Repository navigation

Merge upstream v0.23.1 into dp-stable - #9

Merged

carlos-lopez-vecino merged 118 commits into

dp-stablefrom

chore/merge-upstream-v0.23.1

Sep 29, 2026

Merged

Merge upstream v0.23.1 into dp-stable#9
carlos-lopez-vecino merged 118 commits into
dp-stablefrom
chore/merge-upstream-v0.23.1

Commits on Apr 13, 2026
- Add Kimi Code CLI as a supported MCP client (#4788)
  samuv
  authored
  6a79259
- Support stateless streamable-HTTP remote servers (#4515)
  gkatz2
  authored
  052ecdd
Commits on Apr 14, 2026
- Remove redundant storage.Load from NotifyBackendExpired (#4779)
  
  yrobla
  and
  taskbot
  authored
  08e4b52
- Add more claude rules (#4782)
  
  yrobla
  and
  taskbot
  authored
  c165329
- Add VS Code and VS Code Insiders as skill-supporting clients (#4773)
  samuv
  authored
  32c23f4
- Fix skill install failure when multiple clients share the same directory (#4796)
  samuv
  authored
  f6903bb
- Add Factory.ai as a supported MCP client (#4795)
  samuv
  authored
  71c8585
- Add regression guard for auth context propagation through Close() (#4781)
  
  yrobla
  and
  taskbot
  authored
  0ef6368
- Propagate protectedResourceAllowPrivateIP through OIDC resolver and converter (#4784)
  
  ChrisJBurns
  and
  claude
  authored
  c63b10e
- Clean up health check dead code and timeout (#4791)
  
  gkatz2
  and
  claude
  authored
  c49ec9e
- Add Goose, Gemini CLI, and Amp as skill-supporting clients (#4799)
  samuv
  authored
  15dad99
- Add OpenAPI annotations to v0.1 skills registry endpoints (#4800)
  samuv
  authored
  943bafb
- Add Kiro as a skill-supporting client (#4803)
  samuv
  authored
  2dedbae
- Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] (#4683)
  renovate[bot]
  authored
  c9a2642
- Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.41.0 to 1.43.0 (#4684)
  dependabot[bot]
  authored
  28426ca
- Update dependency helm/helm to v3.20.2 (#4756)
  renovate[bot]
  authored
  cd34d0e
- Add Cline, Roo Code, Windsurf, Mistral Vibe, Trae, and Antigravity as skill-supporting clients (#4804)
  samuv
  authored
  3688694
- Add TelemetryConfigRef support to VirtualMCPServer CRD (#4801)
  
  ChrisJBurns
  and
  claude
  authored
  fa955cd
- Update registry API image to v1.1.1 (#4806)
  
  rdimitrov
  and
  claude
  authored
  f9119cb
- Grant default `aud` when `resource` is absent (#4805)
  blkt
  authored
  25fe475
- Add `Audience` to authserver test client fixture (#4814)
  blkt
  authored
  1fa05ee
- Isolate `TestParseGitReference` from ambient env (#4813)
  blkt
  authored
  0fb1b42
- Add ConfigMap content assertions to vMCP telemetry integration tests (#4807)
  
  ChrisJBurns
  and
  claude
  authored
  be40131
- Change GroupRef from bare string to typed MCPGroupRef struct (#4809)
  
  ChrisJBurns
  and
  claude
  authored
  0c5213e
- Add --remote-auth-scope-param-name for non-standard OAuth scope parameters (#4712)
  gmogmzGithub
  authored
  b250b90
- Release v0.20.0 (#4816)
  stacklokbot
  authored
  7c3cdc7
- Remove stale OpenShift values overlay from Helm chart (#4817)
  
  ChrisJBurns
  and
  claude
  authored
  4298cfe
- Introduce script engine package for vMCP code mode (#4748)
  
  jerm-dro
  and
  claude
  authored
  6c8d7d4
- Allow local key provider to bypass OIDC discovery failure (#4774)
  
  jhrozek
  and
  claude
  authored
  940fc7b
- Fix port reuse test using hardcoded port number (#4812)
  blkt
  authored
  47f4289
- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.41.0 to 1.43.0 (#4687)
  
  dependabot[bot]
  and
  ChrisJBurns
  authored
  8c4f765
- Address review findings from v0.1 skills OpenAPI PR (#4802)
  samuv
  authored
  daea31b
- Add integration test for default audience without resource parameter (#4818)
  
  jhrozek
  and
  claude
  authored
  42f7395
- Remove deprecated inline telemetry field from CRDs (#4819)
  
  ChrisJBurns
  and
  claude
  authored
  14a1e6c
- Remove deprecated inline oidcConfig from MCPServer and MCPRemoteProxy (#4820)
  
  ChrisJBurns
  and
  claude
  authored
  d27e676
Commits on Apr 15, 2026
- Add horizontal scaling tests for vmcp (#4724)
  
  yrobla
  and
  taskbot
  authored
  9176e93
- Remove Upsert from DataStorage interface — closes #4726 (#4797)
  
  yrobla
  and
  taskbot
  authored
  5e1e1d5
- fix lint issues with mcpgroup (#4838)
  
  yrobla
  and
  taskbot
  authored
  7339bbd
- Add GetContent API for on-the-fly SKILL.md retrieval from OCI and git sources (#4810)
  samuv
  authored
  2fd2d3b
- Remove deprecated incomingAuth.oidcConfig from VirtualMCPServer (#4822)
  ChrisJBurns
  authored
  60108a1
- Remove config.groupRef fallback and external_auth_config_ref enum (#4834)
  
  ChrisJBurns
  and
  claude
  authored
  cafa963
- Remove orphaned OIDCConfigRef type and OIDCConfigurable interface (#4846)
  
  ChrisJBurns
  and
  claude
  authored
  caa31f5
- Add color annotations to agent definitions (#4853)
  ChrisJBurns
  authored
  afce182
- Add RoleClaimName to Cedar ConfigOptions (#4847)
  
  jhrozek
  and
  claude
  authored
  9d5982d
- Return error from `UpdateConfig` callbacks (#4845)
  blkt
  authored
  bb213f1
- Split OTLP endpoint path to fix Langfuse/LangSmith integration (#4815)
  
  ChrisJBurns
  and
  claude
  authored
  2ce2509
- Simplify `UpdateConfig` error path and add test (#4858)
  blkt
  authored
  bfac267
- Add resourceUrl field to MCPOIDCConfigReference (#4855)
  
  ChrisJBurns
  and
  claude
  authored
  300d659
- Add release-notes skill for generating release notes (#4852)
  
  ChrisJBurns
  and
  claude
  authored
  a954dc4
- Update module github.com/stacklok/toolhive-catalog to v0.20260415.0 (#4839)
  
  renovate[bot]
  and
  reyortiz3
  authored
  e92dba4
Commits on Apr 16, 2026
- Expand singleflight boundary in ValidatingCache.Get to cover full hit+check and miss+load path (#4798)
  
  yrobla
  and
  taskbot
  authored
  12f25e5
- Update module github.com/stacklok/toolhive-catalog to v0.20260416.0 (#4876)
  renovate[bot]
  authored
  e54e6ae
- Persist restored session metadata to Redis in loadSession (#4842)
  
  yrobla
  and
  taskbot
  authored
  bcc9588
- Enforce go.mod patch version check in Taskfile and CI (#4864)
  
  reyortiz3
  and
  claude
  authored
  d5addcd
- Drop registry-based group support (#4873)
  
  rdimitrov
  and
  claude
  authored
  96c4d49
- Use scoped secrets provider for registry auth (#4893)
  eleftherias
  authored
  d944774
- Add v0.1 server browse endpoints (#4871)
  
  rdimitrov
  and
  claude
  authored
  c2a8154
- Fix reconcile loop caused by non-deterministic env var ordering in di… (#4783)
  lujunsan
  authored
  3c5ac7e
- Store serverName on Cedar Authorizer (#4861)
  
  jhrozek
  and
  claude
  authored
  22e4fd9
- Release v0.21.0 (#4902)
  stacklokbot
  authored
  26aab50
- Remove empty parent directories on skill uninstall (#4895)
  samuv
  authored
  dfd794d
- Only install skills for clients detected on the system (#4899)
  samuv
  authored
  ab2a821
- Detect JSON-RPC application errors in proxy audit middleware (#4709)
  gmogmzGithub
  authored
  7433522
- Update operator architecture docs for authServerRef (#4780)
  tgrunnagle
  authored
  98894b8
- Add AdditionalAuthorizationParams to upstream OAuth configs (#4862)
  
  jhrozek
  and
  claude
  authored
  50044f3
- Replace groups parameter with variadic parents on entity factory (#4901)
  
  jhrozek
  and
  claude
  authored
  34e877d
- Fix partialFailureMode validator to accept CRD enum values (#4865)
  
  jhrozek
  and
  claude
  authored
  0e5e576
- Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#4906)
  dependabot[bot]
  authored
  03f5025
- Validate audience matches resourceUrl for embedded auth server (#4904)
  
  tgrunnagle
  and
  claude
  authored
  d96922d
Commits on Apr 17, 2026
- Extract vMCP serve/validate logic into pkg/vmcp/cli/ (#4891)
  
  yrobla
  and
  taskbot
  authored
  5342824
- Add name attribute alias on Resource entities (#4907)
  
  jhrozek
  and
  claude
  authored
  cfd835c
- Update module github.com/stacklok/toolhive-catalog to v0.20260417.0 (#4909)
  renovate[bot]
  authored
  dce0ac7
- Add unit tests for pkg/vmcp/cli serve and validate logic (#4898)
  
  yrobla
  and
  taskbot
  authored
  b8b76cc
- Add pkg/vmcp/cli/init.go for vMCP config scaffolding (#4903)
  
  yrobla
  and
  taskbot
  authored
  ee988f3
- Add thv vmcp serve and thv vmcp validate subcommands (#4900)
  
  yrobla
  and
  taskbot
  authored
  e4bfbfe
- Update README (#4915)
  danbarr
  authored
  4ebcf3b
Commits on Apr 18, 2026
- Treat unauthenticated backends as routable in vMCP health (#4866)
  
  lorr1
  and
  claude
  authored
  2136387
Commits on Apr 20, 2026
- Bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (#4921)
  dependabot[bot]
  authored
  f5e0dbd
- Add EmbeddingServiceManager for TEI container lifecycle (#4912)
  
  yrobla
  and
  taskbot
  authored
  eb7ddef
- Fix skill install for qualified namespace/name references and missing parent directory (#4841)
  samuv
  authored
  c331aa4
- Add zero-config quick mode for thv vmcp serve (#4913)
  
  yrobla
  and
  taskbot
  authored
  8223bec
- embedding_manager: address Copilot review findings from #4912 (#4938)
  
  yrobla
  and
  taskbot
  authored
  92897a6
- Add thv vmcp init subcommand (#4939)
  
  yrobla
  and
  taskbot
  authored
  e6c453a
- Add --system flag to secret list and delete commands (#4910)
  
  amirejaz
  and
  claude
  authored
  c17cb40
- Wire optimizer flags into thv vmcp serve (#4940)
  
  yrobla
  and
  taskbot
  authored
  d687eb7
- Document category-based redis ACLs (#4946)
  
  tgrunnagle
  and
  claude
  authored
  8504427
- Add policy_stopped workload status and enforce policy gate on restart (#4857)
  
  reyortiz3
  and
  claude
  authored
  ee823d8
- Extend group extraction with dual-claim and dot-notation support (#4911)
  
  jhrozek
  and
  claude
  authored
  c1292c4
Commits on Apr 21, 2026
- vmcp: stop the TEI manager on Start failure and apply image default in Serve (#4948)
  SAY-5
  authored
  c334edf
- Update alpine Docker tag to v3.23.4 (#4927)
  renovate[bot]
  authored
  ee01104
- Update github/codeql-action digest to 95e58e9 (#4926)
  renovate[bot]
  authored
  e0c11d6
- Update anthropics/claude-code-action digest to 5d5c10a (#4925)
  renovate[bot]
  authored
  9f021b9
- Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 (#4793)
  
  authored
  c2b4186
- Account for embedded auth env in deployment drift checks (#4878)
  
  JAORMX
  and
  claude
  authored
  109815b
- Update actions/cache digest to 27d5ce7 (#4924)
  renovate[bot]
  authored
  ea4cfbc
- Split skillsvc into per-concern files (#4947)
  samuv
  authored
  7a9d659
- Finish defaultTEIImage rename in embedding_manager_test.go (#4957)
  
  JAORMX
  and
  claude
  authored
  b2f6717
- Upgrade default go builder image to golang:1.26-alpine (#4955)
  
  JAORMX
  and
  claude
  authored
  b437352
- Return 502 Bad Gateway when OCI skill pull fails (#4956)
  samuv
  authored
  ccf439d
- Upgrade default uvx builder image to python:3.14-slim (#4953)
  
  JAORMX
  and
  claude
  authored
  f472476
- Upgrade default npx builder image to node:24-alpine (#4954)
  
  JAORMX
  and
  claude
  authored
  b4f391b
- Update module github.com/stacklok/toolhive-catalog to v0.20260421.0 (#4932)
  
  renovate[bot]
  and
  rdimitrov
  authored
  06d2746
- Document 502 Bad Gateway failure for installSkill in OpenAPI spec (#4960)
  samuv
  authored
  14fe9b6
- Add registry-aware workload creation (#4872)
  
  rdimitrov
  and
  claude
  authored
  829c4bd
- Add unit and integration tests for Cedar group-based authorization (#4964)
  
  jhrozek
  and
  claude
  authored
  cb37b8b
- Add e2e tests for thv vmcp CLI (#4941)
  
  yrobla
  and
  taskbot
  authored
  108f6fa
- Thread image verification mode through workload service (#4966)
  
  rdimitrov
  and
  claude
  authored
  f6cdfc2
- Hide thv vmcp command from CLI help (#4967)
  
  JAORMX
  and
  claude
  authored
  e516be4
- Release v0.22.0 (#4968)
  stacklokbot
  authored
  ee39caf
- Set MCP parent on resource entities for server-scoped policies (#4965)
  
  jhrozek
  and
  claude
  authored
  f3c9f24
- Default redirectUri on upstream providers as documented in CRD (#4905)
  
  tgrunnagle
  and
  claude
  authored
  117be04
- Graduate CRDs from v1alpha1 to v1beta1 (#4849)
  ChrisJBurns
  authored
  3dbbf5a
- Release v0.23.0 (#4973)
  stacklokbot
  authored
  81e23e2
- Propagate auth errors through stale cache fallback (#4981)
  
  reyortiz3
  and
  claude
  authored
  63ee62a
- Unify docs-website release pipeline: new assets + retire dispatch chain (#4982)
  
  rdimitrov
  and
  claude
  authored
  7ee0772
- Add advisory CRD schema compatibility CI check (#4980)
  
  ChrisJBurns
  and
  claude
  authored
  69fb2b7
- Release v0.23.1 (#4985)
  stacklokbot
  authored
  7fb840a
Commits on Sep 29, 2026
- Merge upstream v0.23.1 into dp-stable
  
  carlos-lopez-vecino
  and
  claude
  committed
  74e7a00

Commits

Commits on Apr 13, 2026

Commits on Apr 14, 2026

Commits on Apr 15, 2026

Commits on Apr 16, 2026

Commits on Apr 17, 2026

Commits on Apr 18, 2026

Commits on Apr 20, 2026

Commits on Apr 21, 2026

Commits on Sep 29, 2026