From a41a5274a206dc63e7f6f86022332f62729e080e Mon Sep 17 00:00:00 2001
From: pendingintent <3921919+pendingintent@users.noreply.github.com>
Date: Mon, 10 Aug 2026 15:22:58 -0400
Subject: [PATCH 1/2] Pin ruff to <0.16 to fix CI lint failures

ruff 0.16 expanded its default lint rule selection, causing
CI to install a newer ruff than the local dev environment and
surface ~1900 new findings unrelated to this branch's changes.
Pin the dev dependency to keep CI aligned with the previously
passing rule set until the rule selection is deliberately
updated.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index ab74fc7..cc0aa23 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -31,7 +31,7 @@ dependencies = [
 dev = [
   "pytest>=7.0.0",
   "pytest-cov>=4.0.0",
-  "ruff>=0.5.0",
+  "ruff>=0.5.0,<0.16",
   "black>=24.0.0",
   "detect-secrets>=1.4.0",
   "httpx>=0.27.0"

From bcbe040e0573acdd0f057e93452e567ccb9eeacd Mon Sep 17 00:00:00 2001
From: pendingintent <3921919+pendingintent@users.noreply.github.com>
Date: Mon, 10 Aug 2026 15:43:31 -0400
Subject: [PATCH 2/2] Pin mcp to <2.0 to fix CI test collection failure

mcp 2.0 removed/renamed the Server.list_tools/call_tool
decorator API that src/soa_builder/mcp/server.py relies on.
pyproject.toml only required mcp>=1.0.0 with no upper bound,
so CI installed 2.0.0 while local dev stayed on 1.28.1,
breaking pytest collection for the whole test suite.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index cc0aa23..1ce942f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -23,7 +23,7 @@ dependencies = [
   "python-multipart>=0.0.9",
   "jmespath>=1.1.0",
   "cdisc-library-client>=0.1.6",
-  "mcp>=1.0.0",
+  "mcp>=1.0.0,<2.0",
   "python-docx>=1.1.0"
 ]