Skip to content

Update mcp requirement from ~> 0.1 to >= 0.1, < 2.0 - #19

Merged
dduugg merged 2 commits into
mainfrom
dependabot/bundler/mcp-0.23.0
Jul 31, 2026
Merged

Update mcp requirement from ~> 0.1 to >= 0.1, < 2.0#19
dduugg merged 2 commits into
mainfrom
dependabot/bundler/mcp-0.23.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on mcp to permit the latest version.

Release notes

Sourced from mcp's releases.

v0.23.0

Added

  • Add a session-ownership hook to StreamableHTTPTransport

Changed

  • Require calling MCP::Client#connect before sending requests on stdio transport (#427)

Deprecated

  • Annotate Roots, Sampling, and Logging APIs as deprecated per SEP-2577 (#429)

Fixed

  • Fix an incorrect result: null response to an id-bearing notification message (#435)
  • Validate Host and Origin headers to prevent DNS rebinding per MCP 2025-11-25
  • Bound stateful session retention to prevent an initialize-flood DoS
  • Bound stdio frame reads with max_line_bytes
  • Bound request body and frame reads to prevent memory-exhaustion DoS
Changelog

Sourced from mcp's changelog.

[0.23.0] - 2026-07-07

Added

  • Add a session-ownership hook to StreamableHTTPTransport

Changed

  • Require calling MCP::Client#connect before sending requests on stdio transport (#427)

Deprecated

  • Annotate Roots, Sampling, and Logging APIs as deprecated per SEP-2577 (#429)

Fixed

  • Fix an incorrect result: null response to an id-bearing notification message (#435)
  • Validate Host and Origin headers to prevent DNS rebinding per MCP 2025-11-25
  • Bound stateful session retention to prevent an initialize-flood DoS
  • Bound stdio frame reads with max_line_bytes
  • Bound request body and frame reads to prevent memory-exhaustion DoS
Commits
  • 95feef2 Merge pull request #442 from koic/release_0_23_0
  • 494f43d Release 0.23.0
  • 6cb78ea Merge commit from fork
  • 772e0cb Bound Request Body and Frame Reads to Prevent Memory-Exhaustion DoS
  • 0ede5fc Merge commit from fork
  • 3546660 Add a Session-Ownership Hook to StreamableHTTPTransport
  • 4b400be Merge commit from fork
  • dfdd4ef Merge upstream modelcontextprotocol/ruby-sdk main
  • cfccb7c Merge commit from fork
  • c893075 Merge commit from fork
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Updates the requirements on [mcp](https://github.com/modelcontextprotocol/ruby-sdk) to permit the latest version.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/ruby-sdk@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.23.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 31, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 31, 2026 15:11
Comment thread chatwerk.gemspec Outdated
Comment thread Gemfile.lock Outdated
Co-authored-by: Douglas Eichelberger <697964+dduugg@users.noreply.github.com>
@dduugg
dduugg enabled auto-merge (squash) July 31, 2026 17:52
@dduugg
dduugg merged commit 6fbaa49 into main Jul 31, 2026
5 checks passed
@dduugg
dduugg deleted the dependabot/bundler/mcp-0.23.0 branch July 31, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant