Update stacklok/toolhive to v0.29.1

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive	patch	v0.29.0 → v0.29.1

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

---

Release Notes

stacklok/toolhive (stacklok/toolhive)

v0.29.1

Compare Source

What's Changed

• Bump CI actions off deprecated Node.js 20 by @​rdimitrov in #​5421
• Add missing active contributors to CODEOWNERS by @​amirejaz in #​5423
• Add lazy mode to thv llm setup by @​ChrisJBurns in #​5427
• Clarify lazy-mode deferred-login message by @​ChrisJBurns in #​5429
• Bump testcontainers-go to v0.42.0 to drop docker/docker by @​rdimitrov in #​5449
• Thread VirtualMCPServer name into Cedar authz middleware by @​jhrozek in #​5448
• Define VMCP core interface and Config contract by @​tgrunnagle in #​5450
• Pin BackendID through the advertising filter (tests) by @​tgrunnagle in #​5452
• Release v0.29.1 by @​toolhive-release-app[bot] in #​5453

Full Changelog: stacklok/toolhive@v0.29.0...v0.29.1

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Docs update for toolhive v0.29.1

Note

Skill reported no doc-relevant changes for this release.
This PR only bumps the version pin and any pin_files edits.

At a glance

Upstream	stacklok/toolhive v0.29.0 → v0.29.1
Hand-written changes	0 commit(s)
Reference assets	refreshed (separate commit)
Gaps	0
Release contributors	6 auto-assigned (see sidebar)
Action required	—

Run cost

Session	Turns	Cost (USD)
Generation	54	$2.6661
Editorial review	5	$0.4428
Total	59	$3.1089

How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

• docs/toolhive/reference/cli/
• docs/toolhive/reference/crds/
• static/api-specs/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-website	Ready	Preview, Comment	Jun 4, 2026 2:54pm

[claude]

Claude finished @renovate[bot]'s task in 4m 25s —— View job

---

Upstream release docs update for toolhive v0.29.1

No hand-written doc changes needed. Wrote NO_CHANGES.md for the workflow.

• Phase 1: Discover release scope
• Phase 2: Deep-dive into PRs/issues
• Phase 3: Build doc-impact map (empty)
• Phase 4: No edits to apply
• Phase 5: No validation needed (no edits)
• Phase 6: Wrote NO_CHANGES.md

Analysis

PR	What changed	Hand-written doc impact
stacklok/toolhive#5427	--lazy flag on thv llm setup; thv llm token now interactive on cache miss; proxy token-fetch timeout 10s → 3min	None — no hand-written guide for thv llm; auto-generated CLI ref already refreshed in this PR
stacklok/toolhive#5429	Reworded --lazy informational message	None — output-string change only
stacklok/toolhive#5448	Bug fix: Cedar MCP::"<name>" resource scoping now works for VirtualMCPServer	None — authz-policy-reference.mdx and concepts/cedar-policies.mdx already describe the intended behavior
stacklok/toolhive#5450	New pkg/vmcp/core interface (contract-only refactor)	None — PR is explicitly "No" user-facing change
stacklok/toolhive#5452	Test-only	None
stacklok/toolhive#5421, #5423, #5449, #5453	CI Node bump / CODEOWNERS / dep bump / release plumbing	None

Note on the thv llm feature surface

The thv llm setup / thv llm token / thv llm proxy command tree currently has only auto-generated CLI reference under docs/toolhive/reference/cli/ — no hand-written guide content exists yet. A dedicated how-to for the LLM gateway workflow (covering normal vs. --lazy setup, the new transparent first-request login, and the thv llm proxy use case) would be a worthwhile follow-up but is out of scope for a patch-release sync.

[claude]

Claude finished @renovate[bot]'s task in 31s —— View job

---

Editorial review for toolhive v0.29.1 sync

No editorial review needed. This PR contains only:

• .github/upstream-projects.yaml — Renovate version bump (not docs)
• docs/toolhive/reference/cli/thv_llm_setup.md — auto-generated CLI reference
• docs/toolhive/reference/cli/thv_llm_token.md — auto-generated CLI reference

The previous Claude session correctly determined that no hand-written doc changes were required for this patch release and wrote NO_CHANGES.md. Auto-generated CLI reference files and root-level signal files are outside the scope of editorial review per the workflow's reviewer instructions.

• Identified files changed in HEAD
• Confirmed all changed files are in excluded categories (auto-generated CLI ref, config, signal file)
• No hand-written content to review
  · Branch: renovate/stacklok-toolhive-0.x