Skip to content

Bump the patch group with 4 updates - #6474

Merged
marco-c merged 1 commit into
masterfrom
dependabot/uv/patch-0dd3c58103
Aug 4, 2026
Merged

Bump the patch group with 4 updates#6474
marco-c merged 1 commit into
masterfrom
dependabot/uv/patch-0dd3c58103

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch group with 4 updates: boto3, claude-agent-sdk, weave and fastmcp.

Updates boto3 from 1.43.55 to 1.43.60

Commits

Updates claude-agent-sdk from 0.2.126 to 0.2.128

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.128

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.220

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.128/

pip install claude-agent-sdk==0.2.128

v0.2.127

Bug Fixes

  • Fixed premature stdin closure when background tasks are in flight: query() no longer closes stdin on the first result frame when background tasks (e.g. run_in_background: true subagents) are still running. Previously, closing stdin too early caused SDK-MCP tool calls from background tasks to fail with "Stream closed" and silently bypassed PreToolUse hooks. Stdin now stays open until all in-flight tasks complete and the final result frame arrives (#1103)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.219

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.127/

pip install claude-agent-sdk==0.2.127
Changelog

Sourced from claude-agent-sdk's changelog.

0.2.128

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.220

0.2.127

Bug Fixes

  • Fixed premature stdin closure when background tasks are in flight: query() no longer closes stdin on the first result frame when background tasks (e.g. run_in_background: true subagents) are still running. Previously, closing stdin too early caused SDK-MCP tool calls from background tasks to fail with "Stream closed" and silently bypassed PreToolUse hooks. Stdin now stays open until all in-flight tasks complete and the final result frame arrives (#1103)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.219
Commits
  • f8b9ec9 docs: update changelog for v0.2.128
  • ec77673 chore: release v0.2.128
  • cadaa63 chore: bump bundled CLI version to 2.1.220
  • 3145cc6 docs: update changelog for v0.2.127
  • 26b1a5c chore: release v0.2.127
  • f277fd8 chore: bump bundled CLI version to 2.1.219
  • e6e07f1 fix(query): don't close stdin on a result frame while tasks are in flight (#1...
  • See full diff in compare view

Updates weave from 0.53.2 to 0.53.4

Release notes

Sourced from weave's releases.

v0.53.4

What's Changed

Full Changelog: wandb/weave@v0.53.3...v0.53.4

v0.53.3

What's Changed

... (truncated)

Commits
  • d5e11ac Release version: 0.53.4-dev0 → 0.53.4
  • 350f4b7 chore(weave): bump TSSDK version to 0.16.5
  • 343d851 chore(weave_ts): add changelog entries for 0.16.4 and 0.16.5 (#7672)
  • fa41f1d fix(weave_ts): WB-38082 (#7652)
  • 7f99e70 fix(weave_ts): record Claude Agent SDK streamed image prompts (#7661)
  • 327c4ca fix(weave_ts): trace Claude Agent SDK multi-turn queries (#7629)
  • 8e40b1f fix(weave): exclude media payloads from agent chat text (#7660)
  • 6dbfcd7 feat(weave): add custom runtime TypeScript SDK wrapper (#7671)
  • 1ec51d1 chore(weave): update costs for Claude Opus 5 (#7670)
  • 612278a fix(weave): WB-38103 (#7663)
  • Additional commits viewable in compare view

Updates fastmcp from 3.4.4 to 3.4.5

Release notes

Sourced from fastmcp's releases.

v3.4.5: Key Change

FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.

What's Changed

Fixes 🐞

Docs 📚

New Contributors

Full Changelog: PrefectHQ/fastmcp@v3.4.4...v3.4.5

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v4.0.0b1: Fourgone Conclusion

FastMCP 4 makes stateful MCP applications work on the sessionless 2026-07-28 protocol while one deployment continues serving handshake-era clients. Tools can ask follow-up questions across requests, preserve authenticated user state, and move long-running work into background tasks without sticky sessions. Protocol extensions and enterprise identity become first-class surfaces, and most FastMCP 3 servers upgrade unchanged even though MCP Python SDK v2 rewrote the engine underneath them. Server-initiated sampling and roots are removed from the server API; the upgrade guide covers their replacements.

New Features 🎉

  • Migrate to MCP Python SDK v2 by @​jlowin in #4437
  • Teach fastmcp.Client the modern protocol: mode negotiation, MRTR driver, response cache by @​jlowin in #4450
  • Forward-port Hugging Face auth provider by @​jlowin in #4475
  • Add server-side identity assertion (SEP-990 ID-JAG) by @​jlowin in #4483
  • Add guard-mode multi-round-trip tools (SEP-2322) by @​jlowin in #4544
  • Add FastMCP-native server extension API (SEP-2133) by @​jlowin in #4602
  • Add stateless session state (UserSession / SessionId) by @​jlowin in #4604
  • Add background tasks via the io.modelcontextprotocol/tasks extension (SEP-2663) by @​jlowin in #4603

Breaking Changes ⚠️

Enhancements ✨

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the patch group with 4 updates
09105ee 
Bumps the patch group with 4 updates: [boto3](https://github.com/boto/boto3), [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python), [weave](https://github.com/wandb/weave) and [fastmcp](https://github.com/PrefectHQ/fastmcp).


Updates `boto3` from 1.43.55 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.55...1.43.60)

Updates `claude-agent-sdk` from 0.2.126 to 0.2.128
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.126...v0.2.128)

Updates `weave` from 0.53.2 to 0.53.4
- [Release notes](https://github.com/wandb/weave/releases)
- [Changelog](https://github.com/wandb/weave/blob/master/dev_docs/RELEASE.md)
- [Commits](wandb/weave@v0.53.2...v0.53.4)

Updates `fastmcp` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.4...v3.4.5)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.128
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: weave
  dependency-version: 0.53.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: fastmcp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 3, 2026 03:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 3, 2026
@marco-c
marco-c merged commit 8d34d68 into master Aug 4, 2026
8 checks passed
@marco-c
marco-c deleted the dependabot/uv/patch-0dd3c58103 branch August 4, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@marco-c marco-c marco-c approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@marco-c