dependabot[bot] opened a new pull request, #43876: URL: https://github.com/apache/superset/pull/43876
Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.29.1 to 2.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/modelcontextprotocol/python-sdk/releases";>mcp's releases</a>.</em></p> <blockquote> <h2>v2.1.1</h2> <h2>What's Changed</h2> <ul> <li>Point imports of mcp.server.fastmcp at the migration guide by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3388";>modelcontextprotocol/python-sdk#3388</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/modelcontextprotocol/python-sdk/compare/v2.1.0...v2.1.1";>https://github.com/modelcontextprotocol/python-sdk/compare/v2.1.0...v2.1.1</a></p> <h2>v2.1.0</h2> <h2>Highlights</h2> <ul> <li><code>Client</code> accepts <code>StdioServerParameters</code> directly: <code>Client(StdioServerParameters(command="uv", args=["run", "server.py"]))</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3321";>#3321</a>).</li> <li>Prompt messages accept <code>Image</code> and <code>Audio</code>, prompt functions may return bare content blocks, and <code>Message</code> / <code>UserMessage</code> / <code>AssistantMessage</code> are exported from <code>mcp.server.mcpserver</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3320";>#3320</a>).</li> <li>The 4 MiB request body limit now also covers the SSE transport and the OAuth endpoints; <code>SseServerTransport</code> and <code>MCPServer.sse_app()</code> take <code>max_request_body_size</code>, and the SSE message endpoint answers 405 to non-POST requests (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3336";>#3336</a>).</li> </ul> <h2>Behaviour changes to be aware of</h2> <ul> <li>Handler exceptions (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3314";>#3314</a>): an unexpected exception from a tool, resource or prompt handler is logged once at ERROR with its traceback, and the client now sees only <code>Error executing tool <name></code> (or the resource/prompt equivalent) rather than the exception text. Raise <code>ToolError</code> / <code>ResourceError</code> when the message is meant for the model; those still reach the client and are logged at INFO without a traceback.</li> <li>Content-block return annotations (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3320";>#3320</a>): a tool annotated to return <code>TextContent</code>, <code>EmbeddedResource</code>, <code>Image</code>, <code>Audio</code>, or lists/unions of them no longer advertises <code>outputSchema</code> or returns <code>structuredContent</code>; its <code>content</code> is unchanged. Pass <code>structured_output=True</code> to keep the previous shape.</li> </ul> <h2>Fixes</h2> <ul> <li>TypedDict tool results: <code>NotRequired</code> keys are omitted instead of serialized as <code>null</code>, and registration no longer fails on Python 3.10 (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3224";>#3224</a>, <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3227";>#3227</a>); recursive return types get an object-rooted <code>outputSchema</code> that pre-2026 clients accept (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3337";>#3337</a>).</li> <li>2026-07-28 over HTTP: a POSTed notification such as <code>notifications/cancelled</code> is acknowledged with 202 instead of rejected with 400 (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3324";>#3324</a>).</li> <li>Pre-2026 sessions ignore cache-hint fields from later revisions instead of failing <code>list_tools()</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3223";>#3223</a>), and accept boolean sub-schemas in tool schema <code>properties</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3353";>#3353</a>).</li> <li><code>mcp install</code> reads and preserves a Claude Desktop config containing non-ASCII text on any Windows code page (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3296";>#3296</a>).</li> </ul> <h2>What's Changed</h2> <ul> <li>Retire wording tied to pre-2.0 milestones by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3211";>modelcontextprotocol/python-sdk#3211</a></li> <li>Describe the maintenance line without hardcoding 1.28 by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3212";>modelcontextprotocol/python-sdk#3212</a></li> <li>Ask which release line a bug report is on by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3213";>modelcontextprotocol/python-sdk#3213</a></li> <li>Link the released 2026-07-28 spec and point migrators at /v1/ by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3214";>modelcontextprotocol/python-sdk#3214</a></li> <li>Bump conformance harness to 0.2.0-alpha.11 by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3282";>modelcontextprotocol/python-sdk#3282</a></li> <li>Read UTF-8 test fixtures with explicit encoding by <a href="https://github.com/ShuQingDollarVoyager";><code>@ShuQingDollarVoyager</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3245";>modelcontextprotocol/python-sdk#3245</a></li> <li>Pin each conformance leg to a spec-revision wire by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3304";>modelcontextprotocol/python-sdk#3304</a></li> <li>docs: publish translated docs in twelve languages and the tool that maintains them by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3280";>modelcontextprotocol/python-sdk#3280</a></li> <li>Pin text I/O to UTF-8 and fail CI on locale-dependent reads/writes by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3296";>modelcontextprotocol/python-sdk#3296</a></li> <li>docs: lead the README client example with a URL, not the server object by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3315";>modelcontextprotocol/python-sdk#3315</a></li> <li>Publish versioning, roadmap, and dependency policies for v2 by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3215";>modelcontextprotocol/python-sdk#3215</a></li> <li>Drop later-revision cache-hint fields on pre-2026 sessions by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3223";>modelcontextprotocol/python-sdk#3223</a></li> <li>Stop framing breaking changes as a workflow in AGENTS.md by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3286";>modelcontextprotocol/python-sdk#3286</a></li> <li>MCPServer: content-block returns are unstructured, prompt messages take Image/Audio by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3320";>modelcontextprotocol/python-sdk#3320</a></li> <li>Let Client take StdioServerParameters directly by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3321";>modelcontextprotocol/python-sdk#3321</a></li> <li>Gate external PRs on an assigned, linked issue by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3291";>modelcontextprotocol/python-sdk#3291</a></li> <li>docs: cover the remaining Tier 1 audit items by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3325";>modelcontextprotocol/python-sdk#3325</a></li> <li>Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3326";>modelcontextprotocol/python-sdk#3326</a></li> <li>Shorten stdio test comments by <a href="https://github.com/Kludex";><code>@Kludex</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3329";>modelcontextprotocol/python-sdk#3329</a></li> <li>Hand TypedDict tool results to pydantic natively by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3331";>modelcontextprotocol/python-sdk#3331</a></li> <li>Apply the request body limit to the SSE and OAuth endpoints by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3336";>modelcontextprotocol/python-sdk#3336</a></li> <li>Accept boolean sub-schemas in 2025-11-25 tool schema properties by <a href="https://github.com/pja-ant";><code>@pja-ant</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3354";>modelcontextprotocol/python-sdk#3354</a></li> <li>Log MCPServer handler exceptions by kind and keep crash details off the wire by <a href="https://github.com/maxisbey";><code>@maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3314";>modelcontextprotocol/python-sdk#3314</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0921d94a74db900dccd2d534842aa7b6160542d2";><code>0921d94</code></a> Point imports of mcp.server.fastmcp at the migration guide (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3388";>#3388</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/4d6f87e8d2df8b161bd279cecdb76c988d74bc8a";><code>4d6f87e</code></a> Build releases with the pinned hatchling and a publish action that accepts Me...</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/c5d7d0b6d0cc8e0a2cc2f5dd6caf0be9ad744352";><code>c5d7d0b</code></a> docs: refresh translations for recent English changes (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3379";>#3379</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/d8b638304ec6c65a583268eb4a1c691d7e77816f";><code>d8b6383</code></a> Give recursive tool return types an object-rooted output schema (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3376";>#3376</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/56af44727b291c5901d976bff6c6c8eff5649f23";><code>56af447</code></a> Log MCPServer handler exceptions by kind and keep crash details off the wire ...</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/f1c40b062f2ba4bfdb0b7583e3ab6687e68b7cfc";><code>f1c40b0</code></a> Accept boolean sub-schemas in 2025-11-25 tool schema properties (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3354";>#3354</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb";><code>57394b0</code></a> Apply the request body limit to the SSE and OAuth endpoints (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3336";>#3336</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0cee6249bad02d67a96678973f9db383519c64b4";><code>0cee624</code></a> Hand TypedDict tool results to pydantic natively (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3331";>#3331</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0d92192765fa7d6a20fbfe7e62e242e44933574f";><code>0d92192</code></a> Shorten stdio test comments (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3329";>#3329</a>)</li> <li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/b2025ab815ee4013d12cd3af5e7dba50c2c2868c";><code>b2025ab</code></a> Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3326";>#3326</a>)</li> <li>Additional commits viewable in <a href="https://github.com/modelcontextprotocol/python-sdk/compare/v1.29.1...v2.1.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
