Skip to content

chore(deps): bump fastmcp from 3.32.0 to 4.3.0 in /src/mcp-server#1177

Merged
vybe merged 1 commit into
devfrom
dependabot/npm_and_yarn/src/mcp-server/dev/fastmcp-4.1.0
Jun 17, 2026
Merged

chore(deps): bump fastmcp from 3.32.0 to 4.3.0 in /src/mcp-server#1177
vybe merged 1 commit into
devfrom
dependabot/npm_and_yarn/src/mcp-server/dev/fastmcp-4.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps fastmcp from 3.32.0 to 4.3.0.

Release notes

Sourced from fastmcp's releases.

v4.3.0

4.3.0 (2026-06-15)

Features

  • add cors option to httpStream config (#266) (b68c24c)

v4.2.0

4.2.0 (2026-06-14)

Features

  • auth: support extra authorization params in OAuthProxy (#278) (e09c3d0)

v4.1.0

4.1.0 (2026-06-10)

Features

v4.0.2

4.0.2 (2026-06-06)

Bug Fixes

  • auth: fix OAuthProxy credential leak and redirect_uri validation (#262) (43f5f2e)

v4.0.1

4.0.1 (2026-04-24)

Bug Fixes

v4.0.0

4.0.0 (2026-04-13)

  • fix(auth)!: validate redirect_uri in OAuthProxy.authorize (CWE-601) (5478753)

Bug Fixes

... (truncated)

Commits
  • b68c24c feat: add cors option to httpStream config (#266)
  • e09c3d0 feat(auth): support extra authorization params in OAuthProxy (#278)
  • cad22a8 fix: allow HEAD method for /health and /ready endpoints (#275)
  • 83e3169 feat: support structured tool output (#273)
  • 43f5f2e fix(auth): fix OAuthProxy credential leak and redirect_uri validation (#262)
  • cdb9d62 Update README.md
  • b0282a7 Update README.md
  • da5e6e8 fix: update mcp-proxy
  • 9be7e25 fix: update mcp-proxy
  • 72c1166 fix: update to fixed mcp-proxy (#260)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Jun 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: mcp-server. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

⚠️ Nightly unit-suite check skipped — merge conflict against dev.

Resolve by running git merge dev locally and pushing the result. The next nightly run will re-test once the conflict is gone.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/mcp-server/dev/fastmcp-4.1.0 branch from 1382114 to 0dd7f0f Compare June 12, 2026 15:15

@vybe vybe left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Validated: fastmcp 3.32.0→4.1.0 major bump. The v4.0.0 BREAKING CHANGE (OAuthProxy allowedRedirectUriPatterns default removal) does NOT affect Trinity — the MCP server uses new FastMCP({authenticate}) API-key auth, not OAuthProxy (no OAuthProxy usage in src/). base=dev, CI green.

@vybe

vybe commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [fastmcp](https://github.com/punkpeye/fastmcp) from 3.32.0 to 4.3.0.
- [Release notes](https://github.com/punkpeye/fastmcp/releases)
- [Commits](punkpeye/fastmcp@v3.32.0...v4.3.0)

---
updated-dependencies:
- dependency-name: fastmcp
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump fastmcp from 3.32.0 to 4.1.0 in /src/mcp-server chore(deps): bump fastmcp from 3.32.0 to 4.3.0 in /src/mcp-server Jun 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/src/mcp-server/dev/fastmcp-4.1.0 branch from 0dd7f0f to 30f9d51 Compare June 17, 2026 13:30
@vybe vybe merged commit 7eb9df4 into dev Jun 17, 2026
16 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/src/mcp-server/dev/fastmcp-4.1.0 branch June 17, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant