Skip to content

Update stacklok/toolhive to v0.29.0#915

Merged
JAORMX merged 4 commits into
mainfrom
renovate/stacklok-toolhive-0.x
Jun 4, 2026
Merged

Update stacklok/toolhive to v0.29.0#915
JAORMX merged 4 commits into
mainfrom
renovate/stacklok-toolhive-0.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jun 4, 2026 •
edited by github-actions Bot
Loading

This PR contains the following updates:

Package Update Change
stacklok/toolhive minor v0.28.3 → v0.29.0

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

Release Notes

stacklok/toolhive (stacklok/toolhive)

v0.29.0

Compare Source

What's Changed

New Contributors

Full Changelog: stacklok/toolhive@v0.28.3...v0.29.0

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Docs update for toolhive v0.29.0

At a glance
Upstream stacklok/toolhive v0.28.3 → v0.29.0
Hand-written changes 2 commit(s)
Reference assets refreshed (separate commit)
Gaps 0
Release contributors 12 auto-assigned (see sidebar)
Action required Spot-check skill-authored prose for accuracy

Summary of changes

Summary of changes

Hand-written documentation edits for toolhive v0.29.0:

  • Added a "Check for and apply upgrades" section to docs/toolhive/guides-cli/manage-mcp-servers.mdx covering thv upgrade check, thv upgrade apply, and thv list --check-upgrades. Calls out the local-runtime scope, the verify-then-pull-before-destroy ordering, and the absence of automatic rollback.
  • Added a "Invoke a tool" subsection to docs/toolhive/guides-cli/test-mcp-servers.mdx documenting thv mcp call (JSON args, mutually exclusive --args/--args-file, --ignore-tool-error, JSON-object validation, transport/timeout/format flags).
  • Added a "Client ID Metadata Document (CIMD)" section to docs/toolhive/concepts/embedded-auth-server.mdx and a cimd row to the embedded-auth-server configuration reference table in docs/toolhive/guides-k8s/auth-k8s.mdx, with cross-links between the two.

Deferred (no hand-edits this release):

  • obo enum value on MCPExternalAuthConfig.spec.type — placeholder for an Enterprise capability; upstream-only builds transition to EnterpriseRequired.
  • StorageVersionMigrator chart feature flag — upstream PR explicitly defers user-facing reference docs and the upgrade-guide walkthrough to a later release.

Run cost

Session Turns Cost (USD)
Generation 148 $11.7182
Editorial review 41 $3.6438
Total 189 $15.3620
How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

  • docs/toolhive/reference/cli/
  • docs/toolhive/reference/crds/
  • static/api-specs/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

@renovate
Update stacklok/toolhive to v0.29.0
fb3e3db 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate Bot added the autogen-docs Pull requests generated by automated release workflows label Jun 4, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Jun 4, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-website Ready Ready Preview, Comment Jun 4, 2026 7:25am

Request Review

@github-actions github-actions Bot marked this pull request as draft June 4, 2026 07:04
@claude
Copy link
Copy Markdown
Contributor

claude Bot commented Jun 4, 2026 •
edited
Loading

Claude finished @renovate[bot]'s task in 12m 42s —— View job

Upstream release docs: toolhive v0.29.0

  • Phase 1: Discovery (release notes + PRs categorized)
  • Phase 2: Deep-dive (PR bodies + upstream source verified)
  • Phase 3: Docs impact map
  • Phase 4: Implement hand-written edits
  • Phase 5: Self-review against source
  • Phase 6: SUMMARY.md and commit

Pushed commit 7485c5f on renovate/stacklok-toolhive-0.x.

What changed

  • docs/toolhive/guides-cli/manage-mcp-servers.mdx — new "Check for and apply upgrades" section covering thv upgrade check, thv upgrade apply, and thv list --check-upgrades. Calls out the local-runtime scope, the verify-then-pull-before-destroy ordering, and the absence of automatic rollback.
  • docs/toolhive/guides-cli/test-mcp-servers.mdx — new "Invoke a tool" subsection for thv mcp call (JSON args, mutually exclusive --args/--args-file, --ignore-tool-error, transport/timeout/format flags).
  • docs/toolhive/concepts/embedded-auth-server.mdx — new "Client ID Metadata Document (CIMD)" section sitting next to the existing DCR baseline-scopes section.
  • docs/toolhive/guides-k8s/auth-k8s.mdx — added a cimd row to the embedded-auth-server configuration reference table, cross-linked to the concept page.

Verified against source (release tag v0.29.0)

  • cmd/thv/app/upgrade.go — check table columns (NAME/STATUS/CURRENT/CANDIDATE/NEW-ENV/POSTURE), apply flag set, no-rollback wording, bulk mode using ListWorkloads(ctx, true) (includes stopped workloads).
  • pkg/workloads/upgrade/types.go — status enum values (up-to-date, upgrade-available, not-registry-sourced, server-not-found, unknown) match docs.
  • cmd/thv/app/mcp_call.go — args validation requires a JSON object (not array/scalar), --server is required, --args and --args-file are mutually exclusive (- = stdin).
  • cmd/thv-operator/api/v1beta1/mcpexternalauthconfig_types.go — EmbeddedAuthServerCIMDConfig field set (enabled, cacheMaxSize default 256, cacheFallbackTtl default 5m), and the note that CIMD-resolved clients also pick up baselineClientScopes.

Skipped (with reasons)

  • obo enum (stacklok/toolhive#5361) — upstream-only builds transition to EnterpriseRequired; OBOConfig is an empty placeholder this release.
  • StorageVersionMigrator chart flag (#5418) — upstream PR explicitly defers user-facing docs to a follow-up release.
  • vMCP OIDC identity binding (#5378) — removed --vmcp-session-hmac-secret was never documented in this repo.
  • Opaque-token Cedar fallback (#5147), DCR §3.1 path-insertion (#5395) — internal/transparent bug fixes; no doc-visible shape change.
  • Roo Code deprecation (#5415) — already covered by stacklok/docs-website#909.

Validation

  • npm run prettier:fix — clean.
  • npm run eslint — clean.
  • npm run build — fails on the unrelated mcp-metadata-plugin step that shells out to thv registry info; this requires the toolhive CLI binary which isn't available in this sandbox. The failure is pre-existing for any unsandboxed branch and is not caused by these edits. CI will exercise the full build.

@github-actions
Document v0.29.0 workload upgrade, mcp call, and CIMD
7485c5f 
- Add "Check for and apply upgrades" section to the CLI manage
  guide covering thv upgrade check/apply and thv list
  --check-upgrades. Notes local-runtime scope, verify-then-pull
  ordering, and no-rollback behavior.
- Add a "thv mcp call" subsection to the CLI test guide
  explaining JSON args, mutually exclusive --args/--args-file,
  and --ignore-tool-error semantics.
- Add a Client ID Metadata Document (CIMD) section to the
  embedded auth server concept doc and a cimd row to the K8s
  embedded-auth-server configuration reference.
@claude
Copy link
Copy Markdown
Contributor

claude Bot commented Jun 4, 2026 •
edited
Loading

Claude finished @renovate[bot]'s task in 5m 45s —— View job

Editorial review: toolhive v0.29.0 docs

Pushed 126160e on renovate/stacklok-toolhive-0.x.

  • Identify changed files (skipped auto-generated reference + signal files)
  • Review each hand-written doc against the style guide and skill checklist
  • Verify factual concerns against upstream source at v0.29.0
  • Apply actionable fixes
  • Commit and push

Fixes applied (docs/toolhive/guides-cli/manage-mcp-servers.mdx)

  • L207: "surface an upgrade column alongside thv list" → "add an upgrade column to the thv list output". The --check-upgrades flag adds a column to the existing table; the previous wording suggested a separate display.
  • L246-248: Replaced "In non-interactive shells the command runs non-interactively automatically and fails…" with a clearer two-sentence structure that explicitly names the TTY condition and the failure case without stacking "non-interactive…non-interactively".

Verified, kept as-is

  • Preserved-config tuple (environment variables, secrets, permission profile, transport, volumes, middleware) matches pkg/workloads/upgrade/applier.go (volumes preserved via WithVolumes(slices.Clone(old.Volumes))).
  • cimd defaults (enabled: false, cacheMaxSize: 256, cacheFallbackTtl: 5m) and the "Cache-Control not yet honored" caveat match EmbeddedAuthServerCIMDConfig.
  • Upgrade status list (up-to-date, upgrade-available, not-registry-sourced, server-not-found, unknown) matches cmd/thv/app/upgrade.go.
  • thv mcp call flag behavior (--server required, --args/--args-file mutually exclusive, - for stdin, JSON-object validation) matches cmd/thv/app/mcp_call.go.
  • Anchor #client-id-metadata-document-cimd in the auth-k8s cimd row resolves to the new heading on the concept page.

Deliberately not changed

  • **before** bold for emphasis on the "resolves, verifies, and pulls…before touching" safety guarantee — defensible for a security-relevant ordering claim.
  • "For MCP servers you ran from a registry entry" past tense — the workload's prior thv run is the reference point an upgrade check needs.
  • CallToolResult.IsError=true parenthetical — matches the upstream synopsis and gives MCP-savvy readers the exact protocol field.

Note

Prettier/ESLint couldn't be run from this sandbox (the install path requires npm ci approval), so the edits stayed within the existing 80-char wrap manually. CI will exercise the linters.
· Branch

@github-actions @claude
Tighten upgrade-apply wording in CLI manage guide
126160e 
Drop the awkward 'non-interactively automatically' phrasing and rephrase
the --check-upgrades intro so 'add a column to the list output' replaces
the misleading 'surface alongside thv list.'

Co-authored-by: claude[bot] <noreply@anthropic.com>
@github-actions github-actions Bot marked this pull request as ready for review June 4, 2026 07:25
@JAORMX JAORMX merged commit 6c49c6b into main Jun 4, 2026
6 checks passed
@JAORMX JAORMX deleted the renovate/stacklok-toolhive-0.x branch June 4, 2026 12:01
@danbarr danbarr mentioned this pull request Jun 4, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JAORMX JAORMX JAORMX approved these changes

@dussab dussab dussab approved these changes

@rdimitrov rdimitrov rdimitrov approved these changes

@amirejaz amirejaz amirejaz approved these changes

@ChrisJBurns ChrisJBurns Awaiting requested review from ChrisJBurns

@blkt blkt Awaiting requested review from blkt

@danbarr danbarr Awaiting requested review from danbarr

@jhrozek jhrozek Awaiting requested review from jhrozek

@tgrunnagle tgrunnagle Awaiting requested review from tgrunnagle

Assignees

No one assigned

Labels

autogen-docs Pull requests generated by automated release workflows

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@JAORMX @dussab @rdimitrov @amirejaz