Update stacklok/toolhive to v0.43.0 by renovate[bot] · Pull Request #1102 · stacklok/docs-website

renovate · 2026-08-14T18:27:47Z

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive	minor	`v0.42.1` → `v0.43.0`

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

Release Notes

stacklok/toolhive (stacklok/toolhive)

`v0.43.0`

Compare Source

What's Changed

Guard against shell injection via github.ref in image workflow by @ChrisJBurns in #6248
Extend private-IP guard to 6to4/Teredo addresses by @ChrisJBurns in #6249
Parse multi-line Modern SSE events by @kocaemre in #6126
Add zizmor to CI and stop double-running the security scan by @ChrisJBurns in #6251
Pin actions to commit SHAs and fix stale version comments by @ChrisJBurns in #6254
Stop persisting git credentials in CI workflow checkouts by @ChrisJBurns in #6255
Bind workflow expressions and drop persisted credentials by @ChrisJBurns in #6258
Derive PR number from the triggering run in the size labeler by @ChrisJBurns in #6259
Gate the Claude workflow on write access, not contribution history by @ChrisJBurns in #6260
Stop writing the PR number into the size label artifact by @ChrisJBurns in #6261
Suppress four zizmor findings that cannot be fixed by @ChrisJBurns in #6262
Scope the release app token to what releaseo needs by @ChrisJBurns in #6266
Scope releaser permissions and bind the tag expression by @ChrisJBurns in #6263
Pass only the secret the test workflow needs by @ChrisJBurns in #6269
Bind the GHCR credentials and chart version in helm-publish by @ChrisJBurns in #6270
Scope the remaining release app tokens and bind a trailer by @ChrisJBurns in #6272
Rate limiting observability (metrics and tracing) PR B by @Sanskarzz in #5800
Clear the remaining zizmor findings in helm-publish by @ChrisJBurns in #6275
Make the zizmor check blocking by @ChrisJBurns in #6274
Clear the last zizmor findings in the release workflows by @ChrisJBurns in #6281
Drop build fingerprint from proxy /health response by @Nashon-Steffen in #6280
Let an explicit non-Modern header outrank a reserved key by @amirejaz in #6231
Deflake the initialize dial-error proxy test by @amirejaz in #6264
Support confidential clients in dynamic client registration by @jhrozek in #6252
fix(vmcp): reject Authorization and Cookie in passthroughHeaders, as documented by @SashaMIT in #6235
fix(auth): bind OAuth callback listener to loopback only by @SashaMIT in #6238
Display recorded trust state to the user by @samuv in #6137
Bound client-controlled metric label length by @Nashon-Steffen in #6279
Sign the macOS thv binary with a Developer ID certificate by @eleftherias in #6156
Sign pushes by default and remove the lock feature gate by @samuv in #6139
Ignore unsupported grant types in CIMD documents by @amirejaz in #6297
fix(authz): make Cedar URI entity IDs collision-free by @SashaMIT in #6239
Add plugins key to lock file schema by @samuv in #6303
Update module github.com/stacklok/toolhive-catalog to v0.20260810.0 by @renovate[bot] in #6257
Add PluginLockService and managed install flag by @samuv in #6311
Record certificate ref and runner in lock provenance by @samuv in #6312
Pin CodeQL SARIF action comment to v4.37.6 by @samuv in #6313
Reset the LLM config when the last tool is torn down by @jerm-dro in #6295
Use a bare thv command as the LLM token helper by @jerm-dro in #6326
Bump go.mod to get CVE fixes by @jhrozek in #6327
Make RFC 8693 delegate clients reachable and usable by @jhrozek in #6320
Enforce recorded ref and runner on skill verification by @samuv in #6315
Release v0.43.0 by @toolhive-release-app[bot] in #6333

New Contributors

@kocaemre made their first contribution in #6126

Full Changelog: stacklok/toolhive@v0.42.1...v0.43.0

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Docs update for `toolhive` v0.43.0

At a glance


Upstream	`stacklok/toolhive` `v0.42.1` → `v0.43.0`
Hand-written changes	2 commit(s)
Reference assets	refreshed (separate commit)
Gaps	0
Release contributors	10 auto-assigned (see sidebar)
Action required	Spot-check skill-authored prose for accuracy

Summary of changes

Added confidential DCR and delegate client sections (allowConfidentialClientRegistration, insecureAllowConfidentialOverLoopbackHTTP, forceConfidentialRedirectUris, delegateClients) to docs/toolhive/guides-k8s/embedded-auth-server-k8s.mdx.
Added parallel confidential DCR and delegate client sections to docs/toolhive/guides-vmcp/embedded-auth-server-vmcp.mdx, cross-linked to the K8s guide for full validation rules.
Updated docs/toolhive/guides-cli/skills-management.mdx to remove the "experimental" caveat on thv skill sync / thv skill upgrade and drop the TOOLHIVE_SKILLS_LOCK_ENABLED requirement; added a thv skill sync section covering --check, --adopt, and --prune.
Documented signed skill pushes in docs/toolhive/guides-cli/skills-management.mdx: thv skill push now signs by default; --key selects a cosign private key and --no-sign opts out. Unsigned project-scoped installs require --allow-unsigned on thv skill install.

Run cost

Session	Turns	Cost (USD)
Generation	94	$9.0783
Editorial review	28	$2.0518
Total	122	$11.1301

How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

static/api-specs/
docs/toolhive/reference/cli/ (toolhive only)
docs/toolhive/reference/crds/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

vercel · 2026-08-14T18:27:53Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-website	Ready	Preview	Aug 17, 2026 7:45pm

claude · 2026-08-14T18:28:51Z

Claude finished @renovate[bot]'s task in 8m 28s —— View job

ToolHive v0.43.0 upstream release docs

Ran /upstream-release-docs stacklok/toolhive v0.43.0 in unattended mode.

Phase 1: Discover release changes
Phase 2: Deep dive PRs (source-verify)
Phase 3: Docs displacement audit
Phase 4: Implement source-verified doc edits
Phase 5: Format and lint
Phase 6: Commit, push, write artifacts

Summary of hand-written changes

Added confidential DCR + delegate client sections (allowConfidentialClientRegistration, insecureAllowConfidentialOverLoopbackHTTP, forceConfidentialRedirectUris, delegateClients) to docs/toolhive/guides-k8s/embedded-auth-server-k8s.mdx.
Added parallel sections to docs/toolhive/guides-vmcp/embedded-auth-server-vmcp.mdx, cross-linked to the K8s guide for full validation rules.
Updated docs/toolhive/guides-cli/skills-management.mdx to drop the TOOLHIVE_SKILLS_LOCK_ENABLED requirement and the "experimental" caveat on thv skill sync / thv skill upgrade (now GA in v0.43.0); added a thv skill sync section covering --check, --adopt, and --prune.
Documented signed skill pushes: thv skill push now signs by default; --key selects a cosign key; --no-sign opts out. Unsigned project-scoped installs require --allow-unsigned on thv skill install.

Notes

Auto-generated reference under static/api-specs/ and docs/toolhive/reference/cli/ was refreshed by the earlier workflow step - not hand-edited here. The CRD schemas already reflect the new fields; my prose additions ride alongside.
Did not create a standalone new page: every addition extends an existing page that already covers the surrounding capability (embedded auth server config, skill lifecycle).
Local npm run build fails at the mcp-metadata-plugin's remote data fetch (network-restricted sandbox), unrelated to my changes; PR CI will run the real build.

Commit: 4165743 Document v0.43.0 skill signing and confidential DCR
— branch: renovate/stacklok-toolhive-0.x

claude · 2026-08-14T18:37:37Z

Claude finished @renovate[bot]'s task in 4m 4s —— View job

Editorial review of v0.43.0 docs changes

Done. Pushed 75bcaa3 with editorial polish on the three content pages the release commit touched. Reference files (CLI, CRD, API specs) were not modified, per workflow policy.

Review docs/toolhive/guides-cli/skills-management.mdx
Review docs/toolhive/guides-k8s/embedded-auth-server-k8s.mdx
Review docs/toolhive/guides-vmcp/embedded-auth-server-vmcp.mdx
Apply editorial fixes
Run npm run prettier:fix and npm run eslint:fix
Commit and push

Edits applied

Style fixes (spaced hyphens in prose as em-dash substitutes are discouraged):

skills-management.mdx (line 247): Split "anything - useful as a CI gate" into two sentences.
skills-management.mdx (line 284): Replaced "as not upgradable - there is nothing newer" with "as not upgradable, because there is nothing newer". Also capitalized "Git".
embedded-auth-server-k8s.mdx (line 508): Rewrote the two-em-dash sentence "For a client the operator controls and knows in advance - typically a backend service ... - pre-provision" to use a parenthetical. Also changed third-person "the operator" to second-person "you".
embedded-auth-server-k8s.mdx (line 537): Split "categorically at admission - the CEL rule..." into two sentences (naming it "The CEL admission rule").
embedded-auth-server-vmcp.mdx (line 345): Changed "typically a backend service the operator controls" to "typically a backend service you control" (second person).
embedded-auth-server-vmcp.mdx (line 363): Replaced spaced hyphen ("must use https:// - delegate clients") with a semicolon.

Code-block comment fix:

skills-management.mdx (lines 388-389): Rewrote the cosign push code-block comment; the backticks around `thv serve` don't render inside a bash comment, so the comment now reads as plain prose about setting COSIGN_PASSWORD in the thv serve environment.

Left as-is

Parenthetical "(with the Redis storage backend)" in the k8s DCR section: acceptable qualifier.
Passive "leaving them empty is not permitted": awkward but faithful to the underlying admission rule; rephrasing risked changing the meaning.
• Branch: renovate/stacklok-toolhive-0.x

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Document confidential DCR clients, delegate clients, and forced-confidential redirect URIs on the embedded auth server; document signed skill pushes and promote skill sync/upgrade out of the experimental gate. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Keep the K8s guide as the canonical explanation of confidential DCR validation, security implications, and behavior. Retain the VirtualMCPServer-specific configuration examples and link to that guide for the shared rationale.

renovate Bot added the autogen-docs Pull requests generated by automated release workflows label Aug 14, 2026

github-actions Bot marked this pull request as draft August 14, 2026 18:27

vercel Bot deployed to Preview August 14, 2026 18:30 View deployment

vercel Bot deployed to Preview August 14, 2026 18:38 View deployment

github-actions Bot requested review from ChrisJBurns, Nashon-Steffen, amirejaz, eleftherias, jerm-dro, jhrozek and samuv August 14, 2026 18:42

github-actions Bot marked this pull request as ready for review August 14, 2026 18:42

vercel Bot deployed to Preview August 14, 2026 18:43 View deployment

ChrisJBurns previously approved these changes Aug 14, 2026

View reviewed changes

amirejaz previously approved these changes Aug 15, 2026

View reviewed changes

eleftherias previously approved these changes Aug 17, 2026

View reviewed changes

samuv previously approved these changes Aug 17, 2026

View reviewed changes

renovate Bot and others added 4 commits August 17, 2026 21:19

Update stacklok/toolhive to v0.43.0

c5f0e48

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Refresh reference assets for toolhive v0.43.0

d06340a

Polish v0.43.0 docs edits

93f7686

jhrozek dismissed stale reviews from samuv, eleftherias, amirejaz, and ChrisJBurns via efa40d9 August 17, 2026 19:37

jhrozek force-pushed the renovate/stacklok-toolhive-0.x branch from 75bcaa3 to efa40d9 Compare August 17, 2026 19:37

Trim duplicate DCR guidance

ec59009

Keep the K8s guide as the canonical explanation of confidential DCR validation, security implications, and behavior. Retain the VirtualMCPServer-specific configuration examples and link to that guide for the shared rationale.

vercel Bot deployed to Preview August 17, 2026 19:38 View deployment

jhrozek force-pushed the renovate/stacklok-toolhive-0.x branch from efa40d9 to ec59009 Compare August 17, 2026 19:44

vercel Bot deployed to Preview August 17, 2026 19:45 View deployment

jerm-dro approved these changes Aug 17, 2026

View reviewed changes

jhrozek approved these changes Aug 17, 2026

View reviewed changes

Navigation Menu

Uh oh!

Update stacklok/toolhive to v0.43.0 - #1102

Update stacklok/toolhive to v0.43.0#1102
renovate[bot] wants to merge 5 commits into
mainfrom
renovate/stacklok-toolhive-0.x

renovate Bot commented Aug 14, 2026 •

edited by github-actions Bot

Loading

Uh oh!

vercel Bot commented Aug 14, 2026 •

edited

Loading

Uh oh!

claude Bot commented Aug 14, 2026 •

edited

Loading

Uh oh!

claude Bot commented Aug 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Uh oh!

Conversation

renovate Bot commented Aug 14, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.43.0

What's Changed

New Contributors

Configuration

Docs update for toolhive v0.43.0

At a glance

Summary of changes

Run cost

Uh oh!

vercel Bot commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

claude Bot commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ToolHive v0.43.0 upstream release docs

Summary of hand-written changes

Notes

Uh oh!

claude Bot commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Editorial review of v0.43.0 docs changes

Edits applied

Left as-is

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

renovate Bot commented Aug 14, 2026 •

edited by github-actions Bot

Loading

`v0.43.0`

Docs update for `toolhive` v0.43.0

vercel Bot commented Aug 14, 2026 •

edited

Loading

claude Bot commented Aug 14, 2026 •

edited

Loading

claude Bot commented Aug 14, 2026 •

edited

Loading