Update image grafana/mcp-grafana to v1

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/mcp-grafana	major	0.17.2 → 1.1.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grafana/mcp-grafana (grafana/mcp-grafana)

v1.1.0

Compare Source

Added

• Optional bearer-token caller authentication for the SSE and streamable-http transports via --server-auth-token / MCP_GRAFANA_SERVER_TOKEN. When set, callers must present Authorization: Bearer <token> and unauthenticated requests are rejected with 401 before any tool runs. Caller authentication is enforced only when a token is configured; when it isn't, a non-loopback bind still starts but logs a security error at startup (#​1059, #​1060)
• ask_assistant tool (opt-in, write-gated) for asking Grafana Assistant open-ended questions and getting a full text reply (#​1026)
• Agent Observability tool agento11y_manage_agents, in the opt-in agento11y category. Read-only: list for the agent catalog, get for one agent version in full (system prompt, tools, models), list_versions for an agent's version history, and list_version_scores for evaluation score aggregates per version. Needs grafana-agento11y-app.data:read and is registered whether or not write tools are enabled (#​1036)
• Agent Observability tool agento11y_manage_eval_collections, in the opt-in agento11y category. Reads cover saved conversations, the collections that group them, and the membership in both directions. The write operations (bookmark and delete a saved conversation; create, update, and delete a collection; add and remove collection members) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1035)
• Agent Observability eval control-plane tools agento11y_manage_evaluators and agento11y_manage_eval_rules, in the opt-in agento11y category. Reads cover evaluators, evaluator templates, template versions, the judge provider and model catalog, eval rules, and guards. The write operations (evaluator upsert, fork, test, and delete; rule and guard create, update, preview, and delete) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1028)
• CLI flags to include tool arguments in OpenTelemetry spans and to configure the Grafana client request timeout (#​1023)

Fixed

• Declare readOnly/destructive/openWorld hints on every tool (#​1051)
• Proxied-tools memory scaling with session count and unbounded per-session tool-store growth (#​1001)
• Restrict the Prometheus backend to known Prometheus-compatible datasource types (#​1006)
• Respect OTEL_LOGS_EXPORTER=none to disable OTLP log export (#​1012)

Fixed

• A GRAFANA_URL without a scheme is normalized where it enters the process, so the API client and the client cache resolve the same instance as the rest of the server. GRAFANA_URL=127.0.0.1:3000 used to panic at startup, and a schemeless hostname produced requests with no host while tools built from GrafanaConfig.URL kept working (#​1034)

Changed

• Enrich telemetry to include more tool dimensions (#​1016)
• query_pyroscope now returns a per-function table (pprof -top style: flat/cum per fully-qualified function name) by default instead of a line-level DOT call graph. The DOT call graph remains available via format="dot" and no longer deletes the other truncation node (#​1025)

Removed

• Support for the undocumented X-Grafana-URL header (#​1052)

v1.0.0

Compare Source

Added

• Agent Observability tools: agento11y_manage_conversations and agento11y_manage_generations in a new agento11y category, excluded from the default tool set (#​944)
• Inline panel viewer for get_panel_image on MCP Apps-aware hosts, with a dashboard deeplink fallback for other hosts. The deeplink text content is tagged with _meta.ui.kind = "deeplink" so viewers can locate it structurally instead of by string matching (#​882)

Fixed

• Enable OTLP trace export with the signal-specific OTEL_EXPORTER_OTLP_TRACES_ENDPOINT environment variable, so operators can ship traces without also exporting logs; the generic OTEL_EXPORTER_OTLP_ENDPOINT still enables both signals (#​1004)

Changed

• Tool calls with unknown argument keys are now rejected with an error naming the unknown keys and listing the valid ones, instead of silently ignoring them and answering from default values (#​997)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

ArgoCD Diff Results

Diff for kube-prometheus-stack

Warning: local diff without --server-side-generate is deprecated and does not work with plugins. Server-side generation will be the default in v2.7.
===== apps/Deployment monitoring/grafana-mcp-server ======
165c165
<         image: grafana/mcp-grafana:0.17.2@sha256:d5b51db0c8eaafc6ed3fede5bfcc8d67b2384a40cf3d493086e378855ceba882
---
>         image: grafana/mcp-grafana:1.0.0@sha256:5efeafd01cd7e1aea9c4b0f03305951f2944db8f43e5ae290cce9578c977f241

===== apps/Deployment monitoring/kube-prometheus-stack-grafana ======
471c471
<         checksum/secret: 63d67e042add185b791c952a1157bd7b2e4fcff3a5b6af76baab8105d99b332e
---
>         checksum/secret: 42b390e2fb8a34fb9bd64d3c276b5c2bb6609ae0f99793732fd5e69b8ca7b529

[github-actions]

ArgoCD Diff Results

Diff for kube-prometheus-stack

Warning: local diff without --server-side-generate is deprecated and does not work with plugins. Server-side generation will be the default in v2.7.
===== /ConfigMap monitoring/kube-prometheus-stack-grafana ======
35,40c35,48
<   download_dashboards.sh: "#!/usr/bin/env sh\nset -euf\nmkdir -p /var/lib/grafana/dashboards/default\nmkdir
<     -p /var/lib/grafana/dashboards/extra\n\ncurl -skf \\\n--connect-timeout 60 \\\n--max-time
<     60 \\\n-H \"Accept: application/json\" \\\n-H \"Content-Type: application/json;charset=UTF-8\"
<     \\\n  \"https://grafana.com/api/dashboards/20417/revisions/1/download\" \\\n  |
<     sed '/-- .* --/! s/\"datasource\":.*,/\"datasource\": \"Prometheus\",/g' \\\n>
<     \"/var/lib/grafana/dashboards/default/cloudnativepg.json\"\n  \n"
---
>   download_dashboards.sh: |
>     #!/usr/bin/env sh
>     set -euf
>     mkdir -p /var/lib/grafana/dashboards/default
>     mkdir -p /var/lib/grafana/dashboards/extra
> 
>     curl -skf \
>     --connect-timeout 60 \
>     --max-time 60 \
>     -H "Accept: application/json" \
>     -H "Content-Type: application/json;charset=UTF-8" \
>       "https://grafana.com/api/dashboards/20417/revisions/1/download" \
>       | sed '/-- .* --/! s/"datasource":.*,/"datasource": "Prometheus",/g' \
>     > "/var/lib/grafana/dashboards/default/cloudnativepg.json"

===== apps/Deployment monitoring/grafana-mcp-server ======
165c165
<         image: grafana/mcp-grafana:0.17.2@sha256:d5b51db0c8eaafc6ed3fede5bfcc8d67b2384a40cf3d493086e378855ceba882
---
>         image: grafana/mcp-grafana:1.1.0@sha256:f21a19cebbfa7c3a76ef1746171e5ffc3601064e432f593e7c6cb526e5216e5f

===== apps/Deployment monitoring/kube-prometheus-stack-grafana ======
473c473
<         checksum/secret: b47c17c4e624d8d7a48e3d00a2c1b76bbbf8c3c3bffd65f771bf679259c495cd
---
>         checksum/secret: b91fe4735bdaf1a13b700cc1a005f607da53ddfdb93f29f548a2ee6d7b2f0618