Compare commits

...

3 Commits

Author SHA1 Message Date
Amin Ghadersohi
61b3992cf5 chore(mcp): regenerate requirements via Docker uv-pip-compile
Re-run scripts/uv-pip-compile.sh inside Docker (Python 3.11 on Linux)
to produce lockfiles consistent with CI. Previous local compile on
macOS missed Linux-only deps (secretstorage, jeepney) and included
Python <3.11 deps (async-timeout, tomli) that don't apply.
2026-04-29 16:30:35 +00:00
Amin Ghadersohi
5c886bba12 chore(mcp): regenerate requirements after fastmcp bump
Run uv-pip-compile to update resolved dependency versions after
bumping fastmcp lower bound to >=3.2.4.
2026-04-29 16:30:35 +00:00
Amin Ghadersohi
081f4e75e7 feat(mcp): bump fastmcp minimum to 3.2.4 for security fixes
Bumps the lower bound of the fastmcp optional dependency from >=3.1.0
to >=3.2.4. The 3.2.1-3.2.4 releases include:

- Security: FileUpload size validation bypass, proxy header leak fix,
  AuthKit audience binding per RFC 8707
- Bug fixes: json_schema_to_type crashes on Python keywords/boolean
  schemas/empty enums, Gemini 2.5 Flash compatibility
- Auth improvements: Better JWT rejection logging, consent cookie LRU
  cap at 25, upstream_claims propagation in OAuthProxy
2026-04-29 16:30:35 +00:00
2 changed files with 4 additions and 2 deletions

View File

@@ -145,7 +145,7 @@ solr = ["sqlalchemy-solr >= 0.2.0"]
elasticsearch = ["elasticsearch-dbapi>=0.2.12, <0.3.0"]
exasol = ["sqlalchemy-exasol >= 2.4.0, <3.0"]
excel = ["xlrd>=1.2.0, <1.3"]
fastmcp = ["fastmcp>=3.1.0,<4.0"]
fastmcp = ["fastmcp>=3.2.4,<4.0"]
firebird = ["sqlalchemy-firebird>=0.7.0, <0.8"]
firebolt = ["firebolt-sqlalchemy>=1.0.0, <2"]
gevent = ["gevent>=23.9.1"]

View File

@@ -236,7 +236,7 @@ et-xmlfile==2.0.0
# openpyxl
exceptiongroup==1.3.0
# via fastmcp
fastmcp==3.1.0
fastmcp==3.2.4
# via apache-superset
filelock==3.20.3
# via
@@ -379,6 +379,8 @@ greenlet==3.1.1
# gevent
# shillelagh
# sqlalchemy
griffelib==2.0.2
# via fastmcp
grpcio==1.71.0
# via
# apache-superset