chore: relax OpenAI and FastMCP dependency pins

CHANGELOG.md

@@ -11,6 +11,8 @@ Only write entries that are worth mentioning to users.
 
 ## Unreleased
 
+- MCP: Bump FastMCP to 3.3.1, keeping OAuth MCP support on the current upstream client/server stack
+
 ## 1.46.0 (2026-05-28)
 
 - Shell: Support styled text in welcome tips

packages/kosong/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- OpenAI: Relax the OpenAI SDK dependency to allow recent tested 2.x releases, so downstream apps can keep their provider stack up to date without conflicting with Kosong
+
 ## 0.53.0 (2026-04-28)
 
 - Kimi: Fix stale API key after OAuth token refresh — `on_retryable_error` now reads the current `api_key` from the live client instead of the cached `_api_key`, so that OAuth token refreshes applied via `client.api_key` are preserved when the client is rebuilt after a retryable error

packages/kosong/pyproject.toml

@@ -9,7 +9,7 @@ dependencies = [
     "google-genai>=1.56.0",
     "jsonschema>=4.25.1",
     "loguru>=0.6.0,<0.8",
-    "openai>=2.14.0,<2.15.0",
+    "openai>=2.14.0,<2.38.0",
     "pydantic>=2.12.5",
     "python-dotenv>=1.2.1",
     "typing-extensions>=4.15.0",

pyproject.toml

@@ -22,7 +22,7 @@ dependencies = [
     # lxml is used by trafilatura/htmldate/justext; keep pinned for binary wheels.
     "lxml==6.0.2",
     "tenacity==9.1.2",
-    "fastmcp==3.2.4",
+    "fastmcp==3.3.1",
     "pydantic==2.12.5",
     "httpx[socks]==0.28.1",
     "pykaos==0.9.0",

tests/utils/test_pyinstaller_utils.py

@@ -2,6 +2,7 @@
 
 import platform
 import sys
+from importlib.metadata import distribution
 from pathlib import Path
 
 from inline_snapshot import snapshot
@@ -13,6 +14,8 @@ def test_pyinstaller_datas():
     project_root = Path(__file__).parent.parent.parent
     python_version = f"{sys.version_info.major}.{sys.version_info.minor}"
     site_packages = f".venv/lib/python{python_version}/site-packages"
+    fastmcp_distribution = distribution("fastmcp")
+    fastmcp_dist_info = f"fastmcp-{fastmcp_distribution.version}.dist-info"
     rg_binary = "rg.exe" if platform.system() == "Windows" else "rg"
     has_rg_binary = (project_root / "src/kimi_cli/deps/bin" / rg_binary).exists()
     datas = [
@@ -28,39 +31,21 @@ def test_pyinstaller_datas():
 
     datas = [(p, d) for p, d in datas if "web/static" not in d and "vis/static" not in d]
 
+    fastmcp_dist_info_datas = [
+        (
+            f"{site_packages}/fastmcp/../{file_path}",
+            f"fastmcp/../{Path(file_path).parent.as_posix()}",
+        )
+        for file_path in sorted(str(file) for file in fastmcp_distribution.files or [])
+        if file_path.startswith(f"{fastmcp_dist_info}/")
+    ]
+
     expected_datas = [
         (
             f"{site_packages}/dateparser/data/dateparser_tz_cache.pkl",
             "dateparser/data",
         ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/INSTALLER",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/METADATA",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/RECORD",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/REQUESTED",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/WHEEL",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/entry_points.txt",
-            "fastmcp/../fastmcp-3.2.4.dist-info",
-        ),
-        (
-            f"{site_packages}/fastmcp/../fastmcp-3.2.4.dist-info/licenses/LICENSE",
-            "fastmcp/../fastmcp-3.2.4.dist-info/licenses",
-        ),
+        *fastmcp_dist_info_datas,
         (
             "src/kimi_cli/CHANGELOG.md",
             "kimi_cli",