feat(deps): update dependency googleapis/mcp-toolbox to v1.9.0

[renovate-bot]

This PR contains the following updates:

Package	Update	Change
googleapis/mcp-toolbox	minor	1.6.0 → 1.9.0

---

Release Notes

googleapis/mcp-toolbox (googleapis/mcp-toolbox)

v1.9.0

Compare Source

Features

• groups: Add ttlMs and cacheScope customization to config (#​3805) (a5d4947)
• migrate: Convert toolset to group kind during migration (#​3704) (0adeaa5)
• server/mcp: Introduce generic client extension registry (#​3723) (016245c)
• skill: Add review-prs skill for mcp-toolbox (#​3743) (5b7bacc)
• source/bigquery: Add apiEndpoint field to override BigQuery API host (#​3437) (4da1600)
• source/databaseinsights: Add databaseinsights source (#​3461) (3b9615d)
• sources/spanner: Rename execute_sql_dql to execute_sql_readonly (#​3776) (cf5a0c8)
• tools/bigtable: Add admin lifecycle and listing tools (#​3596) (801d589)
• tools/bigtable: Bigtable-list-schemas MCP tool (#​3683) (9228c61)
• tools/databaseinsights: Add Advanced Query Insights tools for AlloyDB (#​3722) (74d18ae)
• tools/looker: Add additional tools to allow dashboards to be modified, and their layouts altered. (#​3597) (b2b80fb)
• tools: Add cloud-sql-connect-gce for pg, mysql, mssql (#​3740) (ca58fa4)

Bug Fixes

• auth/mcp: Derive PRM URL from Toolbox URL (#​3765) (aa30842)
• config: Ignore environment variables in YAML comments (#​3807) (79aa732), refs #​3793
• mcp: Return Tool execution error for invalid input param (#​3799) (8120197)
• prebuilt/cloud-storage: Declare tool collections as groups (#​3764) (7d468be)
• server/mcp: Disallow client overriding URL bound parameters (#​3798) (f15a9c7)
• server: Avoid a nil-flusher panic in the SSE handler (#​3520) (947f42f)
• tools/bigquery: Keep the provider error classification in bigquery-execute-sql (#​3738) (42570b8)
• tools/looker: Scope the filters quoting rule to values in query description (#​3788) (78eb0b8)
• util: Convert exponent-form JSON numbers in ConvertNumbers (#​3730) (e9713ee)

v1.8.0

Compare Source

Features

• Add groups support (#​3605) (e75ec3b)
• prebuilt: Migrate skills-repo toolsets to kind: group with descriptions (#​3595) (b895b36)
• server: Add /healthz endpoint for container health checks (#​3060) (d5aefbc)
• skills: Add --group flag to generate a skill from one group (#​3585) (c1abd4f)
• skills: Default --name to --group, --toolset, or single --prebuilt name (#​3586) (2b33b08)
• skills: Make description optional during skills gen (#​3584) (d0a8f14)
• tool/looker: Add get_field_value_suggestions tool (#​3696) (3debe81)
• tools/dataplex-update-data-product-aspects: Add dataplex-update-data-product-aspects tool (#​3607) (f940937)
• Update draft specs to 2026-07-28 (#​3699) (cf128ff)

Bug Fixes

• Re-add name validation to tools name (#​3654) (944f6ce)
• Re-add tool validation during startup (#​3705) (25ce953)
• server: Sort default toolset alphabetically for stable ordering (#​3539) (e5da24c)
• source/cloud-sql-admin: Validate source instance for backup-run restore (#​3555) (3ebe500)
• source/dataplex: Cleanup Dataplex Data Product resources that may have leaked due to previously aborted tests (#​3627) (3fb5a3f)
• source/http: Block CGNAT 100.64.0.0/10 in default SSRF guard (#​3625) (a0f36f4)
• tools/looker: Enhance looker-run-dashboard to handle result maker structures and merge queries (#​3698) (7666bc0)
• tools/looker: Log request/response traces at debug, not error (#​3552) (c3ad445)

v1.7.0

Compare Source

Features

• Add quotaProject support for BigQuery and Looker conversational analytics (#​2610) (f3e7ca9)
• arcadedb: Add arcadedb source and tools (#​2961) (351de00)
• cmd/internal,docs: Add warning log that prebuilt tools are for developer use (#​3451) (8cffcef)
• source/postgres: Add optional connectTimeout (#​3620) (b574b07)
• tool/clickhouse-sql: Add native vector embedding support (#​3229) (6cbe1c2)
• tool/dataplex-update-data-product,tool/dataplex-create-data-asset,tool/dataplex-update-data-asset: Add update data product, create data asset, and update data asset tools for knowledge catalog source (#​3574) (721c204)
• tools/dataplex-create-data-product: Add dataplex-create-data-product tool (#​3504) (5cee0d2)
• tools/dataplex-get-data-asset: Add dataplex-get-data-asset tool (#​3503) (1ddfbe9)

Bug Fixes

• parameters: Report the offending value in array/map type errors (#​3512) (4034d6f)
• parameters: Return an error instead of panicking on a non-string type field (#​3516) (66a0d53)
• source/looker: Dynamically resolve public host URL (#​3603) (0428afd)
• tool/looker-run-dashboard: Add support for SQL Runner query tiles (#​3594) (0975d0a)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

BEGIN_COMMIT_OVERRIDE
feat: groups: Add ttlMs and cacheScope customization to config (mcp-toolbox#​3805) (a5d4947)
feat: migrate: Convert toolset to group kind during migration (mcp-toolbox#​3704) (0adeaa5)
feat: server/mcp: Introduce generic client extension registry (mcp-toolbox#​3723) (016245c)
feat: skill: Add review-prs skill for mcp-toolbox (mcp-toolbox#​3743) (5b7bacc)
feat: tools: Add cloud-sql-connect-gce for pg, mysql, mssql (mcp-toolbox#​3740) (ca58fa4)
fix: auth/mcp: Derive PRM URL from Toolbox URL (mcp-toolbox#​3765) (aa30842)
fix: config: Ignore environment variables in YAML comments (mcp-toolbox#​3807) (79aa732), refs mcp-toolbox#​3793
fix: mcp: Return Tool execution error for invalid input param (mcp-toolbox#​3799) (8120197)
fix: prebuilt/cloud-storage: Declare tool collections as groups (mcp-toolbox#​3764) (7d468be)
fix: server/mcp: Disallow client overriding URL bound parameters (mcp-toolbox#​3798) (f15a9c7)
fix: server: Avoid a nil-flusher panic in the SSE handler (mcp-toolbox#​3520) (947f42f)
fix: util: Convert exponent-form JSON numbers in ConvertNumbers (mcp-toolbox#​3730) (e9713ee)
feat: Add groups support (mcp-toolbox#​3605) (e75ec3b)
feat: prebuilt: Migrate skills-repo toolsets to kind: group with descriptions (mcp-toolbox#​3595) (b895b36)
feat: server: Add /healthz endpoint for container health checks (mcp-toolbox#​3060) (d5aefbc)
feat: skills: Add --group flag to generate a skill from one group (mcp-toolbox#​3585) (c1abd4f)
feat: skills: Default --name to --group, --toolset, or single --prebuilt name (mcp-toolbox#​3586) (2b33b08)
feat: skills: Make description optional during skills gen (mcp-toolbox#​3584) (d0a8f14)
feat: Update draft specs to 2026-07-28 (mcp-toolbox#​3699) (cf128ff)
fix: Re-add name validation to tools name (mcp-toolbox#​3654) (944f6ce)
fix: Re-add tool validation during startup (mcp-toolbox#​3705) (25ce953)
fix: server: Sort default toolset alphabetically for stable ordering (mcp-toolbox#​3539) (e5da24c)
feat: Add quotaProject support for BigQuery and Looker conversational analytics (mcp-toolbox#​2610) (f3e7ca9)
feat: arcadedb: Add arcadedb source and tools (mcp-toolbox#​2961) (351de00)
feat: cmd/internal,docs: Add warning log that prebuilt tools are for developer use (mcp-toolbox#​3451) (8cffcef)
fix: parameters: Report the offending value in array/map type errors (mcp-toolbox#​3512) (4034d6f)
fix: parameters: Return an error instead of panicking on a non-string type field (mcp-toolbox#​3516) (66a0d53)
END_COMMIT_OVERRIDE