chore(deps): bump mcp from 1.27.2 to 1.28.1 in the uv group across 1 directory - #2
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps): bump mcp from 1.27.2 to 1.28.1 in the uv group across 1 directory#2dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the uv group with 1 update in the / directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Updates `mcp` from 1.27.2 to 1.28.1 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.27.2...v1.28.1) --- updated-dependencies: - dependency-name: mcp dependency-version: 1.28.1 dependency-type: direct:production dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
marko-k0
pushed a commit
that referenced
this pull request
Jul 24, 2026
…3061) * feat(projects): first-class projects in the web sidebar Wires the web app to the first-class projects entity (omnigent-ai#2765/omnigent-ai#3053), keeping the legacy omni_project label path working via dual-read so no migration is forced. Folders are keyed by name (the union key that merges a first-class project and a like-named label-project into one folder), carrying the first-class id when one exists. Backend - GET /v1/sessions/projects now dual-reads: unions first-class projects (project_store.list — incl. empty, with id) and legacy label-projects (id=None), merged by name and sorted. Response shape list[str] → list[{id, name}]; still owner-scoped. openapi.json regenerated. Frontend - projectsApi.ts: typed /v1/projects CRUD client (list/create/rename/delete). - Hooks: useProjects → ProjectSummary[] ({id, name}); new useCreateProject, useRenameProject; reworked useDeleteProject (archive + unfile every member, then delete the container). Filing/moving files via project_id, resolving the picked name to an id and creating the first-class row on demand for a label-only folder; "" unfiles. Conversation.project_id added. - Sidebar: folders keyed by {id, name}, members matched by project_id OR the legacy label; always-visible Projects section with a "New project" (create-empty) control extracted to NewProjectButton.tsx; Rename dialog; delete threads id; a row's current-project dual-reads project_id→name so a pinned first-class member keeps its project flyout; "Remove from project" unfiles silently (a first-class project persists when emptied); empty folders read "No sessions". - NewChatDialog: composer files new sessions via project_id. Tests - projectsApi unit tests; reworked hook tests (resolve→file, create-on-demand, archive+unfile+delete); sidebar/composer suites updated; server union test; e2e_ui docstrings + fixtures updated for the project_id membership flow. Deferred (kept on the label path via dual-read): the new-session prefill state machine and the Settings archived-only project picker; retiring label reads is gated on the Phase 4 backfill. Co-authored-by: Isaac Signed-off-by: Serena Ruan <serena.rxy@gmail.com> * fix(projects): rename-dialog Enter, checked promote PATCH, typed projects schema Addresses the review on omnigent-ai#3061: - Rename-project dialog: wrap the body in a <form> so Enter submits natively (Radix Dialog doesn't provide one, and the prior manual key handler looked for the confirm button inside the <input> and never fired). - useRenameProject label-only promote: check res.ok on each re-file PATCH and throw on failure, so a 4xx/5xx no longer reports success with members left unfiled. - GET /v1/sessions/projects: return a typed SessionProjectSummary list instead of list[dict] + response_model=None, which produced an empty ("schema": {}) OpenAPI response and broke client generation. openapi.json regenerated. - Drop the stale test comment describing the removed last-session remove-confirm gate. Copilot #2 (recreate missing metadata row) and #4 (...->NotImplementedError in the abstract method) intentionally declined, consistent with prior rounds. Co-authored-by: Isaac Signed-off-by: Serena Ruan <serena.rxy@gmail.com> * fix(projects): keep dual-read membership coherent on move/rename; lift row lookup Addresses the second web-UI review round on omnigent-ai#3061: - moveConversationToProject now clears the legacy omni_project label in the same PATCH as it sets project_id. The sidebar groups a folder by project_id OR the label during the dual-read transition, so a stale label would keep a moved session in its old label-folder (and match two folders at once). project_id is the single source of truth after a move. - useRenameProject reconciles members for BOTH paths (first-class rename and label-only promote): sweep the folder's members via ?project=<oldName>, re-file each onto the target project_id, and clear the legacy label — so a first-class rename no longer strands label-matched members in an oldName folder. - resolveOrCreateProjectId tolerates the create-on-demand race: a concurrent move to the same new name can 409 on the second POST; re-list and use the winner's id instead of failing. - ConversationRow no longer calls useProjects() per row. A list-level id->name map is provided via context (ProjectNamesContext), so row renders are O(1) with no per-row query observer. Test PATCH-body assertions updated for the added labels field. Co-authored-by: Isaac Signed-off-by: Serena Ruan <serena.rxy@gmail.com> * fix(projects): preserve the original error when create-on-demand truly fails resolveOrCreateProjectId caught the create error to tolerate the 409 race (a concurrent move created the same name), but a genuine 500/network failure was indistinguishable and surfaced as a generic "Could not resolve or create" message. Re-list to disambiguate: if the row now exists a racer won — use it; otherwise rethrow the ORIGINAL error so the true cause isn't masked. Addresses a non-blocking note on omnigent-ai#3061. Co-authored-by: Isaac Signed-off-by: Serena Ruan <serena.rxy@gmail.com> * test(e2e-ui): stub /v1/sessions/projects with the {id,name} shape in prefill test The project-prefill e2e test stubbed GET /v1/sessions/projects with the old bare-string body, but this PR changed the endpoint to return SessionProjectSummary objects. The sidebar parsed no folder, so the project header never rendered and header.hover() timed out. Return the dual-read union shape ({id: None, name} for the label-only project the test seeds), matching the endpoint contract and the sibling sidebar tests. Co-authored-by: Isaac --------- Signed-off-by: Serena Ruan <serena.rxy@gmail.com>
Author
|
Looks like mcp is no longer updatable, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 1 update in the / directory: mcp.
Updates
mcpfrom 1.27.2 to 1.28.1Release notes
Sourced from mcp's releases.
Commits
777b8d0[v1.x] Support TransportSecuritySettings in the WebSocket server transport (#...4720467[v1.x] Set Development Status classifier to Production/Stable (#2976)6df3d73[v1.x] Buffer per-request StreamableHTTP streams; store priming event before ...32d3290[v1.x] Pass a list to parametrize in test_docs_examples (pytest 9.1.0 compat)...0dca751[v1.x] Deflake the child process cleanup tests (#2839)52258a9[v1.x] Add a v2 status banner to the README (#2835)b8f4917[v1.x] Deprecate the WebSocket transport and the experimental tasks entry poi...2309e5efix: omit null optional fields from task result payloads (#2809)494eb11[v1.x] Support Python 3.14 (#2769)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.