Update toolhive images to v0.3.7 #2039

renovate · 2025-09-30T20:42:16Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Update	Change
ghcr.io/stacklok/toolhive/operator (source)	patch	`v0.3.5` -> `v0.3.7`
ghcr.io/stacklok/toolhive/proxyrunner (source)	patch	`v0.3.5` -> `v0.3.7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

stacklok/toolhive (ghcr.io/stacklok/toolhive/operator)

`v0.3.7`

Compare Source

🚀 ToolHive v0.3.7 is now available!

This release focuses on improved authorization handling, better network isolation, and enhanced reliability across the platform.

Authorization & Security
• Fixed authorization behavior for tools/list endpoint and text/event-stream content
• Improved audit middleware to detect transport types accurately instead of relying on hardcoded paths
• Added network isolation support with inbound host configuration and end-to-end testing

APIs & Configuration
• Registry defaults now update properly when auth config is provided via CLI
• OAuth scope field now handles both string and array formats correctly
• Proxy mode is now returned in server type for stdio connections
• Endpoint URLs now use X-Forwarded-* headers for more accurate construction

Reliability & Testing
• Refactored status collector with structured error handling for better diagnostics
• Added new pkg/testkit package to improve testing infrastructure
• Fixed nil pointer dereference issue in retriever tests
• ServiceAccount now propagates correctly to StatefulSet in ConfigMap mode

Registry & Tooling
• Multiple registry updates (v2025.10.01 through v2025.10.06)
• Added sample Grafana dashboard for CLI tutorial
• Improved Grafana dashboard UID length handling

Dependencies
• Updated mcp-go to v0.41.1
• Updated Docker to v28.5.0
• Updated Ginkgo to v2.26.0
• Updated go-git to v5.16.3
• Updated Claude Code action to v1

Full Changelog: v0.3.6...v0.3.7

`v0.3.6`

Compare Source

🚀 Toolhive v0.3.6 Release Summary

🔧 Enhancements & Fixes

Reliability & Observability
- Improved error logging (service name/version)
- Context-aware logging in the operator
- Fixed reconciliation loops and flaky tests
- Corrected Jaeger query URL and telemetry namespace alignment
- Adjusted Registry API output and added new enforce flag for MCPRegistry
Security & CI/CD
- Added Trivy security scanning to GitHub Actions
- Fixed CI workflow triggers for security scans
- Improved remote MCP authentication, including issuer mismatch fixes
Dependencies
- Updated mcp-go (v0.40.0 → v0.41.0), sigstore-go (v1.1.3), tablewriter (1.1.0)
- Updated Docker and login-action dependencies
- Regular registry updates from toolhive-registry releases
Infrastructure & Deployment
- Fixed goreleaser warnings
- Improved ARM64 build for egress proxy
- Disabled SELinux labeling
- Added registry deploy from controller & Git Source Handler for MCPRegistry
- Changed default behavior of proxyrunner
- Used status files to retrieve PID
- Removed server deployment counter

📖 Documentation

Added documentation for remote MCP authentication

🙌 Community

New contributor: @TomerFi 🎉

What's Changed

improves error logs for specific service name and version by @ChrisJBurns in #1968
Fix goreleaser warnings by @rdimitrov in #1969
chore(deps): update toolhive images to v0.3.5 by @renovate[bot] in #1967
Update registry from toolhive-registry release v2025.09.19 by @github-actions[bot] in #1971
Ensure version output works before releasing by @rdimitrov in #1970
Thv registry deploy from controller by @jhrozek in #1931
Git Source Handler for MCPRegistry by @dmartinol in #1925
fix(deps): update module github.com/mark3labs/mcp-go to v0.40.0 by @renovate[bot] in #1978
Use status files to retrieve PID by @dmjb in #1805
corrects jaeger query url for otel collector by @ChrisJBurns in #1984
Update registry from toolhive-registry release v2025.09.20 by @github-actions[bot] in #1986
Update registry from toolhive-registry release v2025.09.21 by @github-actions[bot] in #1987
Update registry from toolhive-registry release v2025.09.22 by @github-actions[bot] in #1991
Remove counter of deployed server by @dmartinol in #1979
Bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.0 by @dependabot[bot] in #1992
Update registry from toolhive-registry release v2025.09.23 by @github-actions[bot] in #1999
Disable selinux labeling by @kaharlichenko in #1988
Fix flaky TestGetRegistryAPIImage test by using dependency injection by @JAORMX in #2002
Add Trivy security scanning to GitHub Actions workflows by @JAORMX in #2000
Update registry from toolhive-registry release v2025.09.24 by @github-actions[bot] in #2005
Fix CI: Add workflow_call trigger to security-scan workflow by @JAORMX in #2008
Replace global logger with context-aware logging in operator by @JAORMX in #2007
Fix reconciliation loops by @dmartinol in #1996
Adjust output of Registry API by @dmartinol in #2001
Add an enforce flag to MCPRegistry by @jhrozek in #1997
fix: the telemetry namesapce should match the operator's one by @TomerFi in #2003
Update registry from toolhive-registry release v2025.09.26 by @github-actions[bot] in #2011
fix(deps): update module github.com/sigstore/sigstore-go to v1.1.3 by @renovate[bot] in #2019
fix(deps): update module github.com/mark3labs/mcp-go to v0.41.0 by @renovate[bot] in #2021
Update registry from toolhive-registry release v2025.09.28 by @github-actions[bot] in #2020
Update registry from toolhive-registry release v2025.09.29 by @github-actions[bot] in #2022
Fix egress proxy ARM64 build by using Alpine edge repository by @JAORMX in #1995
chore(deps): update docker/login-action action to v3.6.0 by @renovate[bot] in #2025
Add remote MCP authentication documentation by @JAORMX in #1981
Fix remote MCP server authentication with issuer mismatch by @JAORMX in #1980
fix issues with propagating server and transport on telemetry by @yrobla in #1973
change the default behaviour of proxyrunner by @yrobla in #1952
Update registry from toolhive-registry release v2025.09.30 by @github-actions[bot] in #2029
corrects jaeger URLs for otel example by @ChrisJBurns in #2036
Fix GoReleaser archive formats by @danbarr in #2038

Full Changelog: v0.3.5...v0.3.6

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

ChrisJBurns · 2025-10-06T15:06:47Z

@claude Can you please bump the operator helm chart version and the images that it uses?

claude · 2025-10-06T15:07:02Z

Claude finished @ChrisJBurns's task —— View job

Completed operator helm chart version bump ✓

Tasks

Read current Helm chart configuration
Bump chart version in Chart.yaml
Verify image versions in values.yaml
Commit and push changes

Summary

Successfully updated the operator Helm chart:

Bumped chart version from 0.2.19 to 0.2.20
Updated appVersion from 0.3.5 to 0.3.7
Verified that values.yaml already had the correct image versions (v0.3.7)

The changes have been committed and pushed to the renovate/toolhive-images branch.

Job Run | Branch: renovate/toolhive-images

Update chart version and appVersion to match v0.3.7 release. Co-authored-by: Chris Burns <[email protected]>

renovate · 2025-10-06T15:09:18Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

ChrisJBurns · 2025-10-06T15:11:38Z

@claude there are linting errors, please can you solve them by running the pre-commit command

claude · 2025-10-06T15:11:56Z

Claude finished @ChrisJBurns's task —— View job

Fixed linting errors ✓

Tasks

Check git status and identify changed files
Analyze CI failure logs
Apply helm-docs generated changes to README.md
Commit and push fixes

Summary

Successfully fixed the pre-commit linting errors. The issue was that when the Helm chart version and image versions were updated, the corresponding README.md documentation wasn't regenerated by helm-docs.

Changes Made

Updated deploy/charts/operator/README.md with the following changes:

Version badge: 0.2.19 → 0.2.20
Operator image: ghcr.io/stacklok/toolhive/operator:v0.3.5 → v0.3.7
Proxyrunner image: ghcr.io/stacklok/toolhive/proxyrunner:v0.3.5 → v0.3.7

The changes have been committed and pushed to the renovate/toolhive-images branch. The pre-commit linting checks should now pass.

Job Run | Branch: renovate/toolhive-images

Co-authored-by: Chris Burns <[email protected]>

ChrisJBurns · 2025-10-06T15:51:59Z

@claude Thank you, can you also update the openshift values file also? That should be the last thing to update. Please do not change anything else

claude · 2025-10-06T15:52:20Z

Claude finished @ChrisJBurns's task —— View job

Updated OpenShift values file ✓

Tasks

Locate OpenShift values file
Update image versions to v0.3.7
Commit and push changes

Summary

Successfully updated deploy/charts/operator/values-openshift.yaml with v0.3.7 image versions:

Operator image: ghcr.io/stacklok/toolhive/operator:v0.3.5 → v0.3.7
Proxyrunner image: ghcr.io/stacklok/toolhive/proxyrunner:v0.3.5 → v0.3.7

The changes have been committed and pushed to the renovate/toolhive-images branch.

Job Run | Branch: renovate/toolhive-images

Co-authored-by: Chris Burns <[email protected]>

renovate bot added the dependencies Pull requests that update a dependency file label Sep 30, 2025

renovate bot force-pushed the renovate/toolhive-images branch from 98c8b03 to 16cb4d9 Compare September 30, 2025 21:48

renovate bot changed the title ~~chore(deps): update ghcr.io/stacklok/toolhive/proxyrunner docker tag to v0.3.6~~ chore(deps): update toolhive images to v0.3.6 Sep 30, 2025

renovate bot force-pushed the renovate/toolhive-images branch 17 times, most recently from fb6a385 to 8b3bd5e Compare October 3, 2025 11:25

renovate bot changed the title ~~chore(deps): update toolhive images to v0.3.6~~ Update toolhive images to v0.3.6 Oct 3, 2025

renovate bot force-pushed the renovate/toolhive-images branch 9 times, most recently from a7e99d7 to 3985d2c Compare October 3, 2025 21:01

renovate bot force-pushed the renovate/toolhive-images branch 3 times, most recently from de83744 to 403331a Compare October 6, 2025 08:32

Update toolhive images to v0.3.7

42009f6

renovate bot force-pushed the renovate/toolhive-images branch from 403331a to 42009f6 Compare October 6, 2025 13:42

renovate bot changed the title ~~Update toolhive images to v0.3.6~~ Update toolhive images to v0.3.7 Oct 6, 2025

Bump operator helm chart version to 0.2.20

8e61f5c

Update chart version and appVersion to match v0.3.7 release. Co-authored-by: Chris Burns <[email protected]>

Update operator helm chart README with v0.3.7 image versions

e3efe20

Co-authored-by: Chris Burns <[email protected]>

Update OpenShift values file with v0.3.7 image versions

fce8f44

Co-authored-by: Chris Burns <[email protected]>

ChrisJBurns approved these changes Oct 6, 2025

View reviewed changes

ChrisJBurns merged commit d9498fe into main Oct 6, 2025
10 checks passed

ChrisJBurns deleted the renovate/toolhive-images branch October 6, 2025 16:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update toolhive images to v0.3.7 #2039

Update toolhive images to v0.3.7 #2039

renovate bot commented Sep 30, 2025 •

edited

Loading

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 6, 2025

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 •

edited

Loading

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Update toolhive images to v0.3.7 #2039

Update toolhive images to v0.3.7 #2039

Conversation

renovate bot commented Sep 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.3.7

v0.3.6

🚀 Toolhive v0.3.6 Release Summary

🔧 Enhancements & Fixes

📖 Documentation

🙌 Community

What's Changed

Configuration

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Completed operator helm chart version bump ✓

Tasks

Summary

Uh oh!

renovate bot commented Oct 6, 2025

Edited/Blocked Notification

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Fixed linting errors ✓

Tasks

Summary

Changes Made

Uh oh!

ChrisJBurns commented Oct 6, 2025

Uh oh!

claude bot commented Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Updated OpenShift values file ✓

Tasks

Summary

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Sep 30, 2025 •

edited

Loading

`v0.3.7`

`v0.3.6`

claude bot commented Oct 6, 2025 •

edited

Loading

claude bot commented Oct 6, 2025 •

edited

Loading

claude bot commented Oct 6, 2025 •

edited

Loading