Update stacklok/toolhive-studio to v0.40.2

[renovate]

This PR contains the following updates:

Package	Update	Change
stacklok/toolhive-studio	patch	v0.40.1 → v0.40.2

After this PR opens, .github/workflows/upstream-release-docs.yml adds source-verified content edits for the new release. For stacklok/toolhive, the same workflow also syncs reference assets (CLI help, Swagger) and regenerates the CRD MDX pages.

---

Release Notes

stacklok/toolhive-studio

v0.40.2

Compare Source

What's Changed

• fix(security): add grype ignore for image-size (GHSA-w3rx-r6r6-pgpr) by @​toolhive-studio-ci[bot] in #​2736
• fix(security): remediate proxy-addr, undici, brace-expansion and more by @​toolhive-studio-ci[bot] in #​2737
• chore(deps): update dependency stacklok/toolhive to v0.51.4 by @​renovate[bot] in #​2738
• fix(settings): hide auto-update controls on Linux by @​fengjikui in #​2412
• chore(deps): update dependency stacklok/toolhive to v0.53.0 by @​renovate[bot] in #​2749

Full Changelog: stacklok/toolhive-studio@v0.40.1...v0.40.2

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Docs update for toolhive-studio v0.40.2

At a glance

Upstream	stacklok/toolhive-studio v0.40.1 → v0.40.2
Hand-written changes	1 commit(s)
Reference assets	unchanged
Gaps	0
Owner	@peppescg - identified from release author
Release contributors	2 review requested (see sidebar)
Action required	Spot-check skill-authored prose for accuracy

Who does what

@peppescg cut this release and owns this PR: review your own changes, chase the remaining approvals, and merge once they're in. You don't need to wait on a review from anyone listed as having no docs impact below.

Everyone with a review request: the target is a review and approval within 2 business days.

Summary of changes

• Updated the Settings > Version description and the Linux upgrade note in docs/toolhive/guides-ui/install.mdx to reflect that the Downloads auto-update toggle appears only on macOS and Windows (fix(settings): hide auto-update controls on Linux toolhive-studio#2412)
• No docs impact from the remaining changes: security dependency remediations (fix(security): add grype ignore for image-size (GHSA-w3rx-r6r6-pgpr) toolhive-studio#2736, fix(security): remediate proxy-addr, undici, brace-expansion and more toolhive-studio#2737) and bundled ToolHive bumps to v0.51.4 and v0.53.0 (chore(deps): update dependency stacklok/toolhive to v0.51.4 toolhive-studio#2738, chore(deps): update dependency stacklok/toolhive to v0.53.0 toolhive-studio#2749)

Review routing

GitHub could not request the upstream contributor directly, so review went to the human merger of each relevant upstream PR:

• @kantord (merged fix(settings): hide auto-update controls on Linux toolhive-studio#2412)

Run cost

Session	Turns	Cost (USD)
Generation	20	$0.7197
Editorial review	21	$0.5688
Total	41	$1.2885

How this PR was built

Two Claude Opus sessions run per release: a generation pass
(upstream-release-docs skill, 6 phases) followed by a fresh-
context editorial pass (docs-review). Prettier/ESLint
auto-fixes are applied after.

Auto-synced paths — do not hand-edit these in review:

• static/api-specs/
• docs/toolhive/reference/cli/ (toolhive only)

If a "Gaps needing human context" section is present above,
each entry includes a paste-ready Helper prompt for local
Claude a reviewer can use to resolve the gap.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs-website	Ready	Preview	Oct 14, 2026 8:12pm UTC

[claude]

Claude finished @renovate[bot]'s task in 1m 11s —— View job

---

Upstream release docs: stacklok/toolhive-studio v0.40.2

• Discovery and deep dive
• Audit existing docs
• Implement, format, lint, and write artifacts

What changed in the release: one change affects the docs, stacklok/toolhive-studio#2412. It hides the Downloads auto-update toggle in Settings > Version on Linux. I checked this against renderer/src/common/components/settings/tabs/version-tab.tsx at the tag (canShowAutoUpdateControls = canShowAutoUpdate && !isLinux). The other four changes don't affect the docs: two security dependency fixes (stacklok/toolhive-studio#2736, stacklok/toolhive-studio#2737) and two bumps of the bundled ToolHive version (stacklok/toolhive-studio#2738, stacklok/toolhive-studio#2749).

Doc update in docs/toolhive/guides-ui/install.mdx:

• The Version tab description now says the Downloads toggle is only on macOS and Windows.
• The Linux note now says ToolHive doesn't install updates automatically on Linux and the tab has no toggle. When an update is available, the Download button opens the GitHub releases page.
• The sentence about turning off auto-updates now applies only to macOS and Windows.

Prettier and ESLint ran clean; I didn't run the site build. I left REVIEWERS.json and SUMMARY.md uncommitted at the repo root for the workflow to read. REVIEWERS.json marks @fengjikui as the reviewer for the Linux change. I didn't write a GAPS.md because nothing is missing.
· Branch: renovate/stacklok-toolhive-studio-0.x

[claude]

Claude finished @renovate[bot]'s task in 1m 26s —— View job

---

Editorial review of the v0.40.2 content edits

• Find the files changed in the previous commit (docs/toolhive/guides-ui/install.mdx)
• Run /docs-review on the changed sections
• Check the claims against the upstream source
• Run npm run prettier:fix and npm run eslint:fix

Summary

I made no changes and pushed nothing. The edit to install.mdx matches the upstream code, introduces no style violations, and both formatters left the file unchanged.

What I checked against upstream

• No Downloads toggle on Linux. The Version tab only shows the Downloads toggle when the platform isn't Linux (renderer/src/common/components/settings/tabs/version-tab.tsx:60, canShowAutoUpdateControls = canShowAutoUpdate && !isLinux). This is the change from fix(settings): hide auto-update controls on Linux toolhive-studio#2412.
• On Linux, Download opens the releases page. The Version tab sends Linux users to GITHUB_RELEASES_URL instead of starting the in-app update (version-tab.tsx:87). The tray's Check for Updates... dialog does the same (main/src/utils/update-dialogs.ts:29).
• Linux doesn't update automatically. Background updates use update-electron-app (main/src/auto-update.ts:566), which only supports macOS and Windows. That backs up the new "On macOS and Windows" wording.

Editorial notes

• The Linux note in "Upgrade ToolHive" now gives a reason for the missing toggle. It doesn't just repeat the surrounding text, so it still earns its admonition.
• The new wording describes current behavior only. It has no changelog-style phrasing, no em dashes, and bold UI labels are consistent throughout.
• One thing I didn't change, because it isn't part of this release: the Version bullet says the update alert appears "If you disable auto-updates." In the code, the alert appears whenever a new version is available (production builds, auto-update permission granted), whether the toggle is on or off (version-tab.tsx:61). That's worth a look in a later pass, but it's outside this release, so I didn't add new claims here.