chore(deps): update dependency stacklok/toolhive to v0.10.0

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive	minor	v0.9.4 → v0.10.0

---

Release Notes

stacklok/toolhive (stacklok/toolhive)

v0.10.0

Compare Source

What's Changed

• Add Handler(ctx) method to vmcp Server for embeddable use by @​JAORMX in #​3834
• Add vector embedding support and hybrid search to ToolStore by @​aponcedeleonch in #​3808
• Add skills to upstream registry types and schema by @​rdimitrov in #​3838
• Update module github.com/redis/go-redis/v9 to v9.18.0 by @​renovate[bot] in #​3837
• Update anthropics/claude-code-action digest to 2f8ba26 by @​renovate[bot] in #​3842
• Update registry from toolhive-registry release v2026.02.17 by @​github-actions[bot] in #​3841
• Replace non-functional webhooks with hybrid validation approach by @​yrobla in #​3819
• Add extensible container runtime registry by @​JAORMX in #​3832
• Add skill installer and extractor for OCI artifact extraction by @​JAORMX in #​3835
• Migrate pkg/logger from zap to slog via toolhive-core/logging by @​rdimitrov in #​3846
• Add gosec #nosec annotations to fix lint errors by @​aponcedeleonch in #​3848
• Update the toolhive schema with tool definitions by @​rdimitrov in #​3850
• Migrate leaf packages from logger shim to slog by @​rdimitrov in #​3854
• Update the CODEOWNERS file by @​rdimitrov in #​3858
• Deprecate the regup tool from toolhive by @​rdimitrov in #​3855
• Fix OAuth URL extraction in proxy E2E tests by @​jhrozek in #​3859
• Migrate pkg/container, pkg/secrets, pkg/config from logger shim to slog by @​rdimitrov in #​3861
• Migrate pkg/auth and pkg/authz from logger shim to slog by @​rdimitrov in #​3860
• Update module github.com/stacklok/toolhive-core to v0.0.5 by @​renovate[bot] in #​3847
• Update registry from toolhive-registry release v2026.02.18 by @​github-actions[bot] in #​3862
• Migrate pkg/transport from logger shim to slog by @​rdimitrov in #​3863
• Remove jwks_uri from Protected Resource Metadata response by @​jhrozek in #​3853
• Report discovered auth config errors via conditions by @​yrobla in #​3822
• Harden scope handling in DCR and callback handler by @​jhrozek in #​3831
• Migrate pkg/api from logger shim to slog by @​rdimitrov in #​3879
• Migrate pkg/groups, pkg/client, pkg/workloads, pkg/migration, pkg/registry, pkg/runtime from logger shim to slog by @​rdimitrov in #​3878
• Migrate pkg/runner, pkg/mcp, pkg/audit, pkg/telemetry, pkg/usagemetrics from logger shim to slog by @​rdimitrov in #​3864
• Migrate pkg/authserver from logger shim to slog by @​rdimitrov in #​3880
• Add title, overview, and tool_definitions to legacy registry format by @​rdimitrov in #​3881
• Release v0.10.0 by @​stacklokbot in #​3884

Full Changelog: stacklok/toolhive@v0.9.4...v0.10.0

---

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.