Skip to content

Bump the minor group across 1 directory with 5 updates - #226

Merged
brianglass merged 1 commit into
mainfrom
dependabot/pip/minor-09b6ace6f5
Sep 8, 2026
Merged

brianglass merged 1 commit into
mainfrom
dependabot/pip/minor-09b6ace6f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 5 updates in the / directory:

Package From To
django-ninja 1.6.3 1.7.0
icalendar 7.2.2 7.3.0
mcp 2.0.0 2.1.1
newrelic 13.4.0 13.5.0
uvicorn 0.52.1 0.52.4

Updates django-ninja from 1.6.3 to 1.7.0

Release notes

Sourced from django-ninja's releases.

1.7.0

What's Changed

New Contributors

Full Changelog: vitalik/django-ninja@v1.6.2...v1.7.0

1.7.0 beta1

What's Changed

New Contributors

... (truncated)

Commits
  • 06f35be 1.7.0
  • 1a6b4f9 Bump version to 1.7.0b1
  • 72ceeb8 Validate TextField max_length on input only (#1766)
  • 184baef Set Retry-After header on throttled (429) responses (#1765)
  • d524516 Use real HttpRequest objects in TestClient (#1757)
  • 5398410 Merge pull request #1760 from hhoow0093/hhoow0093/fix-1739-dark-mode
  • 1497eac Merge pull request #1761 from tunglambk/agent/fix-override-ninja-settings
  • 8f36ad4 Merge pull request #1735 from cyphercodes/fix-empty-multipart-body-field
  • 188724c Merge pull request #1762 from vitalik/fix/flit-pep621-metadata
  • 8c1aeec Migrate pyproject.toml to PEP 621 [project] metadata
  • Additional commits viewable in compare view

Updates icalendar from 7.2.2 to 7.3.0

Release notes

Sourced from icalendar's releases.

v7.3.0

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.3.0 (2026-08-19)

Removals and deprecations


- :attr:`vBinary.obj <icalendar.prop.binary.vBinary.obj>` is deprecated in favor of :attr:`vBinary.bytes <icalendar.prop.binary.vBinary.bytes>`. It is retained as a lossy string view of the value for backward compatibility, and will be removed in icalendar 8. The ``test_ical_value_rejects_non_base64_characters`` test was removed because :attr:`vBinary.ical_value <icalendar.prop.binary.vBinary.ical_value>` no longer validates or decodes Base64. @uwezkhan (`Issue [#1356](https://github.com/collective/icalendar/issues/1356) <https://github.com/collective/icalendar/issues/1356>`_)

New features


- Created an :meth:`~cal.journal.Journal.example` method for the :class:`~cal.journal.Journal` component and an :meth:`~cal.free_busy.FreeBusy.example` method for the :class:`~cal.free_busy.FreeBusy` component, added the :rfc:`5545` examples that they load, and documented their usage in both class docstrings. AI assistance: Kiro CLI with the claude-opus-5 model was used to draft this change. @Souptik96 (`Issue [#743](https://github.com/collective/icalendar/issues/743) &lt;https://github.com/collective/icalendar/issues/743&gt;`_)
- Add :meth:`Alarm.new_display() &lt;icalendar.cal.alarm.Alarm.new_display&gt;`, :meth:`Alarm.new_audio() &lt;icalendar.cal.alarm.Alarm.new_audio&gt;`, and :meth:`Alarm.new_email() &lt;icalendar.cal.alarm.Alarm.new_email&gt;` factory methods for creating :rfc:`5545#section-3.6.6` VALARM components. @klouds27 (`Issue [#865](https://github.com/collective/icalendar/issues/865) &lt;https://github.com/collective/icalendar/issues/865&gt;`_)
- :class:`~icalendar.prop.binary.vBinary` now stores the raw ``bytes`` of the value internally, so non-UTF-8 binary data round-trips losslessly. With the release of icalendar 7.1.0, and previous to this bug fix, :attr:`vBinary.ical_value &lt;icalendar.prop.binary.vBinary.ical_value&gt;` Base64-decoded the raw stored bytes and raised :class:`ValueError` for non-Base64 input. :attr:`vBinary.ical_value &lt;icalendar.prop.binary.vBinary.ical_value&gt;` now returns the raw stored bytes instead of Base64-decoding them, and no longer raises :class:`ValueError` for non-Base64 input. @uwezkhan (`Issue [#1356](https://github.com/collective/icalendar/issues/1356) &lt;https://github.com/collective/icalendar/issues/1356&gt;`_)
- Added :attr:`vBinary.bytes &lt;icalendar.prop.binary.vBinary.bytes&gt;`, exposing the raw binary value of a BINARY property. @uwezkhan (`Issue [#1356](https://github.com/collective/icalendar/issues/1356) &lt;https://github.com/collective/icalendar/issues/1356&gt;`_)
- Added the :exc:`~icalendar.error.ICalParsingError` exception as a public API for programmatic handling of iCalendar parsing failures. AI assistance: ChatGPT was used to help debug terminal errors encountered during development. @GAUTAMSANSWAL (`Issue [#1536](https://github.com/collective/icalendar/issues/1536) &lt;https://github.com/collective/icalendar/issues/1536&gt;`_)
- Created a script to automatically generate the :mod:`~icalendar.timezone.windows_to_olson` module from the Unicode Consortium's CLDR GitHub repository. Added lxml as a new development dependency. Added the target ``wo`` to the ``Makefile`` to generate the file from the root of the repository with ``make wo``. @stevepiercy (`Issue [#1548](https://github.com/collective/icalendar/issues/1548) &lt;https://github.com/collective/icalendar/issues/1548&gt;`_)
- Added :attr:`vBinary.base64data &lt;icalendar.prop.binary.vBinary.base64data&gt;`, a getter/setter for the Base64 string view of a BINARY property's value, so callers no longer need to call :func:`base64.b64encode` or :func:`base64.b64decode` manually. @gagana2023 (`Issue [#1550](https://github.com/collective/icalendar/issues/1550) &lt;https://github.com/collective/icalendar/issues/1550&gt;`_)
- Added :attr:`Alarm.ACTION &lt;icalendar.cal.alarm.Alarm.ACTION&gt;` and :attr:`AlarmTime.action &lt;icalendar.alarms.AlarmTime.action&gt;` access to the :rfc:`5545#section-3.8.6.1` ``ACTION`` property. I used OpenAI Codex with GPT-5 to assist with this change, then reviewed and tested the result. @bm1016bm-svg (`Issue [#1569](https://github.com/collective/icalendar/issues/1569) &lt;https://github.com/collective/icalendar/issues/1569&gt;`_)
- Record the exact CLDR commit used to generate the Windows-to-Olson timezone mapping and fetch the mapping from that pinned revision. I used AI to assist me with this change. @patrickswedish (`Issue [#1575](https://github.com/collective/icalendar/issues/1575) &lt;https://github.com/collective/icalendar/issues/1575&gt;`_)
- Used :meth:`vBinary.from_ical() &lt;icalendar.prop.binary.vBinary.from_ical&gt;` in :attr:`Image.data &lt;icalendar.prop.image.Image.data&gt;` for consistent Base64 validation, removing the manual :func:`base64.b64decode` call. @klouds27 (`Issue [#1638](https://github.com/collective/icalendar/issues/1638) &lt;https://github.com/collective/icalendar/issues/1638&gt;`_)
- Added ``REQUEST_STATUS`` property to :class:`~icalendar.cal.event.Event`, :class:`~icalendar.cal.todo.Todo`, :class:`~icalendar.cal.journal.Journal`, and :class:`~icalendar.cal.free_busy.FreeBusy` with ``request_status`` parameter in ``new()`` constructors per :rfc:`5545#section-3.8.8.3`. I used AI to assist with this change. @SemTiOne (`Issue [#1666](https://github.com/collective/icalendar/issues/1666) &lt;https://github.com/collective/icalendar/issues/1666&gt;`_)
- Improved :exc:`~icalendar.error.ICalParsingError` by including optional value, line, and line number information in exception messages for more consistent iCalendar parsing error reporting. AI assistance: ChatGPT was used to help debug terminal errors encountered during development. @GAUTAMSANSWAL
- Made :exc:`~icalendar.error.JCalParsingError` inherit from :exc:`~icalendar.error.InvalidCalendar` for consistency with :exc:`~icalendar.error.ICalParsingError`. AI assistance: ChatGPT was used to help debug terminal errors encountered during development. @GAUTAMSANSWAL

Bug fixes


- Resolve the timezone of a &amp;quot;globally unique&amp;quot; :rfc:`5545#section-3.2.19` ``TZID`` such as ``/freeassociation.sourceforge.net/Europe/Berlin``, which is emitted by some clients, including libical and Evolution. :meth:`TZP.timezone &amp;lt;icalendar.timezone.tzp.TZP.timezone&amp;gt;` now strips the leading vendor prefix and resolves the trailing Olson identifier, so the value is parsed as timezone-aware instead of being silently treated as naive. Prepared with AI assistance. @vjsai (`Issue [#313](https://github.com/collective/icalendar/issues/313) &amp;lt;https://github.com/collective/icalendar/issues/313&amp;gt;`_)
- Fixed the :file:`equivalent_timezone_ids.py` script after the call to generate the timezone Python code was removed. @gjabell (`Issue [#1392](https://github.com/collective/icalendar/issues/1392) &amp;lt;https://github.com/collective/icalendar/issues/1392&amp;gt;`_)
- Values of unrecognized properties and ``X-`` properties without a ``VALUE`` parameter were altered by escaping when parsed, serialized, or converted to and from jCal, so they did not round-trip unchanged as :rfc:`7265` specifies. These values are now preserved verbatim. Additionally, the ``PROXIMITY`` property (:rfc:`9074`) was treated as an unknown value type instead of ``TEXT`` and is now recognized correctly. AI disclosure: I used Claude Code (Anthropic's Claude Opus) to draft and refine this change and its tests; I reviewed the output and validated the change locally. @lcampanella98 (`Issue [#1445](https://github.com/collective/icalendar/issues/1445) &amp;lt;https://github.com/collective/icalendar/issues/1445&amp;gt;`_)
- Ship :file:`funding.json` in PyPI source distributions so packaging and test runs from the sdist no longer fail with :class:`FileNotFoundError`. @Hishamkhashman1 (`Issue [#1493](https://github.com/collective/icalendar/issues/1493) &amp;lt;https://github.com/collective/icalendar/issues/1493&amp;gt;`_)
- Avoid folding content lines between escape prefixes and their escaped characters. AI disclosure: I used GPT-5 Codex to help draft and refine this change and its tests; I reviewed and validated the output locally. @kingrubic (`Issue [#1501](https://github.com/collective/icalendar/issues/1501) &amp;lt;https://github.com/collective/icalendar/issues/1501&amp;gt;`_)
- Preserve ``URI`` value parameters on a jCal round-trip. :meth:`vUri.from_jcal &amp;lt;icalendar.prop.uri.vUri.from_jcal&amp;gt;` previously passed the parameters positionally, but ``vUri.__new__`` takes ``encoding`` as its second positional parameter. As a result, the ``URI`` value parameters were consumed as ``encoding`` and dropped. For example, ``ATTACH;FMTTYPE=...`` or ``CONFERENCE;FEATURE=...`` lost their parameters. They are now passed as the ``params`` keyword. Prepared with the assistance of an AI coding agent (Anthropic's Claude Opus 4.8). @gaoflow (`Issue [#1526](https://github.com/collective/icalendar/issues/1526) &amp;lt;https://github.com/collective/icalendar/issues/1526&amp;gt;`_)
- Updated the Windows timezone mapping for ``Mountain Standard Time (Mexico)`` to ``America/Mazatlan``, so dates after Mexico's 2022 timezone changes use the correct UTC-7 offset instead of UTC-6. Prepared with AI assistance. @RobHannay (`Issue [#1546](https://github.com/collective/icalendar/issues/1546) &amp;lt;https://github.com/collective/icalendar/issues/1546&amp;gt;`_)
- ``IMAGE`` properties now use their explicitly declared ``VALUE`` type instead of always being parsed as unknown, while ``IMAGE`` without a ``VALUE`` parameter remains unknown. I used OpenAI Codex with GPT-5 to assist with this change. @floze-the-genius (`Issue [#1561](https://github.com/collective/icalendar/issues/1561) &amp;lt;https://github.com/collective/icalendar/issues/1561&amp;gt;`_)
- Removed ``ATTACH`` from :attr:`Alarm.singletons &amp;lt;icalendar.cal.alarm.Alarm.singletons&amp;gt;`. An &amp;quot;email&amp;quot; ``VALARM`` may carry more than one ``ATTACH`` per :rfc:`5545#section-3.6.6`, so ``ATTACH`` belongs in ``multiple`` only; it was previously listed in both ``singletons`` and ``multiple``. Added a regression test that ``singletons`` and ``multiple`` are disjoint for every registered component. Prepared with the assistance of an AI coding agent (Anthropic's Claude Opus 4.8). @vtino17 (`Issue [#1569](https://github.com/collective/icalendar/issues/1569) &amp;lt;https://github.com/collective/icalendar/issues/1569&amp;gt;`_)
- :attr:`Alarm.REPEAT &amp;lt;icalendar.cal.alarm.Alarm.REPEAT&amp;gt;`, :attr:`Alarm.repeat &amp;lt;icalendar.cal.alarm.Alarm.repeat&amp;gt;`, :attr:`Event.sequence &amp;lt;icalendar.cal.event.Event.sequence&amp;gt;`, and :attr:`Event.priority &amp;lt;icalendar.cal.event.Event.priority&amp;gt;` now reject non-integers (including booleans) with :exc:`TypeError` and negative values with :exc:`~icalendar.error.InvalidCalendar`. @heyncth (`Issue [#1594](https://github.com/collective/icalendar/issues/1594) &amp;lt;https://github.com/collective/icalendar/issues/1594&amp;gt;`_)
- Added the missing ``BINARY`` member to :class:`icalendar.enums.VALUE`, per :rfc:`5545#section-3.2.20`. ``VALUE.BINARY`` previously raised :exc:`AttributeError`. Prepared with the assistance of an AI coding agent (Anthropic's Claude Opus 4.8). @vtino17 (`Issue [#1607](https://github.com/collective/icalendar/issues/1607) &amp;lt;https://github.com/collective/icalendar/issues/1607&amp;gt;`_)
- A ``PERIOD`` value written with dates instead of datetimes, such as ``RDATE;VALUE=PERIOD:19970101/19970102``, was accepted when a calendar was parsed and then raised an :exc:`AttributeError` when it was written out again, or a :exc:`TypeError` where only one half was a date. Such a value is now read as midnight, in the timezone of the other half where it has one. I used AI to assist me with this change. @lcampanella98 (`Issue [#1633](https://github.com/collective/icalendar/issues/1633) &amp;lt;https://github.com/collective/icalendar/issues/1633&amp;gt;`_)
- When :func:`timezone.use_pytz &amp;lt;icalendar.timezone.use_pytz&amp;gt;` was in effect, a date parsed with a ``TZID``, such as ``RDATE;TZID=America/New_York;VALUE=DATE:19970101``, was given the timezone's oldest known offset, its local mean time, so the value was minutes off. It is now read with the offset that applied on that date. Calendars read with zoneinfo, the default, were not affected. I used AI to assist me with this change. @lcampanella98 (`Issue [#1633](https://github.com/collective/icalendar/issues/1633) &amp;lt;https://github.com/collective/icalendar/issues/1633&amp;gt;`_)
- Escape a lone ``\r`` as ``\n`` in ``icalendar.parser.string._escape_char``, used by :meth:`vText.to_ical &amp;lt;icalendar.prop.text.vText.to_ical&amp;gt;`. A carriage return not followed by a line feed was previously left raw in the serialized content line, so a ``SUMMARY`` or ``DESCRIPTION`` built from untrusted text could carry a control character into the iCalendar stream and split the line for lenient consumers. ``\r\n`` and ``\n`` were already escaped, and the parameter escaper already mapped ``\r`` to ``^n``. @alhudz (`Pull Request [#1462](https://github.com/collective/icalendar/issues/1462) &amp;lt;https://github.com/collective/icalendar/pull/1462&amp;gt;`_)
- Reject non-ASCII digits in the ``ordwk`` part of :class:`~icalendar.prop.recur.weekday.vWeekday` (``BYDAY``, ``BYWEEKDAY``, and ``WKST``). The value validation regular expression ``\d`` matches non-ASCII digits, such as the Arabic-Indic ``١٢``. A value such as ``١٢MO`` was silently accepted as ``relative == 12``, instead of being rejected, as required by :rfc:`5545#section-3.3.10` (``ordwk = 1*2DIGIT``). This mirrors the earlier :class:`~icalendar.prop.recur.month.vMonth` fix. Drafted with AI assistance (Claude Opus 4.8); reviewed, tested, and verified by the author. @Labib-Bin-Salam
- Reject raw CR and LF in :class:`~icalendar.prop.uri.vUri`, :class:`~icalendar.prop.cal_address.vCalAddress`, :class:`~icalendar.prop.inline.vInline`, and :class:`~icalendar.prop.xml_reference.vXmlReference`. These value types are not escaped on serialization, so a lone ``\r`` in the value was written straight into the content line, slipping past the newline-only assertion in ``Contentline`` and reparsing as a separate property. This was reachable from untrusted jCal via ``URL``, ``ATTENDEE``, and ``ORGANIZER``. @alhudz
- jCal property names, parameter names, and ``RRULE`` part names are now validated as lowercase iCalendar tokens when parsing jCal (RFC 7265 sections :rfc:`7265#section-3.4`, :rfc:`7265#section-3.5`, and :rfc:`7265#section-3.6.10`). They were kept verbatim and re-emitted into the content line on serialization, so a name containing ``:``, ``;``, or a lone carriage return could inject parameters or a new content line for consumers that treat a bare ``\r`` as a break. @alhudz


Documentation
&amp;lt;/tr&amp;gt;&amp;lt;/table&amp;gt; 
&lt;/code&gt;&lt;/pre&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/138c8453db34fbb584bbcbc592fd7bd4b972e8ef&quot;&gt;&lt;code&gt;138c845&lt;/code&gt;&lt;/a&gt; remove duplicated news fragment&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/933ff2c789dab88e9fde0e249bcdec832dc1e5e4&quot;&gt;&lt;code&gt;933ff2c&lt;/code&gt;&lt;/a&gt; Merge main into 7.x&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/849919f4f6e9de4f684fcc2c391d347bdfada0e8&quot;&gt;&lt;code&gt;849919f&lt;/code&gt;&lt;/a&gt; version 7.3.0&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/8d20a43036fd5acbc5a36f9e885dbdc3267462cd&quot;&gt;&lt;code&gt;8d20a43&lt;/code&gt;&lt;/a&gt; move breaking change to feature (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1685&quot;&gt;#1685&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/bc179116e63a2447adf77de66034bd3d2078b9f3&quot;&gt;&lt;code&gt;bc17911&lt;/code&gt;&lt;/a&gt; [docs] Fix unqualified cross-references in Todo docstrings (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1678&quot;&gt;#1678&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/698624cacf4b48244a82acb3cc60de9cd0f33750&quot;&gt;&lt;code&gt;698624c&lt;/code&gt;&lt;/a&gt; Add REQUEST-STATUS property (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1672&quot;&gt;#1672&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/82b19379a16cea095659efc0f132d3b3b4ad1dba&quot;&gt;&lt;code&gt;82b1937&lt;/code&gt;&lt;/a&gt; Add return type hint to use_default (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1665&quot;&gt;#1665&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/514be871254a99ebbd35b72e9f155afa1f67431e&quot;&gt;&lt;code&gt;514be87&lt;/code&gt;&lt;/a&gt; fix: validate non-negative integer values for repeat, sequence, priority (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1598&quot;&gt;#1598&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/069e672ace766b3ed0db171d5fab5bbf40c3b864&quot;&gt;&lt;code&gt;069e672&lt;/code&gt;&lt;/a&gt; Rename timezone_datetime_property to _timezone_datetime_property (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1011&quot;&gt;#1011&lt;/a&gt;) (&lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1675&quot;&gt;#1675&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/b83927513910b6cbe740e8ab52d21c03a004d06a&quot;&gt;&lt;code&gt;b839275&lt;/code&gt;&lt;/a&gt; chore(deps): bump github/codeql-action/upload-sarif from ea14db8afdef5d462e69...&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/collective/icalendar/compare/v7.2.2...v7.3.0&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `mcp` from 2.0.0 to 2.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/modelcontextprotocol/python-sdk/releases">mcp's releases</a>.</em></p>
<blockquote>
<h2>v2.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Point imports of mcp.server.fastmcp at the migration guide by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3388">modelcontextprotocol/python-sdk#3388</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/modelcontextprotocol/python-sdk/compare/v2.1.0...v2.1.1">https://github.com/modelcontextprotocol/python-sdk/compare/v2.1.0...v2.1.1</a></p>
<h2>v2.1.0</h2>
<h2>Highlights</h2>
<ul>
<li><code>Client</code> accepts <code>StdioServerParameters</code> directly: <code>Client(StdioServerParameters(command=&quot;uv&quot;, args=[&quot;run&quot;, &quot;server.py&quot;]))</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3321">#3321</a>).</li>
<li>Prompt messages accept <code>Image</code> and <code>Audio</code>, prompt functions may return bare content blocks, and <code>Message</code> / <code>UserMessage</code> / <code>AssistantMessage</code> are exported from <code>mcp.server.mcpserver</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3320">#3320</a>).</li>
<li>The 4 MiB request body limit now also covers the SSE transport and the OAuth endpoints; <code>SseServerTransport</code> and <code>MCPServer.sse_app()</code> take <code>max_request_body_size</code>, and the SSE message endpoint answers 405 to non-POST requests (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3336">#3336</a>).</li>
</ul>
<h2>Behaviour changes to be aware of</h2>
<ul>
<li>Handler exceptions (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3314">#3314</a>): an unexpected exception from a tool, resource or prompt handler is logged once at ERROR with its traceback, and the client now sees only <code>Error executing tool &lt;name&gt;</code> (or the resource/prompt equivalent) rather than the exception text. Raise <code>ToolError</code> / <code>ResourceError</code> when the message is meant for the model; those still reach the client and are logged at INFO without a traceback.</li>
<li>Content-block return annotations (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3320">#3320</a>): a tool annotated to return <code>TextContent</code>, <code>EmbeddedResource</code>, <code>Image</code>, <code>Audio</code>, or lists/unions of them no longer advertises <code>outputSchema</code> or returns <code>structuredContent</code>; its <code>content</code> is unchanged. Pass <code>structured_output=True</code> to keep the previous shape.</li>
</ul>
<h2>Fixes</h2>
<ul>
<li>TypedDict tool results: <code>NotRequired</code> keys are omitted instead of serialized as <code>null</code>, and registration no longer fails on Python 3.10 (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3224">#3224</a>, <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3227">#3227</a>); recursive return types get an object-rooted <code>outputSchema</code> that pre-2026 clients accept (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3337">#3337</a>).</li>
<li>2026-07-28 over HTTP: a POSTed notification such as <code>notifications/cancelled</code> is acknowledged with 202 instead of rejected with 400 (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3324">#3324</a>).</li>
<li>Pre-2026 sessions ignore cache-hint fields from later revisions instead of failing <code>list_tools()</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3223">#3223</a>), and accept boolean sub-schemas in tool schema <code>properties</code> (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3353">#3353</a>).</li>
<li><code>mcp install</code> reads and preserves a Claude Desktop config containing non-ASCII text on any Windows code page (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3296">#3296</a>).</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Retire wording tied to pre-2.0 milestones by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3211">modelcontextprotocol/python-sdk#3211</a></li>
<li>Describe the maintenance line without hardcoding 1.28 by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3212">modelcontextprotocol/python-sdk#3212</a></li>
<li>Ask which release line a bug report is on by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3213">modelcontextprotocol/python-sdk#3213</a></li>
<li>Link the released 2026-07-28 spec and point migrators at /v1/ by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3214">modelcontextprotocol/python-sdk#3214</a></li>
<li>Bump conformance harness to 0.2.0-alpha.11 by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3282">modelcontextprotocol/python-sdk#3282</a></li>
<li>Read UTF-8 test fixtures with explicit encoding by <a href="https://github.com/ShuQingDollarVoyager"><code>@​ShuQingDollarVoyager</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3245">modelcontextprotocol/python-sdk#3245</a></li>
<li>Pin each conformance leg to a spec-revision wire by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3304">modelcontextprotocol/python-sdk#3304</a></li>
<li>docs: publish translated docs in twelve languages and the tool that maintains them by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3280">modelcontextprotocol/python-sdk#3280</a></li>
<li>Pin text I/O to UTF-8 and fail CI on locale-dependent reads/writes by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3296">modelcontextprotocol/python-sdk#3296</a></li>
<li>docs: lead the README client example with a URL, not the server object by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3315">modelcontextprotocol/python-sdk#3315</a></li>
<li>Publish versioning, roadmap, and dependency policies for v2 by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3215">modelcontextprotocol/python-sdk#3215</a></li>
<li>Drop later-revision cache-hint fields on pre-2026 sessions by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3223">modelcontextprotocol/python-sdk#3223</a></li>
<li>Stop framing breaking changes as a workflow in AGENTS.md by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3286">modelcontextprotocol/python-sdk#3286</a></li>
<li>MCPServer: content-block returns are unstructured, prompt messages take Image/Audio by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3320">modelcontextprotocol/python-sdk#3320</a></li>
<li>Let Client take StdioServerParameters directly by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3321">modelcontextprotocol/python-sdk#3321</a></li>
<li>Gate external PRs on an assigned, linked issue by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3291">modelcontextprotocol/python-sdk#3291</a></li>
<li>docs: cover the remaining Tier 1 audit items by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3325">modelcontextprotocol/python-sdk#3325</a></li>
<li>Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3326">modelcontextprotocol/python-sdk#3326</a></li>
<li>Shorten stdio test comments by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3329">modelcontextprotocol/python-sdk#3329</a></li>
<li>Hand TypedDict tool results to pydantic natively by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3331">modelcontextprotocol/python-sdk#3331</a></li>
<li>Apply the request body limit to the SSE and OAuth endpoints by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3336">modelcontextprotocol/python-sdk#3336</a></li>
<li>Accept boolean sub-schemas in 2025-11-25 tool schema properties by <a href="https://github.com/pja-ant"><code>@​pja-ant</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3354">modelcontextprotocol/python-sdk#3354</a></li>
<li>Log MCPServer handler exceptions by kind and keep crash details off the wire by <a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/3314">modelcontextprotocol/python-sdk#3314</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0921d94a74db900dccd2d534842aa7b6160542d2"><code>0921d94</code></a> Point imports of mcp.server.fastmcp at the migration guide (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3388">#3388</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/4d6f87e8d2df8b161bd279cecdb76c988d74bc8a"><code>4d6f87e</code></a> Build releases with the pinned hatchling and a publish action that accepts Me...</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/c5d7d0b6d0cc8e0a2cc2f5dd6caf0be9ad744352"><code>c5d7d0b</code></a> docs: refresh translations for recent English changes (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3379">#3379</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/d8b638304ec6c65a583268eb4a1c691d7e77816f"><code>d8b6383</code></a> Give recursive tool return types an object-rooted output schema (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3376">#3376</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/56af44727b291c5901d976bff6c6c8eff5649f23"><code>56af447</code></a> Log MCPServer handler exceptions by kind and keep crash details off the wire ...</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/f1c40b062f2ba4bfdb0b7583e3ab6687e68b7cfc"><code>f1c40b0</code></a> Accept boolean sub-schemas in 2025-11-25 tool schema properties (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3354">#3354</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb"><code>57394b0</code></a> Apply the request body limit to the SSE and OAuth endpoints (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3336">#3336</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0cee6249bad02d67a96678973f9db383519c64b4"><code>0cee624</code></a> Hand TypedDict tool results to pydantic natively (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3331">#3331</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/0d92192765fa7d6a20fbfe7e62e242e44933574f"><code>0d92192</code></a> Shorten stdio test comments (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3329">#3329</a>)</li>
<li><a href="https://github.com/modelcontextprotocol/python-sdk/commit/b2025ab815ee4013d12cd3af5e7dba50c2c2868c"><code>b2025ab</code></a> Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (<a href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/3326">#3326</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/modelcontextprotocol/python-sdk/compare/v2.0.0...v2.1.1">compare view</a></li>
</ul>
</details>
<br />

Updates `newrelic` from 13.4.0 to 13.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/newrelic/newrelic-python-agent/releases">newrelic's releases</a>.</em></p>
<blockquote>
<h2>v13.5.0</h2>
<p><a href="https://docs.newrelic.com/docs/release-notes/agent-release-notes/python-release-notes/python-agent-130500/">https://docs.newrelic.com/docs/release-notes/agent-release-notes/python-release-notes/python-agent-130500/</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/e3c9c1d035a5889d70ef6ce1bb90379b70040c4d"><code>e3c9c1d</code></a> Add webtest to deployment requirements (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1830">#1830</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/9d8f3c2856ce41feda30e1435e3b393b6f145237"><code>9d8f3c2</code></a> Drop span events &amp; reparent span links in CT (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1798">#1798</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/78ed79c371932682eaabe9ff8c0ad2fc498d4da4"><code>78ed79c</code></a> Instrument Azure CosmosDB (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1825">#1825</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/bbf615430641fdf8c0477ab46e0992a9708899ca"><code>bbf6154</code></a> Bump the github_actions group with 3 updates (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1824">#1824</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/8263d8afe758e4a10cf3706268ed8bb6c9d51cc3"><code>8263d8a</code></a> Cache packages_distributions to Avoid Costly O(n^2) Performance Hit (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1822">#1822</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/b7da4387fe1b409a2f457c61666286cc1e168b9d"><code>b7da438</code></a> Update langchain test counts for new version (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1828">#1828</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/b67264eac502888e465518e5a9d7ff524a29a22f"><code>b67264e</code></a> Port HTTPX instrumentation to HTTPX2 (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1826">#1826</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/6137d7702a7a4067d00805c3c3dc475a79c9c2d9"><code>6137d77</code></a> Docker CI Tweaks (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1827">#1827</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/e9d0d7bff72eaff9e8ffee5d90962014d8f9be6e"><code>e9d0d7b</code></a> Fix Warning in Langchain Access (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1823">#1823</a>)</li>
<li><a href="https://github.com/newrelic/newrelic-python-agent/commit/6ae6c9d5a14d58c52fc6b76919d9d230a6e313c3"><code>6ae6c9d</code></a> Fix socket binding to all interfaces warnings (<a href="https://redirect.github.com/newrelic/newrelic-python-agent/issues/1820">#1820</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/newrelic/newrelic-python-agent/compare/v13.4.0...v13.5.0">compare view</a></li>
</ul>
</details>
<br />

Updates `uvicorn` from 0.52.1 to 0.52.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p>
<blockquote>
<h2>Version 0.52.4</h2>
<h3>Fixed</h3>
<ul>
<li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4">https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4</a></p>
<h2>Version 0.52.3</h2>
<h3>Changed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.2...0.52.3">https://github.com/Kludex/uvicorn/compare/0.52.2...0.52.3</a></p>
<h2>Version 0.52.2</h2>
<h3>Fixed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3063">#3063</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.2">https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p>
<blockquote>
<h2>0.52.4 (August 18, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li>
</ul>
<h2>0.52.3 (August 13, 2026)</h2>
<h3>Changed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li>
</ul>
<h2>0.52.2 (August 13, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3063">#3063</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Kludex/uvicorn/commit/8988c23704fc373c9206cca53ec57dd8ad7f44a5"><code>8988c23</code></a> Stabilize macOS Python 3.13 signal shutdown tests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3084">#3084</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/898ddca9254b53c5bf7a6ee509756704caaa949f"><code>898ddca</code></a> Update PyPI publish action to version 1.14.2 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3083">#3083</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/3869f8aac2bdd040fa3fbe564e1dad67e2637641"><code>3869f8a</code></a> Restore Mermaid diagram rendering (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3080">#3080</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/64148a9c574e1eb87d3d09b3ce4c256606f8d973"><code>64148a9</code></a> Version 0.52.4 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3079">#3079</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/9e9e5691bd14d5c4cd66d9bd76c7730bc48461a2"><code>9e9e569</code></a> docs: correct release example PR number (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3072">#3072</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/b783dacab50b9d6767b0cf65826b2dc3aae21909"><code>b783dac</code></a> Remove duplicate Date header from SansIO WebSocket handshakes (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3078">#3078</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/27019b2a4b1fa6d68a289fcf7d738fbdc6ee4e5d"><code>27019b2</code></a> chore(deps): bump the python-packages group across 1 directory with 11 update...</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/1b6427311bb84a15addee688f6d41d96e33f8b0a"><code>1b64273</code></a> Fix a typo in index.md (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3006">#3006</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/a68da608147c5f79d962352dce11de8f6e32d972"><code>a68da60</code></a> Version 0.52.3 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3068">#3068</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/6e3bb4c5c22531c16d341f2da49f2653307f412f"><code>6e3bb4c</code></a> Use zttp 0.0.24 fast receive path (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.4">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 3, 2026
Bumps the minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django-ninja](https://github.com/vitalik/django-ninja) | `1.6.3` | `1.7.0` |
| [icalendar](https://github.com/collective/icalendar) | `7.2.2` | `7.3.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `2.0.0` | `2.1.1` |
| [newrelic](https://github.com/newrelic/newrelic-python-agent) | `13.4.0` | `13.5.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.52.4` |



Updates `django-ninja` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/vitalik/django-ninja/releases)
- [Commits](vitalik/django-ninja@v1.6.3...v1.7.0)

Updates `icalendar` from 7.2.2 to 7.3.0
- [Release notes](https://github.com/collective/icalendar/releases)
- [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
- [Commits](collective/icalendar@v7.2.2...v7.3.0)

Updates `mcp` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v2.0.0...v2.1.1)

Updates `newrelic` from 13.4.0 to 13.5.0
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](newrelic/newrelic-python-agent@v13.4.0...v13.5.0)

Updates `uvicorn` from 0.52.1 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.1...0.52.4)

---
updated-dependencies:
- dependency-name: django-ninja
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: icalendar
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: mcp
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: newrelic
  dependency-version: 13.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@brianglass
brianglass force-pushed the dependabot/pip/minor-09b6ace6f5 branch from 706eeab to 9b78d71 Compare September 8, 2026 14:20
@brianglass
brianglass merged commit 1c132e6 into main Sep 8, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/minor-09b6ace6f5 branch September 8, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant