Skip to content

build(deps): bump rmcp from 1.7.0 to 2.0.0 in the cargo group across 1 directory - #23

Merged
cursor[bot] merged 2 commits into
mainfrom
dependabot/cargo/cargo-d041838d19
Sep 25, 2026
Merged

cursor[bot] merged 2 commits into
mainfrom
dependabot/cargo/cargo-d041838d19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 1 update in the / directory: rmcp.

Updates rmcp from 1.7.0 to 2.0.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.0.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.0.0

Migration guide: modelcontextprotocol/rust-sdk#926

Added

  • [breaking] (rmcp) add Audio variant to PromptMessageContent (#865)
  • [breaking] align model types with MCP 2025-11-25 spec (#927)
  • deprecate roots/sampling/logging types (#923)

Fixed

  • prevent OAuth resource spoofing (#937)
  • block oauth metadata ssrf (#935)
  • prevent streamable HTTP session leak (#934)
  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • consolidate repeated rmcp tests (#931)
  • align README examples with v2 model API (#928)

rmcp-macros-v1.8.0

Added

  • deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

  • strip and validate tool outputSchema and inputSchema (#860)
  • remove unnecessary fields from tools' inputSchema (#856)

Other

  • refine mcpmate listing copy (#885)
  • added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0

... (truncated)

Commits
  • 67a3085 chore: release v2.0.0 (#920)
  • c1a8b29 fix: prevent OAuth resource spoofing (#937)
  • eb435c6 fix: block oauth metadata ssrf (#935)
  • dfa7fd6 fix: prevent streamable HTTP session leak (#934)
  • e1af378 chore: consolidate repeated rmcp tests (#931)
  • 4b9bea7 Revert "feat!: relax tool result structuredContent type (#919)" (#932)
  • b8a936c feat!: relax tool result structuredContent type (#919)
  • 4158528 fix: fill missing fully qualified syntax in prompt_handler macros (#866)
  • d1cabb4 feat: deprecate roots/sampling/logging types (#923)
  • f07ee4a docs: align README examples with v2 model API (#928)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 16, 2026
@coderabbitai

coderabbitai Bot commented Sep 16, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 534f62bd-8bf0-4402-8c72-8ebcc8dc6d4d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Sep 16, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​rmcp@​1.7.0 ⏵ 2.0.089 +199 +22100100100

View full report

dependabot Bot and others added 2 commits September 25, 2026 18:20
Bumps the cargo group with 1 update in the / directory: [rmcp](https://github.com/modelcontextprotocol/rust-sdk).


Updates `rmcp` from 1.7.0 to 2.0.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v2.0.0)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 2.0.0
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
rmcp 2.0 replaced Content with ContentBlock. Call sites keep the same
text results.

Co-authored-by: OnlineChef <chefadmin@chefgroep.online>
@cursor
cursor Bot force-pushed the dependabot/cargo/cargo-d041838d19 branch from c732e44 to bcf33cb Compare September 25, 2026 18:23
@cursor
cursor Bot merged commit cdd447d into main Sep 25, 2026
23 checks passed
@cursor
cursor Bot deleted the dependabot/cargo/cargo-d041838d19 branch September 25, 2026 18:47
@cursor
cursor Bot restored the dependabot/cargo/cargo-d041838d19 branch September 25, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant