v0.3.9

What's Changed

• Improves Running of ToolHive Operator Tests (unit/integration) by @ChrisJBurns in #2175
• exclude mocks from codecov by @ChrisJBurns in #2177
• fixes test assertion that fails intermittently if not exact order match by @ChrisJBurns in #2180
• renames transport mocks file for consistency by @ChrisJBurns in #2179
• Update registry from toolhive-registry release v2025.10.14 by @github-actions[bot] in #2183
• Fix already used OAuth callback port handling to prevent "Invalid redirect URI" errors by @amirejaz in #2121
• Remove pointer-to-interface anti-pattern in OAuthFlowResult by @kofort9 in #2182
• Add proposal for Remote MCP Server Proxy Support by @JAORMX in #2151
• Set a 2% threshold for codecov by @rdimitrov in #2187
• Enables RunConfig ConfigMap Operator Mode and Bumps toolHive ProxyRunner Images to 0.3.8 by @ChrisJBurns in #2191
• Refactor buildRunnerConfig to reduce cyclomatic complexity by @JAORMX in #2186
• Remove duplicate pull_request trigger from operator-ci workflow by @JAORMX in #2185
• Properly upgrade jsonschema library from v5 to v6 by @JAORMX in #2168
• Update Kubernetes test versions to latest supported releases by @JAORMX in #2194
• Support RFC 9728 well-known paths with resource components by @jhrozek in #2197
• Fix export and detail API inconsistencies for remote auth config by @amirejaz in #2198
• Remove registry-related labels from the example config by @jhrozek in #2199
• Update anthropics/claude-code-action digest to e8bad57 by @renovate[bot] in #2206
• Update registry from toolhive-registry release v2025.10.15 by @github-actions[bot] in #2205
• Adds Missing OIDC RunConfig for Operator by @ChrisJBurns in #2201
• Correctly construct resource_metadata per RFC 9728 Section 3.1 by @jhrozek in #2203
• Secure OAuth client secret storage and prevent API exposure by @amirejaz in #2204
• Forces use of runconfig via configmap for Operator and ProxyRunner by @ChrisJBurns in #2196
• Add MCPGroup CRD proposal for Kubernetes operator by @JAORMX in #2207
• Rename design docs to THV-####-name by @blkt in #2200
• removes unused flag driven code for podTemplateSpec patch and permission profiles in operator by @ChrisJBurns in #2219
• Removes oidc,authz,audit,toolsfilter and OTel flag driven config from Operator by @ChrisJBurns in #2220
• ToolHive Re-Attachment fix by @therealnb in #2118
• Log middleware names instead of numeric indices by @JAORMX in #2218
• Fixes race conditions in stdio transport tests by @ChrisJBurns in #2222
• Removes Old Unused Flag Driven OIDC Functions in Operator by @ChrisJBurns in #2221
• Update anchore/sbom-action action to v0.20.7 by @renovate[bot] in #2223
• Update registry from toolhive-registry release v2025.10.16 by @github-actions[bot] in #2225
• Add MCPExternalAuthConfig CRD and controller by @JAORMX in #2150
• Add seccomp profile to operator container security context by @JAORMX in #2209
• Update registry from toolhive-registry release v2025.10.16 by @github-actions[bot] in #2229

New Contributors

• @kofort9 made their first contribution in #2182
• @therealnb made their first contribution in #2118

Full Changelog: v0.3.8...v0.3.9