Skip to content

Bump the all-updates group across 1 directory with 3 updates - #221

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/mcp/all-updates-f46ff7b4ae
Open

Bump the all-updates group across 1 directory with 3 updates#221
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/mcp/all-updates-f46ff7b4ae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-updates group with 3 updates in the /mcp directory: rmcp, reqwest and schemars.

Updates rmcp from 0.8.5 to 3.3.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.3.0

Added

  • (macros) reject empty tool_router (#1233)

rmcp-v3.3.0

Added

  • add ServerHandler::negotiate_initialize (#1247)
  • (macros) reject empty tool_router (#1233)
  • (auth) add enterprise refresh-token and ID-JAG exchanges (#1234)

Fixed

  • (sse) saturate exponential reconnect backoff to avoid overflow panic (#1231)
  • resolve clippy warnings across workspace (#1195)
  • (auth) unify refresh checks and error handling (#1236)

Other

  • (deps) update process-wrap requirement from 9.0 to 10.0 (#1229)

rmcp-macros-v3.2.0

Added

  • add request-state key rotation (#1128)

Fixed

  • allow concurrent streamable http requests (#1186)

rmcp-v3.2.0

Added

  • (auth) coordinate OAuth refreshes through credential stores (#1232)
  • add request-state key rotation (#1128)

Fixed

  • keep initialize on legacy protocol versions (#1228)
  • (transport) fall back after sessionless HTTP discover rejections (#1211)
  • allow concurrent streamable http requests (#1186)

rmcp-macros-v3.1.4

Fixed

  • time out auto discovery probe (#1149)

rmcp-v3.1.4

Fixed

... (truncated)

Commits
  • 3e636ca chore: release v3.3.0 (#1252)
  • b2c90b1 ci: pin commitlint dependencies (#1217)
  • 46db531 fix(sse): saturate exponential reconnect backoff to avoid overflow panic (#1231)
  • 744b9f9 chore(deps): bump crate-ci/typos (#1249)
  • e8a0d70 chore(deps): bump taiki-e/install-action from 2.86.7 to 2.87.6 (#1250)
  • 6fa4053 fix: resolve clippy warnings across workspace (#1195)
  • f9a68bf feat: add ServerHandler::negotiate_initialize (#1247)
  • 7d14f3a feat(macros): reject empty tool_router (#1233)
  • 04c2f3f fix(auth): unify refresh checks and error handling (#1236)
  • add9cbe ci: bump codeql-action to 4.37.9 and group updates (#1240)
  • Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

  • Update to syn 3 in schemars_derive
Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

  • Update to syn 3 in schemars_derive
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-updates group across 1 directory with 3 updates
42da91e 
Bumps the all-updates group with 3 updates in the /mcp directory: [rmcp](https://github.com/modelcontextprotocol/rust-sdk), [reqwest](https://github.com/seanmonstar/reqwest) and [schemars](https://github.com/GREsau/schemars).


Updates `rmcp` from 0.8.5 to 3.3.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v0.8.5...rmcp-v3.3.0)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `schemars` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-updates
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: schemars
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 13, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 13, 2026
@github-actions
github-actions Bot requested a review from siddh34 September 13, 2026 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@LorenzoTettamanti LorenzoTettamanti Awaiting requested review from LorenzoTettamanti LorenzoTettamanti is a code owner
@lorebrada lorebrada Awaiting requested review from lorebrada lorebrada is a code owner
@siddh34 siddh34 Awaiting requested review from siddh34

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants