Bump the bundler group across 2 directories with 2 updates

[dependabot]

Bumps the bundler group with 2 updates in the /mcp-client-ruby directory: anthropic and mcp.
Bumps the bundler group with 1 update in the /weather-server-ruby directory: mcp.

Updates anthropic from 1.72.0 to 1.76.0

Release notes

Sourced from anthropic's releases.

v1.76.0

1.76.0 (2026-09-30)

Full Changelog: v1.75.0...v1.76.0

Features

• api: add list spend limits endpoint (06d65a0)

Bug Fixes

• client: let the client timeout apply to messages.create and the streaming methods (#249) (78e491d)
• client: treat a timeout the caller passed as set even when it equals the default (#282) (8484c29)

Chores

• api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (f7277ac)

v1.75.0

1.75.0 (2026-09-30)

Full Changelog: v1.74.0...v1.75.0

Features

• api: add a refusal stop reason and stop_details to Managed Agents session idle events (a5587ce)
• api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (a9d2688)
• api: add per-user usage and cost reports to the Admin API analytics (eee8b24)
• api: add Plugins and Plugin Marketplaces to the Admin API (0f337ed)
• api: add repository error types to Managed Agents session errors (a20b377)
• api: allow removing a plugin's org-wide installation setting (3abdc63)
• api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (96baeba)
• api: Organization API endpoints are now GA (82192cb)

Bug Fixes

• api: make memory store description, metadata, archived_at required (7cc1024)
• api: type admin plugin preference and marketplace fields as enums (735f79c)
• client: respect a client-level timeout instead of the per-method default (20c7d65)
• pagination: auto-paging continues past an empty page while next_page is set (e2817b4)

Chores

• api: update MCP Tunnels types and descriptions (9091ecf)
• docs: remove placeholder enum descriptions (489541b)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.76.0 (2026-09-30)

Full Changelog: v1.75.0...v1.76.0

Features

• api: add list spend limits endpoint (06d65a0)

Bug Fixes

• client: let the client timeout apply to messages.create and the streaming methods (#249) (78e491d)
• client: treat a timeout the caller passed as set even when it equals the default (#282) (8484c29)

Chores

• api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (f7277ac)

1.75.0 (2026-09-30)

Full Changelog: v1.74.0...v1.75.0

Features

• api: add a refusal stop reason and stop_details to Managed Agents session idle events (a5587ce)
• api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (a9d2688)
• api: add per-user usage and cost reports to the Admin API analytics (eee8b24)
• api: add Plugins and Plugin Marketplaces to the Admin API (0f337ed)
• api: add repository error types to Managed Agents session errors (a20b377)
• api: allow removing a plugin's org-wide installation setting (3abdc63)
• api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (96baeba)
• api: Organization API endpoints are now GA (82192cb)

Bug Fixes

• api: make memory store description, metadata, archived_at required (7cc1024)
• api: type admin plugin preference and marketplace fields as enums (735f79c)
• client: respect a client-level timeout instead of the per-method default (20c7d65)
• pagination: auto-paging continues past an empty page while next_page is set (e2817b4)

Chores

• api: update MCP Tunnels types and descriptions (9091ecf)
• docs: remove placeholder enum descriptions (489541b)

Documentation

... (truncated)

Commits

• 63175e8 Merge pull request #242 from anthropics/release-please--branches--main--chang...
• 9b8fffe release: 1.76.0
• f7277ac chore(api): mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026)
• 8484c29 fix(client): treat a timeout the caller passed as set even when it equals the...
• 78e491d fix(client): let the client timeout apply to messages.create and the streamin...
• 06d65a0 feat(api): add list spend limits endpoint
• 0d5549d Merge branch 'main' into next
• ce9b929 Merge pull request #241 from anthropics/release-please--branches--main--chang...
• c87f0cd release: 1.75.0
• 5143cfd docs(examples): stop reading session events on any idle that needs no action ...
• Additional commits viewable in compare view

Updates mcp from 1.6.0 to 1.6.1

Release notes

Sourced from mcp's releases.

v1.6.1

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Changelog

Sourced from mcp's changelog.

[1.6.1] - 2026-09-27

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Commits

• 48cc95e Merge pull request #576 from koic/release_1_6_1
• b2e3290 Merge pull request #577 from koic/drop_the_trailing_slash_from_the_examples_path
• 2e07e3e [Doc] Drop the trailing slash from directory paths in the documentation
• 709ac53 Release 1.6.1
• e87a192 Merge pull request #575 from koic/remove_dot_segments_in_linear_time
• 74451d3 Merge pull request #574 from koic/keep_the_listen_acknowledgement_first_on_tr...
• 5e2edae Resolve dot segments in linear time when canonicalizing a URL
• c9641fb Merge pull request #571 from koic/parse_www_authenticate_in_linear_time
• 77d4e4b Keep the acknowledgement first when the transport closes during a listen regi...
• b56d007 Merge pull request #569 from koic/end_listen_keepalive_threads_with_their_slot
• Additional commits viewable in compare view

Updates mcp from 1.6.0 to 1.6.1

Release notes

Sourced from mcp's releases.

v1.6.1

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Changelog

Sourced from mcp's changelog.

[1.6.1] - 2026-09-27

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Commits

• 48cc95e Merge pull request #576 from koic/release_1_6_1
• b2e3290 Merge pull request #577 from koic/drop_the_trailing_slash_from_the_examples_path
• 2e07e3e [Doc] Drop the trailing slash from directory paths in the documentation
• 709ac53 Release 1.6.1
• e87a192 Merge pull request #575 from koic/remove_dot_segments_in_linear_time
• 74451d3 Merge pull request #574 from koic/keep_the_listen_acknowledgement_first_on_tr...
• 5e2edae Resolve dot segments in linear time when canonicalizing a URL
• c9641fb Merge pull request #571 from koic/parse_www_authenticate_in_linear_time
• 77d4e4b Keep the acknowledgement first when the transport closes during a listen regi...
• b56d007 Merge pull request #569 from koic/end_listen_keepalive_threads_with_their_slot
• Additional commits viewable in compare view

Updates mcp from 1.6.0 to 1.6.1

Release notes

Sourced from mcp's releases.

v1.6.1

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Changelog

Sourced from mcp's changelog.

[1.6.1] - 2026-09-27

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Commits

• 48cc95e Merge pull request #576 from koic/release_1_6_1
• b2e3290 Merge pull request #577 from koic/drop_the_trailing_slash_from_the_examples_path
• 2e07e3e [Doc] Drop the trailing slash from directory paths in the documentation
• 709ac53 Release 1.6.1
• e87a192 Merge pull request #575 from koic/remove_dot_segments_in_linear_time
• 74451d3 Merge pull request #574 from koic/keep_the_listen_acknowledgement_first_on_tr...
• 5e2edae Resolve dot segments in linear time when canonicalizing a URL
• c9641fb Merge pull request #571 from koic/parse_www_authenticate_in_linear_time
• 77d4e4b Keep the acknowledgement first when the transport closes during a listen regi...
• b56d007 Merge pull request #569 from koic/end_listen_keepalive_threads_with_their_slot
• Additional commits viewable in compare view

Updates mcp from 1.6.0 to 1.6.1

Release notes

Sourced from mcp's releases.

v1.6.1

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Changelog

Sourced from mcp's changelog.

[1.6.1] - 2026-09-27

This release makes the OAuth client parse WWW-Authenticate headers and URLs in linear time and repairs the lifecycle of subscriptions/listen streams: same-id streams are served, a keepalive thread ends with its slot, and the acknowledgement precedes the closing result.

Fixed

• Replace authorization request parameters the endpoint URL already carries (#566)
• Serve subscriptions/listen streams that carry the same request id (#567)
• End a listen stream's keepalive thread when its slot is freed (#569)
• Parse the WWW-Authenticate challenge in linear time (#571)
• Keep the acknowledgement first when the transport closes during a listen registration (#574)
• Resolve dot segments in linear time when canonicalizing a URL (#575)

Commits

• 48cc95e Merge pull request #576 from koic/release_1_6_1
• b2e3290 Merge pull request #577 from koic/drop_the_trailing_slash_from_the_examples_path
• 2e07e3e [Doc] Drop the trailing slash from directory paths in the documentation
• 709ac53 Release 1.6.1
• e87a192 Merge pull request #575 from koic/remove_dot_segments_in_linear_time
• 74451d3 Merge pull request #574 from koic/keep_the_listen_acknowledgement_first_on_tr...
• 5e2edae Resolve dot segments in linear time when canonicalizing a URL
• c9641fb Merge pull request #571 from koic/parse_www_authenticate_in_linear_time
• 77d4e4b Keep the acknowledgement first when the transport closes during a listen regi...
• b56d007 Merge pull request #569 from koic/end_listen_keepalive_threads_with_their_slot
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions