Bump the minor-and-patch group with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates: github.com/mark3labs/mcp-go and github.com/mattn/go-sqlite3.

Updates github.com/mark3labs/mcp-go from 0.45.0 to 0.46.0

Commits

• 4d01ccd go fmt
• 74a975a feature: Add prompt filter and handler middleware support (#751)
• bbc88d3 Fix AddTaskTool task result payload handling (#765)
• 4fa4dbf fix: cancel in-flight request contexts on notifications/cancelled (#756)
• f2980c6 feat(server): add WithExperimental server option (#762)
• d70b6bf fix(oauth): preserve path components during metadata discovery (#761)
• 943f977 Add AgentRank score badge (#752)
• dd37ef1 fix(server): reject sync calls to task-only tools (#759)
• 8cbeefe feat(transport): make SSE endpoint and response timeouts configurable (#734)
• a28eeb6 Replace invopop/jsonschema with google/jsonschema-go (#760)
• Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38

Commits

• edadafa Merge pull request #1381 from mattn/eliminate-bounds-checks
• 8f9f86e Eliminate unnecessary bounds checks in hot paths
• 0d23881 Merge pull request #1379 from theimpostor/pr-1322-missing-constraint-op-types
• 84bdc43 add missing index constraint op types
• 57e5007 Merge pull request #1313 from Jaculabilis/json-example
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[roborev-ci]

roborev: Combined Review (0e3b81a)

Verdict: Changes are mostly clean, but one medium-severity issue should be addressed before merge.

Medium

• go.mod:18, go.mod:21
  The direct dependency version bumps were committed without the corresponding go.sum refresh. On a clean checkout or in CI with -mod=readonly, this can fail dependency verification because the updated module hashes are missing.
  Fix: regenerate and commit go.sum, typically with go mod tidy or go mod download.

---

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)