v0.6.12

What's Changed

• Update alpine Docker tag to v3.23.0 by @renovate[bot] in #2882
• Update registry from toolhive-registry release v2025.12.04 by @github-actions[bot] in #2886
• fix vmcp crd don't reconcile after podtemplatespec changes by @yrobla in #2817
• Require explicit authentication configuration in VirtualMCPServer by @yrobla in #2865
• validate that group membership changes trigger reconciliation by @yrobla in #2866
• Update module github.com/spf13/cobra to v1.10.2 by @renovate[bot] in #2887
• Bump the operator versions by @rdimitrov in #2889
• Revert "Update alpine Docker tag to v3.23.0" by @rdimitrov in #2894
• fix mcp controller and test status propagation by @yrobla in #2823
• Update module github.com/mark3labs/mcp-go to v0.43.2 by @renovate[bot] in #2892
• use status manager and constants on podtemplatespec reconciliation by @yrobla in #2888
• Fix legacy registry schema ID and file references by @danbarr in #2880
• Return error when custom registry is unreachable by @JAORMX in #2879
• Drop any code which writes to PID files by @dmjb in #2899
• Gracefully Shutdown Foreground Server on Interrupt by @jerm-dro in #2863
• Bump the registry-server version in the operator by @rdimitrov in #2904
• Fix VirtualMCPServer controller to check PodReady condition by @JAORMX in #2901
• Refactor CRD Telemetry Config Conversion for Reusability by @jerm-dro in #2908
• Update MCP protocol expert agent to spec 2025-11-25 by @JAORMX in #2911
• add validation tests to detect invalid configs by @yrobla in #2896
• Update registry from toolhive-registry release v2025.12.05 by @github-actions[bot] in #2912
• Implement CompositeToolRefs resolution in VirtualMCPServer converter by @amirejaz in #2885
• Fix: Added path configuration to registry server by @dmartinol in #2794
• Fix vMCP podTemplateSpec when only pod-level settings is applied by @jhrozek in #2897
• Update module github.com/lestrrat-go/httprc/v3 to v3.0.2 by @renovate[bot] in #2913
• Revert "Gracefully Shutdown Foreground Server on Interrupt (#2863)" by @dmjb in #2916
• add examples of configuration for virtualmcp by @yrobla in #2900
• Disable failing vMCP test for k8s by @dmjb in #2919
• Ensure PID files are cleaned up after migration by @dmjb in #2905
• Move regex compilation to package-level variable in virtualmcpserver_controller #issue-2874 by @deepika1214 in #2875
• fixes generation of manifests via kubebuilder by @eleftherias in #2924
• Update module github.com/go-git/go-billy/v5 to v5.7.0 by @renovate[bot] in #2933
• Remove tool type column and rename created at to created in the thv list by @carlos-gn in #2917
• Update helm/kind-action digest to 2cd8ada by @renovate[bot] in #2937
• Add build auth file injection for protocol builds by @JAORMX in #2909
• Default anonymous authentication by @dmartinol in #2914
• adds permission for claude to make content write changes by @ChrisJBurns in #2925
• Add log level configuration support to VirtualMCPServer by @4t8dd in #2837
• Update module golang.org/x/sys to v0.39.0 by @renovate[bot] in #2943
• Gracefully Shutdown Foreground Server on Interrupt by @jerm-dro in #2927
• Instrument vMCP and Document o11y Configuration by @jerm-dro in #2906
• Validate ValidationStatus of referenced CompositeToolRefs by @amirejaz in #2944
• Fix logic bug in WaitForPodsReady that incorrectly reports pods as ready by @slyt3 in #2898
• Populate remote workload metadata in GetWorkload by @carlos-gn in #2929
• Update module golang.ngrok.com/ngrok/v2 to v2.1.1 by @renovate[bot] in #2928
• fix and test mcptoolconfig for vmcp by @yrobla in #2891
• Update module golang.org/x/mod to v0.31.0 by @renovate[bot] in #2952
• Add unauthenticated and headerinjection auth strategy to MCPExternalAuthConfig by @yrobla in #2915
• Use autoupdate github action to auto update all PRs. by @dmjb in #2958
• Bump the registry-server version in the operator to v0.4.2 by @rdimitrov in #2959
• Update kyverno/action-install-chainsaw action to v0.2.14 by @renovate[bot] in #2939
• Warn users about affected workloads when updating or deleting secrets by @JAORMX in #2945
• Update module golang.org/x/term to v0.38.0 by @renovate[bot] in #2965
• Update module github.com/onsi/gomega to v1.38.3 by @renovate[bot] in #2947
• Add design proposal for K8s-aware vMCP with dynamic backend discovery by @jhrozek in #2884
• Update module golang.org/x/oauth2 to v0.34.0 by @renovate[bot] in #2940
• Update peter-evans/create-pull-request digest to 22a9089 by @renovate[bot] in #2926
• Update module golang.org/x/sync to v0.19.0 by @renovate[bot] in #2942
• Add vulnerability exclusion support to govulncheck workflow by @jhrozek in #2972
• Bump the operator versions by @rdimitrov in #2974
• Update peter-evans/create-pull-request action to v8 by @renovate[bot] in #2973
• Update golang.org/x/exp/jsonrpc2 digest to 8475f28 by @renovate[bot] in #2966
• Fix VirtualMCPServer reconciliation for discovered auth config updates by @yrobla in #2957
• add test for composite workflow by reference by @yrobla in #2956
• Update module github.com/onsi/ginkgo/v2 to v2.27.3 by @renovate[bot] in #2946
• Update anthropics/claude-code-action digest to f0c8eb2 by @renovate[bot] in #2969
• Update module golang.org/x/net to v0.48.0 by @renovate[bot] in #2963
• Update kubernetes packages to v0.34.3 by @renovate[bot] in #2977
• Update anchore/sbom-action action to v0.20.11 by @renovate[bot] in #2975
• Add audit middleware to vMCP server by @yrobla in #2981
• Add OnDecline and OnCancel handlers for workflow steps by @yrobla in #2961
• Add configurable scopes to the auth info handler and expose them through CLI by @jhrozek in #2982
• Update opentelemetry-go monorepo by @renovate[bot] in #2967
• vMCP: Composite Tools supports non-string Arguments by @jerm-dro in #2971
• enable CRD upgrades via Helm with feature flags by @ChrisJBurns in #2809
• adds reusable Kubernetes secrets functionality in Operator by @ChrisJBurns in #2991
• Pass debug flag to detached process restart command by @carlos-gn in #2992
• Remove redundant ToolType field from Workload by @carlos-gn in #2932
• Add scopes field to MCPServer CRD for OIDC config by @jhrozek in #2988
• Update module github.com/sigstore/sigstore-go to v1.1.4 by @renovate[bot] in #2990
• Remove autoupdate for now by @dmjb in #3002
• Wire up audit config to vMCP CLI by @yrobla in #2987
• adds reusable Kubernetes configmap functionality in Operato for C/R/U actions by @ChrisJBurns in #2997
• Update registry from toolhive-registry release v2025.12.11 by @github-actions[bot] in #2930
• Consolidate and fix VirtualMCP E2E tests by @yrobla in #2978
• Simplify the registry auto-detection by @rdimitrov in #2976
• Wire scopes through VirtualMCPServer to auth middleware by @jhrozek in #3005
• Enable MCPRemoteProxy discovery in MCPGroup and VirtualMCPServer by @amirejaz in #2970
• Add backend routing capture to vMCP audit logs by @yrobla in #2983
• Update registry from toolhive-registry release v2025.12.12 by @github-actions[bot] in #3010
• Update actions/cache action to v5 by @renovate[bot] in #3007
• Vmcp rbac mcpremoteproxies by @amirejaz in #3013

New Contributors

• @deepika1214 made their first contribution in #2875
• @carlos-gn made their first contribution in #2917
• @slyt3 made their first contribution in #2898

Full Changelog: v0.6.11...v0.6.12