Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates - #755

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-6efb6bdba6
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates#755
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-6efb6bdba6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates in the /mcp/cloud_storage_tool directory: google-cloud-storage, boto3 and fastmcp.

Updates google-cloud-storage from 3.12.1 to 3.13.1

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage: v3.13.1

3.13.1 (2026-08-06)

Bug Fixes

google-cloud-storage: v3.13.0

3.13.0 (2026-07-13)

Features

  • storage: add option to disable checksums and improve robustness of full_object_checksum validation (#17665) (a5a717d)
  • storage: support full_object_checksum in AsyncAppendableObjectWriter (#17658) (e08d5ca)
Commits
  • 905bfe3 chore: release main (#17832)
  • ad8f93c fix(api-core): use truthiness check in setup_request_id to support proto-plus...
  • 06dd2c0 chore: bump google-api-core to 2.28.0 (#18003)
  • 08f21a6 fix(proto-plus): add context to TypeErrors during message manipulation (#17682)
  • 32fd479 tests(spanner): avoid table name collisions in tests (#18001)
  • 2207ca6 feat: add pandas-gbq capability helper (#17957)
  • 6167e41 fix: deduplicate x-goog-api-client headers (#17616)
  • 71bc622 docs: add connector libraries overview table to package README (#17939)
  • 1b5c48b fix(bigframes): fix field name typos for ai.generate* functions (#17983)
  • f64ada2 fix: avoid retaining routing parameter instances in cache (#17961)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.45 to 1.43.68

Commits

Updates fastmcp from 3.4.4 to 3.4.7

Release notes

Sourced from fastmcp's releases.

v3.4.7: Know Your Audience

FastMCP 3.4.7 restores CIMD private_key_jwt authentication for OAuthProxy deployments at a bare origin. Client assertions are now validated against the exact token endpoint advertised in authorization server metadata, eliminating the doubled-slash audience mismatch.

What's Changed

Security 🔒

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.6...v3.4.7

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

What's Changed

Fixes 🐞

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.5...v3.4.6

v3.4.5: Key Change

FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.

What's Changed

Fixes 🐞

Docs 📚

New Contributors

Full Changelog: PrefectHQ/fastmcp@v3.4.4...v3.4.5

Changelog

Sourced from fastmcp's changelog.


title: "Changelog" icon: "list-check" rss: true tag: NEW

v3.4.7: Know Your Audience

FastMCP 3.4.7 fixes CIMD private_key_jwt authentication on bare-origin OAuth proxy deployments by validating client assertions against the exact token endpoint advertised in OAuth metadata.

Security 🔒

Docs 📚

Full Changelog: v3.4.6...v3.4.7

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

Fixes 🐞

Docs 📚

Full Changelog: v3.4.5...v3.4.6

v4.0.0b1: Fourgone Conclusion

FastMCP 4 makes stateful MCP applications work on the sessionless 2026-07-28 protocol while one deployment continues serving handshake-era clients. Tools can ask follow-up questions across requests, preserve authenticated user state, and move long-running work into background tasks without sticky sessions. Protocol extensions and enterprise identity become first-class surfaces, and most FastMCP 3 servers upgrade unchanged even though MCP Python SDK v2 rewrote the engine underneath them. Server-initiated sampling and roots are removed from the server API; the upgrade guide covers their replacements.

New Features 🎉

  • Migrate to MCP Python SDK v2 by @​jlowin in #4437
  • Teach fastmcp.Client the modern protocol: mode negotiation, MRTR driver, response cache by @​jlowin in #4450
  • Forward-port Hugging Face auth provider by @​jlowin in #4475
  • Add server-side identity assertion (SEP-990 ID-JAG) by @​jlowin in #4483

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 31, 2026
… updates

Bumps the minor-and-patch group with 3 updates in the /mcp/cloud_storage_tool directory: [google-cloud-storage](https://github.com/googleapis/google-cloud-python), [boto3](https://github.com/boto/boto3) and [fastmcp](https://github.com/PrefectHQ/fastmcp).


Updates `google-cloud-storage` from 3.12.1 to 3.13.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.12.1...google-cloud-storage-v3.13.1)

Updates `boto3` from 1.43.45 to 1.43.68
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.45...1.43.68)

Updates `fastmcp` from 3.4.4 to 3.4.7
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.4...v3.4.7)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fastmcp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google-cloud-storage
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-6efb6bdba6 branch from aba47ce to 26c55dd Compare August 14, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant