feat(container): update image ghcr.io/homeassistant-ai/ha-mcp (8.0.0 ➔ 8.1.0)

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/homeassistant-ai/ha-mcp	minor	8.0.0 → 8.1.0

---

Release Notes

homeassistant-ai/ha-mcp (ghcr.io/homeassistant-ai/ha-mcp)

v8.1.0

Compare Source

Added

• Land machine translations post-merge instead of in the PR
  (#​2115)
• site: Add shareable setup wizard URLs
  (#​2117)

Changed

• Document Webhook Proxy ha_auth as an access gate, not per-user authorization
  (#​2140)
• Document settings-UI and OIDC trust properties in SECURITY.md
  (#​2136)

Fixed

• Observe the shutdown cleanup task result
  (#​2139)
• Cancel pending worker-loop tasks before embedded teardown
  (#​2128)
• Drive flows that revisit menu steps via successive selection lists
  (#​2124)
• Replace the stdio settings sidecar on every startup and keep its URL stable
  (#​2134)
• Clarify the addon-not-back error message
  (#​2132)
• Anchor the translation prompt to each catalog's address register
  (#​2110)

---

Internal Changes

Chores

• addon: Publish dev addon version 8.0.0.dev2238 [skip ci]
  (04c6e4f)
• Machine-translate locale updates
  (ee165e8)
• addon: Publish dev addon version 8.0.0.dev2235 [skip ci]
  (1373d02)
• addon: Publish dev addon version 8.0.0.dev2233 [skip ci]
  (c8dfbb3)
• addon: Publish dev addon version 8.0.0.dev2230 [skip ci]
  (2d3fc9d)
• Sync tool docs after merge [skip ci]
  (8cc8398)
• addon: Publish dev addon version 8.0.0.dev2228 [skip ci]
  (b791edb)
• addon: Publish dev addon version 8.0.0.dev2224 [skip ci]
  (d4167d2)
• deps: Update dependency home-assistant/operating-system to v18.2
  (#​2138)
• deps: Update src/ha_mcp/resources/skills-vendor digest to 9e4eff2
  (#​2137)
• addon: Publish dev addon version 8.0.0.dev2222 [skip ci]
  (55688dc)
• addon: Publish dev addon version 8.0.0.dev2220 [skip ci]
  (c9aaf4c)
• Machine-translate locale updates
  (d1f74e5)
• addon: Publish dev addon version 8.0.0.dev2218 [skip ci]
  (ad65918)
• Replace the retired triage bot with CodeRabbit issue enrichment
  (#​2125)
• Let CodeRabbit review draft PRs
  (#​2118)
• deps-dev: Bump fast-uri from 3.1.4 to 3.1.5 in /site
  (#​2130)
• deps: Bump postcss from 8.5.21 to 8.5.25 in /site
  (#​2129)
• addon: Publish dev addon version 8.0.0.dev2212 [skip ci]
  (2222a10)
• addon: Publish dev addon version 8.0.0.dev2207 [skip ci]
  (ac057ed)
• addon: Publish dev addon version 8.0.0.dev2203 [skip ci]
  (cde9b5c)
• addon: Publish version 8.0.0 [skip ci]
  (c6eacb0)

Continuous Integration

• deps: Bump the github-actions group with 5 updates
  (#​2123)

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in faea67e...66ce815 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 5, 2026 1:49p.m.	Review ↗
Shell		Aug 5, 2026 1:49p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[coderabbitai]

📝 Walkthrough

Walkthrough

The Home Assistant MCP server image in the ToolHive Kubernetes configuration was upgraded from version 8.0.0 to 8.1.0. The pinned image digest was also replaced.

Changes

Home Assistant MCP server

Layer / File(s)	Summary
Update the pinned Home Assistant MCP image kubernetes/apps/ai/toolhive/config/homeassistant.yaml	The configuration now uses Home Assistant MCP version 8.1.0 with a new immutable image digest.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• Tanguille/cluster#4259: Updates a pinned ToolHive Kubernetes MCP server image in a different configuration.

Suggested labels: type/digest

Suggested reviewers: tanguille

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the container image and version update described in the changeset.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/toolhive-mcp

---

_{Comment @coderabbitai help to get the list of available commands.}

[tanguille-cluster]

@@ spec.image @@
# toolhive.stacklok.dev/v1beta1/MCPServer/ai/homeassistant-opt
! ± value change
- ghcr.io/homeassistant-ai/ha-mcp:8.0.0@sha256:d65630f6a3fd14d8f536c27432d4d2cf3045e6f6a2d196cba754ee8566491ae4
+ ghcr.io/homeassistant-ai/ha-mcp:8.1.0@sha256:4c07e6259a42ed33958ac9d018aba7f4b03ea676388fd3264f8abde5ea767f76

[github-actions]

AI Automated Review

Analysis engine: omniroute@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation: Approve

This is a straightforward minor version bump (8.0.0 → 8.1.0) for the homeassistant-ai/ha-mcp container image, managed by Renovate. The change updates the image tag and SHA256 digest in the MCPServer manifest. No configuration, resource limits, or secret references are modified.

Release notes

homeassistant-ai/ha-mcp v8.1.0

Added

• Land machine translations post-merge instead of in the PR (PR 2115)
• site: Add shareable setup wizard URLs (PR 2117)

Changed

• Document Webhook Proxy ha_auth as an access gate, not per-user authorization (PR 2140)
• Document settings-UI and OIDC trust properties in SECURITY.md (PR 2136)

Fixed

• Observe the shutdown cleanup task result (PR 2139)
• Cancel pending worker-loop tasks before embedded teardown (PR 2128)
• Drive flows that revisit menu steps via successive selection lists (PR 2124)
• Replace the stdio settings sidecar on every startup and keep its URL stable (PR 2134)
• Clarify the addon-not-back error message (PR 2132)
• Anchor the translation prompt to each catalog's address register (PR 2110)

No breaking changes or security advisories were identified in the upstream release notes for this minor version bump.

Standards Compliance

• Image Pinning: The update correctly includes both the semantic version tag (8.1.0) and the immutable SHA256 digest (sha256:4c07e6...), adhering to GitOps best practices for reproducible deployments.
• Scope: The change is isolated to a single file (kubernetes/apps/ai/toolhive/config/homeassistant.yaml) and does not touch secrets, infrastructure-as-code templates, or cluster-level configurations.
• Conventions: Follows the existing pattern for MCPServer manifests in the toolhive namespace.

Tool Harness Findings

No tool harness findings were reported.

Unknowns or Needs Verification

None. The upstream release data was successfully retrieved and reviewed.