fix(deps): update module github.com/stacklok/toolhive to v0.6.11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/stacklok/toolhive	v0.6.7 -> v0.6.11

---

Release Notes

stacklok/toolhive (github.com/stacklok/toolhive)

v0.6.11

Compare Source

Headline changes:

• Include ping checks for remote workloads.
• Allow build envs to include secrets from the secrets manager and environment variables on the host.

What's Changed

• Add Debug Logs for thv run Server Location by @​jerm-dro in #​2834
• bumps toolhive operator and registry api images by @​ChrisJBurns in #​2842
• Update actions/checkout digest to 8e8c483 by @​renovate[bot] in #​2844
• Implement ExternalAuthConfig discovery for VirtualMCPServer backends by @​amirejaz in #​2726
• upgrade go to 1.25.5 to fix GO-2025-4155 by @​ChrisJBurns in #​2846
• Update registry from toolhive-registry release v2025.12.03 by @​github-actions[bot] in #​2862
• Update golangci/golangci-lint-action action to v9.2.0 by @​renovate[bot] in #​2861
• Split out podTemplateBuilder to be reusable and cover with integration tests by @​jhrozek in #​2840
• Fix VirtualMCPServer OIDC configuration by implementing OIDCConfigurable interface by @​jhrozek in #​2821
• Refactor vMCP e2e tests to extract common helpers by @​jhrozek in #​2839
• Update build-env proposal with secure credential handling by @​JAORMX in #​2859
• Use gopkg.in/yaml.v3 not v2 by @​JAORMX in #​2868
• Change pinging logic for remote workloads by @​dmjb in #​2872
• Add --from-secret and --from-env flags to set-build-env by @​JAORMX in #​2860
• Display custom metadata in registry info text output by @​JAORMX in #​2871
• Use ubuntu-slim runner for lightweight CI jobs by @​JAORMX in #​2869
• List workloads once to ensure consistency by @​amirejaz in #​2867

New Contributors

• @​jerm-dro made their first contribution in #​2834

Full Changelog: stacklok/toolhive@v0.6.10...v0.6.11

v0.6.10

Compare Source

What's Changed

• Update toolhive images to v0.6.9 and registry server to v0.3.1 by @​renovate[bot] in #​2737
• Update registry from toolhive-registry release v2025.11.29 by @​github-actions[bot] in #​2808
• Make client_secret_env optional in vMCP OIDC config by @​jhrozek in #​2803
• Remove tokenCache documentation and examples by @​jhrozek in #​2801
• Update registry from toolhive-registry release v2025.11.30 by @​github-actions[bot] in #​2810
• Update module github.com/olekukonko/tablewriter to v1.1.2 by @​renovate[bot] in #​2812
• Add vMCP image to operator-deploy-local task by @​jhrozek in #​2802
• Update registry from toolhive-registry release v2025.12.01 by @​github-actions[bot] in #​2814
• remove mixed mode to simplify vmcp operation by @​yrobla in #​2798
• Fix vMCP error on partially set operational config by @​jhrozek in #​2813
• fix lint problems on main by @​yrobla in #​2816
• fix: propagate identity for token exchange + add real integration tests by @​yrobla in #​2769
• add tests for validating conflict resolution by @​yrobla in #​2818
• Refactor/typed backend auth strategy by @​jhrozek in #​2797
• Centralize container image references in e2e tests by @​4t8dd in #​2819
• Make client_id optional in vMCP OIDC config by @​jhrozek in #​2822
• Add PVC source support for MCPRegistry by @​jonburdo in #​2719
• Add Output Schema Support to CompositeToolSpec CRD by @​tgrunnagle in #​2824
• Proposal: Kubernetes source type for registry server by @​JAORMX in #​2829
• adds kubernetes registry config for registry server by @​ChrisJBurns in #​2830
• Update registry.access.redhat.com/ubi10/ubi-minimal Docker tag to v10.1-1764604111 by @​renovate[bot] in #​2828
• Update anthropics/claude-code-action digest to 6337623 by @​renovate[bot] in #​2827
• Update registry from toolhive-registry release v2025.12.02 by @​github-actions[bot] in #​2833
• Add support for Zed client by @​eleftherias in #​2836
• Add vMCP e2e tests for tool overrides and composite workflows by @​JAORMX in #​2826
• add RBAC resources for MCPRegistry API server by @​ChrisJBurns in #​2832

New Contributors

• @​jonburdo made their first contribution in #​2719

Full Changelog: stacklok/toolhive@v0.6.9...v0.6.10

v0.6.9

Compare Source

🚀 Toolhive v0.6.9 is live!

This release brings enhancements to MCP workflows, better registry customization, and improved developer experience across the board.

MCP & Workflows
• Smart transport auto-detection makes thv mcp commands easier to use
• Standard JSON Schema format now used for composite tool parameters
• Added RetryDelay to error handling in WorkflowStep CRD for more resilient workflows
• Extracted MCP client setup into reusable CreateInitializedMCPClient helper
• E2E tests now use mcp.LATEST_PROTOCOL_VERSION for better compatibility
• Removed token cache from vMCP for cleaner authentication flow

Registry & Deployment
• Registry server can now be configured with custom database connection details
• New podTemplateSpec field in MCPRegistry CRD lets you fully customize registry API deployments
• MergePodTemplateSpecs utility added for cleaner pod template composition
• Updated registry from toolhive-registry release v2025.11.28

Tool Filtering & Configuration
• New ExcludeAll option provides more flexible tool filtering controls
• Better error handling throughout vMCP code (replaced utilruntime.Must with proper error checks)
• Minor fixes for retryDelay handling improve reliability

Testing & Quality
• Added vMCP E2E tests using yardstick MCP server
• Proposal naming validation now only checks new files, reducing false positives

Infrastructure
• Updated docker/metadata-action to v5.10.0

👋 Welcome to our newest contributors @​ignorant05 and @​4t8dd! 🥳

🔗 Full changelog: stacklok/toolhive@v0.6.8...v0.6.9

What's Changed

• Update docker/metadata-action action to v5.10.0 by @​renovate[bot] in #​2760
• adds MergePodTemplateSpecs that merges podTemplateSpecs by @​ChrisJBurns in #​2770
• Use standard JSON Schema format for VMCP composite tool parameters by @​JAORMX in #​2651
• Fix proposal naming validation to only check new files by @​JAORMX in #​2788
• Update registry from toolhive-registry release v2025.11.28 by @​github-actions[bot] in #​2791
• Replace utilruntime.Must with proper error handling in vMCP code by @​JAORMX in #​2787
• Add smart transport auto-detection for thv mcp commands by @​JAORMX in #​2790
• Add vmcp e2e tests using yardstick MCP server by @​JAORMX in #​2778
• Enhancement: Added ExcludeAll option for toll filtering by @​ignorant05 in #​2789
• Use mcp.LATEST_PROTOCOL_VERSION in E2E tests by @​jhrozek in #​2793
• Add RetryDelay to ErrorHandling in WorkflowStep CRD by @​JAORMX in #​2776
• adds podTemplateSpec field to MCPRegistry CRD that allows user to customise registry api deployment by @​ChrisJBurns in #​2777
• Extract MCP client setup to CreateInitializedMCPClient helper by @​jhrozek in #​2796
• Two minor fixes for vMCP retryDelay handling by @​jhrozek in #​2795
• Issue 2680 by @​4t8dd in #​2757
• fix: remove tokencache from vmcp by @​yrobla in #​2799
• adds ability to configure database details for registry server by @​ChrisJBurns in #​2800

New Contributors

• @​ignorant05 made their first contribution in #​2789
• @​4t8dd made their first contribution in #​2757

Full Changelog: stacklok/toolhive@v0.6.8...v0.6.9

v0.6.8

Compare Source

What's Changed

• Add OAuth authorization server fallback for registration endpoint discovery by @​amirejaz in #​2711
• Add schema test ensuring the correct version by @​rdimitrov in #​2738
• Update registry from toolhive-registry release v2025.11.26 by @​github-actions[bot] in #​2739
• Add build environment configuration and validation by @​JAORMX in #​2740
• Add header injection authentication support by @​yrobla in #​2730
• fix: follow up for removing not needed value on secrets by @​yrobla in #​2744
• Remove redundant best_effort failure mode from composer by @​jhrozek in #​2746
• adds multi-configmap data source for registry by @​ChrisJBurns in #​2745
• removes unused registry helper functions by @​ChrisJBurns in #​2748
• Add new diagram to README by @​danbarr in #​2743
• Remove NewUpstreamRegistryFromUpstreamServers by @​rdimitrov in #​2752
• Update module github.com/cedar-policy/cedar-go to v1.3.1 by @​renovate[bot] in #​2751
• Update golang.org/x/exp/jsonrpc2 digest to 87e1e73 by @​renovate[bot] in #​2735
• Add CLI commands and template integration for build environment by @​JAORMX in #​2742
• adds dedicated podtemplatespec builder for registry server deployment by @​ChrisJBurns in #​2754
• Update registry from toolhive-registry release v2025.11.27 by @​github-actions[bot] in #​2756
• Implement discovered mode for vMCP authentication by @​yrobla in #​2747
• Remove unimplemented pass_through auth strategy by @​jhrozek in #​2753
• fix: fail when discover of auth creds fail by @​yrobla in #​2758
• Remove local incoming auth type from operator CRDs by @​jhrozek in #​2759

Full Changelog: stacklok/toolhive@v0.6.7...v0.6.8

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/cedar-policy/cedar-go	v1.3.0 -> v1.3.1
golang.org/x/exp/jsonrpc2	v0.0.0-20251113190631-e25ba8c21ef6 -> v0.0.0-20251125195548-87e1e737ad39

[github-actions]

🔒 MCP Security Scan Results

⚠️ No MCP servers were scanned in this PR.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/stacklok/[email protected] requires go >= 1.25.5; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off