Update module github.com/stacklok/toolhive to v0.51.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/stacklok/toolhive	v0.49.0 → v0.51.4

---

Release Notes

stacklok/toolhive (github.com/stacklok/toolhive)

v0.51.4

Compare Source

What's Changed

• Clarify MCP admission and rejection diagnostics by @​JAORMX in #​6727
• Release v0.51.4 by @​toolhive-release-app[bot] in #​6728

Full Changelog: stacklok/toolhive@v0.51.3...v0.51.4

v0.51.3

Compare Source

Security

Embedded authorization server: upstream callback bound to the initiating browser (GHSA-2gjv-f568-6cxp, High)

/oauth/callback completed a login for whichever browser arrived with a valid upstream state. An attacker who started an authorization for their own client could hand the upstream identity provider URL to a victim and receive an authorization code minted for the victim's identity. The device flow's verification-page login shared the same gap.

Both flows now bind the login to the browser that started it: /oauth/authorize and POST /oauth/device set a per-flow cookie whose hash is stored on the pending record, and the callback completes only when the same browser presents it. The device verification form additionally requires an anti-forgery token, so a cross-site page cannot start a device login from a victim's browser.

What changes for operators and tooling

• Interactive sign-in must be completed in the browser that opened /oauth/authorize or the device verification page, with cookies enabled for that host. Headless drivers that walk the flow with a plain HTTP client must carry cookies between steps, and must load the device verification form before posting a user_code.
• The upstream callback (redirect_uri, defaulting to {resourceUrl}/oauth/callback in the operator) must share a hostname with the browser-facing authorize URL (authorizationEndpointBaseUrl, else issuer). If the authorize URL is https, a non-loopback callback must be https too. Mismatched deployments log a WARN at startup naming the upstream, and every browser login through it is rejected until fixed.
• When authorizationEndpointBaseUrl is set, the device flow's verification_uri is now advertised from that base URL instead of the issuer.
• During a rolling upgrade, a login started on a v0.51.2 replica and finished on v0.51.3 fails within the 10-minute pending window and must be restarted; one started on v0.51.3 and finished on v0.51.2 is not checked.

What's Changed

• Close workflow audit log writers by @​kocaemre in #​6110
• Preserve vMCP resources until requests drain by @​JAORMX in #​6715
• Avoid priority annexing unlisted tools by @​kocaemre in #​6127
• Fix spelling flagged by codespell by @​rdimitrov in #​6722
• Update docker images by @​renovate[bot] in #​6719
• Update github actions by @​renovate[bot] in #​6717
• Update go modules by @​renovate[bot] in #​6718
• Regenerate OpenAPI docs and SDK for auth config by @​rdimitrov in #​6724
• Release v0.51.3 by @​toolhive-release-app[bot] in #​6725

Full Changelog: stacklok/toolhive@v0.51.2...v0.51.3

v0.51.2

Compare Source

What's Changed

• Preserve access across security migrations by @​JAORMX in #​6712
• Preserve legacy encrypted stores by @​jhrozek in #​6711
• Release v0.51.2 by @​toolhive-release-app[bot] in #​6714

Full Changelog: stacklok/toolhive@v0.51.1...v0.51.2

v0.51.1

Compare Source

What's Changed

• Route SSE proxy responses to originating session by @​rdimitrov in #​6702
• Update module github.com/stacklok/toolhive-catalog to v0.20260922.0 by @​renovate[bot] in #​6703
• Release v0.51.1 by @​toolhive-release-app[bot] in #​6704

Full Changelog: stacklok/toolhive@v0.51.0...v0.51.1

v0.51.0

Compare Source

What's Changed

• Bump go.opentelemetry.io/otel/exporters/zipkin from 1.35.0 to 1.45.0 by @​dependabot[bot] in #​6683
• Update dependency ubuntu to v26 by @​renovate[bot] in #​6696
• Update github actions by @​renovate[bot] in #​6694
• Document winget classic PAT requirement in release config by @​Nashon-Steffen in #​6692
• Update go modules by @​renovate[bot] in #​6695
• Update docker images by @​renovate[bot] in #​6693
• fix(operator): remove CRD shortNames that collide with the resource's own names by @​lightsabit in #​6689
• Authenticate clients with SPIFFE JWT-SVIDs by @​jhrozek in #​6563
• Recognise every SSE session id spelling by @​rdimitrov in #​6698
• Add Sanskarzz as ToolHive maintainer by @​JAORMX in #​6700
• Update go modules by @​renovate[bot] in #​6699
• Drop unusable JWKS placeholders before go-jose by @​rdimitrov in #​6697
• Release v0.51.0 by @​toolhive-release-app[bot] in #​6701

New Contributors

• @​lightsabit made their first contribution in #​6689

Full Changelog: stacklok/toolhive@v0.50.0...v0.51.0

v0.50.0

Compare Source

What's Changed

• Use self-repository syntax for local workflow refs by @​rdimitrov in #​6654
• Upgrade CI to Helm 4 by @​renovate[bot] in #​6614
• Update kubernetes dependencies by @​renovate[bot] in #​6589
• Simplify Renovate dependency groups by @​rdimitrov in #​6658
• Update module github.com/getsentry/sentry-go/otel to v0.49.0 by @​renovate[bot] in #​6592
• Update cli and ui libraries to v2 by @​renovate[bot] in #​6611
• Derive secrets encryption key with Argon2id by @​rdimitrov in #​6657
• Document request-claim fallback provenance by @​rdimitrov in #​6656
• Retry ID-token validation after OIDC refresh by @​siddiqueirshad in #​6559
• Enforce catalog provenance for plugin installs by @​samuv in #​6653
• Document key-pair signing trust limits by @​samuv in #​6661
• Update module github.com/cenkalti/backoff/v5 to v7 by @​renovate[bot] in #​6625
• Tolerate MethodNotFound for optional capabilities in ListCapabilities by @​hellouz818 in #​6660
• feat(authserver): support additional token-request params (RFC 8707 resource indicators) by @​aron-muon in #​6430
• feat(vmcp): stop session init stalling on backends that never service the notification stream by @​aron-muon in #​6633
• fix(vmcp): make the version poll interval per-Server, not a global by @​aron-muon in #​6644
• docs: point nine stale paths at the code that exists by @​melbinjp in #​6650
• Update module github.com/lestrrat-go/jwx/v3 to v4 by @​renovate[bot] in #​6626
• Use repo variable for Anthropic base URL by @​eleftherias in #​6672
• feat(authserver): accept ID-JAG assertions with a bound JWT-bearer handler by @​aron-muon in #​6677
• Add RFC 8628 device authorization grant support by @​reyortiz3 in #​6647
• Reduce buildProvider cyclomatic complexity by @​reyortiz3 in #​6680
• fix(operator): forward default Redis password to MCPServer and MCPRemoteProxy by @​reyortiz3 in #​6679
• Add lock-driven skill key rotation by @​samuv in #​6662
• Add plugin key rotation workflows by @​samuv in #​6663
• Add device flow verification page and DCR support by @​reyortiz3 in #​6682
• authserver/storage: add UpdateDCRCredentialsIfPresent by @​tgrunnagle in #​6674
• Release v0.50.0 by @​toolhive-release-app[bot] in #​6691

New Contributors

• @​siddiqueirshad made their first contribution in #​6559
• @​hellouz818 made their first contribution in #​6660

Full Changelog: stacklok/toolhive@v0.49.0...v0.50.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 29 additional dependencies were updated

Details:

Package	Change
github.com/stacklok/toolhive-core	v0.0.47 -> v0.0.50
github.com/aws/aws-sdk-go-v2	v1.47.0 -> v1.47.1
github.com/aws/aws-sdk-go-v2/config	v1.33.4 -> v1.33.6
github.com/aws/aws-sdk-go-v2/credentials	v1.20.4 -> v1.20.6
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.20.0 -> v1.20.1
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.5.3 -> v1.5.4
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.8.3 -> v2.8.4
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.5.3 -> v1.5.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.14.3 -> v1.14.4
github.com/aws/aws-sdk-go-v2/service/signin	v1.10.0 -> v1.10.1
github.com/aws/aws-sdk-go-v2/service/sso	v1.38.0 -> v1.38.1
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.43.0 -> v1.43.1
github.com/aws/aws-sdk-go-v2/service/sts	v1.50.0 -> v1.51.1
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/getsentry/sentry-go/otel	v0.44.1 -> v0.49.0
github.com/mattn/go-runewidth	v0.0.24 -> v0.0.27
github.com/modelcontextprotocol/go-sdk	v1.7.0 -> v1.8.0
github.com/spiffe/go-spiffe/v2	v2.8.1 -> v2.8.2
go.opentelemetry.io/otel/exporters/zipkin	v1.35.0 -> v1.45.0
k8s.io/api	v0.35.3 -> v0.37.1
k8s.io/apiextensions-apiserver	v0.35.0 -> v0.37.1
k8s.io/apimachinery	v0.35.3 -> v0.37.1
k8s.io/client-go	v0.35.3 -> v0.37.1
k8s.io/kube-openapi	v0.0.0-20251125145642-4e65d59e963e -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/utils	v0.0.0-20260319190234-28399d86e0b5 -> v0.0.0-20260707023825-cf1189d6abe3
modernc.org/libc	v1.75.6 -> v1.75.7
modernc.org/sqlite	v1.58.0 -> v1.59.0
sigs.k8s.io/controller-runtime	v0.23.3 -> v0.25.1
sigs.k8s.io/structured-merge-diff/v6	v6.3.2-0.20260122202528-d9cc6641c482 -> v6.4.2

[JAORMX]

@renovate rebase