From 4f75317b6486f63b74157f52b3862681b3785eec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 20:14:30 +0000 Subject: [PATCH] chore(deps): Bump the python-dependencies group across 1 directory with 3 updates Updates the requirements on [ruff](https://github.com/astral-sh/ruff), [numpy](https://github.com/numpy/numpy) and [mcp](https://github.com/modelcontextprotocol/python-sdk) to permit the latest version. Updates `ruff` to 0.16.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.0...0.16.3) Updates `numpy` to 2.5.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](https://github.com/numpy/numpy/compare/v2.5.1...v2.5.2) Updates `mcp` to 2.0.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.28.1...v2.0.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.3 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: numpy dependency-version: 2.5.2 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: mcp dependency-version: 2.0.0 dependency-type: direct:development dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] --- pyproject.toml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 6cee2a5..7ed649a 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -22,7 +22,7 @@ classifiers = [ dependencies = [ "pandas (>=3.0.5,<4.0.0)", "matplotlib (>=3.11.1,<4.0.0)", - "numpy (>=2.5.1,<3.0.0)", + "numpy (>=2.5.2,<3.0.0)", # matplotlib's image backend (pulled transitively); floored to the patched # release that fixes the 2026 Pillow CVEs (GHSA/CVE image-parsing issues). "pillow (>=12.3.0)", @@ -34,7 +34,7 @@ dependencies = [ # pydantic-settings, cryptography). Capped <2.0.0: mcp 2.0 removed the vendored # mcp.server.fastmcp, which mcp_server.py builds on — a 2.0 migration is a # separate, deliberate change, not a Dependabot floor bump. -mcp = ["mcp>=1.28.1,<2.0.0"] +mcp = ["mcp>=2.0.0,<3.0.0"] [project.scripts] dope-plot = "dope_plot.cli:main" @@ -58,7 +58,7 @@ include = [ ] [tool.poetry.group.dev.dependencies] -ruff = "^0.16.0" +ruff = "^0.16.3" pytest = "^9.1.1" [tool.ruff]