Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-mcp for openSUSE:Factory checked in at 2026-11-06 19:47:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-mcp (Old) and /work/SRC/openSUSE:Factory/.python-mcp.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-mcp" Fri Nov 6 19:47:43 2026 rev:5 rq:1395489 version:1.30.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-mcp/python-mcp.changes 2026-07-01 16:35:02.801739212 +0200 +++ /work/SRC/openSUSE:Factory/.python-mcp.new.3759290/python-mcp.changes 2026-11-06 19:53:51.407832042 +0100 @@ -1,0 +2,65 @@ +Thu Nov 5 10:49:17 UTC 2026 - Martin Pluskal <[email protected]> + +- Switch devel subpackage from update-alternatives to + libalternatives, drop obsolete Group: tag, sort Recommends, + and raise httpx/pydantic/uvicorn floors to upstream minimums. + Version 1.30.0 fixes boo#1285723 (CVE-2026-109527) and + boo#1285728 (CVE-2026-59951). + +------------------------------------------------------------------- +Wed Nov 4 17:48:01 UTC 2026 - Jordi Massaguer Pla <[email protected]> + +- Update to 1.30.0: + - HTTP client redirects are only followed within the endpoint's + origin (#3448) + - Idle Streamable HTTP sessions now expire (#3426) + - The OAuth client checks the authorization server's issuer (#3431) + - Two new DeprecationWarnings (#3431, #3451) + - AuthSettings.validate_token_resource: only accept tokens your + TokenVerifier reports as issued for this server (#3451). + - issuer= on ClientCredentialsOAuthProvider and + PrivateKeyJWTOAuthProvider (#3431). + - session_idle_timeout= and max_sessions= on FastMCP (#3426). + - [v1.x] Resolve tool output-schema references within the schema + document only by @maxisbey in #3396 + - [v1.x] Expire idle Streamable HTTP sessions by default and cap + concurrent sessions by @maxisbey in #3426 + - [v1.x] Validate the authorization server metadata issuer on every + discovery path by @maxisbey in #3431 + - [v1.x] Follow redirects only within the MCP endpoint's origin by + @maxisbey in #3448 + - [v1.x] Add AuthSettings.validate_token_resource to check a bearer + token's resource by @maxisbey in #3451 + +- Update to 1.29.1: + - [v1.x] Complete the FastMCP Settings model at import time by + @maxisbey in #3352 + - [v1.x] Apply the request body limit to the SSE and OAuth endpoints + by @maxisbey in #3344 + - [v1.x] Give recursive tool return types an object-rooted output + schema by @maxisbey in #3377 + +- Update to 1.29.0: + - [v1.x] Route Context.report_progress() to the originating request + stream by @maxisbey in #2994 + - [v1.x] docs: publish llms.txt and markdown renditions of the docs + by @maxisbey in #3029 + - [v1.x] docs: pin mkdocs<2 by @maxisbey in #3074 + - [v1.x] Add Streamable HTTP request body limits by @Kludex in #3101 + - [v1.x] fix: reject trailing newline in tool-name validation by + @maxisbey in #3086 + - [v1.x] ci: pick the docs toolchain per worktree in build-docs.sh + by @maxisbey in #3082 + - [v1.x] Move the v1.x docs to /v1/ and mark v1.x as the maintenance + line by @maxisbey in #3177 + +------------------------------------------------------------------- +Thu Jul 7 13:39:42 UTC 2026 - Darragh O'Reilly <[email protected]> + +- Omit flaky test and don't run tests in parallel. + This commit reduce the chances of failure by not running tests + in parallel. + Also omit test_streamable_http_multiple_reconnections because + it's flaky on Tumbleweed/s390x. + +------------------------------------------------------------------- Old: ---- mcp-1.28.1.tar.gz New: ---- mcp-1.30.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-mcp.spec ++++++ --- /var/tmp/diff_new_pack.S2TchV/_old 2026-11-06 19:53:52.991898368 +0100 +++ /var/tmp/diff_new_pack.S2TchV/_new 2026-11-06 19:53:52.999898703 +0100 @@ -26,11 +26,10 @@ %bcond_without libalternatives %{?sle15_python_module_pythons} Name: python-mcp%{psuffix} -Version: 1.28.1 +Version: 1.30.0 Release: 0 Summary: Python implementation of the Model Context Protocol License: MIT -Group: Development/Languages/Python # GitHub repo https://github.com/modelcontextprotocol/python-sdk URL: https://modelcontextprotocol.io/introduction Source: https://files.pythonhosted.org/packages/source/m/mcp/mcp-%{version}.tar.gz @@ -42,17 +41,17 @@ BuildRequires: fdupes BuildRequires: python-rpm-macros Requires: python-anyio >= 4.5 -Requires: python-httpx >= 0.27 -Requires: python-httpx-sse >= 0.4 # From PyJWT[crypto] Requires: python-cryptography >= 3.4.0 +Requires: python-httpx >= 0.27.1 +Requires: python-httpx-sse >= 0.4 Requires: python-jsonschema >= 4.20.0 -Requires: python-pydantic >= 2.7.2 +Requires: python-pydantic >= 2.11.0 Requires: python-pydantic-settings >= 2.5.2 Requires: python-python-multipart >= 0.0.9 Requires: python-sse-starlette >= 1.6.1 Requires: python-starlette >= 0.27 -Requires: python-uvicorn >= 0.23.1 +Requires: python-uvicorn >= 0.31.1 BuildArch: noarch %if %{with test} BuildRequires: %{python_module PyJWT} @@ -79,10 +78,9 @@ %package devel Summary: Executables for %{name} BuildRequires: alts -Requires(post): update-alternatives -Requires(postun): update-alternatives -Recommends: python-uv +Requires: alts Recommends: npm +Recommends: python-uv Conflicts: mmv %description devel @@ -122,19 +120,18 @@ donttest+=" or test_client_session_version_negotiation_failure" # flaky tests on aarch64 donttest+=" or test_streamablehttp_client_get_stream or test_streamablehttp_client_resumption" -%pytest -k "not ($donttest or OAuth)" +# flaky on Tumbleweed/s390x +donttest+=" or test_streamable_http_multiple_reconnections" +%pytest -n 1 -k "not ($donttest or OAuth)" # problems with unawaited coroutines -%pytest -k "OAuth" --asyncio-mode=auto +%pytest -n 1 -k "OAuth" --asyncio-mode=auto %endif -%post devel -%python_expand %python_install_alternative mcp - -%postun devel -%python_expand %python_uninstall_alternative mcp +%pre devel +%python_libalternatives_reset_alternative mcp %if %{without test} -%files %{python_files} +%files %python_files %license LICENSE %doc README.md %{python_sitelib}/mcp ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.S2TchV/_old 2026-11-06 19:53:53.147904900 +0100 +++ /var/tmp/diff_new_pack.S2TchV/_new 2026-11-06 19:53:53.157905319 +0100 @@ -1,5 +1,5 @@ -mtime: 1782837770 -commit: 57cab0b3214875109362a484ab483296bf3fb76a0c22030a1069744c23878b8b +mtime: 1793875823 +commit: ad9472e50625ecb478f83cdd9c061a8278881c32586ecf65086116f060d8e351 url: https://src.opensuse.org/AI/python-mcp revision: main ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-11-05 11:50:23.000000000 +0100 @@ -0,0 +1,6 @@ +_build.* +*.obscpio +*.osc +.pbuild +_service:* +python-mcp-*-build/ ++++++ mcp-1.28.1.tar.gz -> mcp-1.30.0.tar.gz ++++++ ++++ 6878 lines of diff (skipped)
