Skip to content

Fix MCP dependencies and allow underscore tokens on static endpoints - #58

Merged
Llewellynvdm merged 3 commits into
mainfrom
dependabot/pip/src/apps/mcp/python-versions-d56d0d060c
Oct 9, 2026
Merged

Llewellynvdm merged 3 commits into
mainfrom
dependabot/pip/src/apps/mcp/python-versions-d56d0d060c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

This updates the MCP runtime to getbible-mcp 2.1.3 and restores a compatible dependency lock. It also adds the agreed optional _ query parameter to static endpoints, including v2 and v3.

Changes:

  • Keep MCP/mcp-types at 2.2.0 and pydantic-core at 2.46.5 to satisfy their parent packages; retain the compatible rpds-py update.
  • Accept no query string or exactly one _ value containing 1–128 ASCII letters, digits, underscores or hyphens. Reject empty, duplicate, encoded and unsupported parameters with the existing 400 problem response.
  • Validate and otherwise ignore the value at the origin. File selection, ETags, cache lifetimes, access controls and Cloudflare cache-key behavior remain unchanged.
  • Document the contract in the README, operator guides and generated static pages; correct stale descriptions of the existing cache defaults.
  • Add nginx integration coverage for valid/invalid values, conditional requests, authentication, and versioned/root endpoints.

Release-Version: 3.2.8

Validation:

  • 82 unit tests covering static sync, tooling, and Cloudflare rules/preflight passed locally.
  • 18 release-version tests and all 155 CLI checks passed locally; release review and whitespace checks passed.
  • Full dependency, nginx and deployment verification runs in CI; this workspace lacks nginx and cannot download the pinned packages.

Bumps the python-versions group with 5 updates in the /src/apps/mcp directory:

| Package | From | To |
| --- | --- | --- |
| [getbible-mcp](https://github.com/getbible/mcp) | `2.1.2` | `2.1.3` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `2.2.0` | `2.3.0` |
| [mcp-types](https://github.com/modelcontextprotocol/python-sdk) | `2.2.0` | `2.3.0` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.5` | `2.49.0` |
| [rpds-py](https://github.com/crate-py/rpds) | `2026.6.3` | `2026.9.1` |



Updates `getbible-mcp` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/getbible/mcp/releases)
- [Changelog](https://github.com/getbible/mcp/blob/main/CHANGELOG.md)
- [Commits](getbible/mcp@v2.1.2...v2.1.3)

Updates `mcp` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v2.2.0...v2.3.0)

Updates `mcp-types` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v2.2.0...v2.3.0)

Updates `pydantic-core` from 2.46.5 to 2.49.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.5...core-v2.49.0)

Updates `rpds-py` from 2026.6.3 to 2026.9.1
- [Release notes](https://github.com/crate-py/rpds/releases)
- [Changelog](https://github.com/crate-py/rpds/blob/main/release.toml)
- [Commits](crate-py/rpds@v2026.6.3...v2026.9.1)

---
updated-dependencies:
- dependency-name: getbible-mcp
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: mcp
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: mcp-types
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: pydantic-core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: rpds-py
  dependency-version: 2026.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 8, 2026
Document the optional browser cache identifier, preserve existing access
and cache policies, and cover valid and malformed requests in nginx
integration tests. Prepare release 3.2.8.
@Llewellynvdm Llewellynvdm changed the title Bump the python-versions group across 1 directory with 5 updates Fix MCP dependencies and allow underscore tokens on static endpoints Oct 8, 2026
@Llewellynvdm
Llewellynvdm merged commit abb4ff6 into main Oct 9, 2026
23 checks passed
@Llewellynvdm
Llewellynvdm deleted the dependabot/pip/src/apps/mcp/python-versions-d56d0d060c branch October 9, 2026 10:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant