fix(deps): update toolhive

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/stacklok/toolhive	v0.42.1 → v0.44.0
github.com/stacklok/toolhive-core	v0.0.38 → v0.0.41

---

Release Notes

stacklok/toolhive (github.com/stacklok/toolhive)

v0.44.0

Compare Source

What's Changed

• Push skills unsigned until keyless signing lands by @​samuv in #​6334
• Support actor_token in RFC 8693 token exchange by @​jhrozek in #​6331
• Guard OAuth token and DCR endpoints against SSRF by @​jhrozek in #​6351
• fix(auth): require audience when introspecting via Google tokeninfo by @​SashaMIT in #​6236
• Fix stale version comment on codespell action pin by @​samuv in #​6360
• Harden external may_act delegation by @​jhrozek in #​6353
• Use an absolute thv path in the Claude Desktop helper shim by @​jerm-dro in #​6354
• Release v0.44.0 by @​toolhive-release-app[bot] in #​6365

Full Changelog: stacklok/toolhive@v0.43.0...v0.44.0

v0.43.0

Compare Source

What's Changed

• Guard against shell injection via github.ref in image workflow by @​ChrisJBurns in #​6248
• Extend private-IP guard to 6to4/Teredo addresses by @​ChrisJBurns in #​6249
• Parse multi-line Modern SSE events by @​kocaemre in #​6126
• Add zizmor to CI and stop double-running the security scan by @​ChrisJBurns in #​6251
• Pin actions to commit SHAs and fix stale version comments by @​ChrisJBurns in #​6254
• Stop persisting git credentials in CI workflow checkouts by @​ChrisJBurns in #​6255
• Bind workflow expressions and drop persisted credentials by @​ChrisJBurns in #​6258
• Derive PR number from the triggering run in the size labeler by @​ChrisJBurns in #​6259
• Gate the Claude workflow on write access, not contribution history by @​ChrisJBurns in #​6260
• Stop writing the PR number into the size label artifact by @​ChrisJBurns in #​6261
• Suppress four zizmor findings that cannot be fixed by @​ChrisJBurns in #​6262
• Scope the release app token to what releaseo needs by @​ChrisJBurns in #​6266
• Scope releaser permissions and bind the tag expression by @​ChrisJBurns in #​6263
• Pass only the secret the test workflow needs by @​ChrisJBurns in #​6269
• Bind the GHCR credentials and chart version in helm-publish by @​ChrisJBurns in #​6270
• Scope the remaining release app tokens and bind a trailer by @​ChrisJBurns in #​6272
• Rate limiting observability (metrics and tracing) PR B by @​Sanskarzz in #​5800
• Clear the remaining zizmor findings in helm-publish by @​ChrisJBurns in #​6275
• Make the zizmor check blocking by @​ChrisJBurns in #​6274
• Clear the last zizmor findings in the release workflows by @​ChrisJBurns in #​6281
• Drop build fingerprint from proxy /health response by @​Nashon-Steffen in #​6280
• Let an explicit non-Modern header outrank a reserved key by @​amirejaz in #​6231
• Deflake the initialize dial-error proxy test by @​amirejaz in #​6264
• Support confidential clients in dynamic client registration by @​jhrozek in #​6252
• fix(vmcp): reject Authorization and Cookie in passthroughHeaders, as documented by @​SashaMIT in #​6235
• fix(auth): bind OAuth callback listener to loopback only by @​SashaMIT in #​6238
• Display recorded trust state to the user by @​samuv in #​6137
• Bound client-controlled metric label length by @​Nashon-Steffen in #​6279
• Sign the macOS thv binary with a Developer ID certificate by @​eleftherias in #​6156
• Sign pushes by default and remove the lock feature gate by @​samuv in #​6139
• Ignore unsupported grant types in CIMD documents by @​amirejaz in #​6297
• fix(authz): make Cedar URI entity IDs collision-free by @​SashaMIT in #​6239
• Add plugins key to lock file schema by @​samuv in #​6303
• Update module github.com/stacklok/toolhive-catalog to v0.20260810.0 by @​renovate[bot] in #​6257
• Add PluginLockService and managed install flag by @​samuv in #​6311
• Record certificate ref and runner in lock provenance by @​samuv in #​6312
• Pin CodeQL SARIF action comment to v4.37.6 by @​samuv in #​6313
• Reset the LLM config when the last tool is torn down by @​jerm-dro in #​6295
• Use a bare thv command as the LLM token helper by @​jerm-dro in #​6326
• Bump go.mod to get CVE fixes by @​jhrozek in #​6327
• Make RFC 8693 delegate clients reachable and usable by @​jhrozek in #​6320
• Enforce recorded ref and runner on skill verification by @​samuv in #​6315
• Release v0.43.0 by @​toolhive-release-app[bot] in #​6333

New Contributors

• @​kocaemre made their first contribution in #​6126

Full Changelog: stacklok/toolhive@v0.42.1...v0.43.0

stacklok/toolhive-core (github.com/stacklok/toolhive-core)

v0.0.41

Compare Source

What's Changed

• Emit certificate annotations and fix dedupe for keyless signatures by @​samuv in #​234
• Bump golang.org/x/mod to v0.40.0 for GO-2026-6179 and GO-2026-6180 by @​samuv in #​236
• Add Fulcio/Rekor keyless signing to SignOCI by @​samuv in #​235
• Update module github.com/go-openapi/swag/conv to v0.28.0 by @​renovate[bot] in #​241

Full Changelog: stacklok/toolhive-core@v0.0.40...v0.0.41

v0.0.40

Compare Source

What's Changed

• Add container/signer for cosign key-based OCI signing by @​samuv in #​230
• fix(networking): classify Teredo and 6to4 by @​jhrozek in #​232
• Fix flaky TestKeepAlive_ConcurrentFramesNoInterleaving by @​jhrozek in #​220
• Update module golang.org/x/net to v0.58.0 by @​renovate[bot] in #​233

Full Changelog: stacklok/toolhive-core@v0.0.39...v0.0.40

v0.0.39

Compare Source

What's Changed

• Update module github.com/sigstore/sigstore to v1.10.9 by @​renovate[bot] in #​212
• Update module github.com/redis/go-redis/v9 to v9.22.0 by @​renovate[bot] in #​213
• Update module github.com/google/go-containerregistry to v0.21.9 by @​renovate[bot] in #​216
• Update module github.com/modelcontextprotocol/registry to v1.8.1 by @​renovate[bot] in #​217
• Update module github.com/google/cel-go to v0.31.0 by @​renovate[bot] in #​218
• feat(networking): port ToolHive's networking package into core by @​jhrozek in #​223
• feat(authn): inbound OIDC/JWT bearer-token validation for resource servers by @​jhrozek in #​224
• Build weak-RSA test fixtures without jwk.Import by @​jhrozek in #​227
• Update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​215
• Update module github.com/lestrrat-go/jwx/v3 to v3.2.0 by @​renovate[bot] in #​225
• feat(authn): expose ValidateConfig for static policy checks by @​jhrozek in #​229
• fix(authn): stop one bad JWKS key failing the whole set by @​jhrozek in #​228

Full Changelog: stacklok/toolhive-core@v0.0.38...v0.0.39

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 31 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2	v1.43.3 -> v1.43.5
github.com/aws/aws-sdk-go-v2/config	v1.32.34 -> v1.32.36
github.com/aws/aws-sdk-go-v2/credentials	v1.19.33 -> v1.19.35
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.34 -> v1.18.36
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.34 -> v1.4.36
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.34 -> v2.7.36
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.35 -> v1.4.37
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.15 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.34 -> v1.13.36
github.com/aws/aws-sdk-go-v2/service/signin	v1.5.3 -> v1.5.5
github.com/aws/aws-sdk-go-v2/service/sso	v1.33.3 -> v1.33.5
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.38.3 -> v1.38.5
github.com/aws/aws-sdk-go-v2/service/sts	v1.45.3 -> v1.45.5
github.com/aws/smithy-go	v1.27.6 -> v1.27.7
github.com/decred/dcrd/dcrec/secp256k1/v4	v4.4.0 -> v4.4.1
github.com/ebitengine/purego	v0.10.0 -> v0.10.2
github.com/go-openapi/swag/conv	v0.27.3 -> v0.28.0
github.com/go-openapi/swag/typeutils	v0.27.3 -> v0.28.0
github.com/goccy/go-json	v0.10.5 -> v0.10.6
github.com/google/cel-go	v0.30.0 -> v0.31.0
github.com/google/go-containerregistry	v0.21.8 -> v0.21.9
github.com/lestrrat-go/jwx/v3	v3.0.13 -> v3.2.0
github.com/modelcontextprotocol/registry	v1.8.0 -> v1.8.1
github.com/redis/go-redis/v9	v9.21.0 -> v9.22.0
github.com/shirou/gopsutil/v4	v4.26.5 -> v4.26.7
github.com/sigstore/sigstore	v1.10.8 -> v1.10.9
golang.org/x/crypto	v0.54.0 -> v0.55.0
golang.org/x/mod	v0.38.0 -> v0.40.0
golang.org/x/net	v0.57.0 -> v0.58.0
golang.org/x/text	v0.40.0 -> v0.41.0
golang.org/x/tools	v0.48.0 -> v0.49.0

[toolhive-release-app]

🛡️ Skill Security Scan Results

⚠️ No skills were scanned in this PR.

[toolhive-release-app]

🔒 MCP Security Scan Results

⚠️ No MCP servers were scanned in this PR.