chore(deps): update dependency stacklok/toolhive to v0.22.0

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive	minor	v0.21.0 → v0.22.0

---

Release Notes

stacklok/toolhive (stacklok/toolhive)

v0.22.0

Compare Source

What's Changed

• Remove empty parent directories on skill uninstall by @​samuv in #​4895
• Only install skills for clients detected on the system by @​samuv in #​4899
• Detect JSON-RPC application errors in proxy audit middleware by @​gmogmzGithub in #​4709
• Update operator architecture docs for authServerRef by @​tgrunnagle in #​4780
• Add AdditionalAuthorizationParams to upstream OAuth configs by @​jhrozek in #​4862
• Replace groups parameter with variadic parents on entity factory by @​jhrozek in #​4901
• Fix partialFailureMode validator to accept CRD enum values by @​jhrozek in #​4865
• Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 by @​dependabot[bot] in #​4906
• Validate audience matches resourceUrl for embedded auth server by @​tgrunnagle in #​4904
• Extract vMCP serve/validate logic into pkg/vmcp/cli/ by @​yrobla in #​4891
• Add name attribute alias on Resource entities by @​jhrozek in #​4907
• Update module github.com/stacklok/toolhive-catalog to v0.20260417.0 by @​renovate[bot] in #​4909
• Add unit tests for pkg/vmcp/cli serve and validate logic by @​yrobla in #​4898
• Add pkg/vmcp/cli/init.go for vMCP config scaffolding by @​yrobla in #​4903
• Add thv vmcp serve and thv vmcp validate subcommands by @​yrobla in #​4900
• Update README by @​danbarr in #​4915
• Treat unauthenticated backends as routable in vMCP health by @​lorr1 in #​4866
• Bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 by @​dependabot[bot] in #​4921
• Add EmbeddingServiceManager for TEI container lifecycle by @​yrobla in #​4912
• Fix skill install for qualified namespace/name references and missing parent directory by @​samuv in #​4841
• Add zero-config quick mode for thv vmcp serve by @​yrobla in #​4913
• embedding_manager: address Copilot review findings from #​4912 by @​yrobla in #​4938
• Add thv vmcp init subcommand by @​yrobla in #​4939
• Add --system flag to secret list and delete commands by @​amirejaz in #​4910
• Wire optimizer flags into thv vmcp serve by @​yrobla in #​4940
• Document category-based redis ACLs by @​tgrunnagle in #​4946
• Add policy_stopped workload status and enforce policy gate on restart by @​reyortiz3 in #​4857
• Extend group extraction with dual-claim and dot-notation support by @​jhrozek in #​4911
• vmcp: stop the TEI manager on Start failure and apply image default in Serve by @​SAY-5 in #​4948
• Update alpine Docker tag to v3.23.4 by @​renovate[bot] in #​4927
• Update github/codeql-action digest to 95e58e9 by @​renovate[bot] in #​4926
• Update anthropics/claude-code-action digest to 5d5c10a by @​renovate[bot] in #​4925
• Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @​dependabot[bot] in #​4793
• Account for embedded auth env in deployment drift checks by @​JAORMX in #​4878
• Update actions/cache digest to 27d5ce7 by @​renovate[bot] in #​4924
• Split skillsvc into per-concern files by @​samuv in #​4947
• Finish defaultTEIImage rename in embedding_manager_test.go by @​JAORMX in #​4957
• Upgrade default go builder image to golang:1.26-alpine by @​JAORMX in #​4955
• Return 502 Bad Gateway when OCI skill pull fails by @​samuv in #​4956
• Upgrade default uvx builder image to python:3.14-slim by @​JAORMX in #​4953
• Upgrade default npx builder image to node:24-alpine by @​JAORMX in #​4954
• Update module github.com/stacklok/toolhive-catalog to v0.20260421.0 by @​renovate[bot] in #​4932
• Document 502 Bad Gateway failure for installSkill in OpenAPI spec by @​samuv in #​4960
• Add registry-aware workload creation by @​rdimitrov in #​4872
• Add unit and integration tests for Cedar group-based authorization by @​jhrozek in #​4964
• Add e2e tests for thv vmcp CLI by @​yrobla in #​4941
• Thread image verification mode through workload service by @​rdimitrov in #​4966
• Hide thv vmcp command from CLI help by @​JAORMX in #​4967
• Release v0.22.0 by @​stacklokbot in #​4968

New Contributors

• @​SAY-5 made their first contribution in #​4948

Full Changelog: stacklok/toolhive@v0.21.0...v0.22.0

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • ""
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.