Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 2 updates - #777

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/flight_tool/minor-and-patch-7e63bb3e41
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 2 updates#777
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/flight_tool/minor-and-patch-7e63bb3e41

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 2 updates in the /mcp/flight_tool directory: playwright and fastmcp.

Updates playwright from 1.61.0 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format. Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

page.screenshot(path="homepage.webp", quality=50)

New APIs

  • New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scrolling into view.
  • New locator.wait_for_function() waits until a function called with the matching element returns a truthy value.
  • New apiResponse.timing() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151
Commits
  • 3b7c24c chore: roll Playwright to 1.62.0 (#3161)
  • 1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
  • 8335307 build(deps): bump greenlet from 3.5.3 to 3.5.4 (#3163)
  • 5c71b2b build(deps): bump mypy from 2.1.0 to 2.3.0 (#3150)
  • d0c8d03 build(deps-dev): bump setuptools-scm from 9.2.2 to 10.2.1 (#3151)
  • ca0319c build(deps): bump build from 1.4.4 to 1.5.0 (#3152)
  • 53802fe build(deps): bump requests from 2.33.0 to 2.34.2 (#3153)
  • 9bc998f build(deps): bump actions/setup-python from 6 to 7 in the actions group (#3154)
  • 9a10128 perf: speed up Python stack capture (#3147)
  • c3eff76 fix: show not_ prefix in call log when negative assertions fail (#3033)
  • Additional commits viewable in compare view

Updates fastmcp from 3.4.4 to 3.4.7

Release notes

Sourced from fastmcp's releases.

v3.4.7: Know Your Audience

FastMCP 3.4.7 restores CIMD private_key_jwt authentication for OAuthProxy deployments at a bare origin. Client assertions are now validated against the exact token endpoint advertised in authorization server metadata, eliminating the doubled-slash audience mismatch.

What's Changed

Security 🔒

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.6...v3.4.7

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

What's Changed

Fixes 🐞

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.5...v3.4.6

v3.4.5: Key Change

FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.

What's Changed

Fixes 🐞

Docs 📚

New Contributors

Full Changelog: PrefectHQ/fastmcp@v3.4.4...v3.4.5

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v3.4.7: Know Your Audience

FastMCP 3.4.7 fixes CIMD private_key_jwt authentication on bare-origin OAuth proxy deployments by validating client assertions against the exact token endpoint advertised in OAuth metadata.

Security 🔒

Docs 📚

Full Changelog: v3.4.6...v3.4.7

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

Fixes 🐞

Docs 📚

Full Changelog: v3.4.5...v3.4.6

v4.0.0b1: Fourgone Conclusion

FastMCP 4 makes stateful MCP applications work on the sessionless 2026-07-28 protocol while one deployment continues serving handshake-era clients. Tools can ask follow-up questions across requests, preserve authenticated user state, and move long-running work into background tasks without sticky sessions. Protocol extensions and enterprise identity become first-class surfaces, and most FastMCP 3 servers upgrade unchanged even though MCP Python SDK v2 rewrote the engine underneath them. Server-initiated sampling and roots are removed from the server API; the upgrade guide covers their replacements.

New Features 🎉

  • Migrate to MCP Python SDK v2 by @​jlowin in #4437
  • Teach fastmcp.Client the modern protocol: mode negotiation, MRTR driver, response cache by @​jlowin in #4450
  • Forward-port Hugging Face auth provider by @​jlowin in #4475
  • Add server-side identity assertion (SEP-990 ID-JAG) by @​jlowin in #4483

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 7, 2026
@dependabot
chore(deps): Bump the minor-and-patch group across 1 directory with 2…
f3d5a55 
… updates

Bumps the minor-and-patch group with 2 updates in the /mcp/flight_tool directory: [playwright](https://github.com/microsoft/playwright-python) and [fastmcp](https://github.com/PrefectHQ/fastmcp).


Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.61.0...v1.62.0)

Updates `fastmcp` from 3.4.4 to 3.4.7
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.4...v3.4.7)

---
updated-dependencies:
- dependency-name: fastmcp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/mcp/flight_tool/minor-and-patch-7e63bb3e41 branch from 9154a33 to f3d5a55 Compare August 14, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Rossoctl Issue Prioritization
Status: New/ToDo

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rubambiza