diff --git a/.github/upstream-projects.yaml b/.github/upstream-projects.yaml
index 19fc7983..b12debf0 100644
--- a/.github/upstream-projects.yaml
+++ b/.github/upstream-projects.yaml
@@ -35,7 +35,7 @@ projects:
 
   - id: toolhive
     repo: stacklok/toolhive
-    version: v0.28.1
+    version: v0.28.2
     # toolhive is a monorepo covering the CLI, the Kubernetes
     # operator, and the vMCP gateway. It also introduces cross-
     # cutting features that land in concepts/, integrations/,
diff --git a/docs/toolhive/reference/cli/thv_registry_login.md b/docs/toolhive/reference/cli/thv_registry_login.md
index e13c2c95..ccbfb1ba 100644
--- a/docs/toolhive/reference/cli/thv_registry_login.md
+++ b/docs/toolhive/reference/cli/thv_registry_login.md
@@ -32,6 +32,7 @@ thv registry login [flags]
 ### Options
 
 ```
+  -p, --allow-private-ip   Allow --registry to reference a private IP address (default false). Mirrors the flag on 'thv config set-registry'.
       --audience string    OAuth audience parameter for registry authentication (optional)
       --client-id string   OAuth client ID for registry authentication
   -h, --help               help for login