chore(deps): update dependency grafana/mcp-grafana to v0.17.2

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/mcp-grafana	minor	0.14.0 → 0.17.2

---

Release Notes

grafana/mcp-grafana (grafana/mcp-grafana)

v0.17.2

Compare Source

Security

• Bind environment-configured credentials to the configured Grafana URL. A URL supplied in the X-Grafana-URL request header no longer causes the environment service-account token, deprecated API key, basic auth, or extra headers to be sent to a caller-specified host (#XXX)

v0.17.1

Compare Source

Fixed

• Send the relative path (rather than an absolute URL) to the short-urls API when generating navigation deeplinks (#​976)

Security

• Block DNS rebinding attacks on the HTTP and SSE transports (#​957)

v0.17.0

Compare Source

Added

• Datasource management tools for creating and updating datasources via the MCP server, gated behind write tools, with schema-guided configuration that follows each datasource type's JSON schema and excludes sensitive credential fields (#​939)

Fixed

• Recognize the Athena plugin's rawSQL query field when extracting dashboard panel queries (#​956)

v0.16.0

Compare Source

Added

• Snapshot tools (list_snapshots, get_snapshot, create_snapshot, delete_snapshot) for managing Grafana dashboard snapshots (#​949)
• Native dashboard schema v2 support in the dashboard tools (#​937)
• Quickwit datasource support (#​941)
• BigQuery datasource support in run_panel_query (#​930)
• Elasticsearch and OpenSearch tools now honor the datasource-configured timeField (#​909)
• Relative time syntax (e.g. now-1h) for time range parameters across tools (#​942)
• GRAFANA_SERVICE_ACCOUNT_TOKEN_FILE environment variable to read the service account token from a file, supporting rotated tokens (#​935)
• Optional startRfc3339/endRfc3339 time range parameters for list_prometheus_metric_names to restrict results to metrics active within a window (#​927)
• query_prometheus now surfaces datasource warnings (e.g. partial responses from Thanos) in its result (#​946)

Fixed

• Elasticsearch client now refuses HTTP redirects that would drop the request body, preventing malformed queries against redirecting endpoints (#​951)
• Propagate forwarded headers to downstream Loki calls by using the configured HTTP transport (#​945)

v0.15.2

Compare Source

Fixed

• Docker images are again published to docker.io/grafana/mcp-grafana. v0.15.0 and v0.15.1 Docker images were never published because the shared Docker Hub credential was restricted to read-only. The release workflow now publishes via Grafana's GAR-based Docker Hub mirror pipeline (#​925)

v0.15.1

Compare Source

Fixed

• Docker images are again published to docker.io/grafana/mcp-grafana. v0.15.0 and v0.15.1 Docker images were never published because the shared Docker Hub credential was restricted to read-only. The release workflow now publishes via Grafana's GAR-based Docker Hub mirror pipeline (#​925)

v0.15.0

Compare Source

Fixed

• Docker images are again published to docker.io/grafana/mcp-grafana. v0.15.0 and v0.15.1 Docker images were never published because the shared Docker Hub credential was restricted to read-only. The release workflow now publishes via Grafana's GAR-based Docker Hub mirror pipeline (#​925)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.