dependabot[bot]
9f7ace357a
chore(deps): bump the codeql-action group with 4 updates ( #1277 )
...
Bumps the codeql-action group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdf488f595...b96794f015https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e4fba868fa...b96794f015
2026-09-18 13:47:13 -04:00
dependabot[bot]
011f281ced
chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 ( #1278 )
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 10.0.1 to 10.1.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](20cfd1bf94...bec219d24c
2026-09-18 13:46:56 -04:00
dependabot[bot]
0cfbe7f453
chore(deps): bump taiki-e/install-action from 2.87.6 to 2.87.12 ( #1279 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.87.6 to 2.87.12.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](7b8d4719ee...3f74d7c16a
2026-09-18 13:46:37 -04:00
Jack Amadeo
fbfc5cc96e
ci: add OpenSSF Scorecard analysis ( #1214 )
2026-09-14 12:01:32 -04:00
Jack Amadeo
b2c90b1edc
ci: pin commitlint dependencies ( #1217 )
2026-09-10 10:05:55 -04:00
dependabot[bot]
744b9f904c
chore(deps): bump crate-ci/typos ( #1249 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1a51d4b5a03bb97576af186c813af67e9137ba7c to d43b6c087ac471e2ea7b8af622ff15f05c0c365b.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](1a51d4b5a0...d43b6c087a
2026-09-08 20:24:44 -04:00
dependabot[bot]
e8a0d7099a
chore(deps): bump taiki-e/install-action from 2.86.7 to 2.87.6 ( #1250 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.86.7 to 2.87.6.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](b6ff580856...7b8d4719ee
2026-09-08 20:24:09 -04:00
Dale Seo
6fa40536de
fix: resolve clippy warnings across workspace ( #1195 )
...
* fix: resolve clippy warnings across workspace
* ci: also run clippy on rmcp with all features except local
--all-features enables the local feature, which cfg-gates out
tower.rs and most of the test suite, so the existing clippy step
never actually lints them.
2026-09-08 19:05:29 -04:00
Dale Seo
add9cbeab5
ci: bump codeql-action to 4.37.9 and group updates ( #1240 )
2026-09-08 10:38:30 -04:00
dependabot[bot]
3b5ca4dd3f
chore(deps): bump astral-sh/setup-uv from 7.6.0 to 10.0.1 ( #1238 )
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 7.6.0 to 10.0.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](37802adc94...20cfd1bf94
2026-09-02 07:01:50 +09:00
dependabot[bot]
3a2ebbc920
chore(deps): bump taiki-e/install-action from 2.85.13 to 2.86.7 ( #1230 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.13 to 2.86.7.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](82cd3e7658...b6ff580856
2026-08-30 08:26:41 +09:00
Dale Seo
ec041b7430
ci: reduce dependabot update noise ( #1184 )
2026-08-29 07:42:11 +09:00
Jack Amadeo
12db02833f
ci: pin release-plz fork revision ( #1221 )
2026-08-27 12:33:32 -04:00
Jack Amadeo
c8bb1c6f7d
ci: remove coverage job write permission ( #1219 )
2026-08-27 19:02:06 +09:00
Jack Amadeo
3501f3e646
ci: default workflow tokens to read-only contents ( #1218 )
2026-08-27 19:01:29 +09:00
Jack Amadeo
103bf239b3
ci: scope release token permissions to jobs ( #1220 )
2026-08-27 18:52:18 +09:00
Jack Amadeo
78cf9f1cb6
ci: pin GitHub Actions to commit SHAs ( #1216 )
2026-08-25 14:50:29 -04:00
dependabot[bot]
f9b39f3c13
chore(deps): bump taiki-e/install-action from 2.85.11 to 2.85.13 ( #1183 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.11 to 2.85.13.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.11...v2.85.13 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 09:33:52 +09:00
dependabot[bot]
0f164cd67e
chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 ( #1182 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.6 to 4.37.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.6...v4.37.7 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 09:33:32 +09:00
dependabot[bot]
f713ebd1a6
chore(deps): bump taiki-e/install-action from 2.85.10 to 2.85.11 ( #1169 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.10 to 2.85.11.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.10...v2.85.11 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 21:33:23 +09:00
dependabot[bot]
3f5a3f6a28
chore(deps): bump taiki-e/install-action from 2.85.8 to 2.85.10 ( #1163 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.8 to 2.85.10.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.8...v2.85.10 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 19:21:19 +09:00
dependabot[bot]
f8e63824d3
chore(deps): bump taiki-e/install-action from 2.85.7 to 2.85.8 ( #1153 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.7 to 2.85.8.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.7...v2.85.8 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 15:31:54 -04:00
dependabot[bot]
8fb3e046a1
chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6 ( #1154 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.37.6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 15:31:36 -04:00
dependabot[bot]
9a3168af87
chore(deps): bump taiki-e/install-action from 2.85.6 to 2.85.7 ( #1139 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.6 to 2.85.7.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.6...v2.85.7 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 09:53:43 -04:00
dependabot[bot]
7e14020cb8
chore(deps): bump taiki-e/install-action from 2.85.5 to 2.85.6 ( #1129 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.5 to 2.85.6.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.5...v2.85.6 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 15:34:47 -04:00
dependabot[bot]
9cbb69d9e9
chore(deps): bump taiki-e/install-action from 2.85.3 to 2.85.5 ( #1117 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.3 to 2.85.5.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.3...v2.85.5 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 14:59:42 -04:00
dependabot[bot]
5b216605f2
chore(deps): bump github/codeql-action from 4.37.3 to 4.37.4 ( #1116 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.3 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 14:59:28 -04:00
dependabot[bot]
830e088d73
chore(deps): bump taiki-e/install-action from 2.85.2 to 2.85.3 ( #1107 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.2 to 2.85.3.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-31 14:48:08 -04:00
dependabot[bot]
def31f0f51
chore(deps): bump github/codeql-action from 4 to 4.37.3 ( #1100 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-30 16:00:58 -04:00
dependabot[bot]
570c478962
chore(deps): bump taiki-e/install-action from 2 to 2.85.2 ( #1099 )
...
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2 to 2.85.2.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/install-action/compare/v2...v2.85.2 )
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.85.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-30 16:00:37 -04:00
John Howard
9a41811a66
fix!: remove server_info from DiscoverResult ( #1065 )
...
Fixes https://github.com/modelcontextprotocol/rust-sdk/issues/1064
Replaces https://github.com/modelcontextprotocol/rust-sdk/pull/1044
This removes the `server_info` field which is not part of the spec:
https://modelcontextprotocol.io/specification/draft/schema#discoverresult .
2026-07-28 15:55:40 -04:00
dependabot[bot]
ce28e6d323
chore(deps): bump actions/stale from 10 to 11 ( #1074 )
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10 to 11.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/v10...v11 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: '11'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 14:39:54 -04:00
Alex Hancock
1f63e43479
ci: simplify conformance while running against both spec versions ( #1060 )
2026-07-27 18:32:07 -04:00
Jack Amadeo
76988023b2
chore: declare and check MSRV ( #1034 )
...
* chore: declare and check MSRV
* fix: clippy fixes for collapsing if-statements
* ci: add explicit contents read permission to MSRV job
2026-07-23 15:59:55 -04:00
Alex Hancock
ac9c637d04
fix: conformance tests for tools_call and auth/scope-step-up ( #1022 )
2026-07-22 14:15:36 -04:00
dependabot[bot]
99ee024499
chore(deps): bump actions/labeler from 6 to 7 ( #1023 )
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6 to 7.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](https://github.com/actions/labeler/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 15:22:29 -04:00
Dale Seo
a8308dc943
ci: expose extension conformance gaps ( #1019 )
2026-07-21 10:23:55 -04:00
Dale Seo
7044ccfe7b
chore: add workflow to clean up stale PRs and issues ( #1007 )
2026-07-21 09:53:21 -04:00
Dale Seo
ff1a715b6e
feat: add subscription listen streams (SEP-2575) ( #1000 )
...
* feat: add subscription listen streams
* refactor: reuse legacy request helper
2026-07-21 09:53:04 -04:00
Dale Seo
8ee9ee68f1
ci: fix discovery response parsing ( #1016 )
2026-07-20 20:55:21 -04:00
Jack Amadeo
dd11e5be99
chore: run full conformance CI suite ( #1010 )
2026-07-20 17:24:30 -04:00
Dale Seo
2e2c79173c
feat: add modern client lifecycle modes (SEP-2575) ( #995 )
...
* feat: add modern client lifecycle modes
* refactor: drop modern naming and dead cleanup
* fix: gate request metadata on inline lifecycle only
2026-07-16 17:12:16 -04:00
Dale Seo
3549e86d28
feat!: add server discovery and negotiation (SEP-2575) ( #973 )
...
* feat!: add server discovery and negotiation
* feat!: make protocol unions extensible
* ci: add discovery conformance coverage
2026-07-16 13:47:30 -04:00
King Star
b93220d4a7
feat(conformance): add SEP-2243 header validation tool ( #997 )
2026-07-16 13:11:45 -04:00
dependabot[bot]
92581bee53
chore(deps): bump actions/setup-node from 6 to 7 ( #992 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 15:20:17 -04:00
Dale Seo
3662d20ac2
test: enable supported draft SEP coverage ( #971 )
...
* test: enable supported draft SEP coverage
* test: add SEP-2322 MRTR conformance scenarios
* refactor: rename run_mrtr_client to run_stateless_client
2026-07-10 17:21:07 -04:00
Dale Seo
dd30a70f84
feat!: add MRTR behavior support (SEP-2322) ( #929 )
...
* feat!: add MRTR behavior support
* feat: harden SEP-2322 MRTR support
* ci: diff public API only on features common to base and head
cargo public-api builds both revisions with the same feature set, so a
feature introduced (or removed) by a PR broke the build of the other
revision. Restrict the all-features diff to features present in both the
base and head revisions.
2026-07-10 12:02:26 -04:00
Dale Seo
a03793530d
fix: pass client conformance suite ( #960 )
...
* fix(auth): support oauth metadata fallbacks
* ci: run client conformance scenarios
* fix: pass full client conformance suite
* ci: run full client conformance suite
* fix: update SSE stream constructor
2026-07-08 11:25:12 -04:00
Dale Seo
bdf0c32e8c
fix: address 2025-11-25 conformance audit findings ( #951 )
...
* fix: interpret task ttl as milliseconds
* fix: use text/plain for default text mime type
* fix: include resource param in token refresh
* test: align conformance prompt args with runner
* ci: run server conformance suite on PRs
* ci: build client bin and gate pending scenarios
2026-07-02 22:42:35 -04:00
Dale Seo
42a1069833
ci: add cargo-public-api check for breaking API changes ( #924 )
...
* chore: bump Rust toolchain to 1.96
* ci: add cargo-public-api breaking-change check
Adds a release-type-aware `cargo-public-api` diff job that fails on
changed/removed public items unless the PR's commits mark a breaking
(major) release. This catches source-breaking API changes that
cargo-semver-checks cannot yet detect (e.g. function return-type or
field-type changes).
2026-06-24 15:19:04 -04:00
