Bump the bundler group across 2 directories with 2 updates

[dependabot]

Bumps the bundler group with 2 updates in the /mcp-client-ruby directory: anthropic and mcp.
Bumps the bundler group with 1 update in the /weather-server-ruby directory: mcp.

Updates anthropic from 1.76.0 to 1.78.0

Release notes

Sourced from anthropic's releases.

v1.78.0

Features

• api: add types for the Chat and Cowork unified analytics metrics
• api: add workflows, multiagent configuration and thread status filtering to Managed Agents

v1.77.1

Bug Fixes

• client: raise before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• docs: note that listing Claude Console spend limits is in early access
• internal: simplify the check that refuses "." and ".." path parameters

v1.77.0

1.77.0 (2026-10-07)

Full Changelog: v1.76.0...v1.77.0

Features

• api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1236cfa)
• api: add display_name to RBAC roles and deprecate name (8b4b105)
• api: add include_default parameter to list workspaces (50b4f86)
• api: add lifecycle stage fields and filter to /v1/models (0540b11)
• api: add line to model objects (b505f03)
• api: add url_sources to the Managed Agents web_fetch tool config (21ddce2)
• api: add web search and code execution support to model capabilities (21ddce2)

Bug Fixes

• api: send the beta header by default when listing spend limits (b8475eb)
• client: raise an error when a path parameter is "." or ".." (21ddce2)

Chores

• api: mark the Text Completions API as deprecated (21ddce2)
• ci: cache installed gems in the test and lint jobs (21ddce2)
• docs: correct example groups in rate limit list description (0059b95)
• docs: correct when usage and cost report data becomes final (21ddce2)
• docs: describe a federation rule's target by its type (21ddce2)
• docs: fix example IDs in sessions, agents and vault credentials (21ddce2)
• docs: update Managed Agents multiagent and thread descriptions (21ddce2)
• docs: update the activity summaries endpoint description (5c31991)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.78.0 (2026-10-09)

Features

• api: add types for the Chat and Cowork unified analytics metrics
• api: add workflows, multiagent configuration and thread status filtering to Managed Agents

1.77.1 (2026-10-08)

Bug Fixes

• client: raise before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• docs: note that listing Claude Console spend limits is in early access
• internal: simplify the check that refuses "." and ".." path parameters

1.77.0 (2026-10-07)

Full Changelog: v1.76.0...v1.77.0

Features

• api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1236cfa)
• api: add display_name to RBAC roles and deprecate name (8b4b105)
• api: add include_default parameter to list workspaces (50b4f86)
• api: add lifecycle stage fields and filter to /v1/models (0540b11)
• api: add line to model objects (b505f03)
• api: add url_sources to the Managed Agents web_fetch tool config (21ddce2)
• api: add web search and code execution support to model capabilities (21ddce2)

Bug Fixes

• api: send the beta header by default when listing spend limits (b8475eb)
• client: raise an error when a path parameter is "." or ".." (21ddce2)

Chores

• api: mark the Text Completions API as deprecated (21ddce2)
• ci: cache installed gems in the test and lint jobs (21ddce2)
• docs: correct example groups in rate limit list description (0059b95)
• docs: correct when usage and cost report data becomes final (21ddce2)
• docs: describe a federation rule's target by its type (21ddce2)
• docs: fix example IDs in sessions, agents and vault credentials (21ddce2)
• docs: update Managed Agents multiagent and thread descriptions (21ddce2)

... (truncated)

Commits

• 96f8878 release: 1.78.0
• 32d096c Merge pull request #306 from anthropics/synced/published
• f869362 feat(api): add workflows, multiagent configuration and thread status filterin...
• 062d147 codegen metadata
• 1681515 codegen metadata
• 3358529 codegen metadata
• 9f607fd codegen metadata
• 3086787 codegen metadata
• c3d806f codegen metadata
• a4dd0a4 feat(api): add types for the Chat and Cowork unified analytics metrics
• Additional commits viewable in compare view

Updates mcp from 1.6.1 to 1.7.0

Release notes

Sourced from mcp's releases.

v1.7.0

This release lets a web application finish the OAuth authorization in the request that receives the redirect, bounds the initialize request a session retains and the resource URIs a subscriptions/listen stream retains, validates icons given as Hashes through MCP::Icon, and repairs two subscriptions/listen cases: a request that cannot be encoded is refused, and a removed stream is marked closed. The two bounds and the icon validation reject what earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md; raise max_initialize_request_bytes: and max_resource_subscription_bytes: (or set them to nil) where the byte bounds are too tight, and give Hash icons only the MCP::Icon members with a valid src.

Added

• Let a web application finish authorization in the request that receives the redirect (#573)
• Bound the resource URIs a subscriptions/listen stream retains (#582)
• Bound the initialize request a session retains (#583)

Changed

• Validate icons given as Hashes through MCP::Icon (#586)

Fixed

• Refuse subscriptions/listen requests that cannot be encoded (#585)
• Mark a removed subscriptions/listen stream closed (#587)

Changelog

Sourced from mcp's changelog.

[1.7.0] - 2026-10-05

This release lets a web application finish the OAuth authorization in the request that receives the redirect, bounds the initialize request a session retains and the resource URIs a subscriptions/listen stream retains, validates icons given as Hashes through MCP::Icon, and repairs two subscriptions/listen cases: a request that cannot be encoded is refused, and a removed stream is marked closed. The two bounds and the icon validation reject what earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md; raise max_initialize_request_bytes: and max_resource_subscription_bytes: (or set them to nil) where the byte bounds are too tight, and give Hash icons only the MCP::Icon members with a valid src.

Added

• Let a web application finish authorization in the request that receives the redirect (#573)
• Bound the resource URIs a subscriptions/listen stream retains (#582)
• Bound the initialize request a session retains (#583)

Changed

• Validate icons given as Hashes through MCP::Icon (#586)

Fixed

• Refuse subscriptions/listen requests that cannot be encoded (#585)
• Mark a removed subscriptions/listen stream closed (#587)

Commits

• d4202c2 Merge pull request #588 from koic/release_1_7_0
• 6cb9875 Release 1.7.0
• 745bc61 Merge pull request #587 from koic/mark_removed_listen_streams_closed
• cc88656 Merge pull request #586 from koic/validate_icons_given_as_hashes
• 0cef024 Mark a removed subscriptions/listen stream closed
• 402cb56 Merge pull request #585 from koic/refuse_listen_requests_that_cannot_be_encoded
• 73d6da3 Merge pull request #584 from koic/describe_the_pending_authorization_checks_a...
• a49ab43 Validate icons given as Hashes through MCP::Icon
• 739dd55 Refuse subscriptions/listen requests that cannot be encoded
• 095bd81 [Doc] Describe the pending authorization checks as the code establishes them
• Additional commits viewable in compare view

Updates mcp from 1.6.1 to 1.7.0

Release notes

Sourced from mcp's releases.

v1.7.0

This release lets a web application finish the OAuth authorization in the request that receives the redirect, bounds the initialize request a session retains and the resource URIs a subscriptions/listen stream retains, validates icons given as Hashes through MCP::Icon, and repairs two subscriptions/listen cases: a request that cannot be encoded is refused, and a removed stream is marked closed. The two bounds and the icon validation reject what earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md; raise max_initialize_request_bytes: and max_resource_subscription_bytes: (or set them to nil) where the byte bounds are too tight, and give Hash icons only the MCP::Icon members with a valid src.

Added

• Let a web application finish authorization in the request that receives the redirect (#573)
• Bound the resource URIs a subscriptions/listen stream retains (#582)
• Bound the initialize request a session retains (#583)

Changed

• Validate icons given as Hashes through MCP::Icon (#586)

Fixed

• Refuse subscriptions/listen requests that cannot be encoded (#585)
• Mark a removed subscriptions/listen stream closed (#587)

Changelog

Sourced from mcp's changelog.

[1.7.0] - 2026-10-05

This release lets a web application finish the OAuth authorization in the request that receives the redirect, bounds the initialize request a session retains and the resource URIs a subscriptions/listen stream retains, validates icons given as Hashes through MCP::Icon, and repairs two subscriptions/listen cases: a request that cannot be encoded is refused, and a removed stream is marked closed. The two bounds and the icon validation reject what earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md; raise max_initialize_request_bytes: and max_resource_subscription_bytes: (or set them to nil) where the byte bounds are too tight, and give Hash icons only the MCP::Icon members with a valid src.

Added

• Let a web application finish authorization in the request that receives the redirect (#573)
• Bound the resource URIs a subscriptions/listen stream retains (#582)
• Bound the initialize request a session retains (#583)

Changed

• Validate icons given as Hashes through MCP::Icon (#586)

Fixed

• Refuse subscriptions/listen requests that cannot be encoded (#585)
• Mark a removed subscriptions/listen stream closed (#587)

Commits

• d4202c2 Merge pull request #588 from koic/release_1_7_0
• 6cb9875 Release 1.7.0
• 745bc61 Merge pull request #587 from koic/mark_removed_listen_streams_closed
• cc88656 Merge pull request #586 from koic/validate_icons_given_as_hashes
• 0cef024 Mark a removed subscriptions/listen stream closed
• 402cb56 Merge pull request #585 from koic/refuse_listen_requests_that_cannot_be_encoded
• 73d6da3 Merge pull request #584 from koic/describe_the_pending_authorization_checks_a...
• a49ab43 Validate icons given as Hashes through MCP::Icon
• 739dd55 Refuse subscriptions/listen requests that cannot be encoded
• 095bd81 [Doc] Describe the pending authorization checks as the code establishes them
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions