chore(deps): update docker.io/grafana/mcp-grafana docker tag to v1

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/grafana/mcp-grafana	major	0.17.2 → 1.1.0

---

Release Notes

grafana/mcp-grafana (docker.io/grafana/mcp-grafana)

v1.1.0

Compare Source

Added

• Optional bearer-token caller authentication for the SSE and streamable-http transports via --server-auth-token / MCP_GRAFANA_SERVER_TOKEN. When set, callers must present Authorization: Bearer <token> and unauthenticated requests are rejected with 401 before any tool runs. Caller authentication is enforced only when a token is configured; when it isn't, a non-loopback bind still starts but logs a security error at startup (#​1059, #​1060)
• ask_assistant tool (opt-in, write-gated) for asking Grafana Assistant open-ended questions and getting a full text reply (#​1026)
• Agent Observability tool agento11y_manage_test_suites, in the opt-in agento11y category. Reads cover the test suites that offline experiments run against, one suite with its full version history, and the test cases of one version. The write operations (create and update a suite; open a draft version; publish it; upsert and delete a test case) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled. upsert_test_case replaces the whole case rather than merging into it, and a published version rejects every edit, so changing a published suite means opening a new draft
• Agent Observability tool agento11y_manage_experiments, in the opt-in agento11y category. Reads cover the experiment list and filter facets, one experiment with its headline result, a per-test-case report, an experiment's trials and scores, and one trial with its scores and artifact metadata. get_report is trimmed to row_limit rows (default 50, max 500) because the route is not paginated upstream and nests every test case input, score, and artifact record. The write operations (update and cancel) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled. Creating experiments and trials is not exposed: the plugin proxy blocks those routes
• Agent Observability tool agento11y_manage_agents, in the opt-in agento11y category. Read-only: list for the agent catalog, get for one agent version in full (system prompt, tools, models), list_versions for an agent's version history, and list_version_scores for evaluation score aggregates per version. Needs grafana-agento11y-app.data:read and is registered whether or not write tools are enabled (#​1036)
• Agent Observability tool agento11y_manage_eval_collections, in the opt-in agento11y category. Reads cover saved conversations, the collections that group them, and the membership in both directions. The write operations (bookmark and delete a saved conversation; create, update, and delete a collection; add and remove collection members) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1035)
• Agent Observability eval control-plane tools agento11y_manage_evaluators and agento11y_manage_eval_rules, in the opt-in agento11y category. Reads cover evaluators, evaluator templates, template versions, the judge provider and model catalog, eval rules, and guards. The write operations (evaluator upsert, fork, test, and delete; rule and guard create, update, preview, and delete) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1028)
• CLI flags to include tool arguments in OpenTelemetry spans and to configure the Grafana client request timeout (#​1023)

Fixed

• Declare readOnly/destructive/openWorld hints on every tool (#​1051)
• Proxied-tools memory scaling with session count and unbounded per-session tool-store growth (#​1001)
• Restrict the Prometheus backend to known Prometheus-compatible datasource types (#​1006)
• Respect OTEL_LOGS_EXPORTER=none to disable OTLP log export (#​1012)
• A GRAFANA_URL without a scheme is normalized where it enters the process, so the API client and the client cache resolve the same instance as the rest of the server. GRAFANA_URL=127.0.0.1:3000 used to panic at startup, and a schemeless hostname produced requests with no host while tools built from GrafanaConfig.URL kept working (#​1034)

Changed

• Enrich telemetry to include more tool dimensions (#​1016)
• query_pyroscope now returns a per-function table (pprof -top style: flat/cum per fully-qualified function name) by default instead of a line-level DOT call graph. The DOT call graph remains available via format="dot" and no longer deletes the other truncation node (#​1025)

Removed

• Support for the undocumented X-Grafana-URL header (#​1052)

v1.0.0

Compare Source

Added

• Agent Observability tools: agento11y_manage_conversations and agento11y_manage_generations in a new agento11y category, excluded from the default tool set (#​944)
• Inline panel viewer for get_panel_image on MCP Apps-aware hosts, with a dashboard deeplink fallback for other hosts. The deeplink text content is tagged with _meta.ui.kind = "deeplink" so viewers can locate it structurally instead of by string matching (#​882)

Fixed

• Enable OTLP trace export with the signal-specific OTEL_EXPORTER_OTLP_TRACES_ENDPOINT environment variable, so operators can ship traces without also exporting logs; the generic OTEL_EXPORTER_OTLP_ENDPOINT still enables both signals (#​1004)

Changed

• Tool calls with unknown argument keys are now rejected with an error naming the unknown keys and listing the valid ones, instead of silently ignoring them and answering from default values (#​997)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 3am on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Registry Build Preview

All registries built successfully!

Registry: official

• Total Servers: 85
  • Container-based: 53
  • Remote: 32
• Skills: 0
• File Size: 2.5M
• Last Updated: 2026-08-14T01:17:48Z

Registry: toolhive

• Total Servers: 110
  • Container-based: 78
  • Remote: 32
• Skills: 216
• File Size: 3.1M
• Last Updated: 2026-08-14T01:17:48Z

[github-actions]

MCP Server Tool List Updates (server.json)

The tool lists for modified MCP server entries have been automatically updated using catalog update-tools.

Summary

Server	Status	Details
grafana	Updated	Tool list refreshed
grafana	Updated	Tool list refreshed

---

This comment is automatically generated and will be updated as the workflow progresses.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.