olaservo
53dbe83b7a
fix(python): require mcp>=1.29.0,<2 in fetch, git, and time
...
mcp 2.0.0 renamed McpError to MCPError and replaced the low-level Server
decorators with constructor handlers. The three servers had no upper bound,
so a fresh uvx install has resolved 2.0.0 since 2026-07-28 and failed to
start: fetch and time raise ImportError on the McpError import, git raises
AttributeError on server.list_tools().
The floor moves to 1.29.0, the last 1.x release. The previous floors (1.0.0
for git, 1.1.3 for fetch, 1.23.0 for time) resolved versions affected by
GHSA-vj7q-gjh5-988w, GHSA-jpw9-pfvf-9f58, and GHSA-hvrp-rf83-w775.
Porting to the v2 SDK is tracked separately.
Closes #4560
Closes #4570
Closes #4580
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-18 08:26:30 -07:00
dependabot[bot]
3bcfedd8e4
chore(deps): bump the uv group across 3 directories with 4 updates
...
Bumps the uv group with 3 updates in the /src/git directory: [gitpython](https://github.com/gitpython-developers/GitPython ), [mcp](https://github.com/modelcontextprotocol/python-sdk ) and [pydantic-settings](https://github.com/pydantic/pydantic-settings ).
Bumps the uv group with 2 updates in the /src/time directory: [mcp](https://github.com/modelcontextprotocol/python-sdk ) and [pydantic-settings](https://github.com/pydantic/pydantic-settings ).
Bumps the uv group with 2 updates in the /src/fetch directory: [mcp](https://github.com/modelcontextprotocol/python-sdk ) and [soupsieve](https://github.com/facelessuser/soupsieve ).
Updates `gitpython` from 3.1.50 to 3.1.54
- [Release notes](https://github.com/gitpython-developers/GitPython/releases )
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES )
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.54 )
Updates `mcp` from 1.23.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.23.0...v1.28.1 )
Updates `pydantic-settings` from 2.12.0 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases )
- [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.14.2 )
Updates `mcp` from 1.25.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.23.0...v1.28.1 )
Updates `pydantic-settings` from 2.12.0 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases )
- [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.14.2 )
Updates `mcp` from 1.23.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.23.0...v1.28.1 )
Updates `soupsieve` from 2.6 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases )
- [Commits](https://github.com/facelessuser/soupsieve/compare/2.6...2.8.4 )
---
updated-dependencies:
- dependency-name: gitpython
dependency-version: 3.1.54
dependency-type: direct:production
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.28.1
dependency-type: direct:production
dependency-group: uv
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.28.1
dependency-type: direct:production
dependency-group: uv
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.28.1
dependency-type: direct:production
dependency-group: uv
- dependency-name: soupsieve
dependency-version: 2.8.4
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 22:05:20 +00:00
Ola Hungerford
b2a94a21a5
fix(deps): bump python-multipart, cryptography, pyjwt to clear HIGH alerts ( #4398 )
...
Resolves a fresh batch of Dependabot alerts (disclosed 2026-06-15/16,
after PR #4376 merged) across the fetch, git, and time server lockfiles:
- python-multipart 0.0.27 -> 0.0.32 (CVE-2026-53539 HIGH querystring DoS,
plus CVE-2026-53537/53538/53540 parameter smuggling / buffering)
- cryptography 48.0.0 -> 49.0.0 (GHSA-537c-gmf6-5ccf HIGH, vulnerable
OpenSSL statically linked in wheels < 48.0.1)
- pyjwt 2.12.1 -> 2.13.0 (HIGH + medium JWT advisories)
All three are transitive deps; lockfiles only. Diff scoped to exactly
these 9 version bumps with no other resolution churn. git server tests
unchanged vs base (43 passed; 37 pre-existing Windows tempdir errors).
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-29 09:13:57 +02:00
olaservo
0588ec098e
fix(security): bump vulnerable deps; harden git_add (defense-in-depth)
...
Real fixes (deps):
- python (git/fetch/time): idna 3.10->3.18 (GHSA-65pc), starlette
0.49.1->1.3.1 (GHSA-86qp)
- npm: vitest ^2.1.8->^4.1.8 (critical GHSA-5xrq UI server RCE). vitest 4
pulls vite 8 (rolldown, no esbuild), clearing the esbuild/vite advisories
natively. Remaining root overrides: qs>=6.15.2 (GHSA-q8mj, via express),
hono>=4.12.21 (via @modelcontextprotocol/sdk).
- npm audit: 0 vulnerabilities; all TS (313) + Python (git/fetch/time) suites
and TS builds pass.
Hardening (git_add):
- The repo already mitigates CVE-2026-27735 by using repo.git.add (the git
CLI rejects out-of-tree paths, PR #3164 's fix), not repo.index.add (which
did not). Add an explicit path-boundary check in git_add as defense in
depth plus regression tests asserting the security invariant (out-of-tree
paths are never staged), guarding against a regression to repo.index.add.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 13:46:02 -07:00
Ola Hungerford
f5054df1fb
fix(deps): bump gitpython and urllib3 to resolve HIGH security alerts ( #4283 )
...
- git: gitpython >=3.1.45 -> >=3.1.50 (lock 3.1.49 -> 3.1.50)
Fixes GHSA-mv93-w799-cj2w: newline injection in config_writer()
bypasses the CVE-2026-42215 patch, enabling RCE via core.hooksPath.
- fetch: urllib3 2.6.3 -> 2.7.0 (transitive via requests)
Fixes GHSA-qccp-gfcp-xxvc (sensitive headers forwarded across origins
on proxied redirects) and GHSA-mf9v-mfxr-j63j (decompression-bomb
safeguards bypassed in the streaming API).
Resolves Dependabot alerts #129 , #131 , #132 .
Tests pass (fetch: 20 passed; git: all test bodies pass, only
pre-existing Windows tmpdir-teardown errors remain).
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 11:24:07 -04:00
olaservo
0db9a34071
chore(deps): bump python deps to address security alerts
...
Bumps vulnerable Python deps via `uv lock --upgrade-package` across the
three Python workspaces (src/git, src/fetch, src/time):
High severity
- gitpython 3.1.45 -> 3.1.49 (src/git): command injection via Git options
bypass and unsafe `multi_options` validation (GHSA-x9j5-25mq-w6vh,
GHSA-2gv7-q9w6-xfwm)
- lxml 5.3.0 -> 6.1.0 (src/fetch): XXE in default iterparse() and
ETCompatXMLParser() (GHSA-pjj9-h2g6-3v7q)
- pyjwt 2.10.1 -> 2.12.1 (all): accepts unknown `crit` header extensions
(GHSA-75c5-xw7c-p5pm)
Medium / low
- cryptography 46.0.5 -> 48.0.0 (all): buffer overflow with non-contiguous
buffers; incomplete DNS name constraint enforcement
- python-dotenv 1.0.1/1.2.1 -> 1.2.2 (all): symlink-following arbitrary
file overwrite in set_key
- python-multipart 0.0.22 -> 0.0.27 (all): DoS via large preamble/epilogue
- pytest 8.3.x -> 9.0.3 (all): vulnerable tmpdir handling
- pygments 2.19.2 -> 2.20.0 (src/fetch): ReDoS in GUID matcher
- requests 2.32.4 -> 2.33.1 (src/fetch): insecure temp file reuse in
extract_zipped_paths()
All three workspaces sync cleanly and `uv run pytest` passes:
- src/fetch: 20 passed
- src/time: 38 passed
- src/git: 41 passed (35 preexisting Windows-only fixture cleanup
errors are reproducible on main and unrelated to this change)
Supersedes/extends dependabot PR #3748 (which only bumped requests and
cryptography to 46.0.6).
2026-05-05 06:55:44 -07:00
Arif Celebi
f4244583a6
fix(fetch): refresh uv lockfile ( #3598 )
2026-03-17 07:21:11 -07:00
dependabot[bot]
e3ea3c8b7f
Bump the uv group across 3 directories with 1 update
...
Bumps the uv group with 1 update in the /src/fetch directory: [cryptography](https://github.com/pyca/cryptography ).
Bumps the uv group with 1 update in the /src/git directory: [cryptography](https://github.com/pyca/cryptography ).
Bumps the uv group with 1 update in the /src/time directory: [cryptography](https://github.com/pyca/cryptography ).
Updates `cryptography` from 46.0.3 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5 )
Updates `cryptography` from 46.0.3 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5 )
Updates `cryptography` from 46.0.3 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: indirect
dependency-group: uv
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: indirect
dependency-group: uv
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-02-11 02:51:37 +00:00
Piyush Tripathi
71d5d71a80
test(fetch): add unit tests for fetch MCP server
...
Add comprehensive test coverage for the fetch server:
- TestGetRobotsTxtUrl: 6 tests for URL parsing
- TestExtractContentFromHtml: 3 tests for HTML-to-markdown conversion
- TestCheckMayAutonomouslyFetchUrl: 5 tests for robots.txt handling
- TestFetchUrl: 6 tests for URL fetching with various scenarios
Total: 20 tests covering:
- URL parsing and robots.txt URL generation
- HTML content extraction and markdown conversion
- robots.txt permission checking (401, 403, 404, allow/disallow)
- HTTP response handling (success, errors, raw mode)
- Proxy support
Also adds pytest and pytest-asyncio as dev dependencies.
2026-01-28 14:31:01 -08:00
dependabot[bot]
a1f9dfa470
Bump the uv group across 3 directories with 1 update
...
Bumps the uv group with 1 update in the /src/fetch directory: [python-multipart](https://github.com/Kludex/python-multipart ).
Bumps the uv group with 1 update in the /src/git directory: [python-multipart](https://github.com/Kludex/python-multipart ).
Bumps the uv group with 1 update in the /src/time directory: [python-multipart](https://github.com/Kludex/python-multipart ).
Updates `python-multipart` from 0.0.21 to 0.0.22
- [Release notes](https://github.com/Kludex/python-multipart/releases )
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22 )
Updates `python-multipart` from 0.0.21 to 0.0.22
- [Release notes](https://github.com/Kludex/python-multipart/releases )
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22 )
Updates `python-multipart` from 0.0.21 to 0.0.22
- [Release notes](https://github.com/Kludex/python-multipart/releases )
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22 )
---
updated-dependencies:
- dependency-name: python-multipart
dependency-version: 0.0.22
dependency-type: indirect
dependency-group: uv
- dependency-name: python-multipart
dependency-version: 0.0.22
dependency-type: indirect
dependency-group: uv
- dependency-name: python-multipart
dependency-version: 0.0.22
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-26 23:57:45 +00:00
dependabot[bot]
b906f726fa
Bump the uv group across 3 directories with 5 updates
...
Bumps the uv group with 5 updates in the /src/fetch directory:
| Package | From | To |
| --- | --- | --- |
| [mcp](https://github.com/modelcontextprotocol/python-sdk ) | `1.2.0` | `1.23.0` |
| [requests](https://github.com/psf/requests ) | `2.32.3` | `2.32.4` |
| [h11](https://github.com/python-hyper/h11 ) | `0.14.0` | `0.16.0` |
| [starlette](https://github.com/Kludex/starlette ) | `0.41.2` | `0.49.1` |
| [urllib3](https://github.com/urllib3/urllib3 ) | `2.2.3` | `2.6.3` |
Bumps the uv group with 3 updates in the /src/git directory: [mcp](https://github.com/modelcontextprotocol/python-sdk ), [h11](https://github.com/python-hyper/h11 ) and [starlette](https://github.com/Kludex/starlette ).
Bumps the uv group with 2 updates in the /src/time directory: [h11](https://github.com/python-hyper/h11 ) and [starlette](https://github.com/Kludex/starlette ).
Updates `mcp` from 1.2.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.2 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `urllib3` from 2.2.3 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/2.2.3...2.6.3 )
Updates `mcp` from 1.2.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.2 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `mcp` from 1.2.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.2 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `mcp` from 1.1.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `mcp` from 1.1.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `mcp` from 1.1.0 to 1.23.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases )
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md )
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.2.0...v1.23.0 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
Updates `h11` from 0.14.0 to 0.16.0
- [Commits](https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0 )
Updates `starlette` from 0.41.3 to 0.49.1
- [Release notes](https://github.com/Kludex/starlette/releases )
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/starlette/compare/0.41.2...0.49.1 )
---
updated-dependencies:
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: requests
dependency-version: 2.32.4
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: urllib3
dependency-version: 2.6.3
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: mcp
dependency-version: 1.23.0
dependency-type: direct:production
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
- dependency-name: h11
dependency-version: 0.16.0
dependency-type: indirect
dependency-group: uv
- dependency-name: starlette
dependency-version: 0.49.1
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-17 18:03:32 +00:00
Adam Jones
78e0088ebd
fix(fetch): update uv.lock to sync with pyproject.toml
...
The lockfile was out of sync because pyproject.toml was updated
(version bump to 0.6.3, httpx<0.28 constraint) but uv.lock wasn't
regenerated. This became a CI failure after switching from --frozen
to --locked in #1852 .
2025-11-25 21:52:09 +00:00
David Soria Parra
53f4a23b73
Update server implementation and dependencies
2025-01-15 17:27:12 +00:00
David Soria Parra
e7e1c85058
python servers 0.6.2
2024-12-04 15:57:31 +00:00
David Soria Parra
f86486984c
python servers 0.6.0
2024-11-29 17:54:40 +00:00
Jack Adamson
caed64d5db
update dependencies
2024-11-25 20:04:59 +00:00
Jack Adamson
84321c89cf
make the fetch mcp-server obey robots.txt
2024-11-22 19:04:04 +00:00
Jack Adamson
4fa58d546b
add better exception handling
2024-11-22 15:30:28 +00:00
Jack Adamson
781571b40d
add fetch MCP server
2024-11-22 12:33:19 +00:00