Update Helm release loki to v6.25.0

[renovate]

This PR contains the following updates:

Package	Update	Change
loki (source)	minor	6.24.0 -> 6.25.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- HelmRelease: monitoring/loki StatefulSet: monitoring/loki

+++ HelmRelease: monitoring/loki StatefulSet: monitoring/loki

@@ -41,13 +41,13 @@

         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
       - name: loki-sc-rules
-        image: kiwigrid/k8s-sidecar:1.28.0
+        image: kiwigrid/k8s-sidecar:1.29.0
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: loki_rule
@@ -58,12 +58,18 @@

         - name: WATCH_SERVER_TIMEOUT
           value: '60'
         - name: WATCH_CLIENT_TIMEOUT
           value: '60'
         - name: LOG_LEVEL
           value: INFO
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
         volumeMounts:
         - name: sc-rules-volume
           mountPath: /rules
       - name: loki
         image: docker.io/grafana/loki:3.3.2
         imagePullPolicy: IfNotPresent