Skip to content

build(deps): bump rmcp from 3.5.1 to 3.6.0 - #140

Merged
avifenesh merged 1 commit into
mainfrom
dependabot/cargo/rmcp-3.6.0
Oct 26, 2026
Merged

avifenesh merged 1 commit into
mainfrom
dependabot/cargo/rmcp-3.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps rmcp from 3.5.1 to 3.6.0.

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.6.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.6.0

Added

  • (client) cancel an abandoned tools/call, prompts/get or resources/read (#1344)
  • (auth) add initial authorization scope selection (#1352)
  • (transport) add non-blocking stdio_pipes transport (#1304)

Fixed

  • (server) reject requests to 2026-07-28 clients (#1326)
  • (streamable-http-server) look up tool schemas per request (#1349)
  • (transport) follow same-origin 307/308 redirects in the default Streamable HTTP client (#1367)
  • (streamable-http-server) answer a session-less non-initialize POST with 400 (#1377)
  • (model) read a request id written in float form as that integer (#1346)
  • (client) answer a server ping during the initialize handshake (#1366)
  • (transport) accept nested x-mcp-header annotations (#1359)
  • (streamable-http-client) handle error responses to initialize (#1361)
  • (transport) bound the incoming line buffer in AsyncRwTransport (#1049)
  • (model) reject malformed JSON-RPC messages with conflicting result and error fields (#1283) (#1287)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)
  • (streamable-http-server) release the session map lock before waiting on a session (#1323)
  • (rmcp) gate client- and server-only helpers behind their features (#1329)
  • cancel pending request tokens after transport EOF (#1333)
  • (rmcp) import base64-only prompt content types under the feature (#1314)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)
Commits
  • 74d7895 chore: release v3.6.0 (#1327)
  • ad2a66a fix(server): reject requests to 2026-07-28 clients (#1326)
  • c519c79 fix(streamable-http-server): look up tool schemas per request (#1349)
  • be386d5 fix(transport): follow same-origin 307/308 redirects in the default Streamabl...
  • 50fba5c fix(streamable-http-server): answer a session-less non-initialize POST with 4...
  • 017e1c3 fix(model): read a request id written in float form as that integer (#1346)
  • ad5a284 ci(labeler): drop path-based T-dependencies rule (#1368)
  • a156be8 fix(client): answer a server ping during the initialize handshake (#1366)
  • b7568b8 fix(transport): accept nested x-mcp-header annotations (#1359)
  • ce3a57a feat(client): cancel an abandoned tools/call, prompts/get or resources/read (...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026
Copilot AI balanced review requested due to automatic review settings October 24, 2026 11:13
@dependabot dependabot Bot added the rust Pull requests that update rust code label Oct 24, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@revuto-review revuto-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an auto review done by revuto.


Revuto completed the review and found no evidence-backed concerns.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/rmcp-3.6.0 branch from 0468081 to 52833cf Compare October 24, 2026 20:16
Copilot AI balanced review requested due to automatic review settings October 24, 2026 20:16

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@revuto-review revuto-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an auto review done by revuto.


Revuto completed the review and found no evidence-backed concerns.

Bumps [rmcp](https://github.com/modelcontextprotocol/rust-sdk) from 3.5.1 to 3.6.0.
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.1...rmcp-v3.6.0)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rmcp-3.6.0 branch from 52833cf to 857858e Compare October 25, 2026 19:10
Copilot AI balanced review requested due to automatic review settings October 25, 2026 19:10

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@revuto-review revuto-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an auto review done by revuto.


Revuto completed the review and found no evidence-backed concerns.

@avifenesh

Copy link
Copy Markdown
Collaborator

Scheduled-maintenance independent diff review (clean-context subagent, 2026-10-26): PASS — no blocking issues. Cargo.lock-only: rmcp 3.5.1→3.6.0 (minor), rmcp-macros 3.5.1→3.7.0, adds canonical tokio networking transitive crates mio 1.2.4 and socket2 0.6.5 plus a direct libc dep on rmcp; standard crates.io sources, normal checksum rotations, no removals/downgrades, no source/CI/settings changes. Checks incl. clippy, cargo audit, CodeQL and revuto-review all green on head 857858e. Merged under the owner-authorized approval-rule exception (ruleset requires one human approval; revuto approved with no findings).

@avifenesh
avifenesh merged commit 6a533ab into main Oct 26, 2026
9 checks passed
@avifenesh
avifenesh deleted the dependabot/cargo/rmcp-3.6.0 branch October 26, 2026 07:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants