chore(deps): update grafana/grafana docker tag to v11.6.16

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/grafana	minor	11.5.1 → 11.6.16

---

Release Notes

grafana/grafana (grafana/grafana)

v11.6.16

Features and enhancements

• Docker: Bump Alpine-based images to 3.24.1 #​126547, @​macabu

Bug fixes

• Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid #​125516, @​papagian

v11.6.15: 11.6.15

Download page
What's new highlights

Features and enhancements

• Docker: Bump Alpine-based images to 3.23.4 #​123032, @​Proximyst
• Go: Update version to 1.26.3 #​124459, @​macabu

Bug fixes

• DashboardDS: Fix Mixed panels not updating on time-range change with stale upstreams #​124890, @​ivanortegaalba
• Security: CVE-2026-33382
• Security: CVE-2026-42127
• Security: CVE-2026-42129
• Security: CVE-2026-10601
• Security: CVE-2026-8609

v11.6.14

Bug fixes

• Security: Fix CVE-2026-33375

v11.6.13

Features and enhancements

• Go: Update to 1.25.8 #​119702, @​macabu

v11.6.12

v11.6.11

Features and enhancements

• Alerting: Add limits for the size of expanded notification templates #​117713, @​yuri-tceretian
• Correlations: Remove support for org_id=0 #​116936, @​gelicia
• Go: Update to 1.25.7 #​117476, @​macabu
• Security(Public dashboards annotations): use dashboard timerange if time selection disabled #​117865, @​github-actions[bot]

v11.6.10

Features and enhancements

• API: Add missing scope check on dashboards #​116894, @​Proximyst
• Avatar: Require sign-in, remove queue, respect timeout #​116898, @​macabu
• Go: Update to 1.25.6 #​116402, @​macabu

Bug fixes

• Alerting: Fix a race condition panic in ResetStateByRuleUID #​115691, @​alexander-akhmetov

v11.6.9

Features and enhancements

• Alerting: Update alerting dependency #​114249, @​moustafab
• Dependencies: Bump Go to v1.25.5 #​114757, @​macabu
• PDFTables: Dynamically shrink font to try and fit whole table in pdf page width (Enterprise)
• Plugins: Add PluginContext to plugins when scenes is disabled #​115060, @​hugohaggmark

Bug fixes

• Alerting: Fix contacts point issues #​115409, @​yuri-tceretian

v11.6.8

Bug fixes

• Alerting: Fix unmarshalling of GettableStatus to include time intervals #​112731, @​yuri-tceretian
• AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
• AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
• Seeder: Add check in filterRemovedPermissions for already existing new permissions before seeding (Enterprise)

v11.6.7

Features and enhancements

• Analytics: Apply proper batching to Loki exports and add configurable settings (Enterprise)
• Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #​112162, @​grambbledook
• Go: Update to 1.25.3 #​112365, @​macabu

Bug fixes

• Auth: Fix render user OAuth passthrough #​112094, @​mgyongyosi
• LDAP Authentication: Fix URL to propagate username context as parameter #​111846, @​bradleypettit
• Plugins: Dependencies do not inherit parent URL for preinstall #​111801, @​wbrowne
• URLParams: Stringify true values as key=true always (fixes issues with variables with true value) #​112045, @​torkelo

v11.6.6

Features and enhancements

• Auditing: Add settings to control recording of datasource query request and response body (Enterprise)

v11.6.5

Features and enhancements

• Alerting: Bump alerting package to include change to NewTLSClient #​108817, @​rwwiv
• Go: Update to 1.24.6 #​109314, @​Proximyst

v11.6.4

Features and enhancements

• Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #​107555, @​macabu
• StateTimeline: Add endTime to tooltip #​107605, @​adela-almasan
• Unified storage: Respect GF_DATABASE_URL override #​107573, @​pstibrany

Bug fixes

• Alerting: Fix group interval override when adding new rules #​107496, @​konrad147
• Azure: Fix legend formatting #​106934, @​aangelisc
• Azure: Fix resource name determination in template variable queries #​106939, @​aangelisc
• Graphite: Fix annotation queries #​106940, @​aangelisc
• Graphite: Fix date mutation #​107523, @​aangelisc
• Graphite: Fix nested variable interpolation for repeated rows #​107564, @​aangelisc
• Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #​108281, @​volcanonoodle

v11.6.3

Features and enhancements

• Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #​106729, @​simonswine

Bug fixes

• FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #​106624, @​simonswine
• Security: Fixed CVE-2025-6023
• Security: Fixed CVE-2025-6197

v11.6.2

Bug fixes

• Security: Fixed CVE-2025-3415

v11.6.1

Bug fixes

• Security: CVE-2026-28374
• Security: CVE-2026-28376
• Security: CVE-2026-28383
• Security: CVE-2026-28380
• Security: CVE-2026-33376
• Security: CVE-2026-28379
• Security: CVE-2026-33377
• Security: CVE-2026-33378
• Security: CVE-2026-33381
• Security: CVE-2026-33380

v11.6.0

Bug fixes

• Security: Fix CVE-2025-3454
• Security: Fix CVE-2025-2703
• Security: Fix CVE-2025-3260

v11.5.10

Features and enhancements

• Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #​112163, @​macabu
• Go: Update to 1.25.3 #​112366, @​macabu

Bug fixes

• Auth: Fix render user OAuth passthrough #​112093, @​mgyongyosi
• LDAP Authentication: Fix URL to propagate username context as parameter #​111845, @​bradleypettit
• Plugins: Dependencies do not inherit parent URL for preinstall #​111802, @​wbrowne

v11.5.9

Features and enhancements

• Auditing: Add settings to control recording of datasource query request and response body (Enterprise)
• Auditing: Document new options for recording datasource query request/response body #​109976, @​macabu

Bug fixes

• Fix: Fix redirection after login when Grafana is served from subpath #​111099, @​mgyongyosi

v11.5.8

Features and enhancements

• Go: Update to 1.24.6 #​109315, @​Proximyst

v11.5.7

Features and enhancements

• Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #​107556, @​macabu

Bug fixes

• Azure: Fix legend formatting #​106933, @​aangelisc
• Azure: Fix resource name determination in template variable queries #​106938, @​aangelisc
• Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #​108280, @​volcanonoodle

v11.5.6

Bug fixes

• Security: Fixed CVE-2025-6023
• Security: Fixed CVE-2025-6197

v11.5.5

Bug fixes

• Security: Fixed CVE-2025-3415

v11.5.4

Bug fixes

• Security: Fix CVE-2025-4123

v11.5.3

Features and enhancements

• Chore: Bump Go to 1.23.7 #​101581, @​macabu
• Chore: Bump Go to 1.23.7 (Enterprise)
• Chore: Update CVE-affected dependencies #​102709, @​grambbledook

Bug fixes

• Alerting: Fix token-based Slack image upload to work with channel names #​101078, @​JacobsonMT
• Auth: Fix AzureAD config UI's ClientAuthentication dropdown #​100869, @​mgyongyosi
• Dashboard: Fix the unintentional time range and variables updates on saving #​101671, @​harisrozajac
• Dashboards: Fix missing v/e/i keybindings to return back to dashboard #​102365, @​mdvictor
• InfluxDB: Improve handling of template variables contained in regular expressions (InfluxQL) #​100977, @​aangelisc
• LDAP test: Fix page crash #​102683, @​ashharrison90
• Org redirection: Fix linking between orgs #​102089, @​ashharrison90
• Security: Fix CVE-2025-3454
• Security: Fix CVE-2025-2703

v11.5.2

Features and enhancements

• Docker: Use our own glibc 2.40 binaries #​99918, @​DanCech
• TransformationFilter: Include transformation outputs in transformation filtering options #​99878, @​Sergej-Vlasov
• grafana-ui: Update InlineField error prop type to React.ReactNode #​100373, @​Clarity-89

Bug fixes

• Alerting: Allow specifying uid for new rules added to groups #​100450, @​yuri-tceretian
• Alerting: Allow specifying uid for new rules added to groups #​100450, @​yuri-tceretian
• Alerting: Call RLock() before reading sendAlertsTo map #​99880, @​santihernandezc
• Auth: Fix redirect with JWT auth URL login #​100355, @​mgyongyosi
• AuthN: Refetch user on "ErrUserAlreadyExists" #​100582, @​kalleep
• Azure: Correctly set application insights resource values #​99599, @​aangelisc
• CodeEditor: Fix cursor alignment #​99863, @​ashharrison90
• DashboardList: Throttle the re-renders #​100046, @​bfmatei
• Dashboards: Bring back scripted dashboards #​100633, @​dprokop
• Plugin Metrics: Eliminate data race in plugin metrics middleware #​100078, @​clord
• RBAC: Don't check folder access if annotationPermissionUpdate FT is enabled #​100117, @​IevaVasiljeva

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.