chore(deps): bump mcp from 1.26.0 to 1.27.2 in /envs/carla_env - #975
chore(deps): bump mcp from 1.26.0 to 1.27.2 in /envs/carla_env#975dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.26.0 to 1.27.2. - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.27.2) --- updated-dependencies: - dependency-name: mcp dependency-version: 1.27.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
python:uv
|
The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Alignment Review Report
Native Dependabot lock bump: mcp 1.26.0 → 1.27.2 in envs/carla_env (lock-only, 1 file, +130/−130). mcp is a transitive dependency (pulled via openenv/fastmcp; not pinned in carla_env/pyproject.toml), so a lock-only change with no pyproject.toml edit is correct.
Automated Checks
- Lint: PASS (for this PR).
bash .claude/hooks/lint.shexits 1, but every flagged file is pre-existing formatting debt in unrelated envs (agent_world_model_env,chat_env,coding_tools_env,jupyter_env,opencode_env,repl_env,terminus_env,textarena_env) — none incarla_env, and.lock/TOML files are not linted at all.uv lock --check --project envs/carla_envpasses (lock is consistent withpyproject.toml). - Debug code: CLEAN.
check-debug.shonly scanssrc/; all its hits are pre-existing and unrelated to this env-only diff.
Open RFCs Context
- RFC 003 — MCP Support (In Review; @Darktex/@pankit-eng) governs the MCP protocol interface, not the pinned version of the
mcpPyPI package. Bumping the library keeps the dependency current and is consistent with (not in conflict with) RFC 003. - No open RFC covers Python package indexes / dependency management, so there is no RFC conflict.
Tier 1: Fixes Required
None.
Verification performed:
- Package-set diff base→head: 122 → 122 packages, 0 added / 0 removed, only
mcpchanged (1.26.0 → 1.27.2). Surgical bump, no dependency churn. - Hashes verified against live PyPI: wheel
d6ff5160…(220,498 B) and sdist8e02db10…(621,116 B) match the lock;requires_python >=3.10(satisfied by carla's>=3.11); not yanked; 1.27.2 has no known vulnerabilities. - ✅ Security fix:
mcp1.26.0 carries CVE-2026-52870 / GHSA-hvrp-rf83-w775 (cross-session task-isolation bug;fixed_in: 1.27.2). It only affects servers that call the experimentalserver.experimental.enable_tasks(), whichcarla_envdoes not appear to use — so real-world exposure here is low, but the bump is net-positive.
Tier 2: Alignment Discussion
Principle Conflicts
ALIGNMENT FLAG: Lockfile index source flipped from the internal HF mirror to public PyPI for all packages
- Principle at stake: PRINCIPLES.md — "Container isolation for reproducibility" / dependency provenance (no RFC covers Python package indexes)
- The concern: Beyond the named
mcpbump, Dependabot rewrote everysource = { registry = "https://pypi.registries.huggingface.tech/" }→https://pypi.org/simpleand bumped the lockrevision2 → 3. Artifact URLs stay onfiles.pythonhosted.organd all hashes are unchanged, so this is likely benign and matches recently-merged Dependabot PRs (#967sumo_rl_env, #968textarena_envare already onpypi.org/simple+revision = 3). But it silently changes declared provenance and widens the existing cross-env split (~24 envs still pin the HF mirror). Registry choice is a team decision — flag, don't auto-fix. - Suggested reviewer: @Darktex (reproducibility principle author) + @burtenshaw (dependency-tooling owner)
RFC Conflicts
None identified.
Additional non-blocking notes
- Process (cc @burtenshaw): This native
dependabot/uv/envs/carla_env/…PR modifiesenvs/**, yet.github/dependabot.yml'suvupdater setsdirectory: "/"+exclude-paths: ["envs/**"]. Theuvecosystem isn't honoringexclude-paths; the intended path for env bumps is the aggregatecodex/dependabot-envs-*roll-up. - Heads-up (revision 3):
uv sync --frozenon arevision = 3lock needs uv ≳ 0.8. PR CI is fine (setup-uv0.9.3). Theopenenv-baseimage ships uv 0.5.27, butdocker-build.ymldoesn't trigger onuv.lock-only changes and several envs already ship revision 3, so this won't fire here — just worth confirming the base image's uv the next time it rebuilds.
Summary
- 0 mechanical issues to fix
- 1 alignment point for human review (index-source flip → @Darktex / @burtenshaw)
- 0 RFC conflicts
- Net-positive: transitive security fix (CVE-2026-52870), surgical single-package bump,
uv lock --checkpasses.
Sent by Cursor Automation: Pre-review
| @@ -1,5 +1,5 @@ | |||
| version = 1 | |||
| revision = 2 | |||
| revision = 3 | |||
There was a problem hiding this comment.
Lock revision 2 → 3 and a full index-source flip ride along with the mcp bump: all packages move from pypi.registries.huggingface.tech → pypi.org/simple (this is the bulk of the +130/−130). Artifact URLs (files.pythonhosted.org) and all hashes are unchanged, so it's likely benign and matches recently-merged #967/#968 — but it changes declared provenance. Registry choice is a team call, so flagging rather than fixing. cc @Darktex / @burtenshaw.
| name = "mcp" | ||
| version = "1.26.0" | ||
| source = { registry = "https://pypi.registries.huggingface.tech/" } | ||
| version = "1.27.2" |
There was a problem hiding this comment.
The actual intent of the PR: mcp 1.26.0 → 1.27.2 (transitive via openenv/fastmcp; no pyproject.toml pin, so a lock-only bump is correct). Wheel d6ff5160… / sdist 8e02db10… match live PyPI; not yanked; requires_python >=3.10 is satisfied. ✅ Security fix: 1.26.0 has CVE-2026-52870 (cross-session task leak in the experimental enable_tasks() feature), fixed_in: 1.27.2.
| version = "1.26.0" | ||
| source = { registry = "https://pypi.registries.huggingface.tech/" } | ||
| version = "1.27.2" | ||
| source = { registry = "https://pypi.org/simple" } |
There was a problem hiding this comment.
Representative line of the index flip — mcp's source now points at pypi.org/simple; the same rewrite is applied to every package block in the file. See the top-of-file note for the reproducibility/provenance discussion.
|
Superseded by #980. |
1 participant
Bumps mcp from 1.26.0 to 1.27.2.
Release notes
Sourced from mcp's releases.
Commits
6213787[v1.x] Scope experimental tasks to the session that created them (#2720)ce267b6[v1.x] Bind transport sessions to the authenticated principal (#2719)1abcca2[v1.x] Add subject and claims to AccessToken (#2690)9773a3f[v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages artifact (...77431eb[v1.x] refactor: import SSEError from httpx_sse public API (#2561)2034cae[v1.x] build: restrict httpx to <1.0.0 (#2559)73d458b[v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthCli...8d4c2f5[v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2...6524782[v1.x] fix: handle ClosedResourceError when transport closes mid-request (#2334)2e9897e[v1.x] fix: handle non-UTF-8 bytes in stdio server stdin (#2303)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Indirect bump of MCP, which includes authentication and session-binding changes in a dependency stack used by OpenEnv; lock-wide registry metadata changes are low risk but widen the diff surface.
Overview
Updates
envs/carla_env/uv.locksomcpmoves from 1.26.0 → 1.27.2 (pulled in throughfastmcp/openenv). Lock revision increments and every locked package’ssource.registryis rewritten from the Hugging Face PyPI mirror tohttps://pypi.org/simple; artifact URLs and hashes are unchanged aside from themcpentry.The
mcpupgrade brings auth and transport hardening in the Python SDK (e.g. binding sessions to the authenticated principal, richerAccessTokenclaims, OAuth/metadata fixes, session-scoped experimental tasks, and stdio/HTTP edge-case fixes).carla_envdoes not declaremcpdirectly, so runtime impact depends on whether OpenEnv MCP server/client paths are exercised in this environment.Reviewed by Cursor Bugbot for commit 20c6d12. Bugbot is set up for automated code reviews on this repo. Configure here.