[renovate-bot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
googleapis/mcp-toolbox	major	0.26.0 → 1.16.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

googleapis/mcp-toolbox

v1.16.0

Compare Source

Features

• Add skills over MCP extension (#​4104) (cb998b0)
• mssql: Adding new mssql function to return source code for all custom database objects (#​3954) (9612d48)
• prebuilt/dataplex: Remove search_aspect_types tool from prebuilt config (08a42a2)
• server, resources: Support dynamic UI resources, ResourceProvider, and StructuredToolResult (#​4315) (772847c)
• tool/bigquery: Add debug logging across BigQuery tools (#​4346) (1e4dea5)
• tool/looker-import-dashboard-from-lookml: Add Looker import_dashboard_from_lookml (#​4156) (af22702)
• tool/looker: Support text, markdown, and rich-text dashboard elements (#​4180) (0c8a71d)

Bug Fixes

• looker: Bind all dashboard_filters in add_dashboard_element and update_dashboard_element (#​4326) (6f47f4e)
• source/bigquery: Recover default-ADC clients after on-disk re-auth (#​4329) (fae6849)
• source/bigquery: Set UseLegacySql to false when creating session (#​4358) (494092a)
• tool/bigquery-execute-sql: Make writeMode protected fail-closed for non-SELECT statements (#​4359) (426fb4e)
• tool/bigquery-get-table-info: Compact zero-valued schema fields (#​4328) (4d74bf9)
• Watch tools.yaml for reload when config flag omitted (#​4025) (00761dd)

v1.15.0

Compare Source

Features

• conversational-analytics: Add create, update, and delete data agent tools (#​3685) (aaf8841)
• looker: Support running saved queries by query_id in query tool (#​4220) (0f2f3fb)
• server: Backport MCP Apps UI support across v20241105 - v20251125 (#​4057) (3a4032c)
• ui: Add collapsible sidebar and resizable scrollable tool description (#​4281) (8d1930f)
• ui: Add MCP Apps support to toolbox playground (#​4063) (d0628f7)

Bug Fixes

• auth/generic: Validate issuer claim in GetClaimsFromHeader (#​4296) (e0d655a)
• resource/file: Sanitize server filesystem paths from read errors (#​4260) (5aeb8f9)
• source/bigquery: Sort allowedDatasets for deterministic tool manifests (#​4272) (6d46c5f)
• telemetry: Disable self-tracing on GCP telemetry exporters (#​4230) (f9ba7e5)
• tools: Remove Authorized() from Tool interface to ensure centralized authRequired check (#​4254) (00ce635)

v1.14.0

Compare Source

Features

• bigquery: Support authorized views with dataset restrictions (#​2561) (441d4e7)
• looker: Include LookML dashboards in get_dashboards tool (#​4216) (2fea1b5)
• source/firestore: Propagate requester header on collection listing for get_schema (#​4131) (0fa215a)
• sources/spanner: Add support for Spanner Omni (#​4198) (a24e5e6)
• tool/cloud-gemini-data-analytics-query: Support Bigtable and Firestore references (#​4136) (3aff9a7)
• tool/looker: Add looker-get-explore tool (#​4173) (ceb657e)

Bug Fixes

• datalineage: Increase timeouts (69aa2f2)
• looker: Update legacy feature test expectation (e9c2f42)
• resources: Normalize resource-template URI scheme to lowercase (#​4023) (2311dc1)
• test/alloydbainl: Match query value instead of model-chosen alias (#​4125) (1b20eae)
• tool/bigquery: Check lexically referenced datasets before dry run (#​4164) (912189f)

v1.13.1

Compare Source

Bug Fixes

• Revert "feat(sources): connect sources on first use" (#​4137) (7fdbef9)

v1.13.0

Compare Source

Features

• Support --defer-source-connect feature (#​4076) (5700630)
• prebuiltconfig/bigtable: Add prebuilt config for bigtable (#​4068) (576b9f7)
• tool/conversational-analytics-list-accessible-data-agents: Return all data agents and support manual paging (#​4066) (0131c39)
• tool/looker: Expose value_format and value_format_name in field metadata (#​4094) (4b7a44d)

Bug Fixes

• config: Fix parseEnv inconsistent handling with YAML comments (#​4039) (558c5a9)

v1.12.0

Compare Source

Features

• Added logic to serve /.well-known/openai-apps-challenge (#​4038) (7ac00a2)
• tool/looker: Expose certification_metadata in looker dashboard and look tools (#​4041) (ed42084)

Bug Fixes

• prebuilt/cloud-sql-postgres: Clarify execute_sql tool description (#​3884) (ed4cfde)
• source/cockroachdb,source/redis: Release the handle when a connect attempt fails (#​3933) (2d52f8a)
• tool/looker-generate-embed-url: Require embed parameters (#​3913) (93520cf)
• tools/looker: Add additional annotations to support OpenAI plugins (#​4035) (7b41e73)

v1.11.0

Compare Source

Features

• Add Toolbox version check on startup (#​3837) (7d36de3)
• alloydb: Provide actionable error when read-only mode is used on pre-PG17 (#​3902) (28ace11)
• MCP Apps: Add support for MCP Apps (#​4008) (9cf3e95)
• MCPResources: Add support for MCP Resources (#​3968) (fb227b0)
• mcp: Serve groups/list and groups/get as a Toolbox extension (#​3914) (eaf2a9c)
• source/bigquery: Attach SQLCommenter attributes as BigQuery job labels (#​3843) (bf0f1a5)
• sources: Add ConnectOnce, a helper for connecting on first use (#​3905) (16c31fa)

Bug Fixes

• docs/cloudgda: Document context fields, fix PSV example and links (#​3919) (ae47535)
• looker: Update want clause (#​3962) (9593321)
• source/http: Block IETF protocol assignments range in default SSRF guard (#​3909) (4302e86)
• sources: Release the handle when a source fails to connect (#​3921) (0001190)
• test/alloydbainl: Use explicit SQL alias prompt in integration test (#​3916) (596eaf9)

v1.10.0

Compare Source

Features

• falkordb: Add FalkorDB source and tools (#​3692) (a94702c)
• mcp: Add Secure Parameters support as Toolbox experimental extension (#​3394) (9750d2d)
• server/mcp: Support com.google.cloud/toolbox.v1 extension in v20260728 (#​3801) (f4f7da6)
• skill: Add fix-failing-tests skill for mcp-toolbox (#​3821) (168e69c)
• sources: Support native read-only mode and dynamic tool annotations (#​3872) (c257022), refs #​3615 #​3816 #​3618 #​3851 #​3619 #​3617
• tools/firestore-mongodb: Add tools for execute mql and get schema (#​3826) (4a85d75)
• tool/mongodb: Allow collection to be specified at runtime (#​3715) (7626eaf)

Bug Fixes

• cloud-storage: Resolve symlinks when enforcing local path boundaries (#​3810) (c2ada64)
• config: Compare env var offsets in rune space when skipping comments (#​3856) (2e76934)
• Merge prebuilt tools when reloading custom config (#​3864) (5a6d865)
• Normalize postgres UUIDs to strings (#​3806) (3b02f1d)
• postgres: Filter background processes in postgres-list-active-queries (#​3885) (3d9e62a)

v1.9.0

Compare Source

Features

• groups: Add ttlMs and cacheScope customization to config (#​3805) (a5d4947)
• migrate: Convert toolset to group kind during migration (#​3704) (0adeaa5)
• server/mcp: Introduce generic client extension registry (#​3723) (016245c)
• skill: Add review-prs skill for mcp-toolbox (#​3743) (5b7bacc)
• source/bigquery: Add apiEndpoint field to override BigQuery API host (#​3437) (4da1600)
• source/databaseinsights: Add databaseinsights source (#​3461) (3b9615d)
• sources/spanner: Rename execute_sql_dql to execute_sql_readonly (#​3776) (cf5a0c8)
• tools/bigtable: Add admin lifecycle and listing tools (#​3596) (801d589)
• tools/bigtable: Bigtable-list-schemas MCP tool (#​3683) (9228c61)
• tools/databaseinsights: Add Advanced Query Insights tools for AlloyDB (#​3722) (74d18ae)
• tools/looker: Add additional tools to allow dashboards to be modified, and their layouts altered. (#​3597) (b2b80fb)
• tools: Add cloud-sql-connect-gce for pg, mysql, mssql (#​3740) (ca58fa4)

Bug Fixes

• auth/mcp: Derive PRM URL from Toolbox URL (#​3765) (aa30842)
• config: Ignore environment variables in YAML comments (#​3807) (79aa732), refs #​3793
• mcp: Return Tool execution error for invalid input param (#​3799) (8120197)
• prebuilt/cloud-storage: Declare tool collections as groups (#​3764) (7d468be)
• server/mcp: Disallow client overriding URL bound parameters (#​3798) (f15a9c7)
• server: Avoid a nil-flusher panic in the SSE handler (#​3520) (947f42f)
• tools/bigquery: Keep the provider error classification in bigquery-execute-sql (#​3738) (42570b8)
• tools/looker: Scope the filters quoting rule to values in query description (#​3788) (78eb0b8)
• util: Convert exponent-form JSON numbers in ConvertNumbers (#​3730) (e9713ee)

v1.8.0

Compare Source

Features

• Add groups support (#​3605) (e75ec3b)
• prebuilt: Migrate skills-repo toolsets to kind: group with descriptions (#​3595) (b895b36)
• server: Add /healthz endpoint for container health checks (#​3060) (d5aefbc)
• skills: Add --group flag to generate a skill from one group (#​3585) (c1abd4f)
• skills: Default --name to --group, --toolset, or single --prebuilt name (#​3586) (2b33b08)
• skills: Make description optional during skills gen (#​3584) (d0a8f14)
• tool/looker: Add get_field_value_suggestions tool (#​3696) (3debe81)
• tools/dataplex-update-data-product-aspects: Add dataplex-update-data-product-aspects tool (#​3607) (f940937)
• Update draft specs to 2026-07-28 (#​3699) (cf128ff)

Bug Fixes

• Re-add name validation to tools name (#​3654) (944f6ce)
• Re-add tool validation during startup (#​3705) (25ce953)
• server: Sort default toolset alphabetically for stable ordering (#​3539) (e5da24c)
• source/cloud-sql-admin: Validate source instance for backup-run restore (#​3555) (3ebe500)
• source/dataplex: Cleanup Dataplex Data Product resources that may have leaked due to previously aborted tests (#​3627) (3fb5a3f)
• source/http: Block CGNAT 100.64.0.0/10 in default SSRF guard (#​3625) (a0f36f4)
• tools/looker: Enhance looker-run-dashboard to handle result maker structures and merge queries (#​3698) (7666bc0)
• tools/looker: Log request/response traces at debug, not error (#​3552) (c3ad445)

v1.7.0

Compare Source

Features

• Add quotaProject support for BigQuery and Looker conversational analytics (#​2610) (f3e7ca9)
• arcadedb: Add arcadedb source and tools (#​2961) (351de00)
• cmd/internal,docs: Add warning log that prebuilt tools are for developer use (#​3451) (8cffcef)
• source/postgres: Add optional connectTimeout (#​3620) (b574b07)
• tool/clickhouse-sql: Add native vector embedding support (#​3229) (6cbe1c2)
• tool/dataplex-update-data-product,tool/dataplex-create-data-asset,tool/dataplex-update-data-asset: Add update data product, create data asset, and update data asset tools for knowledge catalog source (#​3574) (721c204)
• tools/dataplex-create-data-product: Add dataplex-create-data-product tool (#​3504) (5cee0d2)
• tools/dataplex-get-data-asset: Add dataplex-get-data-asset tool (#​3503) (1ddfbe9)

Bug Fixes

• parameters: Report the offending value in array/map type errors (#​3512) (4034d6f)
• parameters: Return an error instead of panicking on a non-string type field (#​3516) (66a0d53)
• source/looker: Dynamically resolve public host URL (#​3603) (0428afd)
• tool/looker-run-dashboard: Add support for SQL Runner query tiles (#​3594) (0975d0a)

v1.6.0

Compare Source

Features

• Support MCP 2026 draft specs (#​3544) (d12eaa8)
• release: Add digital signature to Toolbox binaries (#​3528) (3f0f0af)
• tool/cloud-storage: Configure object operation parameters (#​3529) (d6dc5fe)
• tool/cloud-storage: Support configurable parameters (#​3478) (bc2de2a)
• tools/dataplex-list-data-products: Add dataplex-list-data-products tool (#​3337) (6dd669a)
• tools/dataplex-get-data-product: Add dataplex-get-data-product tool (#​3499) (7ea7a09)
• tools/dataplex-list-data-assets: Add dataplex-list-data-assets tool (#​3500) (182f933)
• tools/looker: Support complex filter_expression parameter in queries (#​3494) (997fb8c)
• tools/looker: Support dynamic_fields parameter in queries (#​3507) (cd22b89)

Bug Fixes

• tools/gda: Support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (#​3460) (cc2a61e)
• tools/looker-conversational-analytics: Validate explore_references shape instead of panicking (#​3531) (b67419d)
• tool/looker-create-view-from-table: Correct Looker API payload structure (#​3515) (18c539c)

v1.5.0

Compare Source

Features

• auth/google: Require audience or clientId for mcpEnabled (#​3450) (59f7b6e)
• Enable per source level flags for sql commenter (#​3465) (ecce6b7)
• mcp: Add URL parameter binding for HTTP transport (#​3112) (0cc7b37)
• scylladb: Adding support for ScyllaDB source and tool (#​3119) (2dada83)
• server: Add support for toolset filtering in prebuilt CLI flag (#​3245) (7cc4f65)
• skills: Generate skills offline without live source connections (#​3388) (4c860b6)
• skills: Tolerate missing env vars during offline skills-generate (#​3399) (ea5d3e5)
• source/cloud-storage: Restrict bucket and local path access (#​3454) (2c3ca5d)
• tools/bigquery: Add per tool query label in BigQuery jobs (#​1975) (3f6a49f)
• tools/dataplex: Add tools to support metadata enrichment workflow (#​3270) (05289aa)
• tools/mysql: Add show-query-stats and list-all-locks tools for MySQL and Cloud SQL MySQL source (#​2954) (a9693bd)
• tools: Decouple tool initialization from sources (#​3355) (32a24e3)

Bug Fixes

• auth/dataplex: Fix failing source with service account credentials (#​3369) (ba4deef)
• bigquery: Wire maximumBytesBilled into prebuilt config (#​3385) (4abbf6e)
• Bound MCP HTTP body size (#​3216) (d4f4342)
• config: Add doc/line context to parse errors (#​2957) (4b097da)
• Escape delimiter characters in applyEscape to prevent SQL injection (#​2811) (932519a)
• npm: Source binary version from cmd/version.txt (#​3417) (6ffbdec)
• prebuilt/alloydb-omni: Require password env var explicitly (#​3398) (fcbe3e7)
• server: Fail if MCP auth is enabled together with enable-api (#​3435) (a6ff910)
• server: Return errors instead of panicking in InitializeConfigs (#​3397) (f48b01d)
• source/cloudhealthcare: Validate pageURL parameter to prevent SSRF (#​3453) (9abf47d)
• source/dataplex,source/datalineage: Specify cloud-platform scope for default credentials (#​3376) (13e8c36)
• source/http: Implement SSRF guard (#​3448) (24d7d29)
• tool/bigquery-execute-sql: Prevent dataset restriction bypass (#​3452) (ca6d5e3)
• tool/mysql-get-query-plan: Prevent query execution bypass and statement injection (#​3235) (7ed1e7b)
• tool/spanner-sql,tool/spanner-execute-sql: Use read-only annotations when readOnly is set (#​3338) (8bde0ec)

v1.4.0

Compare Source

Features

• ci: Add support for windows/arm64 binary distribution (#​3231) (10abf3b)
• datalineage: Add Data Lineage integration (#​3285) (19353c3)
• server: Ignore unknown tools at startup with --ignore-unknown-tools flag (#​3353) (5f0304f)
• tools/cloudsqlpg: Add remaining vector assist tools for Cloud SQL Postgres (#​3203) (b514cbd)
• tools/spanner-search-catalog: Implement search_catalog tool (#​3140) (defc086)

Bug Fixes

• auth/generic: Enforce issuer presence in opaque token validation (#​3360) (1d8df0d)
• auth: Separate Google and Generic MCP OAuth verification (#​3341) (dfd66ee)
• mcp: Support annotations and metadata within Tools to earlier MCP schemas (#​3300) (9a88c72)
• oracle: Remove trailing semicolons from prebuilt tools (#​3215) (fcad02d)
• server/auth: Centralize tool scopes validation (#​3335) (adce4ab)
• server: Return null id for batch request rejection (#​3333) (0b18d58)
• source/dataplex: Limit search results to pageSize (#​3323) (905c1f6), closes #​3308
• telemetry: Allow GCP project override (#​2960) ([3c83ba5](https://redirect.github.com/googleapis/mcp-toolbox/

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.