                                      |
+| -------------------------------------- | -------- | ------------------------------------------------ |
+| `SIGNOZ_MCP_SERVER_VERSION`            | `v0.8.0` | Official image version                           |
+| `SIGNOZ_MCP_SERVER_HOST_BIND`          | `127.0.0.1` | Host address for the MCP HTTP endpoint         |
+| `SIGNOZ_MCP_SERVER_PORT_OVERRIDE`      | `8000`   | Host port for the MCP HTTP endpoint              |
+| `SIGNOZ_URL`                           | Empty    | SigNoz base URL without an API path              |
+| `SIGNOZ_API_KEY`                       | Empty    | API key with viewer, editor, or admin access     |
+| `LOG_LEVEL`                            | `info`   | Server log level                                 |
+| `SIGNOZ_MCP_SERVER_CPU_LIMIT`          | `1.0`    | CPU limit                                        |
+| `SIGNOZ_MCP_SERVER_MEMORY_LIMIT`       | `512M`   | Memory limit                                     |
+| `SIGNOZ_MCP_SERVER_CPU_RESERVATION`    | `0.1`    | CPU reservation                                  |
+| `SIGNOZ_MCP_SERVER_MEMORY_RESERVATION` | `128M`   | Memory reservation                               |
+| `TZ`                                   | `UTC`    | Container timezone                               |
+
+## Storage
+
+The server is stateless and uses no named volume.
+
+## Health Monitoring
+
+The published `v0.8.0` image contains no shell or HTTP probe utility, so an in-container Docker healthcheck cannot call its probe endpoints. Monitor `http://localhost:8000/readyz` externally.
+
+## Security
+
+The published `v0.8.0` image defaults to root, so this stack forces UID/GID `1001:1001`. It also uses a read-only filesystem, drops all Linux capabilities, enables `no-new-privileges`, and provides only a temporary `/tmp`. The MCP endpoint is unauthenticated and therefore binds to loopback by default; expose it only through an authenticated reverse proxy. Protect the `.env` API key, use outbound HTTPS, and do not use a SigNoz ingestion key.
+
+## Compatibility
+
+Some tools require newer SigNoz releases. See the [upstream README](https://github.com/SigNoz/signoz-mcp-server#readme) for current compatibility and advanced OAuth or multitenancy configuration.
@@ -0,0 +1,62 @@
+# SigNoz MCP Server
+
+官方 SigNoz MCP Server 通过 HTTP 向模型上下文协议（MCP）客户端提供 SigNoz 可观测性数据和工具。
+
+## 包含的服务
+
+- `signoz-mcp-server`：官方无状态 HTTP MCP 服务器。默认 MCP 端点为 `http://localhost:8000/mcp`。
+
+## 前置条件
+
+- 一个容器可访问的现有 SigNoz 实例。
+- 在 **Settings > API Keys** 中创建的 SigNoz API 密钥。
+
+## 快速开始
+
+```bash
+cp .env.example .env
+```
+
+编辑 `.env`，将 `SIGNOZ_URL` 设置为不含 API 路径的 SigNoz 基础 URL，并设置 `SIGNOZ_API_KEY`。对于简单的单实例部署，建议同时配置这两项。它们默认为空，因此支持逐请求凭据的 HTTP 客户端也可以自行提供凭据。
+
+```bash
+docker compose up -d
+```
+
+将 MCP 客户端配置为使用：
+
+```text
+http://localhost:8000/mcp
+```
+
+## 主要环境变量
+
+| 变量                                   | 默认值   | 说明                              |
+| -------------------------------------- | -------- | --------------------------------- |
+| `SIGNOZ_MCP_SERVER_VERSION`            | `v0.8.0` | 官方镜像版本                      |
+| `SIGNOZ_MCP_SERVER_HOST_BIND`          | `127.0.0.1` | MCP HTTP 端点的主机监听地址     |
+| `SIGNOZ_MCP_SERVER_PORT_OVERRIDE`      | `8000`   | MCP HTTP 端点的主机端口           |
+| `SIGNOZ_URL`                           | 空       | 不含 API 路径的 SigNoz 基础 URL   |
+| `SIGNOZ_API_KEY`                       | 空       | 具有查看者、编辑者或管理员权限的 API 密钥 |
+| `LOG_LEVEL`                            | `info`   | 服务器日志级别                    |
+| `SIGNOZ_MCP_SERVER_CPU_LIMIT`          | `1.0`    | CPU 上限                          |
+| `SIGNOZ_MCP_SERVER_MEMORY_LIMIT`       | `512M`   | 内存上限                          |
+| `SIGNOZ_MCP_SERVER_CPU_RESERVATION`    | `0.1`    | CPU 预留量                        |
+| `SIGNOZ_MCP_SERVER_MEMORY_RESERVATION` | `128M`   | 内存预留量                        |
+| `TZ`                                   | `UTC`    | 容器时区                          |
+
+## 存储
+
+该服务器是无状态服务，不使用命名卷。
+
+## 健康监控
+
+发布的 `v0.8.0` 镜像不包含 shell 或 HTTP 探测工具，因此容器内 Docker 健康检查无法调用其探测端点。请从外部监控 `http://localhost:8000/readyz`。
+
+## 安全
+
+发布的 `v0.8.0` 镜像默认以 root 用户运行，因此此栈强制使用 UID/GID `1001:1001`。此栈还采用只读文件系统、移除全部 Linux capabilities、启用 `no-new-privileges`，并仅提供临时 `/tmp`。MCP 端点未启用身份验证，因此默认只监听回环地址；仅应通过经过身份验证的反向代理公开。请保护 `.env` 中的 API 密钥、使用出站 HTTPS，并且不要使用 SigNoz ingestion key。
+
+## 兼容性
+
+部分工具需要较新的 SigNoz 版本。当前兼容性以及高级 OAuth 或多租户配置请参阅[上游 README](https://github.com/SigNoz/signoz-mcp-server#readme)。
@@ -0,0 +1,37 @@
+x-defaults: &defaults
+  restart: unless-stopped
+  logging:
+    driver: json-file
+    options:
+      max-size: 100m
+      max-file: '3'
+
+services:
+  signoz-mcp-server:
+    <<: *defaults
+    image: ${GLOBAL_REGISTRY:-}signoz/signoz-mcp-server:${SIGNOZ_MCP_SERVER_VERSION:-v0.8.0}
+    user: '1001:1001'
+    environment:
+      - TRANSPORT_MODE=http
+      - MCP_SERVER_PORT=8000
+      - SIGNOZ_URL=${SIGNOZ_URL:-}
+      - SIGNOZ_API_KEY=${SIGNOZ_API_KEY:-}
+      - LOG_LEVEL=${LOG_LEVEL:-info}
+      - TZ=${TZ:-UTC}
+    ports:
+      - '${SIGNOZ_MCP_SERVER_HOST_BIND:-127.0.0.1}:${SIGNOZ_MCP_SERVER_PORT_OVERRIDE:-8000}:8000'
+    read_only: true
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    tmpfs:
+      - /tmp
+    deploy:
+      resources:
+        limits:
+          cpus: ${SIGNOZ_MCP_SERVER_CPU_LIMIT:-1.0}
+          memory: ${SIGNOZ_MCP_SERVER_MEMORY_LIMIT:-512M}
+        reservations:
+          cpus: ${SIGNOZ_MCP_SERVER_CPU_RESERVATION:-0.1}
+          memory: ${SIGNOZ_MCP_SERVER_MEMORY_RESERVATION:-128M}
@@ -12,7 +12,7 @@ This service deploys Elasticsearch, a distributed search and analytics engine.

 | Variable Name                         | Description                                         | Default Value    |
 | ------------------------------------- | --------------------------------------------------- | ---------------- |
-| ELASTICSEARCH_VERSION                 | Elasticsearch image version                         | `8.16.1`         |
+| ELASTICSEARCH_VERSION                 | Elasticsearch image version                         | `9.4.2`          |
 | ELASTICSEARCH_HTTP_PORT_OVERRIDE      | Host port mapping for HTTP (maps to port 9200)      | 9200             |
 | ELASTICSEARCH_TRANSPORT_PORT_OVERRIDE | Host port mapping for transport (maps to port 9300) | 9300             |
 | ELASTICSEARCH_CLUSTER_NAME            | Name of the Elasticsearch cluster                   | `docker-cluster` |
@@ -12,7 +12,7 @@

 | 变量名                                  | 说明                                  | 默认值           |
 | --------------------------------------- | ------------------------------------- | ---------------- |
-| `ELASTICSEARCH_VERSION`                 | Elasticsearch 镜像版本                | `8.16.1`         |
+| `ELASTICSEARCH_VERSION`                 | Elasticsearch 镜像版本                | `9.4.2`          |
 | `ELASTICSEARCH_HTTP_PORT_OVERRIDE`      | HTTP 主机端口映射（映射到端口 9200）  | `9200`           |
 | `ELASTICSEARCH_TRANSPORT_PORT_OVERRIDE` | 传输层主机端口映射（映射到端口 9300） | `9300`           |
 | `ELASTICSEARCH_CLUSTER_NAME`            | Elasticsearch 集群名称                | `docker-cluster` |
@@ -1,7 +1,7 @@
 # Grafana Environment Variables

 # Grafana image version
-GRAFANA_VERSION=12.3.2
+GRAFANA_VERSION=12.3.3

 # Host port mapping (maps to Grafana port 3000 in container)
 GRAFANA_PORT_OVERRIDE=3000
@@ -12,7 +12,7 @@ This service deploys Grafana, an open-source analytics and monitoring platform f

 | Variable Name          | Description                                                | Default Value           |
 | ---------------------- | ---------------------------------------------------------- | ----------------------- |
-| GRAFANA_VERSION        | Grafana image version                                      | `12.1.1`                |
+| GRAFANA_VERSION        | Grafana image version                                      | `12.3.3`                |
 | GRAFANA_PORT_OVERRIDE  | Host port mapping (maps to Grafana port 3000 in container) | `3000`                  |
 | GRAFANA_ADMIN_USER     | Admin username                                             | `admin`                 |
 | GRAFANA_ADMIN_PASSWORD | Admin password                                             | `admin`                 |
@@ -12,7 +12,7 @@

 | 变量名                 | 描述                                             | 默认值                  |
 | ---------------------- | ------------------------------------------------ | ----------------------- |
-| GRAFANA_VERSION        | Grafana 镜像版本                                 | `12.1.1`                |
+| GRAFANA_VERSION        | Grafana 镜像版本                                 | `12.3.3`                |
 | GRAFANA_PORT_OVERRIDE  | 主机端口映射（映射到容器中的 Grafana 端口 3000） | `3000`                  |
 | GRAFANA_ADMIN_USER     | 管理员用户名                                     | `admin`                 |
 | GRAFANA_ADMIN_PASSWORD | 管理员密码                                       | `admin`                 |
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  grafana:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}grafana/grafana:${GRAFANA_VERSION:-12.3.2}
+    image: ${GLOBAL_REGISTRY:-}grafana/grafana:${GRAFANA_VERSION:-12.3.3}
    ports:
      - '${GRAFANA_PORT_OVERRIDE:-3000}:3000'
    volumes:
@@ -1,6 +1,9 @@
 # Kafka version (Confluent Platform version)
 KAFKA_VERSION=8.2.0

+# Kafka UI version
+KAFKA_UI_VERSION=v0.7.2
+
 # Timezone
 TZ=UTC

@@ -14,8 +14,8 @@ This service deploys Apache Kafka, a distributed streaming platform, along with

 | Variable Name                    | Description                                          | Default Value   |
 | -------------------------------- | ---------------------------------------------------- | --------------- |
-| KAFKA_VERSION                    | Kafka image version                                  | `7.8.0`         |
-| KAFKA_UI_VERSION                 | Kafka UI image version                               | `latest`        |
+| KAFKA_VERSION                    | Kafka image version                                  | `8.2.0`         |
+| KAFKA_UI_VERSION                 | Kafka UI image version                               | `v0.7.2`        |
 | ZOOKEEPER_CLIENT_PORT_OVERRIDE   | Host port mapping for Zookeeper (maps to port 2181)  | 2181            |
 | KAFKA_BROKER_PORT_OVERRIDE       | Host port mapping for Kafka (maps to port 9092)      | 9092            |
 | KAFKA_JMX_PORT_OVERRIDE          | Host port mapping for JMX (maps to port 9999)        | 9999            |
@@ -14,8 +14,8 @@

 | 变量名                             | 说明                                      | 默认值          |
 | ---------------------------------- | ----------------------------------------- | --------------- |
-| `KAFKA_VERSION`                    | Kafka 镜像版本                            | `7.8.0`         |
-| `KAFKA_UI_VERSION`                 | Kafka UI 镜像版本                         | `latest`        |
+| `KAFKA_VERSION`                    | Kafka 镜像版本                            | `8.2.0`         |
+| `KAFKA_UI_VERSION`                 | Kafka UI 镜像版本                         | `v0.7.2`        |
 | `ZOOKEEPER_CLIENT_PORT_OVERRIDE`   | Zookeeper 主机端口映射（映射到端口 2181） | `2181`          |
 | `KAFKA_BROKER_PORT_OVERRIDE`       | Kafka 主机端口映射（映射到端口 9092）     | `9092`          |
 | `KAFKA_JMX_PORT_OVERRIDE`          | JMX 主机端口映射（映射到端口 9999）       | `9999`          |
@@ -94,7 +94,7 @@ services:
  # Kafka UI (optional)
  kafka-ui:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}provectuslabs/kafka-ui:${KAFKA_UI_VERSION:-latest}
+    image: ${GLOBAL_REGISTRY:-}provectuslabs/kafka-ui:${KAFKA_UI_VERSION:-v0.7.2}
    profiles:
      - ui
    depends_on:
@@ -10,7 +10,7 @@ x-defaults: &defaults
 services:
  minio:
    <<: *defaults
-    image: ${CGR_DEV_REGISTRY:cgr.dev-}/chainguard/minio:${MINIO_VERSION:-latest}
+    image: ${CGR_DEV_REGISTRY:-cgr.dev}/chainguard/minio:${MINIO_VERSION:-latest}
    ports:
      - '${MINIO_PORT_OVERRIDE_API:-9000}:9000'
      - '${MINIO_PORT_OVERRIDE_WEBUI:-9001}:9001'
@@ -1,5 +1,5 @@
 # MongoDB Version
-MONGO_VERSION=8.3.3
+MONGO_VERSION=8.3.4

 # MongoDB root credentials
 MONGO_INITDB_ROOT_USERNAME=root
@@ -33,7 +33,7 @@ MongoDB is a document database designed for ease of application development and

 | Variable                     | Description      | Default    |
 | ---------------------------- | ---------------- | ---------- |
-| `MONGO_VERSION`              | MongoDB version  | `8.2.3`    |
+| `MONGO_VERSION`              | MongoDB version  | `8.3.4`    |
 | `MONGO_INITDB_ROOT_USERNAME` | Root username    | `root`     |
 | `MONGO_INITDB_ROOT_PASSWORD` | Root password    | `password` |
 | `MONGO_INITDB_DATABASE`      | Initial database | `admin`    |
@@ -33,7 +33,7 @@ MongoDB 是一个为应用程序开发和扩展的简易性而设计的文档数

 | 变量                         | 描述         | 默认值     |
 | ---------------------------- | ------------ | ---------- |
-| `MONGO_VERSION`              | MongoDB 版本 | `8.2.3`    |
+| `MONGO_VERSION`              | MongoDB 版本 | `8.3.4`    |
 | `MONGO_INITDB_ROOT_USERNAME` | 根用户名     | `root`     |
 | `MONGO_INITDB_ROOT_PASSWORD` | 根密码       | `password` |
 | `MONGO_INITDB_DATABASE`      | 初始数据库   | `admin`    |
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  mongo:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}mongo:${MONGO_VERSION:-8.3.3}
+    image: ${GLOBAL_REGISTRY:-}mongo:${MONGO_VERSION:-8.3.4}
    environment:
      TZ: ${TZ:-UTC}
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME:-root}
@@ -1,5 +1,5 @@
 # MySQL Version
-MYSQL_VERSION=9.7.0
+MYSQL_VERSION=9.7.1

 # Root password for MySQL
 MYSQL_ROOT_PASSWORD=password
@@ -10,7 +10,7 @@ This service deploys a MySQL database.

 ## Configuration

- `MYSQL_VERSION`: The version of the MySQL image, default is `9.4.0`.
+- `MYSQL_VERSION`: The version of the MySQL image, default is `9.7.1`.
 - `MYSQL_PORT_OVERRIDE`: The host port for MySQL, default is `3306`.
 - `MYSQL_ROOT_PASSWORD`: The root password, default is `password`.
 - `MYSQL_ROOT_HOST`: The root host, default is `%`.
@@ -10,7 +10,7 @@

 ## 配置

- `MYSQL_VERSION`: MySQL 镜像的版本，默认为 `9.4.0`。
+- `MYSQL_VERSION`: MySQL 镜像的版本，默认为 `9.7.1`。
 - `MYSQL_PORT_OVERRIDE`: MySQL 的主机端口，默认为 `3306`。
 - `MYSQL_ROOT_PASSWORD`: root 密码，默认为 `password`。
 - `MYSQL_ROOT_HOST`: root 主机，默认为 `%`。
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  mysql:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}mysql:${MYSQL_VERSION:-9.7.0}
+    image: ${GLOBAL_REGISTRY:-}mysql:${MYSQL_VERSION:-9.7.1}
    ports:
      - '${MYSQL_PORT_OVERRIDE:-3306}:3306'
    volumes:
@@ -1,5 +1,5 @@
 # Nginx version
-NGINX_VERSION=1.29.3-alpine3.23
+NGINX_VERSION=1.29.4-alpine3.23

 # Timezone
 TZ=UTC
@@ -12,7 +12,7 @@ This service deploys Nginx, a high-performance web server and reverse proxy serv

 | Variable Name             | Description                                    | Default Value       |
 | ------------------------- | ---------------------------------------------- | ------------------- |
-| NGINX_VERSION             | Nginx image version                            | `1.29.1-alpine3.20` |
+| NGINX_VERSION             | Nginx image version                            | `1.29.4-alpine3.23` |
 | NGINX_HTTP_PORT_OVERRIDE  | Host port mapping for HTTP (maps to port 80)   | 80                  |
 | NGINX_HTTPS_PORT_OVERRIDE | Host port mapping for HTTPS (maps to port 443) | 443                 |
 | NGINX_HOST                | Server hostname for configuration              | `localhost`         |
@@ -12,7 +12,7 @@

 | 变量名                    | 描述                                 | 默认值              |
 | ------------------------- | ------------------------------------ | ------------------- |
-| NGINX_VERSION             | Nginx 镜像版本                       | `1.29.1-alpine3.20` |
+| NGINX_VERSION             | Nginx 镜像版本                       | `1.29.4-alpine3.23` |
 | NGINX_HTTP_PORT_OVERRIDE  | HTTP 主机端口映射（映射到端口 80）   | 80                  |
 | NGINX_HTTPS_PORT_OVERRIDE | HTTPS 主机端口映射（映射到端口 443） | 443                 |
 | NGINX_HOST                | 配置的服务器主机名                   | `localhost`         |
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  nginx:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}nginx:${NGINX_VERSION:-1.29.3-alpine3.23}
+    image: ${GLOBAL_REGISTRY:-}nginx:${NGINX_VERSION:-1.29.4-alpine3.23}
    ports:
      - '${NGINX_HTTP_PORT_OVERRIDE:-80}:80'
      - '${NGINX_HTTPS_PORT_OVERRIDE:-443}:443'
@@ -10,7 +10,7 @@ This service deploys a PostgreSQL database.

 ## Configuration

- `POSTGRES_VERSION`: The version of the PostgreSQL image, default is `17.6`.
+- `POSTGRES_VERSION`: The version of the PostgreSQL image, default is `17.10`.
 - `POSTGRES_USER`: The database username, default is `postgres`.
 - `POSTGRES_PASSWORD`: The database password, default is `postgres`.
 - `POSTGRES_DB`: The database name, default is `postgres`.
@@ -10,7 +10,7 @@

 ## 配置

- `POSTGRES_VERSION`: PostgreSQL 镜像的版本，默认为 `17.6`。
+- `POSTGRES_VERSION`: PostgreSQL 镜像的版本，默认为 `17.10`。
 - `POSTGRES_USER`: 数据库用户名，默认为 `postgres`。
 - `POSTGRES_PASSWORD`: 数据库密码，默认为 `postgres`。
 - `POSTGRES_DB`: 数据库名称，默认为 `postgres`。
@@ -1,5 +1,5 @@
 # RabbitMQ Version
-RABBITMQ_VERSION=4.2.3-management-alpine
+RABBITMQ_VERSION=4.2.4-management-alpine

 # RabbitMQ credentials
 RABBITMQ_DEFAULT_USER=admin
@@ -10,7 +10,7 @@ This service deploys RabbitMQ, a message broker for reliable messaging between a

 ## Configuration

- `RABBITMQ_VERSION`: The version of the RabbitMQ image, default is `4.1.4-management-alpine`.
+- `RABBITMQ_VERSION`: The version of the RabbitMQ image, default is `4.2.4-management-alpine`.
 - `RABBITMQ_PORT`: The host port for RabbitMQ, default is `5672`.
 - `RABBITMQ_MANAGEMENT_PORT`: The host port for RabbitMQ Management UI, default is `15672`.
 - `RABBITMQ_DEFAULT_USER`: The default username, default is `admin`.
@@ -10,7 +10,7 @@

 ## 配置

- `RABBITMQ_VERSION`: RabbitMQ 镜像的版本，默认为 `4.1.4-management-alpine`。
+- `RABBITMQ_VERSION`: RabbitMQ 镜像的版本，默认为 `4.2.4-management-alpine`。
 - `RABBITMQ_PORT`: RabbitMQ 的主机端口，默认为 `5672`。
 - `RABBITMQ_MANAGEMENT_PORT`: RabbitMQ 管理界面的主机端口，默认为 `15672`。
 - `RABBITMQ_DEFAULT_USER`: 默认用户名，默认为 `admin`。
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  rabbitmq:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}rabbitmq:${RABBITMQ_VERSION:-4.2.3-management-alpine}
+    image: ${GLOBAL_REGISTRY:-}rabbitmq:${RABBITMQ_VERSION:-4.2.4-management-alpine}
    volumes:
      - rabbitmq_data:/var/lib/rabbitmq
    ports:
@@ -2,7 +2,7 @@
 GLOBAL_REGISTRY=

 # Redis version
-REDIS_VERSION=8.4.0-alpine3.23
+REDIS_VERSION=8.8.0-alpine3.23

 # Password for Redis authentication (leave empty for no password)
 REDIS_PASSWORD=
@@ -19,7 +19,7 @@ docker compose up -d
 | Variable Name              | Description                                              | Default Value      |
 | -------------------------- | -------------------------------------------------------- | ------------------ |
 | `GLOBAL_REGISTRY`          | Global registry prefix for all images                    | `""`               |
-| `REDIS_VERSION`            | Redis image version                                      | `8.2.1-alpine3.22` |
+| `REDIS_VERSION`            | Redis image version                                      | `8.8.0-alpine3.23` |
 | `REDIS_PASSWORD`           | Password for Redis authentication (empty = no auth)      | `""`               |
 | `REDIS_PORT_OVERRIDE`      | Host port mapping (maps to Redis port 6379 in container) | `6379`             |
 | `TZ`                       | Timezone                                                 | `UTC`              |
@@ -19,7 +19,7 @@ docker compose up -d
 | 变量名                     | 说明                                         | 默认值             |
 | -------------------------- | -------------------------------------------- | ------------------ |
 | `GLOBAL_REGISTRY`          | 全局镜像仓库前缀                             | `""`               |
-| `REDIS_VERSION`            | Redis 镜像版本                               | `8.2.1-alpine3.22` |
+| `REDIS_VERSION`            | Redis 镜像版本                               | `8.8.0-alpine3.23` |
 | `REDIS_PASSWORD`           | Redis 认证密码（留空表示不启用认证）         | `""`               |
 | `REDIS_PORT_OVERRIDE`      | 主机端口映射（映射到容器内 Redis 端口 6379） | `6379`             |
 | `TZ`                       | 时区                                         | `UTC`              |
@@ -9,7 +9,7 @@ x-defaults: &defaults
 services:
  redis:
    <<: *defaults
-    image: ${GLOBAL_REGISTRY:-}redis:${REDIS_VERSION:-8.4.0-alpine3.23}
+    image: ${GLOBAL_REGISTRY:-}redis:${REDIS_VERSION:-8.8.0-alpine3.23}
    ports:
      - '${REDIS_PORT_OVERRIDE:-6379}:6379'
    volumes:
@@ -13,7 +13,7 @@ TZ=UTC
 SIGNOZ_IMAGE_NAME=signoz/signoz

 # SigNoz all-in-one backend + frontend + alertmanager version
-SIGNOZ_VERSION=v0.131.1
+SIGNOZ_VERSION=v0.132.2

 # SigNoz OTel Collector version (also used for migration jobs)
 SIGNOZ_OTEL_COLLECTOR_VERSION=v0.144.5
@@ -17,7 +17,7 @@ SigNoz is an open-source observability platform that provides monitoring and tro

 | Service                          | Image                                                             | Description                                            |
 | -------------------------------- | ----------------------------------------------------------------- | ------------------------------------------------------ |
-| `signoz`                         | `${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.131.1}` | All-in-one backend, frontend UI, and alert manager     |
+| `signoz`                         | `${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.132.2}` | All-in-one backend, frontend UI, and alert manager     |
 | `otel-collector`                 | signoz/signoz-otel-collector:v0.144.5                             | Receives, processes, and exports telemetry data        |
 | `clickhouse`                     | clickhouse/clickhouse-server:26.4.4                               | Time-series database for traces, metrics, and logs     |
 | `zookeeper-1`                    | signoz/zookeeper:3.7.1                                            | ZooKeeper for ClickHouse replication metadata          |
@@ -62,7 +62,7 @@ SigNoz is an open-source observability platform that provides monitoring and tro
 | `SIGNOZ_OTEL_GRPC_PORT_OVERRIDE` | `4317`                      | OTLP gRPC receiver host port                   |
 | `SIGNOZ_OTEL_HTTP_PORT_OVERRIDE` | `4318`                      | OTLP HTTP receiver host port                   |
 | `SIGNOZ_IMAGE_NAME`              | `signoz/signoz`             | SigNoz image repository/name                   |
-| `SIGNOZ_VERSION`                 | `v0.131.1`                  | SigNoz image version                           |
+| `SIGNOZ_VERSION`                 | `v0.132.2`                  | SigNoz image version                           |
 | `SIGNOZ_OTEL_COLLECTOR_VERSION`  | `v0.144.5`                  | OTel Collector image version                   |
 | `SIGNOZ_CLICKHOUSE_VERSION`      | `26.4.4`                    | ClickHouse image version                       |
 | `TZ`                             | `UTC`                       | Timezone                                       |
@@ -17,7 +17,7 @@ SigNoz 是一个开源的可观测性平台，为分布式应用程序提供监

 | 服务                             | 镜像                                                              | 描述                                     |
 | -------------------------------- | ----------------------------------------------------------------- | ---------------------------------------- |
-| `signoz`                         | `${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.125.1}` | 后端、前端 UI 和告警管理器的合体镜像     |
+| `signoz`                         | `${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.132.2}` | 后端、前端 UI 和告警管理器的合体镜像     |
 | `otel-collector`                 | signoz/signoz-otel-collector:v0.144.5                             | 接收、处理和导出遥测数据                 |
 | `clickhouse`                     | clickhouse/clickhouse-server:26.4.4                               | 存储追踪、指标和日志的时序数据库         |
 | `zookeeper-1`                    | signoz/zookeeper:3.7.1                                            | ZooKeeper，用于 ClickHouse 副本元数据    |
@@ -62,7 +62,7 @@ SigNoz 是一个开源的可观测性平台，为分布式应用程序提供监
 | `SIGNOZ_OTEL_GRPC_PORT_OVERRIDE` | `4317`                      | OTLP gRPC 接收器宿主机端口          |
 | `SIGNOZ_OTEL_HTTP_PORT_OVERRIDE` | `4318`                      | OTLP HTTP 接收器宿主机端口          |
 | `SIGNOZ_IMAGE_NAME`              | `signoz/signoz`             | SigNoz 镜像仓库名或镜像名           |
-| `SIGNOZ_VERSION`                 | `v0.131.1`                  | SigNoz 镜像版本                     |
+| `SIGNOZ_VERSION`                 | `v0.132.2`                  | SigNoz 镜像版本                     |
 | `SIGNOZ_OTEL_COLLECTOR_VERSION`  | `v0.144.5`                  | OTel Collector 镜像版本             |
 | `SIGNOZ_CLICKHOUSE_VERSION`      | `26.4.4`                    | ClickHouse 镜像版本                 |
 | `TZ`                             | `UTC`                       | 时区                                |
@@ -140,7 +140,7 @@ services:
  # SigNoz all-in-one backend + frontend + alertmanager
  signoz:
    <<: *db-depend
-    image: ${GLOBAL_REGISTRY:-}${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.131.1}
+    image: ${GLOBAL_REGISTRY:-}${SIGNOZ_IMAGE_NAME:-signoz/signoz}:${SIGNOZ_VERSION:-v0.132.2}
    ports:
      - '${SIGNOZ_PORT_OVERRIDE:-8080}:8080'
    volumes: