fix(deps): update dependency fastmcp to v4 by renovate[bot] · Pull Request #721 · aignostics/python-sdk

renovate · 2026-09-14T23:11:17Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
fastmcp	`>=3.2.0,<4` → `>=3.2.0,<5`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

PrefectHQ/fastmcp (fastmcp)

`v4.1.3`: : Root Awakening

Compare Source

This release updates certifi-backed dependencies following the eMudhra CA compromise and fixes public-client OAuth authentication, empty visibility selections, generator transforms, and per-server timeouts for ordinary requests. FastMCP 4 uses system trust by default: follow the security notice to update operating-system, container, custom, and installer trust stores; upgrading FastMCP alone is insufficient. Thanks to our 11 contributors, including 6 first-time contributors.

What's Changed

Security 🔒

Require certifi 2026.10.19 or later for certifi-backed server dependencies and optional SDK integrations, and document system, custom, and installer trust-store updates by @zzstoatzz in #5945.

Enhancements ✨

Chart public backlog counts and closure outcomes by @zzstoatzz in #5942

Fixes 🐞

Default the upstream token auth method to none without a client secret by @asasemahmed in #5879
fix: preserve empty session visibility selections by @himanshuchawla0807-gif in #5944
test(mount): make unreachable proxy failures deterministic by @CharlesYXW and @ch-z-hc in #5584
fix(tools): materialize generator transform_fn results in TransformedTool.run by @BlueX888 and @nandanadileep in #5672
Honor per-server MCP config timeouts by @atty57, @phnmn, and @CRYPTONIKAV in #5758
fix: don't classify a tool body's own TimeoutError as the tool timeout by @Wilson0511 in #5940

Documentation 📚

Add v4.1.3 changelog entries by @zzstoatzz in #5948

New Contributors

@phnmn made their first contribution in #5758
@CRYPTONIKAV made their first contribution in #5758
@himanshuchawla0807-gif made their first contribution in #5944
@CharlesYXW made their first contribution in #5584
@atty57 made their first contribution in #5758
@Wilson0511 made their first contribution in #5940

Full Changelog: PrefectHQ/fastmcp@v4.1.2...v4.1.3

`v4.1.2`: : License to Deny

Compare Source

Component authorization now applies after transforms, denied resources cannot fall through matching templates, and OAuth client credentials providers support issuer binding across fresh and cached-token flows. Existing configurations remain compatible, but users of ClientCredentialsOAuthProvider or PrivateKeyJWTOAuthProvider must set issuer to enable this protection; upgrading alone is insufficient. Thanks to our 18 contributors, including 9 first-time contributors.

What's Changed

Security 🔒

Authorize transformed components and prevent denied-resource template fallback by @zzstoatzz and @rishid in #5933
Bind OAuth client credentials to a configured issuer, including cached-token renewal, by @zzstoatzz and @LHMisme420 in #5933

Enhancements ✨

Add SEP-2640 Skills extension foundation by @strawgate in #5057
Write down triage and merge norms in docs/development by @zzstoatzz in #5872
Add experimental Skills discovery to SkillsDirectoryProvider by @zzstoatzz in #5704

Fixes 🐞

Do not require websockets for the OAuth callback server by @asasemahmed in #5693
Keep fastmcp.json resolvable when deployment.cwd changes the working directory by @asasemahmed in #5700
Fix ctx.log() failing when extra contains LogRecord attribute names by @asasemahmed in #5688
Use a monotonic clock in the rate limiters by @asasemahmed in #5689
Escape server metadata in the fastmcp inspect text summary by @asasemahmed in #5701
Respect an explicit is_binary=False on FileResource by @asasemahmed in #5696
Follow pagination in the MCP format of fastmcp inspect by @asasemahmed in #5691
Visit each reference once when finding access-restricted properties by @AarnavNoble in #5751
Run sync resource templates in the threadpool by @hardness1020 in #5742
Require openapi-pydantic 0.6.0 so OpenAPI 3.1.2 specs load by @jsphbtst in #5647
Scope FileUpload and session visibility to a stable client on MCP 2026-07-28 by @zzstoatzz in #5651
fix(auth): accept private_key_jwt without form client_id by @HootRock and @imranq2 in #5832
fix(cli): honor explicit URL transport by @mikamikasuki in #5529
Remove legacy logging state when HTTP sessions close by @mikamikasuki in #5539
Name data-backed File resources consistently with their MIME subtype by @nandanadileep in #5568
fix(client): run Python stdio children in UTF-8 mode by @ningmao-hlyz in #5642
Report an unbindable OAuth callback port instead of SystemExit by @asasemahmed in #5692
Accept ES256 and other RSA/EC algorithms for CIMD private_key_jwt assertions by @asasemahmed in #5695
Preserve icons on transformed tools by @asasemahmed in #5702
Hydrate valid schema defaults while preserving invalid defaults by @nandanadileep in #5738
fix(resources): preserve public metadata in built-in read contents by @HootRock in #5778
Preserve shared dependency scopes without optional task dependencies by @HootRock and @BlueX888 in #5817
fix: treat non-string skill frontmatter descriptions as absent by @BlueX888 in #5823
fix(resources): preserve component meta for list[ResourceContent] returns by @BlueX888 in #5843
Fall back to the client timeout when resolving claimed results by @marcinbelczewski in #5190
Discover Goose Streamable HTTP extensions by @jiuyueQ and @ch-z-hc in #5582
Raise ToolError when a tool with an output schema returns an unserializable value by @massimiliano1991 in #5063
Stop deploy tests from spawning PowerShell on every state access by @zzstoatzz in #5874
Give the timeout-override test headroom for the follow-up tools/list by @zzstoatzz in #5875
Keep disabled resources from being served by matching templates by @zzstoatzz in #5876

Docs 📚

Fix codespell typo in v4.1.1 changelog by @zzstoatzz in #5818
context: stop documenting session_id as a cross-request key by @zzstoatzz in #5862

Examples & Contrib 💡

fix(contrib): preserve BulkToolCaller tool prefixes by @mikamikasuki in #5555

Other Changes 🦾

chore(deps): Update github actions by @prefect-renovate[bot] in #5707

New Contributors

@AarnavNoble made their first contribution in #5751
@hardness1020 made their first contribution in #5742
@jsphbtst made their first contribution in #5647
@marcinbelczewski made their first contribution in #5190
@jiuyueQ made their first contribution in #5582
@massimiliano1991 made their first contribution in #5063
@imranq2 made their first contribution in #5832
@rishid made their first contribution in #5933
@LHMisme420 made their first contribution in #5933

Full Changelog: PrefectHQ/fastmcp@v4.1.1...v4.1.2

`v4.1.1`: : Regex Marks the Spot

Compare Source

Regex tool search now rejects patterns over 1,000 characters and stops after about a second, and SkillsDirectoryProvider discovers skill folders that are links again, including links to folders outside the skills root; a skill's own files must still resolve inside the folder it links to. All 4.x users are encouraged to upgrade. Thanks to our 4 contributors, including 1 first-time contributor.

What's Changed

Security 🔒

Keep linked skill folders discoverable by @zzstoatzz in #5766
Bound regex tool search by pattern length and time by @zzstoatzz and @SAYUTIM in #5771

Fixes 🐞

Keep an unparseable proxy setting from aborting the update check by @zzstoatzz and @ker2xu in #5639
Keep the JWKS refresh lock clear of subclass attributes by @zzstoatzz in #5770

Examples & Contrib 💡

fix: convert version query param to VersionSpec in component manager routes by @BlueX888 in #5575

New Contributors

@ker2xu made their first contribution in #5639

Full Changelog: PrefectHQ/fastmcp@v4.1.0...v4.1.1

`v4.1.0`: : Fourth and One

Compare Source

FastMCP 4.1.0 is a maintenance release at heart: a broad sweep of fixes across OpenAPI, proxies, auth, tasks, and the CLI, plus full Python 3.15 support. It doesn't change how most servers behave. A few security fixes do tighten inputs that FastMCP previously accepted, though, and our versioning policy keeps breaking changes out of patch releases, so this ships as a point-one release.

Check these before upgrading:

MultiAuth now qualifies client IDs by source, so existing MultiAuth sessions and tasks start new ownership scopes. Finish pending tasks before upgrading.
Regex tool search uses Pydantic's regex engine, which doesn't support lookarounds or backreferences.
Skill files must resolve inside their configured directories.
OpenAPI path parameters reject . and .. segments.
HTTP sessions now expire after the MCP SDK's 30-minute idle default instead of never.
CodeMode requires Monty 1.1, which renames max_duration_secs to max_feed_duration_secs.

Thanks to our 48 contributors, including 21 first-time contributors!

What's Changed

Breaking Changes ⚠️

fix(http): preserve the SDK's default session idle timeout by @asts-top in #5229
Restore full Python 3.15 support by @Kludex in #5558

Enhancements ✨

enhancement: Configure token introspection audiences by @jlowin and @sajdakabir in #5461
fix: Make proxy HTTP header forwarding configurable by @jlowin in #5462
enhancement: Configure upload retention in memory by @jlowin and @warlocksmurf in #5463
Clarify maintainer review decisions by @jlowin in #5466
feat: persist encrypted CLI OAuth tokens by @andreivince in #5405
feat(auth): add TokenCache support to GoogleTokenVerifier and GoogleProvider by @jerive in #5366
Add gitleaks secret scanning to prek by @strawgate in #5355
Keep review design decisions with maintainers by @jlowin in #5468

Security 🔒

fix!: Qualify MultiAuth client identities by @jlowin in #5455
fix!: Validate OpenAPI path parameter segments by @jlowin in #5457
fix!: Resolve skill files within their configured directories by @jlowin and @GEONWOOHAN in #5459
fix!: Use Pydantic’s regex engine for tool search by @jlowin in #5467

Fixes 🐞

fix: Share JWKS refreshes across key lookups by @jlowin in #5456
fix: Reuse shared OpenAPI composition members by @jlowin in #5460
Resolve app tool names against the transformed catalog by @jlowin in #5464
fix: keep generator iteration inside dependency lifetime by @mikamikasuki in #5438
fix(tools): consume synchronous generators within dispatched invocation by @HootRock in #5376
fix(tools): reject results returned after timeout deadlines by @HootRock in #5379
Fix #5368: Tool.from_tool: a transform_fn that declares ctx: Context fails on eve by @nandanadileep and @chrikrah in #5371
fix(auth): preserve AuthKit issuer identity by @mikamikasuki and @paddynatte in #5452
fix(auth): advertise resource_metadata only when a route serves it by @alex-feel in #5363
fix: decode escaped JSON Pointer tokens during hydration by @HuaTNA in #5407
fix: read MCP config files as UTF-8 in the install commands by @ch-z-hc in #5359
Add regression coverage for root-context schema caching by @hulkbig in #5397
Keep the original cause when ErrorHandlingMiddleware re-raises an error unchanged by @asasemahmed in #5344
Resolve ASGIServer.http_client relative URLs against the server origin by @asasemahmed in #5341
Raise startup failures from run_server_async instead of hanging by @asasemahmed in #5340
Restrict Windows CLI state access without requiring SeSecurityPrivilege by @asasemahmed in #5312
Advertise the same list_changed capabilities over stdio as other transports by @asasemahmed in #5311
Validate responses to dict and nested-list elicitation choices by @asasemahmed in #5343
Inline enums shared by several fields in elicitation schemas by @asasemahmed in #5342
Honor the SDK ElicitResult returned by an elicitation handler by @asasemahmed in #5339
Look up call_tool output schemas across all tools/list pages by @asasemahmed in #5338
Deduplicate versions in PromptsAsTools and ResourcesAsTools list tools by @asasemahmed in #5331
Map File text formats to canonical text MIME types by @asasemahmed in #5334
Keep generated OpenAPI component names unique when a suffixed name is taken by @asasemahmed in #5337
Keep is_error when ResponseLimitingMiddleware truncates a result by @asasemahmed in #5309
Read +json OpenAPI resource responses as JSON text by @asasemahmed in #5310
Preserve provider challenge defaults through MultiAuth by @taylorwilsdon in #5454
Write generate-cli output as UTF-8 by @asasemahmed and @ch-z-hc in #5335
Strip internal visibility meta from prompt results and static resources by @asasemahmed in #5330
Register browser OAuth clients as public clients by @goran-revops in #5231
fix(client): preserve unique JSON arrays by @lzyruc in #5270
Keep filesystem reloads serialized during cancellation by @sherxlg-gif in #5184
Treat upstream HTTP errors from OpenAPI tools as HTTP status errors by @asasemahmed in #5308
chore(ty): pin the checked platform to the one CI uses (#5302) by @sclfcz in #5303
fix(tools): take partial tool names and docstrings from the wrapped function by @BlueX888 and @Ares16x16 in #5269
fix(tools): keep structured content for object schemas without explicit type by @BlueX888 in #5271
fix: return current tool schemas from cached BM25 searches by @baba9811 in #5153
fix(azure): send prompt=select_account to Entra instead of the consent URL by @mayankkumar-cmd in #5162
fix(auth): preserve upstream refresh error semantics by @77cjj in #5011
Clean up run_server_async when startup exits early by @syf2211 and @asasemahmed in #5469
Pass resource security policy through FileSystemProvider discovery by @asasemahmed in #5498
Forward annotations on proxied resources and resource templates by @asasemahmed in #5499
Forward the resources/read result meta through proxies by @asasemahmed in #5500
Fix proxy dropping log messages whose data is not a msg/extra dict by @asasemahmed in #5501
Forward stop_sequences in the proxy's sampling relay by @asasemahmed in #5502
Treat non-Bearer Authorization schemes as missing authentication by @asasemahmed in #5503
Reject positional-only parameters in prompts and resource templates by @asasemahmed in #5505
Carry domain and prefers_border onto the Prefab renderer resource by @asasemahmed in #5611
Keep GenerativeUI CSP on the renderer resource only by @asasemahmed in #5612
Keep OpenAPI path segments that contain a colon by @asasemahmed in #5613
Print install mcp-json and inspect JSON without Rich wrapping by @asasemahmed in #5615
Coerce optional parameters in fastmcp call by their non-null type by @asasemahmed in #5616
Return the existing component when an ignored duplicate is added by @asasemahmed in #5617
Keep a config client's servers connected when a new() clone connects by @asasemahmed in #5618
Strip discriminator under properties named default, const, enum or examples by @asasemahmed in #5619
Keep a finished task's status when it is cancelled by @asasemahmed in #5621
Forward --skip-source to the uv run subprocess in fastmcp run by @asasemahmed in #5623
Send numeric and boolean OpenAPI raw bodies as text by @asasemahmed in #5624
Map Anthropic stop_sequence to the MCP stopSequence stop reason by @asasemahmed in #5625
Escape the server spec and name in the generate-cli header docstring by @asasemahmed in #5626
Fix context docs: request_context.meta is a dict, not an attribute object by @asasemahmed in #5631
Validate strict tool input in JSON mode by @asasemahmed in #5504
Raise when a required OpenAPI path parameter is missing by @asasemahmed in #5614
Omit writeOnly properties from OpenAPI tool output schemas by @asasemahmed in #5336
fix(tasks): keep stored arguments alive with the other per-task keys by @sclfcz in #5144
fix(auth): omit scopes from generic authorization code exchange by @liang0417 and @kiranthakkar in #5183
Reject missing and unexpected arguments at task submission by @asasemahmed in #5622
fix(auth): preserve verifier-defined challenge scopes through wrappers by @mikamikasuki in #5478
fix(server): VersionFilter get_tool/get_resource/get_prompt respect include_unversioned=False by @Ashfaqbs and @Purin1410 in #4949
Stop asserting that the GitHub remote server lacks structured content by @jlowin in #5634
Skip skills whose SKILL.md is not valid UTF-8 during directory discovery by @asasemahmed in #5497
Fix tool body validation errors at the MCP boundary by @qingshungLI and @alastair in #5485
Detect client extensions without requiring clientInfo by @alex-feel in #5196
Propagate child cancellation from gather by @dennisimoo and @lokesh0186 in #5161
fix(resources): separate URI fragments from query values by @Harsh23Kashyap in #5132
fix: preserve input requests in resource and prompt tools by @HootRock and @andreivince in #5476
fix(docstrings): don't leak Returns/Raises into description for parameterless functions by @Ashfaqbs and @pvliesdonk in #5067
fix(client): hydrate formatted scalars and positional array items by @FanouZeng-TT, @MarcHuang168, @lzyruc, and @onk3sh in #5203

Docs 📚

docs: credit contributors in v4.0.11 changelog entries by @jlowin in #5449
Clarify CodeMode execution context by @jlowin in #5458
docs: explain Inspector entrypoint initialization by @andreivince and @nick-youngblut in #5404
Docs: show post-call inspection of tool text results by @Amazinghorseli and @roli-lpci in #5385
Document FastMCP Client use cases by @andreivince in #5482
docs: show tests for MCP mounted in FastAPI by @andreivince and @DeoLeung in #5471
Document OpenTelemetry log export by @andreivince in #5483
docs: explain OpenAPI client timeouts by @andreivince and @dimitribarbot in #5470
Clarify Python projects and Cursor workspaces in install docs by @andreivince and @nick-youngblut in #5475
Remove comments from fastmcp.json docs examples by @asasemahmed in #5627
Fix mcp-json Advanced Configuration example output by @asasemahmed in #5628
Remove FASTMCP_SERVER_DEPENDENCIES from the settings reference by @asasemahmed in #5629
Fix versioning docs: get_tool takes a VersionSpec and returns None for a missing version by @asasemahmed in #5630
Fix authorization docs: AccessToken field types and built-in check count by @asasemahmed in #5632

Examples & Contrib 💡

Don't evaluate properties when registering MCPMixin methods by @asasemahmed in #5620

Dependencies 📦

chore(deps): bump the uv group across 2 directories with 2 updates by @dependabot[bot] in #5393

New Contributors

@mikamikasuki made their first contribution in #5438
@HootRock made their first contribution in #5376
@alex-feel made their first contribution in #5363
@HuaTNA made their first contribution in #5407
@andreivince made their first contribution in #5404
@ch-z-hc made their first contribution in #5359
@Amazinghorseli made their first contribution in #5385
@hulkbig made their first contribution in #5397
@jerive made their first contribution in #5366
@goran-revops made their first contribution in #5231
@lzyruc made their first contribution in #5270
@sherxlg-gif made their first contribution in #5184
@baba9811 made their first contribution in #5153
@mayankkumar-cmd made their first contribution in #5162
@77cjj made their first contribution in #5011
@liang0417 made their first contribution in #5183
@Ashfaqbs made their first contribution in #4949
@qingshungLI made their first contribution in #5485
@dennisimoo made their first contribution in #5161
@FanouZeng-TT made their first contribution in #5203
@GEONWOOHAN made their first contribution in #5459

Full Changelog: PrefectHQ/fastmcp@v4.0.11...v4.1.0

`v4.0.11`: : Fort Knocks

Compare Source

This release contains important security and bug fixes. All users are encouraged to upgrade. Thanks to our 10 contributors, including 6 first-time contributors.

What's Changed

Enhancements ✨

agents: make AGENTS.md the entry point and tighten repo skills by @zzstoatzz in #5278
ci: publish maintenance status and add MAINTAINING.md by @zzstoatzz in #5284
rate_limiting: deprecate a burst_capacity below 1 by @zzstoatzz and @sclfcz in #5296
agents: consolidate PR review guidance by @zzstoatzz in #5297
status: unify dashboard and terminal issue ranking by @zzstoatzz in #5300
Enable ruff flake8-bandit (S) rules on the library by @strawgate in #5356
Bundle extensions with providers by @jlowin in #5360
Expand supported Python CI coverage by @jlowin in #5391
docs: credit issue authors in maintainer implementations by @jlowin in #5410
enhancement: scan release notes for shared contributor credit by @jlowin in #5433

Security 🔒

Pass client CLI arguments literally to Windows .cmd wrappers by @jlowin and @strawgate in #5419
Build client schema types with create_model and bounded caches by @jlowin and @strawgate in #5413
Bound schema nesting before client type conversion by @jlowin and @strawgate in #5434
OpenAPI components send only declared arguments and keep configured headers by @jlowin and @strawgate in #5423
Use the server's auth provider for component manager routes by @jlowin and @strawgate in #5425
Apply Host/Origin protection settings to the SSE transport by @jlowin in #5427
Require a startup-URL session for the fastmcp dev apps preview by @jlowin and @strawgate in #5417
Apply transforms, enabled state, and auth to hashed tool lookups by @jlowin and @strawgate in #5415
Key cached schema adapters by the normalized schema by @jlowin in #5436
Resolve injected tools through the server's tool lookup by @jlowin in #5431
Keep $ref pointers when inlining would produce an oversized schema by @jlowin and @strawgate in #5421

Fixes 🐞

rate_limiting: default burst capacity to at least 1 by @zzstoatzz and @Patrick-SCH03 in #5293
types: map Image jpg/svg/tif formats to canonical MIME types by @zzstoatzz and @Patrick-SCH03 in #5294
client: decode empty structured content into CallToolResult.data by @zzstoatzz and @Patrick-SCH03 in #5291
fix: use portable issue ranking cache filenames by @zzstoatzz in #5314
fix: validate cached version timestamp types by @Harsh23Kashyap in #5351
cli: read MCP and fastmcp.json config files as utf-8 by @zzstoatzz and @asasemahmed in #5345
Support Python 3.15 by @Kludex in #5374
Revert "Support Python 3.15" by @jlowin in #5389
examples: handle malformed media links and concurrent Fire TV setup by @jlowin in #5390
Fix mounted extension runtime tracking by @jlowin in #5392
Fall back to pure Python YAML loader in schema tests by @jlowin in #5395
tools: keep explicit Field(title=...) on parameters in the input schema by @zzstoatzz and @TJReinert in #5388
Run Windows tests on code pull requests by @jlowin in #5408
Avoid repeated traversal of shared tool schema definitions by @jlowin in #5412
Keep referenced body fields when a request body schema adds sibling properties by @jlowin in #5440
Require pydocket 0.26.0 so a cancelled task cannot stop the worker by @jlowin in #5444

Docs 📚

docs: consolidate developer and maintainer guidance by @zzstoatzz in #5298
examples: add interactive media picker MCP app by @zzstoatzz in #5281
docs: route SDK v1 users to the correct upgrade guide by @aritejhg in #5372
Clarify app visibility and configurable security guarantees by @jlowin in #5409
Clarify declared header parameters in the OpenAPI docs by @jlowin and @strawgate in #5437
docs: add v4.0.11 changelog entries by @jlowin in #5446

Dependencies 📦

chore(deps): bump the uv group across 2 directories with 2 updates by @dependabot[bot] in #5361

Other Changes 🦾

chore(deps): Update astral-sh/setup-uv action to v10.2.0 by @prefect-renovate[bot] in #5347

New Contributors

@Harsh23Kashyap made their first contribution in #5351
@aritejhg made their first contribution in #5372
@Patrick-SCH03 made their first contribution in #5291
@sclfcz made their first contribution in #5296
[@asasemahmed](https://redirect.github.com/asa

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- Between 12:00 AM and 05:59 AM (* 0-5 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-14T23:11:22Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for fastmcp resolved to version 4.1.6, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.1.3
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

sonarqubecloud · 2026-11-03T22:00:08Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot requested a review from a team as a code owner September 14, 2026 23:11

renovate Bot added bot Automated pull requests or issues dependencies Pull requests that update a dependency file renovate Pull requests from Renovate skip:codecov Skip Codecov reporting and check skip:test:long_running Skip long-running tests (≥5min) labels Sep 14, 2026

renovate Bot force-pushed the renovate/fastmcp-4.x branch 3 times, most recently from 0bcd2ea to 817595c Compare September 22, 2026 12:38

renovate Bot force-pushed the renovate/fastmcp-4.x branch 2 times, most recently from eb187a3 to be1168b Compare September 30, 2026 02:03

renovate Bot force-pushed the renovate/fastmcp-4.x branch 2 times, most recently from 2edfa7f to d3c789d Compare October 7, 2026 23:19

renovate Bot force-pushed the renovate/fastmcp-4.x branch 2 times, most recently from cbc20d2 to cb7eefc Compare October 13, 2026 13:51

renovate Bot force-pushed the renovate/fastmcp-4.x branch 3 times, most recently from dfd4dc4 to cb86d59 Compare October 23, 2026 02:51

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4~~ fix(deps): update dependency fastmcp to v4 - autoclosed Oct 24, 2026

renovate Bot closed this Oct 24, 2026

renovate Bot deleted the renovate/fastmcp-4.x branch October 24, 2026 02:34

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4 - autoclosed~~ fix(deps): update dependency fastmcp to v4 Oct 27, 2026

renovate Bot reopened this Oct 27, 2026

renovate Bot force-pushed the renovate/fastmcp-4.x branch from cb86d59 to 0c19e69 Compare October 27, 2026 00:00

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4~~ fix(deps): update dependency fastmcp to v4 - autoclosed Oct 27, 2026

renovate Bot closed this Oct 27, 2026

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4 - autoclosed~~ fix(deps): update dependency fastmcp to v4 Oct 28, 2026

renovate Bot reopened this Oct 28, 2026

renovate Bot force-pushed the renovate/fastmcp-4.x branch from 59fed26 to 0c19e69 Compare October 28, 2026 02:26

renovate Bot force-pushed the renovate/fastmcp-4.x branch 2 times, most recently from 59fed26 to f3fc088 Compare November 2, 2026 08:00

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4~~ fix(deps): update dependency fastmcp to v4 - autoclosed Nov 2, 2026

renovate Bot closed this Nov 2, 2026

renovate Bot changed the title ~~fix(deps): update dependency fastmcp to v4 - autoclosed~~ fix(deps): update dependency fastmcp to v4 Nov 3, 2026

renovate Bot reopened this Nov 3, 2026

renovate Bot force-pushed the renovate/fastmcp-4.x branch 2 times, most recently from f3fc088 to 382b5fd Compare November 3, 2026 00:42

fix(deps): update dependency fastmcp to v4

6ba95e7

renovate Bot force-pushed the renovate/fastmcp-4.x branch from 382b5fd to 6ba95e7 Compare November 3, 2026 21:37

Navigation Menu

Repository navigation

fix(deps): update dependency fastmcp to v4 - #721

fix(deps): update dependency fastmcp to v4#721
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/fastmcp-4.x

renovate Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Nov 3, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.1.3: : Root Awakening

What's Changed

Security 🔒

Enhancements ✨

Fixes 🐞

Documentation 📚

New Contributors

v4.1.2: : License to Deny

What's Changed

Security 🔒

Enhancements ✨

Fixes 🐞

Docs 📚

Examples & Contrib 💡

Other Changes 🦾

New Contributors

v4.1.1: : Regex Marks the Spot

What's Changed

Security 🔒

Fixes 🐞

Examples & Contrib 💡

New Contributors

v4.1.0: : Fourth and One

What's Changed

Breaking Changes ⚠️

Enhancements ✨

Security 🔒

Fixes 🐞

Docs 📚

Examples & Contrib 💡

Dependencies 📦

New Contributors

v4.0.11: : Fort Knocks

What's Changed

Enhancements ✨

Security 🔒

Fixes 🐞

Docs 📚

Dependencies 📦

Other Changes 🦾

New Contributors

Configuration

Uh oh!

renovate Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pyproject.toml

Uh oh!

sonarqubecloud Bot commented Nov 3, 2026

Quality Gate passed

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 14, 2026 •

edited

Loading

`v4.1.3`: : Root Awakening

`v4.1.2`: : License to Deny

`v4.1.1`: : Regex Marks the Spot

`v4.1.0`: : Fourth and One

`v4.0.11`: : Fort Knocks

renovate Bot commented Sep 14, 2026 •

edited

Loading