chore(deps): update dependency grafana/mcp-grafana to v1.1.0

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/mcp-grafana	minor	1.0.0 → 1.1.0

---

Release Notes

grafana/mcp-grafana (grafana/mcp-grafana)

v1.1.0

Compare Source

Added

• Optional bearer-token caller authentication for the SSE and streamable-http transports via --server-auth-token / MCP_GRAFANA_SERVER_TOKEN. When set, callers must present Authorization: Bearer <token> and unauthenticated requests are rejected with 401 before any tool runs. Caller authentication is enforced only when a token is configured; when it isn't, a non-loopback bind still starts but logs a security error at startup (#​1059, #​1060)
• ask_assistant tool (opt-in, write-gated) for asking Grafana Assistant open-ended questions and getting a full text reply (#​1026)
• Agent Observability tool agento11y_manage_agents, in the opt-in agento11y category. Read-only: list for the agent catalog, get for one agent version in full (system prompt, tools, models), list_versions for an agent's version history, and list_version_scores for evaluation score aggregates per version. Needs grafana-agento11y-app.data:read and is registered whether or not write tools are enabled (#​1036)
• Agent Observability tool agento11y_manage_eval_collections, in the opt-in agento11y category. Reads cover saved conversations, the collections that group them, and the membership in both directions. The write operations (bookmark and delete a saved conversation; create, update, and delete a collection; add and remove collection members) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1035)
• Agent Observability eval control-plane tools agento11y_manage_evaluators and agento11y_manage_eval_rules, in the opt-in agento11y category. Reads cover evaluators, evaluator templates, template versions, the judge provider and model catalog, eval rules, and guards. The write operations (evaluator upsert, fork, test, and delete; rule and guard create, update, preview, and delete) need grafana-agento11y-app.eval:write and are registered only when write tools are enabled (#​1028)
• CLI flags to include tool arguments in OpenTelemetry spans and to configure the Grafana client request timeout (#​1023)

Fixed

• Declare readOnly/destructive/openWorld hints on every tool (#​1051)
• Proxied-tools memory scaling with session count and unbounded per-session tool-store growth (#​1001)
• Restrict the Prometheus backend to known Prometheus-compatible datasource types (#​1006)
• Respect OTEL_LOGS_EXPORTER=none to disable OTLP log export (#​1012)

Fixed

• A GRAFANA_URL without a scheme is normalized where it enters the process, so the API client and the client cache resolve the same instance as the rest of the server. GRAFANA_URL=127.0.0.1:3000 used to panic at startup, and a schemeless hostname produced requests with no host while tools built from GrafanaConfig.URL kept working (#​1034)

Changed

• Enrich telemetry to include more tool dimensions (#​1016)
• query_pyroscope now returns a per-function table (pprof -top style: flat/cum per fully-qualified function name) by default instead of a line-level DOT call graph. The DOT call graph remains available via format="dot" and no longer deletes the other truncation node (#​1025)

Removed

• Support for the undocumented X-Grafana-URL header (#​1052)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.