chore(deps): bump the minor-and-patch group with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates: anyhow, handlebars, rmcp and uuid.

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates handlebars from 6.4.1 to 6.4.2

Changelog

Sourced from handlebars's changelog.

6.4.2 - 2026-06-24

• [Fixed] Access to local variables like @key, @index, etc. in #with and partial block #758
• [Fixed] Preserve ordering when iterating an array context inside a partial that receives hash parameters #760
• [Changed] Enable serde_json preserve_order feature. JSON objects are now iterated in insertion order (matching Handlebars.js semantics) instead of alphabetical key order. This fixes index-key ordering for array contexts converted into objects by partial hash parameters (e.g. "10" no longer sorts before "2").

Commits

• 7db1746 chore: Release handlebars version 6.4.2
• de9b256 chore: maintain changelog
• d022ea4 chore: update changelog
• 069e965 fix: preseve order for serde_json map (#762)
• 618e71f chore(deps-dev): bump webpack-dev-server in /playground/www (#759)
• 09c2016 fix: inherit @key/@index/@first/@​last into partials and #with (#758)
• ee99e2a chore(deps-dev): bump launch-editor in /playground/www (#757)
• 7aa45d6 chore: update time api
• 18d08e5 chore(deps-dev): bump shell-quote from 1.8.1 to 1.8.4 in /playground/www (#755)
• c795abc chore(deps): bump qs and express in /playground/www (#754)
• Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 1.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.8.0

Added

• deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

• strip and validate tool outputSchema and inputSchema (#860)
• remove unnecessary fields from tools' inputSchema (#856)

Other

• refine mcpmate listing copy (#885)
• added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0

[!WARNING]

⚠️ Breaking Changes

Despite being a minor version bump, this release contains a source-breaking API change (it should have been 2.0.0). If you depend on rmcp = "1.7", Cargo will resolve to 1.8.0 automatically and your build may fail. Pin to =1.7.x if you are not ready to migrate.

Peer::peer_info() return type changed (#862):

- pub fn peer_info(&self) -> Option<&R::PeerInfo>
+ pub fn peer_info(&self) -> Option<Arc<R::PeerInfo>>

This was needed so peer info can be re-set on a duplicate initialize (it now lives behind an RwLock), which is why a borrow can no longer be returned.

Migration: field access still works through Arc's Deref. If you need the old &InitializeResult (e.g. you bound the type explicitly), use .as_deref():

// Before (1.7.x): info is &InitializeResult
let info: Option<&InitializeResult> = client.peer_info();
// After (1.8.0): info is Arc<InitializeResult>
let info: Option<Arc<InitializeResult>> = client.peer_info();
// To recover the old reference type:
let info: Option<&InitializeResult> = client.peer_info().as_deref();

Added

• standardize resource-not-found error code (SEP-2164) (#899)
• validate OAuth authorization response issuer (#896)
• specify OIDC application_type during dynamic client registration (SEP-837) (#883)
• deprecate roots, sampling, and logging (SEP-2577) (#884)

... (truncated)

Commits

• 2522036 chore: release v1.8.0 (#850)
• 6d020c9 fix(auth): preserve configured reqwest client (#917)
• de898dd Allow custom HTTP clients for OAuth (#908)
• 3c5ce2b fix(auth): align OAuth metadata discovery ordering (#887)
• 443677c fix: align progress timeout token (#909)
• 4fd4986 fix(elicitation): preserve enumNames through ElicitationSchema serde round-tr...
• bf71eb8 chore(deps): bump actions/checkout from 6 to 7 (#911)
• 5d00e20 Add progress-aware request timeout reset (#858)
• 4b82e41 docs(server): document Err vs Ok(CallToolResult::error) visibility contract o...
• 95a8e96 feat: standardize resource-not-found error code (SEP-2164) (#899)
• Additional commits viewable in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• 5351af4 doc: Enable feature flag label for docs.rs
• 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
• c9619f6 fix up name of fuzz script in readme
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.