Release v0.37.0

[toolhive-release-app]

Release v0.37.0

Version Bump

minor release

Files Updated

• VERSION
• deploy/charts/operator-crds/Chart.yaml (path: version)
• deploy/charts/operator-crds/Chart.yaml (path: appVersion)
• deploy/charts/operator/Chart.yaml (path: version)
• deploy/charts/operator/Chart.yaml (path: appVersion)
• deploy/charts/operator/values.yaml (path: operator.image)
• deploy/charts/operator/values.yaml (path: operator.toolhiveRunnerImage)
• deploy/charts/operator/values.yaml (path: operator.vmcpImage)
• Helm chart docs (via helm-docs)

Next Steps

1. Review this PR
2. Merge to main
3. Release automation will handle the rest

Checklist

• Version bump is correct
• All CI checks pass

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.89%. Comparing base (1ec7352) to head (6a8c03e).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5811      +/-   ##
==========================================
+ Coverage   70.83%   70.89%   +0.05%     
==========================================
  Files         685      685              
  Lines       69656    69656              
==========================================
+ Hits        49340    49380      +40     
+ Misses      16703    16651      -52     
- Partials     3613     3625      +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

📝 Generated release notes for v0.37.0

Auto-generated by the release-notes skill. Review and, if good, apply with:

gh release edit v0.37.0 --notes-file <paste-below>.md

Click to expand release notes

🚀 Toolhive v0.37.0 is live!

This release hardens ToolHive's authorization and token-validation paths — closing a critical Cedar filter bypass on SSE streams and validating ID-JAG claims — while adding new customization surfaces (pod templates for remote proxies, Docker-gateway access over the workload API, and runtime environment variables for packaged servers) and an automated MCP conformance signal in CI.

🆕 New Features

• Remote proxy workloads can now be customized like other ToolHive CRDs via a new optional spec.podTemplateSpec field on MCPRemoteProxy, validated at reconcile time and surfaced through a PodTemplateValid condition (#5531).
• API clients (POST/PUT /api/v1/workloads) can now set allow_docker_gateway to permit outbound connections to Docker gateway addresses, matching the existing thv run --allow-docker-gateway CLI flag (#5799).
• Packaged protocol servers (uvx/npx/go) can now inject environment variables into the shipped runtime image via a new optional RuntimeEnv field on templates.RuntimeConfig, enabling cases like Okta's MCP server that need PYTHON_KEYRING_BACKEND set at process start (#5801).

🐛 Bug Fixes

• Fixed a critical authorization bypass where the SSE response filter leaked the unfiltered tools/list, prompts/list, and resources/list catalog whenever an upstream interleaved notifications or emitted an undecodable data: line; each line is now filtered individually so the Cedar policy is always enforced (#5304).
• The XAA (RFC 8693) auth strategy now validates the aud and resource claims inside a returned ID-JAG JWT and rejects non-JWT assertions, closing a token-misbinding / confused-deputy risk (#5716).
• Fixed empty tools/list responses (HTTP 200 with a 0-byte body) when an MCPToolConfig tool filter and authz were both active on the same MCPServer, by flushing the tool-filter buffer after the handler returns (#5809).

🧹 Misc

• Documented the operator Phase and Conditions convention in the operator rules, clarifying that Phase is derived from conditions rather than an independent source of truth (#5766).
• Added a per-PR MCP conformance CI job that runs the upstream conformance suite against thv run (streamable-http), giving a spec-authored compliance signal that regresses loudly (#5806).
• Updated the mcp-protocol-expert agent to prefer context7 for MCP spec lookups and drop the hardcoded spec version, making spec lookups self-correcting across releases (#5805).

👋 Welcome to our newest contributors: @buyicoder and @saivedant169 🎉

Full commit log

What's Changed

• Document operator phase conventions by @buyicoder in Document operator phase conventions #5766
• Add runtime-stage environment variables to protocol Dockerfiles by @danbarr in Add runtime-stage environment variables to protocol Dockerfiles #5801
• Add MCP conformance CI job for thv run proxy by @jhrozek in Add MCP conformance CI job for thv run proxy #5806
• Prefer context7 for MCP spec lookups, drop hardcoded version by @jhrozek in Prefer context7 for MCP spec lookups, drop hardcoded version #5805
• Expose --allow-docker-gateway in workload API by @kantord in Expose --allow-docker-gateway in workload API #5799
• Added spec.podTemplateSpec support to MCPRemoteProxy by @Sanskarzz in Added spec.podTemplateSpec support to MCPRemoteProxy #5531
• Stop SSE filter from leaking tools/list on undecodable lines by @saivedant169 in Stop SSE filter from leaking tools/list on undecodable lines #5304
• Validate aud and resource claims in returned ID-JAG JWT by @jhrozek in Validate aud and resource claims in returned ID-JAG JWT #5716
• Flush tool-filter buffer after handler returns by @aponcedeleonch in Flush tool-filter buffer after handler returns #5809
• Release v0.37.0 by @toolhive-release-app[bot] in Release v0.37.0 #5811

New Contributors

• @buyicoder made their first contribution in Document operator phase conventions #5766
• @saivedant169 made their first contribution in Stop SSE filter from leaking tools/list on undecodable lines #5304

Full Changelog: v0.36.0...v0.37.0

🔗 Full changelog: v0.36.0...v0.37.0