Update stacklok/toolhive-registry-server to v1.4.6

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive-registry-server	patch	v1.4.5 → v1.4.6

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

---

Release Notes

stacklok/toolhive-registry-server (stacklok/toolhive-registry-server)

v1.4.6

Compare Source

What's Changed

• Bump golang.org/x/crypto and golang.org/x/net for CVE fixes by @​rdimitrov in #​799
• Update docker images by @​renovate[bot] in #​798
• Update github actions by @​renovate[bot] in #​797
• chore: add needs-triage caller workflow by @​dussab in #​801
• Adopt shared toolhive-core/postgres connection package by @​rdimitrov in #​804
• Drop all pgx and docker/docker vuln suppressions by @​rdimitrov in #​805
• Update docker images by @​renovate[bot] in #​806
• Update github actions by @​renovate[bot] in #​807
• Update go modules by @​renovate[bot] in #​808
• Drop docker/docker by bumping toolhive v0.29.0 by @​rdimitrov in #​809
• Release v1.4.6 by @​toolhive-release-app[bot] in #​810

New Contributors

• @​dussab made their first contribution in #​801

Full Changelog: stacklok/toolhive-registry-server@v1.4.5...v1.4.6

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Docs update for toolhive-registry-server v1.4.6

Note

Skill reported no doc-relevant changes for this release.
This PR only bumps the version pin and any pin_files edits.

At a glance

Upstream	stacklok/toolhive-registry-server v1.4.5 → v1.4.6
Hand-written changes	1 commit(s)
Reference assets	unchanged
Gaps	0
Release contributors	2 auto-assigned (see sidebar)
Action required	Spot-check skill-authored prose for accuracy

Summary of changes

Auto-generated from commit titles -- skill did not write SUMMARY.md.

• Note no doc changes needed for registry-server v1.4.6 (67f98cc)

Run cost

Session	Turns	Cost (USD)
Generation	23	$1.2820
Editorial review	5	$0.4320
Total	28	$1.7140

How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

• docs/toolhive/reference/cli/
• docs/toolhive/reference/crds/
• static/api-specs/

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-website	Ready	Preview, Comment	Jun 3, 2026 4:42pm

[claude]

Claude finished @renovate[bot]'s task in 1m 39s —— View job

---

Upstream release docs: toolhive-registry-server v1.4.6

Result: no documentation changes needed. Wrote NO_CHANGES.md per the skill workflow.

• Phase 1: Discovered release scope from gh release view
• Phase 2: Verified the only non-renovate PRs against source/PR bodies
• Phase 3: Impact map is empty (see analysis below)
• Phase 4-5: Skipped per skill — no edits to make
• Phase 6: Committed NO_CHANGES.md and pushed

Why no doc changes

All eleven PRs in v1.4.6 are infra, security, or internal-only:

PR	Type	Doc impact
stacklok/toolhive-registry-server#799	golang.org/x/{crypto,net} CVE bumps	None
stacklok/toolhive-registry-server#798, #806	Renovate: docker images	None
stacklok/toolhive-registry-server#797, #807	Renovate: GitHub Actions	None
stacklok/toolhive-registry-server#801	Add needs-triage caller workflow	None (CI)
stacklok/toolhive-registry-server#804	Adopt shared toolhive-core/postgres connection package	None — PR explicitly says "preserves the config layer's responsibilities and keeps the YAML/Helm schema unchanged". Verified against docs/toolhive/guides-registry/database.mdx: documented fields (password, maxIdleConns, connMaxLifetime, dynamicAuth, mutual-exclusion rule) are all still load-bearing in the config layer.
stacklok/toolhive-registry-server#805	Drop pgx + docker/docker vuln suppressions	None (CI config)
stacklok/toolhive-registry-server#808	Renovate: go modules	None
stacklok/toolhive-registry-server#809	Bump stacklok/toolhive v0.29.0 to drop docker/docker	None — PR notes "no breaking changes from the minor bump"
stacklok/toolhive-registry-server#810	Release automation	None

No version-pinned references to v1.4.5 exist in docs/toolhive/guides-registry/, so no install/compatibility text needs bumping either.
· Branch: renovate/stacklok-toolhive-registry-server-1.x

[claude]

Claude finished @renovate[bot]'s task in 25s —— View job

---

Docs review: toolhive-registry-server v1.4.6

Result: nothing to review. This PR contains no documentation changes.

• Listed files changed by the previous Claude commit (git diff --name-only HEAD~1 HEAD)
• Listed all files changed in the PR (git diff --name-only origin/main...HEAD)
• Confirmed no docs/ files are in scope

Files in the PR

File	Reviewable?
.github/upstream-projects.yaml	No — Renovate config bump, not docs
NO_CHANGES.md	No — signal file, excluded by workflow instructions

The previous session correctly determined that v1.4.6 contains only infra, CVE bumps, and an internal refactor to a shared toolhive-core/postgres package that preserves the documented YAML/Helm config schema. No docs/toolhive/guides-registry/ content needed editing, so there is nothing for an editorial pass to act on.

· Branch: renovate/stacklok-toolhive-registry-server-1.x