Update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change	Age	Confidence
gradle (source)	major	8.14.2 → 9.3.1
mcp	minor	==1.9.4 → ==1.26.0
requests (source, changelog)	patch	==2.32.4 → ==2.32.5

---

Release Notes

gradle/gradle (gradle)

v9.3.1: 9.3.1

Compare Source

This is a patch release for 9.3.0. We recommend using 9.3.1 instead of 9.3.0.

The following issues were resolved:

• Cannot find testcases from Android Screenshot Test plugin since Gradle 9.3.0
• Excluding dependencies from included builds doesn't work in Gradle 9.3.0
• ExternalDependency and DependencyConstraint cannot be passed to DependencyResolveDetails#useTarget
• Gradle 9.3.0 generate JUnit test result files with wrong name
• Build cache cannot handle outputs with non-BMP characters in the filename
• Emojis in test names should not break build caching
• Non utf-8 c code is no longer buildable
• Breaking change in 9.3.0 regarding cross-project dependency manipulation
• JUnit3 tests cannot be run with Gradle 9.3.0
• Test.setScanForTestClasses(false) causes all junit4 tests to be skipped

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 9.3.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.3.0

Compare Source

v9.2.1: 9.2.1

Compare Source

The Gradle team is excited to announce Gradle 9.2.1.

Here are the highlights of this release:

• Windows ARM support
• Improved publishing APIs
• Better guidance for dependency verification failures

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Björn Kautler,
hasunzo,
HYEON,
Hyunjoon Park,
HYUNJUN SON,
Jendrik Johannes,
Kirill Gavrilov,
Madalin Valceleanu,
Martin Bonnin,
Matthew Haughton,
Mikhail Polivakha,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Róbert Papp,
Simon Marquis,
TheGoesen,
Vincent Potucek,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.2.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.2.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.2.0

Compare Source

v9.1.0: 9.1.0

Compare Source

The Gradle team is excited to announce Gradle 9.1.0.

Here are the highlights of this release:

• Full Java 25 support
• Native task graph visualization
• Enhanced console output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Eng Zer Jun,
EunHyunsu,
Gaëtan Muller,
HeeChul Yang,
Jendrik Johannes,
Johnny Lim,
Junho Lee,
Kirill Gavrilov,
Matthew Haughton,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Pradyumna C,
r-a-sattarov,
Ryszard Perkowski,
Sebastian Schuberth,
SebastianHeil,
Staffan Al-Kadhimi,
winfriedgerlach,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.1.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.1.0 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.0.0: 9.0.0

Compare Source

The Gradle team is excited to announce Gradle 9.0.0.

Here are the highlights of this release:

• Configuration Cache is the recommended execution mode
• Gradle requires JVM 17 or higher to run
• Build scripts use Kotlin 2.2 and Groovy 4.0
• Improved Kotlin DSL script compilation avoidance

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aaron Matthis,
Adam E,
Adam S,
Björn Kautler,
Daniel Lacasse,
Eng Zer Jun,
EunHyunsu,
FlorianMichael,
Francisco Prieto,
Gaëtan Muller,
Jake Wharton,
Kengo TODA,
Kent Kaseda,
Madalin Valceleanu,
Marc Philipp,
Mark S. Lewis,
Matthew Haughton,
Mycroft Wong,
Na Minhyeok,
Nelson Osacky,
Olivier "Oli" Dagenais,
ploober,
Radai Rosenblatt,
Róbert Papp,
Sebastian Schuberth,
Victor Merkulov.

Upgrade instructions

Switch your build to use Gradle 9.0.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.0.0 && ./gradlew wrapper

See the Gradle 9.0.0 upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.4

Compare Source

v8.14.3: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

modelcontextprotocol/python-sdk (mcp)

v1.26.0

Compare Source

What's Changed

• ci: add all-green job to pull-request-checks workflow by @​maxisbey in #​1929
• Backport: Support for Resource and ResourceTemplate metadata by @​maxisbey in #​1928
• [v1.x] fix: return HTTP 404 for unknown session IDs instead of 400 by @​LucaButBoring in #​1945

Full Changelog: modelcontextprotocol/python-sdk@v1.25.0...v1.26.0

v1.25.0

Compare Source

Branching Update

Starting with this release, the repository has adopted a new branching strategy for v2 development:

• main — v2 development (breaking changes)
• v1.x — v1 maintenance (security and critical bug fixes only, with very rare feature additions ported from main)

Users who need to stay on v1.x should pin to mcp>=1.25,<2.

The current plan is to work through v2 and have it released some time in Q1. This also relies on the next upcoming spec release which will heavily change how the transport layer works, which in turn will guide a lot of how we architect v2.

---

What's Changed

• Fix for Url Elicitation issue 1768 by @​gopitk in #​1780
• ci: add v1.x branch to main-checks workflow by @​maxisbey in #​1802

New Contributors

• @​gopitk made their first contribution in #​1780

Full Changelog: modelcontextprotocol/python-sdk@v1.24.0...v1.25.0

v1.24.0

Compare Source

What's Changed

• feat: client-side support for SEP-1577 sampling with tools by @​jlowin in #​1722
• Fix JSON-RPC error response ID matching by @​crondinini-ant in #​1720
• Add streamable_http_client which accepts httpx.AsyncClient instead of httpx_client_factory by @​Kludex in #​1177
• fix: use correct python command name in test_stdio.py by @​WOnder93 in #​1782

New Contributors

• @​WOnder93 made their first contribution in #​1782

Full Changelog: modelcontextprotocol/python-sdk@v1.23.3...v1.24.0

v1.23.3

Compare Source

What's Changed

• refactor(auth): remove unused _register_client method by @​maxisbey in #​1748
• feat: add workflow to comment on PRs when released by @​felixweinberger in #​1750
• fix: allow MIME type parameters in resource validation (RFC 2045) by @​antonpk1 in #​1755
• Skip empty SSE data to avoid parsing errors by @​injusticescorpio in #​1753
• chore: remove release-comment workflow by @​maxisbey in #​1758

New Contributors

• @​antonpk1 made their first contribution in #​1755
• @​injusticescorpio made their first contribution in #​1753

Full Changelog: modelcontextprotocol/python-sdk@v1.23.2...v1.23.3

v1.23.2

Compare Source

What's Changed

• fix: add lifespan context manager to StreamableHTTP mounting examples by @​TheMailmans in #​1669
• fix: handle ClosedResourceError in StreamableHTTP message router by @​Edison-A-N in #​1384
• fix: skip priming events and close_sse_stream for old protocol versions by @​felixweinberger in #​1719

New Contributors

• @​TheMailmans made their first contribution in #​1669
• @​Edison-A-N made their first contribution in #​1384

Full Changelog: modelcontextprotocol/python-sdk@v1.23.1...v1.23.2

v1.23.1

Compare Source

What's Changed

• chore: update LATEST_PROTOCOL_VERSION to 2025-11-25 by @​felixweinberger in #​1715

Full Changelog: modelcontextprotocol/python-sdk@v1.23.0...v1.23.1

v1.23.0

Compare Source

Summary

This release brings us up to speed with the latest MCP spec 2025-11-25. Take a look at the latest spec as well as the release blog post.

What's Changed

• Add tests for JSON Schema 2020-12 field preservation (SEP-1613) by @​felixweinberger in #​1649
• Add client_secret_basic authentication support by @​jonshea in #​1334
• Implement SEP-1577 - Sampling With Tools by @​ochafik in #​1594
• SEP-1330: Elicitation Enum Schema Improvements and Standards Compliance by @​chughtapan in #​1246
• [auth][conformance] add conformance auth client by @​pcarleton in #​1640
• Implement SEP-986: Tool name validation by @​felixweinberger in #​1655
• fix: url for spec by @​felixweinberger in #​1659
• feat: implement SEP-991 URL-based client ID (CIMD) support by @​pcarleton in #​1652
• Update doc string on custom_route by @​pcarleton in #​1660
• Implement SEP-1036: URL mode elicitation for secure out-of-band interactions by @​cbcoutinho in #​1580
• Skip empty SSE data to avoid parsing errors by @​felixweinberger in #​1670
• SEP-1686: Tasks by @​maxisbey in #​1645
• Add on_session_created callback option by @​crondinini-ant in #​1710
• Add SSE polling support (SEP-1699) by @​felixweinberger in #​1654
• Support client_credentials flow with JWT and Basic auth by @​pcarleton in #​1663
• feat: backwards-compatible create_message overloads for SEP-1577 by @​felixweinberger in #​1713
• Auto-enable DNS rebinding protection for localhost servers by @​pcarleton (d3a1841)

New Contributors

• @​ochafik made their first contribution in #​1594

Full Changelog: modelcontextprotocol/python-sdk@v1.22.0...v1.23.0

v1.22.0

Compare Source

What's Changed

• feat: Pass through and expose additional parameters in ClientSessionGroup.call_tool and .connect_to_server by @​inaku-Gyan in #​1576
• chore: Lazy import jsonschema library by @​wuliang229 in #​1596
• docs: Update examples to use stateless HTTP with JSON responses by @​domdomegg in #​1499

New Contributors

• @​wuliang229 made their first contribution in #​1596

Full Changelog: modelcontextprotocol/python-sdk@v1.21.1...v1.22.0

v1.21.2

Compare Source

Hotfix Release

This is a hotfix release to address a critical bug in OAuth scope handling that caused failures on 401 responses.

Related:

• #​1630
• #​1632

What's Changed

• fix get_client_metadata_scopes on 401 by @​abliznyuk in #​1631

New Contributors

• @​abliznyuk made their first contribution in #​1631

Full Changelog: modelcontextprotocol/python-sdk@v1.21.1...v1.21.2

v1.21.1

Compare Source

What's Changed

• Add everything-server for comprehensive MCP conformance testing by @​felixweinberger in #​1587
• Get baseline 100% clean coverage by @​maxisbey in #​1553
• Add end-of-file-fixer pre-commit hook by @​maxisbey in #​1610
• Add coverage baseline commit to git-blame-ignore by @​maxisbey in #​1613
• Add SEP-1034 conformance test support to everything-server by @​felixweinberger in #​1604
• refactor: extract OAuth helper functions and simplify provider state by @​maxisbey in #​1586
• Add client_id_metadata_document_supported to OAuthMetadata by @​maxisbey in #​1603
• Fix OAuth discovery fallback and URL ordering by @​maxisbey in #​1624
• Refactor func_metadata() implementation by @​Viicos in #​1496
• Fix CI highest resolution test to actually test highest versions by @​maxisbey in #​1609

New Contributors

• @​Viicos made their first contribution in #​1496

Full Changelog: modelcontextprotocol/python-sdk@v1.21.0...v1.21.1

v1.21.0

Compare Source

What's Changed

• docs: use article "an" before "MCP" instead of "a" by @​koic in #​1558
• Update Starlette to 0.49.1 in uv.lock by @​ColeMurray in #​1559
• Fix typo in ClientSessionGroup doc string by @​inaku-Gyan in #​1572
• Implement SEP-985: OAuth Protected Resource Metadata discovery fallback by @​cbcoutinho in #​1548
• Add --frozen flag to uv run commands in Claude config by @​maxisbey in #​1583
• Add get_server_capabilities() to ClientSession by @​crondinini-ant in #​1588

New Contributors

• @​koic made their first contribution in #​1558
• @​ColeMurray made their first contribution in #​1559
• @​inaku-Gyan made their first contribution in #​1572
• @​cbcoutinho made their first contribution in #​1548
• @​crondinini-ant made their first contribution in #​1588

Full Changelog: modelcontextprotocol/python-sdk@v1.20.0...v1.21.0

v1.20.0

Compare Source

What's Changed

• Relax Accept header requirement for JSON-only responses by @​domdomegg in #​1500
• fix: replace deprecated dev-dependencies in examples/clients by @​yukuanj in #​1518
• fix: Update spec links to new modelcontextprotocol.io location by @​maxisbey in #​1491
• fix: Replace fixed sleep with active server readiness check in SSE tests by @​maxisbey in #​1526
• fix: Replace arbitrary sleeps with active server readiness checks in tests by @​maxisbey in #​1527
• Fix flaky timeout test in test_88_random_error by @​maxisbey in #​1525
• fix: Replace remaining manual server polling with wait_for_server helper by @​maxisbey in #​1529
• Implement RFC 7523 JWT flows by @​LucaButBoring in #​1247
• Fix pyright error and replace wildcard import with explicit imports by @​maxisbey in #​1532
• Fix auth client example URL handling for oauth provider by @​pcarleton in #​1549

New Contributors

• @​domdomegg made their first contribution in #​1500
• @​pcarleton made their first contribution in #​1549

Full Changelog: modelcontextprotocol/python-sdk@v1.19.0...v1.20.0

v1.19.0

Compare Source

What's Changed

• feat: add tool metadata in FastMCP.tool decorator by @​mat-octave in #​1463
• Make client examples workspaces to reflect package code by @​LucaButBoring in #​1466
• Expose RequestParams._meta in ClientSession.call_tool by @​samchenatti in #​1231
• Allow CallToolResult to be returned directly to support _meta field for OpenAI Apps by @​BrandonShar in #​1459
• fix: uv CVE-2025-62518 astral-tokio-tar issue GHSA-j5gw-2vrg-8fgx by @​cclauss in #​1505
• fix: use proper dependency resolution in CI by @​felixweinberger in #​1507
• Upgrade GitHub Actions by @​cclauss in #​1473
• test: use errno.ENOENT for command not found assertion by @​mingo1996 in #​1498
• Replace deprecated dev-dependencies with dependency-groups by @​yukuanj in #​1488
• update uv to 0.9.5 by @​maxisbey in #​1510

New Contributors

• @​mat-octave made their first contribution in #​1463
• @​samchenatti made their first contribution in #​1231
• @​BrandonShar made their first contribution in #​1459
• @​mingo1996 made their first contribution in #​1498

Full Changelog: modelcontextprotocol/python-sdk@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

• [client] Implement MCP OAuth scope selection and step-up authorization by @​dogacancolak in #​1324
• Handles message type Exception in lowlevel/server.py _handle_message function. Mentioned as TODO on line 528. by @​AishwaryaKalloli in #​786
• Fix workspace configuration error with structured_output_lowlevel.py by @​felixweinberger in #​1471
• fix: Remove unnecessary constructor from ResourceServerSettings by @​rocky-d in #​1424
• feat: add resource annotations support to FastMCP by @​fennb in #​1468
• fix: send params as empty object for list methods without cursor by @​felixweinberger in #​1453
• fix: Set the Server session initialization state immediately after respond… by @​daamitt in #​1478

New Contributors

• @​dogacancolak made their first contribution in #​1324
• @​rocky-d made their first contribution in #​1424
• @​fennb made their first contribution in #​1468
• @​daamitt made their first contribution in #​1478

Full Changelog: modelcontextprotocol/python-sdk@v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

• Add documentation structure by @​Kludex in #​1425
• Add documentation about testing by @​Kludex in #​1426
• Improve OAuth protected resource metadata URL construction per RFC 9728 by @​shulkx in #​1407
• feat: add ability to remove tools by @​brandonspark in #​1322
• Update README to link to Python SDK documentation by @​felixweinberger in #​1430
• fix: update CLAUDE.md to remove auto-addition of reviewers. by @​felixweinberger in #​1431

New Contributors

• @​shulkx made their first contribution in #​1407
• @​brandonspark made their first contribution in #​1322

Full Changelog: modelcontextprotocol/python-sdk@v1.16.0...v1.17.0

v1.16.0

Compare Source

What's Changed

• Add error log for client stdio by @​pengwa in #​924
• Accept additional response_types values from OAuth servers by @​jonshea in #​1323
• Issue 1379 patch - Fix MCP server OAuth not working with Visual Studio Code and others with extra grant_types by @​automaton82 in #​1380
• Add comprehensive Unicode tests for streamable HTTP transport by @​pja-ant in #​1381
• Update Icon.sizes to use string array format by @​pja-ant in #​1411
• Delete CODEOWNERS to eliminate notification overload by @​felixweinberger in #​1413
• fix: fix the system message in simple-chatbot example by @​yukuanj in #​1394
• fix: improve misleading warning for progress callback exceptions by @​lorenzocesconetto in #​775
• fix: catch and rethrow SSEError during SSE connection establishment by @​zhangch-ss in #​975
• Add icons support for ResourceTemplate by @​pja-ant in #​1412

New Contributors 🙏

• @​pengwa made their first contribution in #​924
• @​jonshea made their first contribution in #​1323
• @​automaton82 made their first contribution in #​1380
• @​yukuanj made their first contribution in #​1394
• @​zhangch-ss made their first contribution in #​975

Full Changelog: modelcontextprotocol/python-sdk@1.15.0...v1.16.0

v1.15.0

Compare Source

What's Changed

• Return HTTP 403 for invalid Origin headers by @​pja-ant in #​1353
• Add test for ProtectedResourceMetadataParsing by @​yannj-fr in #​1236
• Fastmcp logging progress example by @​stevebillings in #​1270
• feat: add paginated list decorators for prompts, resources, and tools by @​maxisbey in #​1286
• Remove "unconditionally" from conditional description by @​mssalvatore in #​1289
• Use streamable-http consistently in examples by @​maxisbey in #​1389
• feat: Add SDK support for SEP-1034 default values in elicitation schemas by @​chughtapan in #​1337
• Implementation of SEP 973 - Additional metadata + icons support by @​pja-ant in #​1357

New Contributors

• @​stevebillings made their first contribution in #​1270
• @​mssalvatore made their first contribution in #​1289

Full Changelog: modelcontextprotocol/python-sdk@v1.14.1...v1.15.0

v1.14.1

Compare Source

What's Changed

• fix(fastmcp): propagate mimeType in resource template list by @​pchoudhury22 in #​1186
• fix: allow elicitations accepted without content by @​owengo in #​1285
• Use --frozen in pre-commit config by @​pja-ant in #​1375

New Contributors

• @​pchoudhury22 made their first contribution in #​1186
• @​owengo made their first contribution in #​1285

Full Changelog: modelcontextprotocol/python-sdk@v1.14.0...v1.14.1

v1.14.0

Compare Source

What's Changed

• Added Audio to FastMCP by @​dragonier23 in #​1130
• Fix: avoid uncessary retries in OAuth authenticated requests by @​keurcien in #​1206
• Add PATHEXT to default STDIO env vars in windows by @​timesler in #​1256
• fix: error too many values to unpack (expected 2) by @​sandangel in #​1279
• SDK Parity: Avoid Parsing Server Response for non-JsonRPCMessage Requests by @​justin-yi-wang in #​1290
• types: Setting default value for method: Literal by @​sreenaths in #​1292
• changes structured temperature to not deadly by @​monkeywithacupcake in #​1328
• Update simple-resource example to use non-deprecated read_resource return type by @​pja-ant in #​1331
• docs: Update README to include link to API docs for #​1329 by @​reidg44 in #​1330
• Allow ping requests before initialization by @​eleftherias in #​1312
• Python lint: Ruff rules for pylint and code complexity by @​cclauss in #​525
• Fix context injection for resources and prompts by @​dsp-ant in #​1336

New Contributors 🙏

• @​dragonier23 made their first contribution in #​1130
• @​keurcien made their first contribution in #​1206
• @​timesler made their first contribution in #​1256
• @​sandangel made their first contribution in #​1279
• @​justin-yi-wang made their first contribution in #​1290
• @​monkeywithacupcake made their first contribution in #​1328
• @​pja-ant made their first contribution in #​1331
• @​reidg44 made their first contribution in #​1330
• @​eleftherias made their first contribution in #​1312

Full Changelog: modelcontextprotocol/python-sdk@v1.13.1...v1.14.0

v1.13.1

Compare Source

What's Changed

• chore: uncomment .idea/ in .gitignore by @​maxisbey in #​1287
• docs: clarify streamable_http_p

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.