From 413330dbda70c2e7b3103560cd7d2cf790e91c4a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 18 Oct 2026 17:33:32 +0000
Subject: [PATCH] chore(deps): bump the python-deps group with 4 updates

Updates the requirements on [mcp](https://github.com/modelcontextprotocol/python-sdk), [python-dotenv](https://github.com/theskumar/python-dotenv), [pypdf](https://github.com/py-pdf/pypdf) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.

Updates `mcp` to 2.3.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v2.0.0...v2.3.0)

Updates `python-dotenv` to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.2.4)

Updates `pypdf` to 6.20.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/py-pdf/pypdf/compare/6.20.0...6.20.1)

Updates `ruff` to 0.17.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.17.0...0.17.1)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 2.3.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pypdf
  dependency-version: 6.20.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 8fbe532..27a690d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -39,8 +39,8 @@ dependencies = [
   # Imported directly (mcp.types.TextContent, mcp.server.auth) but otherwise
   # arrives transitively through fastmcp[client,server] — not a contract we own.
   # Lower bound is the 2.0 rename of CallToolResult.isError to is_error.
-  "mcp>=2.0.0,<3.0.0",
-  "python-dotenv>=1.0.0",
+  "mcp>=2.3.0,<3.0.0",
+  "python-dotenv>=1.2.4",
   "psycopg[binary,pool]>=3.3.6",
   "redis>=8.1.0,<9.0",
   "psycopg-pool>=3.3.3",
@@ -61,7 +61,7 @@ embeddings = ["fastembed>=0.9.0"]
 # Document ingestion (PIX-4704). Opt-in and fully local: pypdf extracts text
 # from PDFs, pytesseract+Pillow OCR raster images (also needs the `tesseract`
 # binary on PATH). Kept optional so a bare install stays dependency-light.
-pdf = ["pypdf>=6.20.0"]
+pdf = ["pypdf>=6.20.1"]
 ocr = ["pytesseract>=0.3.13", "Pillow>=12.3.0"]
 documents = ["foresight[pdf,ocr]"]
 all = ["foresight[cli,tui,redis,embeddings,pdf,ocr]"]
@@ -101,7 +101,7 @@ dev = [
   "typer>=0.27.3",
   "rich>=15.0.0",
   "textual>=8.2.8",
-  "ruff>=0.17.0",
+  "ruff>=0.17.1",
   "bandit>=1.9.4",
   "twine>=7.0.0",
 ]