Skip to content

Bump mcp from 0.23.0 to 1.4.0 - #11

Merged
leowilkin merged 3 commits into
mainfrom
dependabot/bundler/mcp-1.1.0
Aug 30, 2026
Merged

Bump mcp from 0.23.0 to 1.4.0#11
leowilkin merged 3 commits into
mainfrom
dependabot/bundler/mcp-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps mcp from 0.23.0 to 1.4.0 and updates Attend's Toolchest compatibility layer for the current MCP protocol contracts.

  • returns spec-compliant named list results
  • supports the 2026-07-28 discovery and request-envelope lifecycle
  • keeps initialize on the latest handshake protocol version
  • advertises only capabilities Attend actually serves
  • declines subscriptions/listen because Attend is multi-process and multi-pod without a shared notification bus
  • preserves stateless bearer-authenticated transport and Rails host authorization

Validation:

  • 1456 RSpec examples, 0 failures, 3 pending
  • 688 RuboCop files, 0 offenses
  • Bundler Audit: no vulnerabilities

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 12, 2026
@socket-security

socket-security Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedmcp@​0.23.0 ⏵ 1.4.0100100100 +1100100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/bundler/mcp-1.1.0 branch from 798ec25 to 55a8278 Compare August 12, 2026 10:47
@dependabot dependabot Bot changed the title Bump mcp from 0.11.0 to 1.1.0 Bump mcp from 0.23.0 to 1.2.0 Aug 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/mcp-1.1.0 branch from 55a8278 to 45f7dbd Compare August 24, 2026 01:17
@dependabot
dependabot Bot requested a review from leowilkin as a code owner August 24, 2026 01:17
Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.23.0 to 1.3.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/ruby-sdk@v0.23.0...v1.3.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump mcp from 0.23.0 to 1.2.0 Bump mcp from 0.23.0 to 1.3.0 Aug 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/mcp-1.1.0 branch from 45f7dbd to 7506c70 Compare August 29, 2026 01:14
@3kh0 3kh0 changed the title Bump mcp from 0.23.0 to 1.3.0 Bump mcp from 0.23.0 to 1.4.0 Aug 30, 2026
@leowilkin
leowilkin merged commit d6edae5 into main Aug 30, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/mcp-1.1.0 branch August 30, 2026 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants