Skip to content

Update stacklok/toolhive to v0.55.0 - #1256

Merged
rdimitrov merged 4 commits into
mainfrom
renovate/stacklok-toolhive-0.x
Oct 20, 2026
Merged

Update stacklok/toolhive to v0.55.0#1256
rdimitrov merged 4 commits into
mainfrom
renovate/stacklok-toolhive-0.x

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
stacklok/toolhive minor v0.54.0 → v0.55.0

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

Release Notes

stacklok/toolhive

v0.55.0

Compare Source

What's Changed

Full Changelog: stacklok/toolhive@v0.54.0...v0.55.0

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Docs update for toolhive v0.55.0

At a glance
Upstream stacklok/toolhive v0.54.0 → v0.55.0
Hand-written changes 2 commit(s)
Reference assets refreshed (separate commit)
Gaps 0
Owner @rdimitrov - identified from merged release PR stacklok/toolhive#6855
Release contributors 6 review requested (see sidebar) · 3 not requested (no docs impact)
Action required Spot-check skill-authored prose for accuracy

Who does what

@rdimitrov cut this release and owns this PR: review your own changes, chase the remaining approvals, and merge once they're in. You don't need to wait on a review from anyone listed as having no docs impact below.

Everyone with a review request: the target is a review and approval within 2 business days.

Summary of changes

  • Added a "Filter upstream providers by group" section for spec.authServerUpstreamFilter in docs/toolhive/guides-vmcp/embedded-auth-server-vmcp.mdx, and updated that page's description of multi-provider chaining to point to it
  • Added "Re-register a dropped upstream client" (dcrConfig.rotationKey and the automatic invalid_client re-registration) and "Omit scopes on token refresh" (omitScopeOnRefresh) sections in docs/toolhive/guides-k8s/embedded-auth-server-k8s.mdx, with a field-table row and pointers in docs/toolhive/guides-vmcp/embedded-auth-server-vmcp.mdx
  • Added an "Add remote MCP servers to Claude Desktop" section for thv client connector add|list|rm in docs/toolhive/guides-cli/client-configuration.mdx, with a cross-link from the STDIO-only section of docs/toolhive/reference/client-compatibility.mdx
  • Updated the Pi section of docs/toolhive/reference/client-compatibility.mdx to cover PI_CODING_AGENT_DIR
  • Updated the MCPServer RBAC description in docs/toolhive/guides-k8s/run-mcp-k8s.mdx: pods/attach is granted only for STDIO transport, and the list now matches the operator's actual rules (pods/log get, ConfigMaps)
  • Updated docs/toolhive/guides-vmcp/scaling-and-performance.mdx to say that explicit session termination releases cached sessions immediately, and added the resource URI and template limits that vMCP enforces
  • Skipped the auth server tls_listener run config (Add TLS listener config and SPIFFE X.509 authority capability toolhive#6760): the API schema says it is currently rejected because the runner doesn't start the listener
  • Skipped Pi support in thv llm setup (Support Pi in LLM gateway setup toolhive#6818) beyond the auto-generated CLI reference: no hand-written guide documents thv llm setup clients today

No docs impact identified

3 contributor(s) had no-docs-impact commits in this release. No review was requested, and the workflow did not auto-notify them.

Review routing

GitHub could not request the upstream contributor directly, so review went to the human merger of each relevant upstream PR:

Run cost

Session Turns Cost (USD)
Generation 85 $3.1322
Editorial review 20 $0.7004
Total 105 $3.8326
How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

  • static/api-specs/
  • docs/toolhive/reference/cli/ (toolhive only)
  • docs/toolhive/reference/crds/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

@renovate
Update stacklok/toolhive to v0.55.0
36571de 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate Bot added the autogen-docs Pull requests generated by automated release workflows label Oct 19, 2026
@vercel

vercel Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs-website Ready Ready Preview Oct 19, 2026 3:18pm UTC

Request Review

@github-actions
github-actions Bot marked this pull request as draft October 19, 2026 15:07
@claude

claude Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Claude finished @renovate[bot]'s task in 5m 35s —— View job

Upstream release docs: stacklok/toolhive v0.55.0

  • Phase 1: Discovery (release notes, .release-meta.json commit list, security fixes merged from forks)
  • Phase 2: Deep dive (checked each change against source at v0.55.0)
  • Phase 3: Audit existing docs, including statements the release made out of date
  • Phase 4: Implementation
  • Phase 5: Validation (prettier:fix and eslint:fix both pass)
  • Commit and push (93a5a9b)

Changes

Deliberately skipped

Notes for reviewers

  • I didn't run npm run build or the /docs-review pass in this session; CI's build will check links. All new anchors point to headings added in this commit.
  • SUMMARY.md and REVIEWERS.json are written at the repo root for the workflow. Contributors whose changes affect the docs: aron-muon, hellouz818, jerm-dro, peppescg, reyortiz3.

@github-actions @claude
Document ToolHive v0.55.0 changes
93a5a9b 
Cover the vMCP group-based upstream filter, DCR rotationKey and
omitScopeOnRefresh, Claude Desktop connectors, PI_CODING_AGENT_DIR,
stdio-only pods/attach RBAC, and vMCP session and resource limits.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@claude

claude Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Claude finished @renovate[bot]'s task in 1m 31s —— View job

Editorial review of v0.55.0 content

  • Identify files changed by previous commit (6 docs pages)
  • Run /docs-review
  • Apply fixes
  • Format and lint (prettier:fix, eslint:fix; both clean)
  • Commit and push (a72db58)

Summary

The generated content is in good shape. I made one change. I checked the new claims against the upstream source and the CLI reference, and found nothing wrong:

  • Operator RBAC (run-mcp-k8s.mdx): the Role grants pods/log (get), ConfigMaps (get, list, watch), and pods/attach (create, get). The attach permission is only granted for stdio servers, matching cmd/thv-operator/controllers/mcpserver_controller.go.
  • vMCP resource limits (scaling-and-performance.mdx): the 2,048 / 1,024 / 256 values match pkg/vmcp/types.go and pkg/vmcp/client/resource_template_validator.go.
  • thv client connector (client-configuration.mdx): the syntax, the HTTPS and no-redirect requirements, and the MDM warning all match the generated CLI reference.
  • Headings and terms: the new sections fit the existing heading levels. "STDIO transport" is written the same way as elsewhere in run-mcp-k8s.mdx.

Change applied

File Change
docs/toolhive/guides-vmcp/scaling-and-performance.mdx In the client resource URI bullet, "Exact matches against a backend's concrete resources and template strings still work at any length" was hard to follow. It now reads: "A URI that exactly equals a backend's concrete resource URI or template string still resolves at any length." This matches the upstream code comment, which says exact lookups are map lookups and skip the length cap.

Not changed

I didn't touch anything under static/api-specs/, reference/cli/, reference/helm/, or reference/crds/. I also didn't run npm run build, so the site build hasn't been checked in this session.

@github-actions @claude
Clarify vMCP resource URI length limit wording
a72db58 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions
github-actions Bot marked this pull request as ready for review October 19, 2026 15:17
@rdimitrov
rdimitrov merged commit 659a04d into main Oct 20, 2026
12 checks passed
@rdimitrov
rdimitrov deleted the renovate/stacklok-toolhive-0.x branch October 20, 2026 10:16

This branch was successfully deployed

1 active deployment
Preview — a72db583 Deployed Oct 19, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jhrozek jhrozek jhrozek approved these changes
@peppescg peppescg peppescg approved these changes
@jerm-dro jerm-dro jerm-dro approved these changes
@rdimitrov rdimitrov rdimitrov approved these changes
@JAORMX JAORMX Awaiting requested review from JAORMX
@reyortiz3 reyortiz3 Awaiting requested review from reyortiz3

Assignees

@rdimitrov rdimitrov

Labels

autogen-docs Pull requests generated by automated release workflows

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@jhrozek @peppescg @jerm-dro @rdimitrov