Skip to content

Bump mcp from 1.27.0 to 1.28.1 #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump mcp from 1.27.0 to 1.28.1 #15

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion requirements.in
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,6 @@
#
strands-agents[openai]==1.36.0
boto3==1.42.93
mcp==1.27.0 # pinned; must be >= 1.23.0 to fix CVE-2025-66416, -53365, -53366
mcp==1.28.1 # pinned; must be >= 1.23.0 to fix CVE-2025-66416, -53365, -53366
mcp-proxy-for-aws>=1.6.1
aws-bedrock-token-generator # auto-generates short-term Bedrock API keys from AWS creds
31 changes: 15 additions & 16 deletions requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,8 @@ aws-bedrock-token-generator==1.1.0
# via -r requirements.in
awscrt==0.31.2
# via botocore
backports-tarfile==1.2.0
# via jaraco-context
beartype==0.22.9
# via py-key-value-aio
boto3==1.42.93
Expand Down Expand Up @@ -75,7 +77,9 @@ docutils==0.22.4
email-validator==2.3.0
# via pydantic
exceptiongroup==1.3.1
# via fastmcp
# via
# anyio
# fastmcp
fastmcp==3.2.4
# via mcp-proxy-for-aws
griffelib==2.0.2
Expand All @@ -99,7 +103,9 @@ idna==3.15
# email-validator
# httpx
importlib-metadata==8.7.1
# via opentelemetry-api
# via
# keyring
# opentelemetry-api
jaraco-classes==3.4.0
# via keyring
jaraco-context==6.1.2
Expand Down Expand Up @@ -132,7 +138,7 @@ keyring==25.7.0
# via py-key-value-aio
markdown-it-py==4.0.0
# via rich
mcp==1.27.0
mcp==1.28.1
# via
# -r requirements.in
# fastmcp
Expand Down Expand Up @@ -242,11 +248,15 @@ starlette==1.3.1
# sse-starlette
strands-agents[openai]==1.36.0
# via -r requirements.in
tomli==2.4.1
# via cyclopts
tqdm==4.67.3
# via openai
typing-extensions==4.15.0
# via
# anyio
# cryptography
# cyclopts
# exceptiongroup
# mcp
# openai
Expand All @@ -256,10 +266,12 @@ typing-extensions==4.15.0
# py-key-value-aio
# pydantic
# pydantic-core
# pyjwt
# referencing
# starlette
# strands-agents
# typing-inspection
# uvicorn
typing-inspection==0.4.2
# via
# mcp
Expand All @@ -285,16 +297,3 @@ wrapt==2.1.2
# opentelemetry-instrumentation-threading
zipp==3.23.1
# via importlib-metadata

# --- Platform-gated dependencies ---------------------------------------------
# The entries below are transitive deps that pip resolves only on certain
# platforms. pip-compile on Linux doesn't record them, so we add them by hand.
# Safe to skip if you regenerate on Windows (pip-compile will pick them up).
backports-tarfile==1.2.0 ; python_version < "3.12"
# via jaraco-context
colorama==0.4.6 ; sys_platform == "win32"
# via click
pywin32==311 ; sys_platform == "win32"
# via mcp
pywin32-ctypes==0.2.3 ; sys_platform == "win32"
# via keyring
Loading