Update toolhive images to v0.3.6

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Update	Change
ghcr.io/stacklok/toolhive/operator (source)	patch	v0.3.5 -> v0.3.6
ghcr.io/stacklok/toolhive/proxyrunner (source)	patch	v0.3.5 -> v0.3.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

stacklok/toolhive (ghcr.io/stacklok/toolhive/operator)

v0.3.6

Compare Source

🚀 Toolhive v0.3.6 Release Summary

🔧 Enhancements & Fixes

• Reliability & Observability

  • Improved error logging (service name/version)
  • Context-aware logging in the operator
  • Fixed reconciliation loops and flaky tests
  • Corrected Jaeger query URL and telemetry namespace alignment
  • Adjusted Registry API output and added new enforce flag for MCPRegistry

• Security & CI/CD

  • Added Trivy security scanning to GitHub Actions
  • Fixed CI workflow triggers for security scans
  • Improved remote MCP authentication, including issuer mismatch fixes

• Dependencies

  • Updated mcp-go (v0.40.0 → v0.41.0), sigstore-go (v1.1.3), tablewriter (1.1.0)
  • Updated Docker and login-action dependencies
  • Regular registry updates from toolhive-registry releases

• Infrastructure & Deployment

  • Fixed goreleaser warnings
  • Improved ARM64 build for egress proxy
  • Disabled SELinux labeling
  • Added registry deploy from controller & Git Source Handler for MCPRegistry
  • Changed default behavior of proxyrunner
  • Used status files to retrieve PID
  • Removed server deployment counter

📖 Documentation

• Added documentation for remote MCP authentication

🙌 Community

• New contributor: @​TomerFi 🎉

What's Changed

• improves error logs for specific service name and version by @​ChrisJBurns in #​1968
• Fix goreleaser warnings by @​rdimitrov in #​1969
• chore(deps): update toolhive images to v0.3.5 by @​renovate[bot] in #​1967
• Update registry from toolhive-registry release v2025.09.19 by @​github-actions[bot] in #​1971
• Ensure version output works before releasing by @​rdimitrov in #​1970
• Thv registry deploy from controller by @​jhrozek in #​1931
• Git Source Handler for MCPRegistry by @​dmartinol in #​1925
• fix(deps): update module github.com/mark3labs/mcp-go to v0.40.0 by @​renovate[bot] in #​1978
• Use status files to retrieve PID by @​dmjb in #​1805
• corrects jaeger query url for otel collector by @​ChrisJBurns in #​1984
• Update registry from toolhive-registry release v2025.09.20 by @​github-actions[bot] in #​1986
• Update registry from toolhive-registry release v2025.09.21 by @​github-actions[bot] in #​1987
• Update registry from toolhive-registry release v2025.09.22 by @​github-actions[bot] in #​1991
• Remove counter of deployed server by @​dmartinol in #​1979
• Bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.0 by @​dependabot[bot] in #​1992
• Update registry from toolhive-registry release v2025.09.23 by @​github-actions[bot] in #​1999
• Disable selinux labeling by @​kaharlichenko in #​1988
• Fix flaky TestGetRegistryAPIImage test by using dependency injection by @​JAORMX in #​2002
• Add Trivy security scanning to GitHub Actions workflows by @​JAORMX in #​2000
• Update registry from toolhive-registry release v2025.09.24 by @​github-actions[bot] in #​2005
• Fix CI: Add workflow_call trigger to security-scan workflow by @​JAORMX in #​2008
• Replace global logger with context-aware logging in operator by @​JAORMX in #​2007
• Fix reconciliation loops by @​dmartinol in #​1996
• Adjust output of Registry API by @​dmartinol in #​2001
• Add an enforce flag to MCPRegistry by @​jhrozek in #​1997
• fix: the telemetry namesapce should match the operator's one by @​TomerFi in #​2003
• Update registry from toolhive-registry release v2025.09.26 by @​github-actions[bot] in #​2011
• fix(deps): update module github.com/sigstore/sigstore-go to v1.1.3 by @​renovate[bot] in #​2019
• fix(deps): update module github.com/mark3labs/mcp-go to v0.41.0 by @​renovate[bot] in #​2021
• Update registry from toolhive-registry release v2025.09.28 by @​github-actions[bot] in #​2020
• Update registry from toolhive-registry release v2025.09.29 by @​github-actions[bot] in #​2022
• Fix egress proxy ARM64 build by using Alpine edge repository by @​JAORMX in #​1995
• chore(deps): update docker/login-action action to v3.6.0 by @​renovate[bot] in #​2025
• Add remote MCP authentication documentation by @​JAORMX in #​1981
• Fix remote MCP server authentication with issuer mismatch by @​JAORMX in #​1980
• fix issues with propagating server and transport on telemetry by @​yrobla in #​1973
• change the default behaviour of proxyrunner by @​yrobla in #​1952
• Update registry from toolhive-registry release v2025.09.30 by @​github-actions[bot] in #​2029
• corrects jaeger URLs for otel example by @​ChrisJBurns in #​2036
• Fix GoReleaser archive formats by @​danbarr in #​2038

Full Changelog: v0.3.5...v0.3.6

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.