deps: update mcp requirement from <2,>=1.27.2 to >=1.27.2,<3 - #96
Closed
dependabot[bot] wants to merge 1 commit into
Closed
deps: update mcp requirement from <2,>=1.27.2 to >=1.27.2,<3#96dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Updates the requirements on [mcp](https://github.com/modelcontextprotocol/python-sdk) to permit the latest version. - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.27.2...v2.1.1) --- updated-dependencies: - dependency-name: mcp dependency-version: 2.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/mcp-gte-1.27.2-and-lt-3
branch
from
September 4, 2026 20:48
11cf871 to
7c136de
Compare
Member
|
Superseded by #105 — lifting the cap needed the fixture servers ported to the 2.x |
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
ernestprovo23
added a commit
that referenced
this pull request
Sep 5, 2026
…96, DSE-1261) (#105) * deps: lift the mcp<2 cap — fixtures ported to the 2.x SDK, capture made SDK-neutral (supersedes #96, DSE-1261) The 2.x SDK removed the @server.list_tools() decorators the fixture servers used (why #92 capped mcp<2). tests/fixtures/_sdk_compat.py wires the same declared surfaces against the 1.x decorator API or the 2.x on_* callbacks. Two 2.x changes would have silently altered every committed lock and are absorbed in capture.py rather than re-pinned: * model fields renamed to snake_case (input_schema, mime_type, protocol_version) while wire keys stayed camelCase — a plain model_dump() under 2.x returned no inputSchema at all; * PromptArgument gained title=None, which leaked into arguments_hash. _model_dump now returns the wire view (by_alias=True, exclude_none=True) and the protocol version is read by attribute on either name. Proven: `check` against clean.warden.lock exits 0 and a fresh pin reproduces overall_digest cb20a16c… under mcp 2.1.1; the mutated fixture still drifts; the negative controls (plain dump → 9 drift rows; alias-only → prompt-modified) fail. Locks resolve to mcp==2.1.1 (requirements-dev.lock via the CI-documented uv command, byte-identical on the CI sync re-compile; action/requirements.lock). * fix(capture): keep prompt-argument nulls byte-stable, drain nextCursor pages — CSO review of #105 F1: exclude_none had dropped the description/required nulls of a bare prompt argument, changing arguments_hash vs every released warden. The protocol field set {name, description, required} is now always emitted (null when absent) and only keys outside it (2.x title, _meta) are shed when null. No SCHEMA_VERSION bump; pinned by a canon() byte-equality test. F3: tools/resources/prompts list calls now follow nextCursor through the SDK's params= cursor (same call shape on 1.x and 2.x). A failure on any later page is a CaptureError — a partial surface is never pinned — and a chain longer than 256 pages is refused. The first-page swallow for capability-less servers is unchanged and labelled as the deliberate fail-open it is. Docs: mcp 2.x -> httpx2 -> truststore verifies --url TLS against the OS trust store instead of certifi; stated plainly in CHANGELOG and README. * ci: mcp 1.x capture-parity leg; name DSE-1538/DSE-1539 in the fail-open note (CSO re-verify of #105) The cross-major digest-parity claim needs both SDK lines exercised: a test-mcp-1x job re-resolves to the newest 1.x and runs the capture, parity, pagination and e2e tests only (CI time stays flat). The first-page fail-open docstring and CHANGELOG now cite DSE-1538 (capability-aware error handling) and DSE-1539 (annotations/outputSchema hashing) instead of "a follow-up".
Member
|
Superseded by #105, which lifts the |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on mcp to permit the latest version.
Release notes
Sourced from mcp's releases.
Commits
0921d94Point imports of mcp.server.fastmcp at the migration guide (#3388)4d6f87eBuild releases with the pinned hatchling and a publish action that accepts Me...c5d7d0bdocs: refresh translations for recent English changes (#3379)d8b6383Give recursive tool return types an object-rooted output schema (#3376)56af447Log MCPServer handler exceptions by kind and keep crash details off the wire ...f1c40b0Accept boolean sub-schemas in 2025-11-25 tool schema properties (#3354)57394b0Apply the request body limit to the SSE and OAuth endpoints (#3336)0cee624Hand TypedDict tool results to pydantic natively (#3331)0d92192Shorten stdio test comments (#3329)b2025abAcknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (#3326)