Merge branch 'main' into winget

Author: rdimitrov

.github/workflows/_security-checks.yaml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Scan repo
-        uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
+        uses: aquasecurity/trivy-action@76071ef0d7ec797419534a183b498b4d6366cf37 # 0.31.0
         with:
           scan-type: 'fs'
           scan-ref: '.'

.github/workflows/_static-checks.yaml

@@ -25,16 +25,3 @@ jobs:
 
       - name: Run Prettier
         run: npm run prettier
-
-  build:
-    name: Build site
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-
-      - name: Setup
-        uses: ./.github/actions/setup
-
-      - name: Build site
-        run: npm run build

.github/workflows/update-toolhive-reference.yml

@@ -39,19 +39,9 @@ jobs:
             echo "changed=true" >> $GITHUB_OUTPUT
           fi
 
-      - name: Create branch, commit, and push
-        if: steps.git-diff.outputs.changed == 'true'
-        run: |
-          BRANCH=update-toolhive-reference-${VERSION}
-          git checkout -b "$BRANCH"
-          git commit -am "Update ToolHive reference docs for ${VERSION}"
-          git push origin "$BRANCH"
-        env:
-          VERSION: ${{ steps.imports.outputs.version }}
-
       - name: Create Pull Request
         if: steps.git-diff.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7
         with:
           branch: update-toolhive-reference-${{ steps.imports.outputs.version }}
           title: |
@@ -61,3 +51,4 @@ jobs:
           commit-message: |
             Update ToolHive reference docs for ${{ steps.imports.outputs.version }}
           delete-branch: true
+          sign-commits: true

docs/toolhive/reference/cli/thv_rm.md

@@ -13,8 +13,7 @@ thv rm [container-name] [flags]
 ### Options
 
 ```
-  -f, --force   Force removal of a running container
-  -h, --help    help for rm
+  -h, --help   help for rm
 ```
 
 ### Options inherited from parent commands

docs/toolhive/reference/cli/thv_run.md

@@ -37,8 +37,10 @@ thv run [flags] SERVER_OR_IMAGE_OR_PROTOCOL [-- ARGS...]
 ### Options
 
 ```
+      --audit-config string         Path to the audit configuration file
       --authz-config string         Path to the authorization configuration file
       --ca-cert string              Path to a custom CA certificate file to use for container builds
+      --enable-audit                Enable audit logging with default configuration
   -e, --env stringArray             Environment variables to pass to the MCP server (format: KEY=VALUE)
   -f, --foreground                  Run in foreground mode (block until container exits)
   -h, --help                        help for run

docs/toolhive/reference/cli/thv_secret_provider.md

@@ -6,8 +6,8 @@ Configure the secrets provider
 
 Configure the secrets provider.
 Valid secrets providers are:
-  - encrypted: Encrypted secrets provider
-  - 1password: 1Password secrets provider (currently only supports getting secrets)
+  - encrypted: Full read-write secrets provider
+  - 1password: Read-only secrets provider
 
 ```
 thv secret provider <name> [flags]