feat(container): update image docker.io/grafana/mcp-grafana ( 1.3.0 ➔ 1.4.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/grafana/mcp-grafana	minor	1.3.0 → 1.4.1

---

Release Notes

grafana/mcp-grafana (docker.io/grafana/mcp-grafana)

v1.4.1

Compare Source

Added

• labelSelector parameter on the Sift tools (find_error_pattern_logs, find_slow_requests), accepting PromQL/LogQL stream selector syntax so investigations can be scoped with regex and negative matchers (e.g. {namespace=~"prod.*", cluster="us-east-1"}) rather than exact label equality only. Breaking: this replaces the previous required labels map parameter on those tools (#​1165)

Fixed

• run_panel_query now routes on the datasource's real type rather than the type recorded in the dashboard panel, so --loki-enforced-matchers can no longer be bypassed by a panel that mislabels a Loki datasource (#​1169)
• The default-organisation warning is no longer logged at startup when dynamic multi-org support is enabled, where a default org is expected to be absent (#​1167)

v1.4.0

Compare Source

Added

• Unified SQL datasource tools (query_athena, query_clickhouse, query_snowflake, query_mssql, query_postgresql) into a shared dialect system, reducing duplication and making it easier to add new SQL datasources (#​1126)
• --enable-write-tools flag to selectively re-enable specific tools under --disable-write, so operators can allow individual write tools (e.g. Sift investigation tools) without enabling all writes. --enable-query is now shorthand for naming the raw-SQL query tools in this list (#​1157)
• Optional folderUid, tag, and starred filters on search_dashboards, forwarded to Grafana /api/search. Empty-query searches now always restrict results to dashboards (type=dash-db) (#​1154)
• Optional matcher parameter on list_loki_label_names and list_loki_label_values to narrow label discovery to a subset of streams (a LogQL stream selector on Loki, LogsQL on VictoriaLogs) (#​1135)
• delete_annotation tool (write-gated) to permanently delete a Grafana annotation by ID, completing the annotation CRUD surface (#​1134)
• list_cloudwatch_dimension_values tool to list the values available for a CloudWatch dimension key, rather than requiring an LLM to guess them (#​1141)
• --loki-enforced-matchers: operator-configured LogQL label matchers AND-ed into every native-Loki query (logs, stats, patterns, and label enumeration) to restrict which streams the server can read. Fails closed on unparseable queries and refuses VictoriaLogs datasources while set. Pair with --disable-api so the raw datasource proxy cannot bypass it. A companion --loki-label-enumeration-fallback controls label-enumeration behaviour under purely-negative matchers (#​978)
• --instructions-append flag to append operator-supplied text to the server instructions returned to MCP clients on initialize, so every connecting agent sees it (#​978)
• Separate /healthz listener with its own port, so health checks and Prometheus metrics are served independently of the MCP transport (#​1137)

Fixed

• alerting_manage_rules list operation now applies search_rule_name filtering client-side when listing datasource-provisioned rules, which the Grafana ruler API does not filter server-side (#​1161)
• tools/list response now includes resultType, cacheScope, and ttlMs fields for all protocol versions, fixing a ValidationError that silently dropped all tools when mcp-grafana was used behind a Python MCP proxy (mcp >= 2.0.0, fastmcp >= 4.0.0) (#​1151)
• get_current_oncall_users now handles user objects (not just ID strings) in the IRM proxy API's on_call_now response, fixing empty results on instances using the IRM proxy (#​1150)
• --allowed-hosts is now honored when the request arrives via a loopback reverse proxy, so non-loopback hostnames work behind nginx/Caddy on the same machine (#​1142)
• check_datasources_health no longer reports a frontend-only datasource plugin (e.g. the built-in Alertmanager datasource) as unhealthy; such datasources now report "status": "UNKNOWN" and are counted separately in a new unknown field (#​1139)
• Tool calls with a type mismatch (e.g. string where number is expected) now return a structured MCP tool error instead of an opaque internal error (#​1138)
• Explore deeplinks now use the panes format introduced in Grafana 10.2, fixing broken Cloud Monitoring and Loki links caused by lossy migration of the legacy left parameter. Falls back to the legacy format for Grafana < 10.2 (#​1088)
• query_loki_logs no longer double-encodes timestamps in stream results (#​982)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 828b017f-bf4a-4150-bd7b-c1225358b95a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

--- kubernetes/apps/ai/grafana-mcp/app Kustomization: ai/grafana-mcp HelmRelease: ai/grafana-mcp

+++ kubernetes/apps/ai/grafana-mcp/app Kustomization: ai/grafana-mcp HelmRelease: ai/grafana-mcp

@@ -45,13 +45,13 @@

               GRAFANA_URL: http://grafana.observability.svc.cluster.local
             envFrom:
             - secretRef:
                 name: grafana-mcp-secrets
             image:
               repository: docker.io/grafana/mcp-grafana
-              tag: 1.3.0
+              tag: 1.4.1
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3

[github-actions]

--- HelmRelease: ai/grafana-mcp Deployment: ai/grafana-mcp

+++ HelmRelease: ai/grafana-mcp Deployment: ai/grafana-mcp

@@ -52,13 +52,13 @@

         env:
         - name: GRAFANA_URL
           value: http://grafana.observability.svc.cluster.local
         envFrom:
         - secretRef:
             name: grafana-mcp-secrets
-        image: docker.io/grafana/mcp-grafana:1.3.0
+        image: docker.io/grafana/mcp-grafana:1.4.1
         livenessProbe:
           failureThreshold: 3
           httpGet:
             httpHeaders:
             - name: Host
               value: grafana-mcp.ai.svc.cluster.local:8000