Upgrade dependencies to fix security vulnerabilities
Upgraded 9 packages to resolve 10 known CVEs identified by pip-audit:
authlib, cryptography, fastmcp (2.x→3.0.1), filelock, jaraco-context,
pip, python-multipart, urllib3. diskcache (GHSA-w8v5-vhqr-4h9v) has no fix
available yet.
Updated fastmcp lower bound in pyproject.toml from 2.13.0.2 to 3.0.1
to prevent reinstalling the vulnerable version if uv.lock is absent.
Adapted test_docker_container.sh for fastmcp 3.0.1 behavioural change:
the new mcp library cancels in-flight tasks when stdin closes, so the
tools/call smoke test was replaced with a tools/list check. Added
--no-cache flag to force a fresh Docker build when needed.
Updated CLAUDE.md: removed stale test_cylera_client.py references,
documented Doppler test invocation, and fixed pip-audit command to use
uv run --with pip-audit pip-audit so it audits the correct venv.
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com
Full Changelog: v1.0.2...v1.0.3