Repository navigation
build(deps): bump the cargo-minor-patch group across 1 directory with 5 updates - #409
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… 5 updates Bumps the cargo-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.54.1` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.1` | `3.7.0` | | [schemars](https://github.com/GREsau/schemars) | `1.2.2` | `1.2.3` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `tokio` from 1.53.2 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.54.1) Updates `rmcp` from 3.5.1 to 3.7.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.1...rmcp-v3.7.0) Updates `schemars` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/GREsau/schemars/releases) - [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md) - [Commits](GREsau/schemars@v1.2.2...v1.2.3) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rmcp dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: schemars dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/cargo/cargo-minor-patch-a9e0f866a3
branch
November 1, 2026 23:00
plusky
added a commit
that referenced
this pull request
Nov 1, 2026
Two minor releases, read as one src diff of the vendored crates: 3.6.0 carries every server-side change; 3.7.0 touches only the OAuth client (the GHSA-5p52-q7pq-9fq2 SSRF fix, #1385, #1302 — the `auth` feature this crate never enables) and the reqwest client's 401/403 handling (#1341, the test client only). rmcp-macros 3.7.0 is a version bump: its src is byte-identical to 3.5.1. What matters, and why each bugwarden change was made: DEFAULT_MAX_LINE_LENGTH of 16 MiB and DISCARDS a longer one, logging ERROR and reading on. That is the skip-and-resume DESIGN.md rejects for stdio (the request id is inside the unparsed frame, rmcp clients set no timeout, so a peer waits forever), and it sits below this build's own policy-derived cap, which clamps to 64 MiB. Measured: under a 16 MiB attachment cap the 3.5.1 build served a 17 MiB tools/call over stdio and the bare 3.7.0 transport dropped it unanswered, logged the ERROR, and read on. DiscoverAnswering::framed now builds the transport with with_max_line_length(usize::MAX), rmcp's documented off switch, so BoundedLines stays the one bound and closes as before. Two tests pin it: a_frame_of_exactly_this_builds_cap_is_served_past_rmcps_line_bound feeds a frame of exactly the cap a 16 MiB policy derives (~22 MiB) through the real framed constructor and requires it to reach rmcp, so any rmcp bound below the derived cap fails it (without the override it reports `None`); stdio_a_frame_over_rmcps_line_bound_is_served_when_the _policy_admits_it drives a 17 MiB tools/call through the shipped binary under that policy and requires the reply, which fails the moment main frames stdin through anything but `framed`. The 3.5.1 "unbounded Vec" wording in stdio.rs, main.rs, server.rs, binary_shutdown.rs and DESIGN.md is rewritten to say what each rmcp did, and DESIGN.md's stdio serving line now quotes the real call and names the tuple form as the trap. with_max_line_length is the only 3.6-only API the crate's non-test code relies on (the test also reads DEFAULT_MAX_LINE_LENGTH), so the manifest requirement moves from "3.5" to "3.6", not "3.7": nothing 3.7 added over 3.6 is compiled in, and DESIGN.md quotes and justifies the new requirement. `Bad Request: Session ID is required` where 3.5.1 answered 422 `Unexpected message, expect initialize request`, and the stateless branch now refuses a posted JSON-RPC response or error with 400/-32600 where 3.5.1 took it with a 202. Both are the transport's own answers before any handler, so unrecorded either way. No test pinned the old shapes; two raw-POST wiremock tests now pin the new ones (a_session_less_non_initialize_post_is_refused_400_before_any_handler, a_posted_json_rpc_response_on_the_stateless_path_is_refused_400), both failing on the 3.5.1 lock, and DESIGN.md's mcp-session-id trap records them — including that over http the #1283/#1346 shapes below never reach either branch, because expect_json refuses them 415 with the `unrecognized JSON-RPC message` text that any non-JSON-RPC JSON object now draws. beside `result`/`error`, both of those, or `method` with a null id is refused -32600 in-band with no id, and an integral float id (1.0) is read as that integer. 3.5.1 read a request with a float or null id as a NOTIFICATION, which before initialize ended the stdio process through the #261 path and in-session was dropped; 3.7.0 refuses it in-band and keeps waiting. Two binary tests pin the stdio shapes, both failing on the 3.5.1 lock (stdio_a_pre_initialize_float_id_request_is_refused_in _band_and_the_session_survives; stdio_an_in_session_frame_with_method _and_result_is_refused_not_served), and DESIGN.md's stdio trap records them. stateless path reads get_tool off the service built for that request, the session path builds one per lookup, and the factory now runs before the SEP-2243 check. For this build the factory is server.clone(), side- effect free, and get_tool still takes no RequestContext, so the #116 record stays closed as a per-deployment, validate-vs-skip oracle; the DESIGN.md text that described the cache is rewritten. the serve loop's drain ends. The handler future is not dropped, this build's handlers read no ct, and the record is written after dispatch, so the #319 gap is unchanged; DESIGN.md says so beside it. client-side validator now rejects the key on the root and off such a chain. bugwarden authors none; the tripwire already bans the key at any depth and any value type, so only its rationale and the comment naming rmcp's functions move (reject_nested_annotations is gone). Not relevant, with evidence: #1326 refuses server-to-client requests at 2026-07-28 (this server issues none; the only send_request sites are test clients); #1304 stdio_pipes and the new Linux libc dependency (this build wraps tokio::io::stdin itself and never calls rmcp's stdio()); #1323 releases the session-map lock before awaiting a session (liveness only, same API); #1329/#1314 feature gating; #1344 the rmcp client's cancel-on-drop, #1366 pre-init ping answering, #1367 same- origin 307/308 redirects, #1361 re-initialization errors, #1352/#1385/ serves a redirect, and the bearer-gate tests use raw reqwest). Re-verified on 3.7.0 sources: parse_allowed_authority (I9), is_legacy_request, strip_result_type_for_legacy_peer, fill_missing_cache_hints, DiscoverResult, get_tool's signature, handler/server.rs, router/tool.rs, model/meta.rs and model/serde_impl.rs are byte-identical to 3.5.1; LATEST is still 2026-07-28, LATEST_WITH_INITIALIZE 2025-11-25, KNOWN_VERSIONS the same five; StreamableHttpServerConfig still has the ten public fields the DESIGN.md table lists plus the private origin flag; serve_server_with_ct_inner's pre-init paths are unchanged and the serve loop's drain differs only by the #1333 cancel; no Span::record; the one new tracing::error! on a per-request path is #1049's, carries only a numeric field, and is unreachable with the bound off; no new bare % field fed from a client (%client_requested and %id stay as the tracing-caps probe expects); the mutants exclude_re premise holds (the single ExpectedInitializeRequest site passes Some at service/server.rs:667, UnexpectedInitializeResponse only on the handler-result path, Cancelled only under a token ServiceExt::serve makes itself). Every line citation was re-read at both ends, not shifted: service.rs -14, service/server.rs -15 with the pre-init loop now :544-672, model.rs +163; the negotiate re-run citation (:658) and set_peer_info (:323) were stale already and now name their lines (:692, :322). The 3.5.x stamps in DESIGN.md, ci.yml and the crate comments move to 3.7.0. Served bytes, dumped from a 3.5.1 build of origin/main and this one over stdio (initialize at each served revision and the fallbacks, server/discover in five _meta shapes, handshake-free tools/list and tools/call, the bare pre-initialize refusal, an over-cap frame at the default policy) and over http (initialize, in-session and session-less POSTs, header-only and per-request 2026-07-28, GET and DELETE without a session): content-identical except the #1049, #1377 and #1283/#1346 shapes explained above, each of which this message names. Cargo.lock is Dependabot's: rmcp and rmcp-macros 3.7.0, the matched pair, tokio 1.54.1, schemars 1.2.3, serde_json 1.0.154, sha2 0.11.1, plus libc as rmcp's new Linux dependency. Supersedes Dependabot #409.
plusky
added a commit
that referenced
this pull request
Nov 1, 2026
Two minor releases, read as one src diff of the vendored crates: 3.6.0 carries every server-side change; 3.7.0 touches only the OAuth client (the GHSA-5p52-q7pq-9fq2 SSRF fix, #1385, #1302 — the `auth` feature this crate never enables) and the reqwest client's 401/403 handling (#1341, the test client only). rmcp-macros 3.7.0 is a version bump: its src is byte-identical to 3.5.1. What matters, and why each bugwarden change was made: DEFAULT_MAX_LINE_LENGTH of 16 MiB and DISCARDS a longer one, logging ERROR and reading on. That is the skip-and-resume DESIGN.md rejects for stdio (the request id is inside the unparsed frame, rmcp clients set no timeout, so a peer waits forever), and it sits below this build's own policy-derived cap, which clamps to 64 MiB. Measured: under a 16 MiB attachment cap the 3.5.1 build served a 17 MiB tools/call over stdio and the bare 3.7.0 transport dropped it unanswered, logged the ERROR, and read on. DiscoverAnswering::framed now builds the transport with with_max_line_length(usize::MAX), rmcp's documented off switch, so BoundedLines stays the one bound and closes as before. Two tests pin it: a_frame_of_exactly_this_builds_cap_is_served_past_rmcps_line_bound feeds a frame of exactly the cap a 16 MiB policy derives (~22 MiB) through the real framed constructor and requires it to reach rmcp, so any rmcp bound below the derived cap fails it (without the override it reports `None`); stdio_a_frame_over_rmcps_line_bound_is_served_when_the _policy_admits_it drives a 17 MiB tools/call through the shipped binary under that policy and requires the reply, which fails the moment main frames stdin through anything but `framed`. The 3.5.1 "unbounded Vec" wording in stdio.rs, main.rs, server.rs, binary_shutdown.rs and DESIGN.md is rewritten to say what each rmcp did, and DESIGN.md's stdio serving line now quotes the real call and names the tuple form as the trap. with_max_line_length is the only 3.6-only API the crate's non-test code relies on (the test also reads DEFAULT_MAX_LINE_LENGTH), so the manifest requirement moves from "3.5" to "3.6", not "3.7": nothing 3.7 added over 3.6 is compiled in, and DESIGN.md quotes and justifies the new requirement. `Bad Request: Session ID is required` where 3.5.1 answered 422 `Unexpected message, expect initialize request`, and the stateless branch now refuses a posted JSON-RPC response or error with 400/-32600 where 3.5.1 took it with a 202. Both are the transport's own answers before any handler, so unrecorded either way. No test pinned the old shapes; two raw-POST wiremock tests now pin the new ones (a_session_less_non_initialize_post_is_refused_400_before_any_handler, a_posted_json_rpc_response_on_the_stateless_path_is_refused_400), both failing on the 3.5.1 lock, and DESIGN.md's mcp-session-id trap records them — including that over http the #1283/#1346 shapes below never reach either branch, because expect_json refuses them 415 with the `unrecognized JSON-RPC message` text that any non-JSON-RPC JSON object now draws. beside `result`/`error`, both of those, or `method` with a null id is refused -32600 in-band with no id, and an integral float id (1.0) is read as that integer. 3.5.1 read a request with a float or null id as a NOTIFICATION, which before initialize ended the stdio process through the #261 path and in-session was dropped; 3.7.0 refuses it in-band and keeps waiting. Two binary tests pin the stdio shapes, both failing on the 3.5.1 lock (stdio_a_pre_initialize_float_id_request_is_refused_in _band_and_the_session_survives; stdio_an_in_session_frame_with_method _and_result_is_refused_not_served), and DESIGN.md's stdio trap records them. stateless path reads get_tool off the service built for that request, the session path builds one per lookup, and the factory now runs before the SEP-2243 check. For this build the factory is server.clone(), side- effect free, and get_tool still takes no RequestContext, so the #116 record stays closed as a per-deployment, validate-vs-skip oracle; the DESIGN.md text that described the cache is rewritten. the serve loop's drain ends. The handler future is not dropped, this build's handlers read no ct, and the record is written after dispatch, so the #319 gap is unchanged; DESIGN.md says so beside it. client-side validator now rejects the key on the root and off such a chain. bugwarden authors none; the tripwire already bans the key at any depth and any value type, so only its rationale and the comment naming rmcp's functions move (reject_nested_annotations is gone). Not relevant, with evidence: #1326 refuses server-to-client requests at 2026-07-28 (this server issues none; the only send_request sites are test clients); #1304 stdio_pipes and the new Linux libc dependency (this build wraps tokio::io::stdin itself and never calls rmcp's stdio()); #1323 releases the session-map lock before awaiting a session (liveness only, same API); #1329/#1314 feature gating; #1344 the rmcp client's cancel-on-drop, #1366 pre-init ping answering, #1367 same- origin 307/308 redirects, #1361 re-initialization errors, #1352/#1385/ serves a redirect, and the bearer-gate tests use raw reqwest). Re-verified on 3.7.0 sources: parse_allowed_authority (I9), is_legacy_request, strip_result_type_for_legacy_peer, fill_missing_cache_hints, DiscoverResult, get_tool's signature, handler/server.rs, router/tool.rs, model/meta.rs and model/serde_impl.rs are byte-identical to 3.5.1; LATEST is still 2026-07-28, LATEST_WITH_INITIALIZE 2025-11-25, KNOWN_VERSIONS the same five; StreamableHttpServerConfig still has the ten public fields the DESIGN.md table lists plus the private origin flag; serve_server_with_ct_inner's pre-init paths are unchanged and the serve loop's drain differs only by the #1333 cancel; no Span::record; the one new tracing::error! on a per-request path is #1049's, carries only a numeric field, and is unreachable with the bound off; no new bare % field fed from a client (%client_requested and %id stay as the tracing-caps probe expects); the mutants exclude_re premise holds (the single ExpectedInitializeRequest site passes Some at service/server.rs:667, UnexpectedInitializeResponse only on the handler-result path, Cancelled only under a token ServiceExt::serve makes itself). Every line citation was re-read at both ends, not shifted: service.rs -14, service/server.rs -15 with the pre-init loop now :544-672, model.rs +163; the negotiate re-run citation (:658) and set_peer_info (:323) were stale already and now name their lines (:692, :322). The 3.5.x stamps in DESIGN.md, ci.yml and the crate comments move to 3.7.0. Served bytes, dumped from a 3.5.1 build of origin/main and this one over stdio (initialize at each served revision and the fallbacks, server/discover in five _meta shapes, handshake-free tools/list and tools/call, the bare pre-initialize refusal, an over-cap frame at the default policy) and over http (initialize, in-session and session-less POSTs, header-only and per-request 2026-07-28, GET and DELETE without a session): content-identical except the #1049, #1377 and #1283/#1346 shapes explained above, each of which this message names. Cargo.lock is Dependabot's: rmcp and rmcp-macros 3.7.0, the matched pair, tokio 1.54.1, schemars 1.2.3, serde_json 1.0.154, sha2 0.11.1, plus libc as rmcp's new Linux dependency. Supersedes Dependabot #409.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cargo-minor-patch group with 5 updates in the / directory:
1.0.1511.0.1541.53.21.54.13.5.13.7.01.2.21.2.30.11.00.11.1Updates
serde_jsonfrom 1.0.151 to 1.0.154Release notes
Sourced from serde_json's releases.
Commits
20572a6Release 1.0.154a91bfafFix RandomState links in map documentation3c932c0Merge pull request #1333 from razmser/no-std-preserve-order4b2d726Release 1.0.15383335eeTouch up PR 13454b4810aResolve range_plus_one pedantic clippy lint8af71ccMerge pull request #1345 from 00200200/fix-invalid-utf8-error-column452afa2Correct multiline raw UTF-8 error positions and simplify indexingc9f1e3bRelease 1.0.152854fc70Touch up PR 1347Updates
tokiofrom 1.53.2 to 1.54.1Release notes
Sourced from tokio's releases.
... (truncated)
Commits
b53b200chore: prepare Tokio v1.54.1 (#8693)5ed619btime: revert "remove the runtime handle from timers" (#8692)66d34e4chore: prepare Tokio v1.54.0 (#8667)0d322ceio: support vectored writes in sink (#8663)4167c56codec: expose I/O sources from codec errors (#8665)cdd9daefs: propagate iouring stress test failures (#8644)52ac781ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)4890d02stream: implementFusedStreamforJoinSetStream(#8629)a6bd8e1wasm: check Emscripten version when using JSPI (#8627)9dd749dMerge 'tokio-1.53.3' into 'master' (#8641)Updates
rmcpfrom 3.5.1 to 3.7.0Release notes
Sourced from rmcp's releases.
... (truncated)
Commits
5d6a11fchore: release v3.7.0 (#1384)7bc5c07fix(auth): allow cross-origin resource_metadata urls (#1302)ac808abMerge commit from forkb11a40dfeat(auth): support OIDC ID-token subjects in enterprise exchange (#1385)e0e7e50fix(transport): keep 401/403 status when the body is a JSON-RPC error (#1341)c960b4bci(triage): redact command output from failure logs (#1380)74d7895chore: release v3.6.0 (#1327)ad2a66afix(server): reject requests to 2026-07-28 clients (#1326)c519c79fix(streamable-http-server): look up tool schemas per request (#1349)be386d5fix(transport): follow same-origin 307/308 redirects in the default Streamabl...Updates
schemarsfrom 1.2.2 to 1.2.3Release notes
Sourced from schemars's releases.
Changelog
Sourced from schemars's changelog.
Commits
4791bb7v1.2.3c6a89b7Put the tag of an internally tagged enum first inpropertiesc5cd8b5fix: schema creation panics with arbitrary precision JSON numbers766d70bResolveunused_qualificationslint in crate and generated code - #541 (#541)d07655eResolve clippy errorUpdates
sha2from 0.11.0 to 0.11.1Commits
138dc5aRelease sha2 v0.11.1 (#927)cf01056sha2: fixunsafe_op_in_unsafe_fnlint, bump MSRV to 1.88 (#926)7c59cadUpdate Cargo.lock (#921)f57b947streebog: tweak internal implementation (#925)336611fFixcargo::manual_readmelint (#924)1df8877md2: fixclippy::needless_range_looplint (#923)6075989sha2: fix loading of round constants on AArch64 backends (#922)eadfd90Update Cargo.lock (#913)fa30840blake2 v0.11.0 (#911)f6c786dci: bump the all-deps group across 1 directory with 3 updates (#896)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions