Update stacklok/toolhive to v0.28.2

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive	patch	v0.28.1 → v0.28.2

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

---

Release Notes

stacklok/toolhive (stacklok/toolhive)

v0.28.2

Compare Source

What's Changed

• Honor --allow-private-ip on thv registry login --registry by @​reyortiz3 in #​5353
• Remove unreachable functions identified by deadcode analysis by @​ChrisJBurns in #​5355
• Fix DCR failure for authorization servers with non-root issuer paths by @​amirejaz in #​5357
• Wire OBO dispatch arms and reconciler branch by @​tgrunnagle in #​5345
• Release v0.28.2 by @​toolhive-release-app[bot] in #​5363

Full Changelog: stacklok/toolhive@v0.28.1...v0.28.2

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Docs update for toolhive v0.28.2

Note

Skill reported no doc-relevant changes for this release.
This PR only bumps the version pin and any pin_files edits.

At a glance

Upstream	stacklok/toolhive v0.28.1 → v0.28.2
Hand-written changes	0 commit(s)
Reference assets	refreshed (separate commit)
Gaps	0
Release contributors	4 auto-assigned (see sidebar)
Action required	—

Run cost

Session	Turns	Cost (USD)
Generation	40	$1.7536
Editorial review	4	$0.2596
Total	44	$2.0132

How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

• docs/toolhive/reference/cli/
• docs/toolhive/reference/crds/
• static/api-specs/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-website	Ready	Preview, Comment	May 22, 2026 1:27am

[claude]

Claude finished @renovate[bot]'s task in 2m 57s —— View job

---

toolhive v0.28.2 — no hand-written doc changes needed

I ran the /upstream-release-docs workflow for the v0.28.1 → v0.28.2 update and concluded that this patch release contains no changes that require hand-written documentation edits.

• Phase 1: Release discovery — 4 substantive PRs + 1 release PR
• Phase 2: Deep dive on each change (read PR bodies + source from the upstream clone)
• Phase 3: Build doc impact map — empty for hand-written edits
• Phase 4: Audit docs for source-of-truth drift — none found
• Phase 5: Wrote NO_CHANGES.md at repo root (gitignored, side-channel for the workflow)
• Phase 6: Nothing to commit

Impact analysis

Upstream PR	Doc impact
#5353 — Honor --allow-private-ip on thv registry login --registry	New CLI flag is auto-applied to docs/toolhive/reference/cli/thv_registry_login.md by the reference-asset sync (commit 143ef74). No narrative guide documents thv registry login, so nothing to hand-edit.
#5355 — Remove unreachable functions identified by deadcode analysis	Pure internal cleanup — removes unused helpers/options. No user-facing surface changes.
#5357 — Fix DCR failure for authorization servers with non-root issuer paths	Bug fix restoring v0.27.x DCR behaviour. No new docs needed.
#5345 — Wire OBO dispatch arms and reconciler branch	Internal plumbing for the obo external auth type. The PR explicitly notes that the CRD enum still rejects "obo" at the apiserver layer until #5329 lands, so this is not yet user-reachable. OBO is already documented as an Enterprise capability in docs/toolhive/enterprise.mdx. Defer user-facing OBO docs until #5329 ships.
#5363 — Release v0.28.2	Release packaging only.

Files in this PR

• .github/upstream-projects.yaml — version bump to v0.28.2 (renovate)
• docs/toolhive/reference/cli/thv_registry_login.md — +1 -0 for the new -p, --allow-private-ip flag (auto-regenerated by the reference-asset sync)

No further hand-written changes are warranted for this release.
· Branch: renovate/stacklok-toolhive-0.x

[claude]

Claude finished @renovate[bot]'s task in 23s —— View job

---

Editorial review — nothing to review

I checked the files changed in this PR to run /docs-review over them:

• .github/upstream-projects.yaml — renovate version bump, not docs
• docs/toolhive/reference/cli/thv_registry_login.md — auto-generated CLI reference, excluded from hand-edits per CLAUDE.md and my review instructions

The previous session correctly concluded that toolhive v0.28.2 contains no changes that require hand-written documentation edits, so no narrative docs were modified. There is nothing within my editorial scope to review.

• Identify files changed in the upstream-docs commit
• Confirm all changed files are out of scope (auto-generated reference assets only)
• No editorial fixes needed
  · Branch: renovate/stacklok-toolhive-0.x