Skip to content

Bump the cargo group across 2 directories with 4 updates - #247

Merged
a-akimov merged 1 commit into
mainfrom
dependabot/cargo/mcp-client-rust/cargo-5dde560f2d
Oct 14, 2026
Merged

a-akimov merged 1 commit into
mainfrom
dependabot/cargo/mcp-client-rust/cargo-5dde560f2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 4 updates in the /mcp-client-rust directory: jsonschema, rmcp, serde_json and tokio.
Bumps the cargo group with 3 updates in the /weather-server-rust directory: rmcp, serde_json and tokio.

Updates jsonschema from 0.58.1 to 0.58.6

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.58.6

Fixed

  • \s in pattern missing most Unicode space separators and U+2028.
  • ECMA regex character class literals being interpreted as Rust set operators.

[Ruby] Release 0.58.6

Fixed

  • ECMA regex character class literals being interpreted as Rust set operators.
  • Installing the source gem.
  • \s in pattern missing most Unicode space separators and U+2028.

[Rust] Release 0.58.6

Fixed

  • \s in pattern missing most Unicode space separators and U+2028.
  • ECMA regex character class literals being interpreted as Rust set operators.

[CLI] Release 0.58.5

No release notes provided.

[Python] Release 0.58.5

Fixed

  • canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.
  • Validator construction holding the GIL while it retrieves external resources over HTTP or from files.

[Ruby] Release 0.58.5

Fixed

  • canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.
  • Validator construction holding the GVL while it retrieves external resources over HTTP or from files.

[Rust] Release 0.58.5

Fixed

  • canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.

[CLI] Release 0.58.4

No release notes provided.

[Python] Release 0.58.4

Fixed

  • repr of a validator_for validator naming the default draft instead of the one $schema declares.
  • unevaluatedProperties and unevaluatedItems beside a $recursiveRef ignoring what the reference target evaluates.
  • unevaluatedProperties ignoring the configured regex engine and its limits for patternProperties.
  • Absolute keyword location and schemaLocation of keywords a $ref JSON Pointer reaches through a subschema with its own $id.
  • type, minItems and maxItems ignored beside items when the applicator vocabulary is disabled.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.58.6] - 2026-10-06

Fixed

  • \s in pattern missing most Unicode space separators and U+2028.
  • ECMA regex character class literals being interpreted as Rust set operators.

[0.58.5] - 2026-10-02

Fixed

  • canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.

[0.58.4] - 2026-10-01

Fixed

  • Validator::draft returning the default draft instead of the one $schema declares.
  • unevaluatedProperties and unevaluatedItems beside a $recursiveRef ignoring what the reference target evaluates.
  • unevaluatedProperties ignoring the configured regex engine and its limits for patternProperties.
  • Absolute keyword location and schemaLocation of keywords a $ref JSON Pointer reaches through a subschema with its own $id.
  • type, minItems and maxItems ignored beside items when the applicator vocabulary is disabled.
  • Absolute keyword location and schemaLocation of keywords inside a nested $id resource counting from the document root.
  • required beside properties ignored when the applicator vocabulary is disabled, and required, minContains and maxContains applied when the validation vocabulary is disabled.
  • Absolute keyword location and evaluation output of type errors in a type-only items subschema pointing at items instead of the failing element's type.
  • Absolute keyword location of patternProperties annotations missing its JSON Pointer fragment.
  • Evaluation output of type: array beside schema-form items omitting passing type, minItems and maxItems units and nesting failing ones under items.
  • Evaluation output schemaLocation and absolute keyword location of $ref, $dynamicRef and $recursiveRef nodes not pointing at the reference target.
  • Evaluation output schemaLocation URIs not percent-encoding their fragment, such as a space in a property name.
  • Absolute keyword location of errors and annotations from a whole subschema, such as false, missing its JSON Pointer fragment.
  • Absolute keyword location of required, minContains and maxContains errors pointing at a sibling keyword.
  • Evaluation annotations from $ref siblings in Draft 4, 6 and 7 schemas.
  • Masked additionalItems messages counting allowed items instead of extra ones, and "1 items" in masked unevaluatedItems messages.
  • $dynamicRef and $recursiveRef resolving in the dynamic scope of another path to the same schema, depending on property order.
  • unevaluatedProperties and unevaluatedItems ignoring what then or else evaluates when if is true or false.
  • Stack overflow when building validators for long $ref chains.
  • format: "regex" and meta-schema validation rejecting escaped punctuation such as \- in patterns.
  • Build errors for an invalid patternProperties regex reporting the subschema instead of the pattern and its location.

[0.58.3] - 2026-09-30

Fixed

  • Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
  • Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
  • Embedded resources declaring their own $schema being checked against the root's meta-schema.

[0.58.2] - 2026-09-28

Fixed

... (truncated)

Commits
  • 117c8e6 chore(ruby): Release 0.58.6
  • 55ac166 chore(rust): Release 0.58.6
  • 7f9978b build(deps): bump werkzeug from 3.1.6 to 3.1.9 in /crates/jsonschema-py
  • c6bdff5 build(deps): bump CodSpeedHQ/action from 5.2.1 to 5.4.0
  • 36022e0 fix: ECMA regex character class literals being interpreted as Rust set operators
  • 988f42c fix: \s in pattern missing most Unicode space separators and U+2028
  • e268761 docs: Create SECURITY.md
  • 7fa3ae7 build(deps): bump hegeltest in /
  • e98ec2d build(deps): bump serde in /crates/jsonschema-rb/ext/jsonschema
  • a52bab3 build(deps): bump serde_json in /crates/jsonschema-rb/ext/jsonschema
  • Additional commits viewable in compare view

Updates rmcp from 3.4.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origin allowlist (#1270)
  • (rmcp) tolerate empty cacheScope instead of silently dropping the whole result (#1281)
  • (model) preserve explicit null structuredContent in CallToolResult (#1295)

Other

  • cargo fmt fixes on validate_standard_headers changes (#1275)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

... (truncated)

Commits
  • 79437f2 chore: release v3.5.1 (#1307)
  • 4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
  • 931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
  • cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
  • deef9bb fix(model): export object! macro without macros feature (#1318)
  • c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
  • 94c5c03 fix: use MSRV-aware dependency resolver (#1316)
  • 8f9a28e fix(examples): fix complex auth server discovery (#1309)
  • ae2f9c9 [rmcp] Notify credential stores when a refresh token is rejected (#1285)
  • bdd93dc ci: reject multi-line codex auth secret (#1306)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.152

Release notes

Sourced from serde_json's releases.

v1.0.152

Commits
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • 80a5406 Merge pull request #1347 from yuxi-liu-wired/pr/partialeq-f32
  • 76e44e2 Merge pull request 1346 from yuxi-liu-wired/pr/ap-negative-zero
  • d8bbd39 Value == f32 is false for numbers outside the range of f32
  • 65a38ed Keep the sign of -0 in Value with arbitrary_precision
  • afdf6fc Ignore clone_on_copy clippy lint in test
  • 577729e Resolve deprecated f64 constants warning
  • a3e9758 Merge pull request #1334 from xtqqczze/authors
  • 99edc94 Remove deprecated package authors field from Cargo.toml
  • See full diff in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates rmcp from 3.4.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origin allowlist (#1270)
  • (rmcp) tolerate empty cacheScope instead of silently dropping the whole result (#1281)
  • (model) preserve explicit null structuredContent in CallToolResult (#1295)

Other

  • cargo fmt fixes on validate_standard_headers changes (#1275)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

... (truncated)

Commits
  • 79437f2 chore: release v3.5.1 (#1307)
  • 4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
  • 931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
  • cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
  • deef9bb fix(model): export object! macro without macros feature (#1318)
  • c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
  • 94c5c03 fix: use MSRV-aware dependency resolver (#1316)
  • 8f9a28e fix(examples): fix complex auth server discovery (#1309)
  • ae2f9c9 [rmcp] Notify credential stores when a refresh token is rejected (#1285)
  • bdd93dc ci: reject multi-line codex auth secret (#1306)
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.152

Release notes

Sourced from serde_json's releases.

v1.0.152

Commits
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • 80a5406 Merge pull request #1347 from yuxi-liu-wired/pr/partialeq-f32
  • 76e44e2 Merge pull request 1346 from yuxi-liu-wired/pr/ap-negative-zero
  • d8bbd39 Value == f32 is false for numbers outside the range of f32
  • 65a38ed Keep the sign of -0 in Value with arbitrary_precision
  • afdf6fc Ignore clone_on_copy clippy lint in test
  • 577729e Resolve deprecated f64 constants warning
  • a3e9758 Merge pull request #1334 from xtqqczze/authors
  • 99edc94 Remove deprecated package authors field from Cargo.toml
  • See full diff in compare view

Updates rmcp from 3.4.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origin allowlist (#1270)
  • (rmcp) tolerate empty cacheScope instead of silently dropping the whole result (#1281)
  • (model) preserve explicit null structuredContent in CallToolResult (#1295)

Other

  • cargo fmt fixes on validate_standard_headers changes (#1275)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

... (truncated)

Commits
  • 79437f2 chore: release v3.5.1 (#1307)
  • 4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
  • 931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
  • cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
  • deef9bb fix(model): export object! macro without macros feature (#1318)
  • c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
  • 94c5c03 fix: use MSRV-aware dependency resolver (#1316)
  • 8f9a28e fix(examples): fix complex auth server discovery (#1309)
  • ae2f9c9 [rmcp] Notify credential stores when a refresh token is rejected (#1285)
  • bdd93dc ci: reject multi-line codex auth secret (#1306)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.152

Release notes

Sourced from serde_json's releases.

v1.0.152

Commits
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • 80a5406 Merge pull request #1347 from yuxi-liu-wired/pr/partialeq-f32
  • 76e44e2 Merge pull request 1346 from yuxi-liu-wired/pr/ap-negative-zero
  • d8bbd39 Value == f32 is false for numbers outside the range of f32
  • 65a38ed Keep the sign of -0 in Value with arbitrary_precision
  • afdf6fc Ignore clone_on_copy clippy lint in test
  • 577729e Resolve deprecated f64 constants warning
  • a3e9758 Merge pull request #1334 from xtqqczze/authors
  • 99edc94 Remove deprecated package authors field from Cargo.toml
  • See full diff in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates rmcp from 3.4.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origi...

    Description has been truncated

Bumps the cargo group with 4 updates in the /mcp-client-rust directory: [jsonschema](https://github.com/Stranger6667/jsonschema), [rmcp](https://github.com/modelcontextprotocol/rust-sdk), [serde_json](https://github.com/serde-rs/json) and [tokio](https://github.com/tokio-rs/tokio).
Bumps the cargo group with 3 updates in the /weather-server-rust directory: [rmcp](https://github.com/modelcontextprotocol/rust-sdk), [serde_json](https://github.com/serde-rs/json) and [tokio](https://github.com/tokio-rs/tokio).


Updates `jsonschema` from 0.58.1 to 0.58.6
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.58.1...ruby-v0.58.6)

Updates `rmcp` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.5.1)

Updates `serde_json` from 1.0.151 to 1.0.152
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.152)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `rmcp` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.5.1)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `serde_json` from 1.0.151 to 1.0.152
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.152)

Updates `rmcp` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.5.1)

Updates `serde_json` from 1.0.151 to 1.0.152
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.152)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `rmcp` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.5.1)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `serde_json` from 1.0.151 to 1.0.152
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.152)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.58.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 13, 2026
@a-akimov
a-akimov merged commit a4681cf into main Oct 14, 2026
3 checks passed
@a-akimov
a-akimov deleted the dependabot/cargo/mcp-client-rust/cargo-5dde560f2d branch October 14, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant