Skip to content

v1.34.3 — Dependency security refresh

Choose a tag to compare

View all tags
@UPinar UPinar released this 27 Jun 14:39
v1.34.3
488365a

Maintenance release rolling up the dependency upgrades since v1.34.2. No HTTP
route, response schema, or MCP tool changes — purely a refreshed,
security-patched dependency stack.

Dependency upgrades

  • starlette 1.0.0 → 1.3.1 — upstream form-parsing limit enforcement and
    URL/host-handling fixes (field/size bounds now applied to urlencoded forms;
    safer request.url host parsing).
  • fastapi 0.136.3 → 0.138.0 — adapts internal route introspection to the
    0.137 router refactor.
  • cryptography 48.0.1 → 49.0.0 — latest upstream security maintenance.
  • mcp 1.28.0, pytest 9.1.1, actions/checkout 7 (CI).

Tests

  • Full suite green: 2579 passed.
  • The scan-route registration test now asserts against the public OpenAPI
    contract (stable across FastAPI route-internals changes) with a spec-wide
    operationId-uniqueness guard.

Surface (unchanged)

  • 54 MCP tools, 7 Resources, 3 Prompts. No tool/schema/endpoint change;
    MCP Registry / indexer refresh not required.
Assets 2
Loading