Merge branch 'main' into claude/issue-1452-20250827-1021

Signed-off-by: ChrisJBurns <[email protected]>

Author: ChrisJBurns

.github/workflows/claude.yml

@@ -12,6 +12,7 @@ on:
 
 jobs:
   claude-code-action:
+    name: Claude Code Action
     if: |
       (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
       (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||

.github/workflows/e2e-tests.yml

@@ -7,8 +7,8 @@ permissions:
   contents: read
 
 jobs:
-  e2e-tests:
-    name: E2E Tests
+  build-binary:
+    name: Build ToolHive Binary
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
@@ -22,39 +22,88 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Install Ginkgo CLI
-        run: go install github.com/onsi/ginkgo/v2/ginkgo@latest
-
       - name: Build ToolHive binary
         run: |
           task build
           # Verify the binary was created and is executable
           ls -la ./bin/
           chmod +x ./bin/thv
 
+      - name: Upload ToolHive binary
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: toolhive-binary
+          path: ./bin/thv
+          retention-days: 1
+
+  e2e-tests-core:
+    name: E2E Tests Core (${{ matrix.title }})
+    runs-on: ubuntu-latest
+    needs: build-binary
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - title: core
+            label_filter: core
+            artifact: e2e-test-results-core
+          - title: mcp
+            label_filter: mcp
+            artifact: e2e-test-results-mcp
+          - title: proxy-mw
+            label_filter: 'proxy || middleware || stability'
+            artifact: e2e-test-results-proxy-mw
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Set up Go
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
+        with:
+          go-version-file: 'go.mod'
+          cache: true
+
+      - name: Install dependencies
+        run: |
+          go mod download
+      - name: Install Ginkgo CLI
+        run: |
+          go install github.com/onsi/ginkgo/v2/ginkgo@latest
+
+      - name: Download ToolHive binary
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        with:
+          name: toolhive-binary
+          path: ./bin/
+
+      - name: Set binary permissions
+        run: |
+          chmod +x ./bin/thv
+          ls -la ./bin/
+
       - name: Set up container runtime (Docker)
         run: |
           # Docker is already installed on ubuntu-latest
           docker --version
           # Start Docker daemon if not running
           sudo systemctl start docker
 
-      - name: Run E2E tests
+      - name: Run E2E tests (${{ matrix.title }})
         env:
           THV_BINARY: ${{ github.workspace }}/bin/thv
           TOOLHIVE_EGRESS_IMAGE: ghcr.io/stacklok/toolhive/egress-proxy:latest
           TEST_TIMEOUT: 15m
+          LABEL_FILTER: ${{ matrix.label_filter }}
         run: ./test/e2e/run_tests.sh
 
-      - name: Upload test results
+      - name: Upload test results (${{ matrix.title }})
         if: always()
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
-          name: e2e-test-results
+          name: ${{ matrix.artifact }}
           path: |
             test/e2e/ginkgo-report.xml
             test/e2e/junit-report.xml
-          retention-days: 7
+          retention-days: 7

.github/workflows/image-build-and-publish.yml

@@ -5,6 +5,7 @@ on:
 
 jobs:
   image-build-and-publish:
+    name: Build and Publish Main Image
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -50,7 +51,7 @@ jobs:
         uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: Build and Push Image to GHCR
         env:
@@ -84,6 +85,7 @@ jobs:
           fi
 
   egress-proxy-image-build-and-publish:
+    name: Build and Publish Egress Proxy Image
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -147,7 +149,7 @@ jobs:
 
       - name: Install Cosign
         if: startsWith(github.ref, 'refs/tags/')
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: Sign container image
         if: startsWith(github.ref, 'refs/tags/')
@@ -157,6 +159,7 @@ jobs:
           cosign sign -y $BASE_REPO:latest
 
   operator-image-build-and-publish:
+    name: Build and Publish Operator Image
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -178,7 +181,7 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate CRDs
@@ -211,7 +214,7 @@ jobs:
         uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: Build and Push Image to GHCR
         env:
@@ -245,6 +248,7 @@ jobs:
           fi
 
   proxyrunner-image-build-and-publish:
+    name: Build and Publish Proxy Runner Image
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -290,7 +294,7 @@ jobs:
         uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: Build and Push Image to GHCR
         env:
@@ -321,4 +325,4 @@ jobs:
           # Sign the latest tag if building from a tag
           if [[ "${{ github.ref }}" == refs/tags/* ]]; then
             cosign sign -y $BASE_REPO:latest
-          fi
+          fi

.github/workflows/issue-triage.yml

@@ -1,11 +1,11 @@
 name: Claude Issue Triage
-description: Run Claude Code for issue triage in GitHub Actions
 on:
   issues:
     types: [opened]
 
 jobs:
   triage-issue:
+    name: Triage Issue
     runs-on: ubuntu-latest
     timeout-minutes: 10
     permissions:

.github/workflows/lint-helm-charts.yml

@@ -7,7 +7,8 @@ on:
   workflow_call:
 
 jobs:
-  lint:
+  lint-helm-charts:
+    name: Lint Helm Charts
     runs-on: ubuntu-latest
     env:
       GO111MODULE: on

.github/workflows/lint.yml

@@ -7,8 +7,8 @@ permissions:
   contents: read
 
 jobs:
-  lint:
-    name: Lint
+  lint-go-code:
+    name: Lint Go Code
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

.github/workflows/operator-ci.yml

@@ -11,8 +11,8 @@ permissions:
   contents: read
 
 jobs:
-  tests:
-    name: Tests
+  operator-tests:
+    name: Operator Tests
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
@@ -26,14 +26,14 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Run tests
         run: task operator-test
 
-  build:
-    name: Build
+  build-operator:
+    name: Build Operator
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
@@ -47,7 +47,7 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build operator
@@ -68,7 +68,7 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate CRDs
@@ -77,7 +77,7 @@ jobs:
       - name: Check for changes
         id: git-check
         run: |
-          git diff --exit-code deploy/charts/operator-crds/templates || echo "crd-changes=true" >> $GITHUB_OUTPUT
+          git diff --exit-code deploy/charts/operator-crds/crds || echo "crd-changes=true" >> $GITHUB_OUTPUT
           git diff --exit-code deploy/charts/operator/templates || echo "operator-changes=true" >> $GITHUB_OUTPUT
 
       - name: Fail if CRDs are not up to date
@@ -101,7 +101,7 @@ jobs:
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
-          version: 3.x
+          version: 3.44.1
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate CRD Docs
@@ -119,8 +119,8 @@ jobs:
           echo "Docs for CRDs are not up to date. Please run 'task crdref-gen' and commit the changes."
           exit 1
 
-  e2e-tests:
-    name: E2E Tests
+  e2e-tests-operator:
+    name: E2E Tests Operator
     runs-on: ubuntu-latest
     timeout-minutes: 30
     defaults:
@@ -157,7 +157,7 @@ jobs:
     - name: Install Task
       uses: arduino/setup-task@v2
       with:
-        version: 3.x
+        version: 3.44.1
         repo-token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Install yardstick client

.github/workflows/releaser-helm-charts.yml

@@ -3,7 +3,8 @@ on:
   workflow_call:
 
 jobs:
-  release:
+  release-helm-charts:
+    name: Release Helm Charts
     runs-on: ubuntu-latest
 
     permissions:
@@ -42,7 +43,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: Publish and Sign OCI Charts
         run: |
@@ -76,14 +77,14 @@ jobs:
           json_array="${json_array}]"
           echo "published_charts_matrix=${json_array}" >> $GITHUB_OUTPUT
 
-  update-docs-website:
-    name: Trigger Docs Update
-    needs: [ release ]
+  update-docs-website-charts:
+    name: Trigger Docs Update for Charts
+    needs: [ release-helm-charts ]
     permissions: {}
     uses: ./.github/workflows/update-docs-website.yml
     strategy:
       matrix:
-        version: ${{ fromJSON(needs.release.outputs.released_charts) }}
+        version: ${{ fromJSON(needs.release-helm-charts.outputs.released_charts) }}
     with:
       version: ${{ matrix.version }}
     secrets: