Skip to content

chore(deps): bump rmcp from 2.2.0 to 3.1.0 - #673

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rmcp-3.1.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rmcp-3.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps rmcp from 2.2.0 to 3.1.0.

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.1.0

Added

  • add strict stateless protocol metadata validation (#1091)

Other

  • document the ping utility with examples (#1106)
  • complete Tier 1 feature docs and finalize roadmap (#1101)
  • (conformance) meeting requirements for tier 1 (#1087)

rmcp-v3.1.0

Added

  • classify authorization-required errors (#1056)
  • add strict stateless protocol metadata validation (#1091)
  • SEP-2260 stream-based enforcement of client receive-side request association (#1055)

Fixed

  • (model) decode metadata-bearing input-required results affecting mrtr (#1097)
  • require metadata for modern HTTP requests (#1089)
  • honor supported_protocol_versions when negotiating initialize (#1093)

Other

  • document the ping utility with examples (#1106)
  • complete Tier 1 feature docs and finalize roadmap (#1101)
  • (conformance) meeting requirements for tier 1 (#1087)

rmcp-macros-v3.0.1

Other

  • release stable 3.0.0

rmcp-v3.0.1

Fixed

  • (auth) use discovered resource for token refresh (#1084)
  • return header mismatch for missing protocol header (#1083)
  • negotiate stateless initialize versions (#1080)
  • stamp server info on graceful subscription results (#1078)

rmcp-macros-v3.0.0

Other

  • release stable 3.0.0

rmcp-v3.0.0

RMCP 3.0 adds support for MCP 2026-07-28. Review the protocol key changes and the RMCP 3.0 migration guide before upgrading from 2.x.

... (truncated)

Commits
  • 1f9358e chore: release v3.1.0 (#1090)
  • 1cf6deb docs: document the ping utility with examples (#1106)
  • 00bcf13 fix(model): decode metadata-bearing input-required results affecting mrtr (#1...
  • 65f05e9 feat: classify authorization-required errors (#1056)
  • 3240b6e docs: complete Tier 1 feature docs and finalize roadmap (#1101)
  • def31f0 chore(deps): bump github/codeql-action from 4 to 4.37.3 (#1100)
  • 570c478 chore(deps): bump taiki-e/install-action from 2 to 2.85.2 (#1099)
  • 983a137 feat: add strict stateless protocol metadata validation (#1091)
  • 58b136f fix: require metadata for modern HTTP requests (#1089)
  • d272389 fix: honor supported_protocol_versions when negotiating initialize (#1093)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rmcp](https://github.com/modelcontextprotocol/rust-sdk) from 2.2.0 to 3.1.0.
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v2.2.0...rmcp-v3.1.0)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from coseto6125 as a code owner August 3, 2026 17:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor
ecp impact cache (0 symbols) — internal, used by ecp dev pr-analyze

[]

@coseto6125

Copy link
Copy Markdown
Owner

Superseded by #676, which lands the same rmcp 3.1.0 bump together with the source migration it needs.

The compile break is ServerHandler::call_tool returning CallToolResponse (SEP-2322 MRTR) instead of CallToolResult — a lockfile-only bump cannot fix that, which is why #668, #670 and this PR all stalled at the same place. Closing once #676 merges.

coseto6125 added a commit that referenced this pull request Aug 5, 2026
* chore(deps): migrate to rmcp 3.1 and refresh the lockfile

Dependabot could not land this one on its own — #668 (3.0.0), #670 (3.0.1)
and #673 (3.1.0) all stalled on the same compile break.

rmcp 3.0 tracks MCP 2026-07-28. The only break reaching this crate is
SEP-2322 MRTR: `ServerHandler::call_tool` now returns `CallToolResponse`
(`Complete` / `InputRequired` / `Task`) instead of `CallToolResult`.
`ecp mcp serve` is spawn-mode only, so every call runs the subcommand to
completion and resolves as `Complete`; the migration is the
`From<CallToolResult>` conversion at the single return site.

The rest of the 3.0 breaking list is inapplicable here: sessionless
Streamable HTTP, the stateless discovery lifecycle, subscriptions and the
tasks extension are HTTP-transport or client-side concerns, and this
server is stdio + `serve_server`.

`cargo update` alongside brings the rest of the tree to latest compatible.

* refactor: use regex! for the two hand-rolled lazy Regex accessors

regex 1.13 ships a `regex!` macro that expands to exactly the
`static Lazy<Regex>` shape these two accessors were writing by hand.
Semantics are identical (process-lifetime lazy compilation), so this is
boilerplate removal, not a perf change.

Left alone deliberately: the module-level named statics in `fetch_shape/`
carry doc comments and long patterns. Inlining those into their call sites
would bury a 100-char pattern inside a `for` header and drop the
documentation.

The `regex` floor moves to 1.13.0 in the two crates using the macro.
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like rmcp is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 5, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rmcp-3.1.0 branch August 5, 2026 15:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ecp:risk-low ecp signal rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant