fix(deps): update module github.com/stacklok/toolhive to v0.6.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/stacklok/toolhive	v0.5.1 -> v0.6.2

---

Release Notes

stacklok/toolhive (github.com/stacklok/toolhive)

v0.6.2

Compare Source

What's Changed

• Update goreleaser for cosign v3 by @​eleftherias in #​2532

Full Changelog: stacklok/toolhive@v0.6.1...v0.6.2

v0.6.1

Compare Source

What's Changed

• errors if no config file is found for proxyrunner by @​ChrisJBurns in #​2530
• Do not force to pass client id and secret for token exchange by @​yrobla in #​2531

Full Changelog: stacklok/toolhive@v0.6.0...v0.6.1

v0.6.0

Compare Source

Headline Changes

• Change default proxy mode from SSE to streamable-http when using the thv CLI
• Send resource indicator when authorizing to remote MCP server

What's Changed

• Unify authentication with Identity struct across ToolHive by @​JAORMX in #​2437
• Update registry from toolhive-registry release v2025.11.04 by @​github-actions[bot] in #​2441
• Update module github.com/cedar-policy/cedar-go to v1.2.9 by @​renovate[bot] in #​2442
• Update helm/kind-action digest to 92086f6 by @​renovate[bot] in #​2435
• Update module sigs.k8s.io/controller-runtime to v0.22.4 by @​renovate[bot] in #​2438
• Remove GetClaimsFromContext backward compatibility helper by @​JAORMX in #​2443
• vMCP: Implement composite tools workflow engine by @​JAORMX in #​2439
• Skip OAuth secret processing when empty by @​JAORMX in #​2445
• Add e2e tests for remote MCP servers by @​JAORMX in #​2444
• Fix vmcp capability name mapping when forwarding to backends by @​JAORMX in #​2457
• Fix vmcp tool schema double-nesting bug by @​JAORMX in #​2456
• Update registry from toolhive-registry release v2025.11.05 by @​github-actions[bot] in #​2461
• Update docker/metadata-action action to v5.9.0 by @​renovate[bot] in #​2455
• Move OAuth secret management into pkg/auth/oauth by @​JAORMX in #​2462
• Clear SSE pending message when message is sent to queue by @​eleftherias in #​2452
• Implement outgoing authentication strategies for vMCP by @​jhrozek in #​2451
• Move remote MCP authentication handler to pkg/auth/remote by @​JAORMX in #​2464
• Add CRD-based group storage for Kubernetes by @​amirejaz in #​2463
• Update helm/chart-testing-action action to v2.8.0 by @​renovate[bot] in #​2468
• Add host and port flags to vmcp serve command by @​JAORMX in #​2467
• Update registry from toolhive-registry release v2025.11.06 by @​github-actions[bot] in #​2474
• Update module github.com/docker/docker to v28.5.2+incompatible by @​renovate[bot] in #​2473
• Include vMCP in claude.md by @​jhrozek in #​2471
• Fix vMCP server graceful shutdown by @​jhrozek in #​2472
• Process EnvFileDir in file-based config mode by @​jhrozek in #​2470
• Refactor CA certificate config operations to match registry pattern by @​JAORMX in #​2476
• Add constants for auth strategy types by @​JAORMX in #​2477
• update cosign signing config to support cosign v3 by @​amirejaz in #​2246
• Support MCP servers with partial capabilities in vmcp by @​JAORMX in #​2416
• Refactor auth resolution logic to config struct by @​JAORMX in #​2478
• feat: Implement VirtualMCPServer Kubernetes controller by @​yrobla in #​2448
• Extract common validation helpers in config package by @​JAORMX in #​2481
• add missing coverage for controller: by @​yrobla in #​2482
• add status collector for vmcp by @​yrobla in #​2484
• Change default proxy mode from SSE to streamable-http by @​danbarr in #​2475
• Update module github.com/cedar-policy/cedar-go to v1.3.0 by @​renovate[bot] in #​2490
• ci: added latest-ubi tag to build process by @​TomerFi in #​2491
• Update registry from toolhive-registry release v2025.11.07 by @​github-actions[bot] in #​2492
• include missing auth confgured in status by @​yrobla in #​2493
• Add automatic authentication monitoring for remote workloads with unauthenticated state detection by @​amirejaz in #​2421
• add missing tests for vmcp controller by @​yrobla in #​2500
• Fix SSE proxy mode transport label mapping for stdio servers by @​danbarr in #​2506
• installs helm-docs and precommit for claude chart tasks by @​ChrisJBurns in #​2508
• adds claude helm chart bump skill and removes pre-commit by @​ChrisJBurns in #​2510
• installs golang to github runner for helm docs by @​ChrisJBurns in #​2511
• Update toolhive images to v0.5.2 by @​renovate[bot] in #​2335
• Add Flusher interface to audit and authz middlewares by @​danbarr in #​2512
• Update headless service log message to reference HTTP transport by @​ChrisJBurns in #​2514
• Update registry from toolhive-registry release v2025.11.08 by @​github-actions[bot] in #​2516
• Update golangci/golangci-lint-action action to v9 by @​renovate[bot] in #​2517
• Update module golang.org/x/oauth2 to v0.33.0 by @​renovate[bot] in #​2519
• Operator: Change default proxy mode from SSE to streamable-http by @​danbarr in #​2521
• Update module golang.org/x/sync to v0.18.0 by @​renovate[bot] in #​2520
• Update module golang.org/x/sys to v0.38.0 by @​renovate[bot] in #​2522
• Update registry from toolhive-registry release v2025.11.09 by @​github-actions[bot] in #​2523
• Update module github.com/olekukonko/tablewriter to v1.1.1 by @​renovate[bot] in #​2524
• Update registry from toolhive-registry release v2025.11.10 by @​github-actions[bot] in #​2525
• Support resource indicator in remote auth by @​eleftherias in #​2497
• Do not convert volume target path to Windows style, implement tilde expansion for Windows by @​dmjb in #​2488
• Regenerate mocks by @​dmjb in #​2529
• Update registry.access.redhat.com/ubi10/ubi-minimal Docker tag to v10.0-1762765041 by @​renovate[bot] in #​2528
• removes unused cli flags from proxyrunner by @​ChrisJBurns in #​2515

Full Changelog: stacklok/toolhive@v0.5.2...v0.6.0

v0.5.2

Compare Source

What's Changed

• fix: Cannot deploy MCPRegistry from git in OpenShift by @​dmartinol in #​2263
• Fix CI failure by @​dmartinol in #​2363
• Implement tool conflict resolution for Virtual MCP Server by @​JAORMX in #​2365
• lint issue by @​dmartinol in #​2374
• Remove e2e test by @​dmartinol in #​2381
• Skip auto-generated files from linter by @​JAORMX in #​2382
• Proposal to refactor the MCP Registry controller by @​dmartinol in #​2301
• Return tools_override in workload GET endpoint by @​ChrisJBurns in #​2386
• Fix CI linter issues by @​dmartinol in #​2387
• vMCP: Implement capability merging and routing integration by @​JAORMX in #​2376
• pins registry api image until refactor is complete by @​ChrisJBurns in #​2401
• Update anthropics/claude-code-action digest to 8a1c437 by @​renovate[bot] in #​2369
• Update module github.com/charmbracelet/lipgloss to v2 by @​renovate[bot] in #​2373
• Update registry from toolhive-registry release v2025.10.31 by @​github-actions[bot] in #​2405
• Design and implement the VirtualMCPServer CRD by @​yrobla in #​2371
• Handle partial flushes in tool config middleware by @​blkt in #​2404
• Fix race condition in operator git tests by @​JAORMX in #​2408
• add missing gaps in k8s virtualmcpserver crd by @​yrobla in #​2409
• Consolidate bearer token extraction into utility by @​jhrozek in #​2410
• Add HTTP header validation to prevent injection by @​jhrozek in #​2411
• vMCP: Implement CLI serve command and session management by @​JAORMX in #​2406
• vMCP: Use proxy-mode instead of transport by @​JAORMX in #​2413
• Fix flaky vMCP health endpoint tests by @​JAORMX in #​2415
• vMCP: Add comprehensive tests for cache and registry components by @​JAORMX in #​2407
• Add -hide all to test-coverage Taskfile target by @​JAORMX in #​2414
• Update ubi golang builder to 1.25.z via epel10 copr repo. by @​RoddieKieley in #​2418
• build: use golang base image for building binary for UBI by @​TomerFi in #​2420
• Handle partial flushes for application/json by @​blkt in #​2422
• fix: switch operator micro ubi variant to minimal variant for missing certs by @​TomerFi in #​2424
• build: bump go to 1.25.3 by @​TomerFi in #​2423
• Update registry from toolhive-registry release v2025.11.01 by @​github-actions[bot] in #​2425
• Update registry from toolhive-registry release v2025.11.02 by @​github-actions[bot] in #​2428
• Update module golang.org/x/net to v0.46.0 by @​renovate[bot] in #​2427
• Update module github.com/mark3labs/mcp-go to v0.43.0 by @​renovate[bot] in #​2431
• Update registry from toolhive-registry release v2025.11.03 by @​github-actions[bot] in #​2432
• Decouple transport from runtime by @​blkt in #​2430
• Fix group name validation by @​eleftherias in #​2402
• Implement core authentication infrastructure for vMCP by @​jhrozek in #​2393
• Update registry.access.redhat.com/ubi10/ubi-minimal Docker tag to v10.0-1758699349 by @​renovate[bot] in #​2426
• Don't try to install mockgen if it's already available by @​JAORMX in #​2434
• Update helm/kind-action action to v1.13.0 by @​renovate[bot] in #​2436
• Fix flacky tests by @​NastyaAR in #​2178
• vMCP: Kubernetes - VirtualMCPCompositeToolDefinition CRD by @​yrobla in #​2412

New Contributors

• @​NastyaAR made their first contribution in #​2178

Full Changelog: stacklok/toolhive@v0.5.1...v0.5.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/stacklok/[email protected] requires go >= 1.25.3; switching to go1.25.4
go: downloading go1.25.4 (linux/amd64)
go: download go1.25.4: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off