chore(deps): update docker.io/grafana/grafana docker tag to v11.6.7

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/grafana/grafana	patch	11.6.0 -> 11.6.7

---

Release Notes

grafana/grafana (docker.io/grafana/grafana)

v11.6.7

Compare Source

Features and enhancements

• Analytics: Apply proper batching to Loki exports and add configurable settings (Enterprise)
• Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #​112162, @​grambbledook
• Go: Update to 1.25.3 #​112365, @​macabu

Bug fixes

• Auth: Fix render user OAuth passthrough #​112094, @​mgyongyosi
• LDAP Authentication: Fix URL to propagate username context as parameter #​111846, @​bradleypettit
• Plugins: Dependencies do not inherit parent URL for preinstall #​111801, @​wbrowne
• URLParams: Stringify true values as key=true always (fixes issues with variables with true value) #​112045, @​torkelo

v11.6.6

Compare Source

Features and enhancements

• Auditing: Add settings to control recording of datasource query request and response body (Enterprise)

v11.6.5

Compare Source

Features and enhancements

• Alerting: Bump alerting package to include change to NewTLSClient #​108817, @​rwwiv
• Go: Update to 1.24.6 #​109314, @​Proximyst

v11.6.4

Compare Source

Features and enhancements

• Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #​107555, @​macabu
• StateTimeline: Add endTime to tooltip #​107605, @​adela-almasan
• Unified storage: Respect GF_DATABASE_URL override #​107573, @​pstibrany

Bug fixes

• Alerting: Fix group interval override when adding new rules #​107496, @​konrad147
• Azure: Fix legend formatting #​106934, @​aangelisc
• Azure: Fix resource name determination in template variable queries #​106939, @​aangelisc
• Graphite: Fix annotation queries #​106940, @​aangelisc
• Graphite: Fix date mutation #​107523, @​aangelisc
• Graphite: Fix nested variable interpolation for repeated rows #​107564, @​aangelisc
• Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #​108281, @​volcanonoodle

v11.6.3

Compare Source

Features and enhancements

• Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #​106729, @​simonswine

Bug fixes

• FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #​106624, @​simonswine
• Security: Fixed CVE-2025-6023
• Security: Fixed CVE-2025-6197

v11.6.2

Compare Source

Bug fixes

• Security: Fixed CVE-2025-3415

v11.6.1

Compare Source

Bug fixes

• Security: Fix CVE-2025-4123

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}