Skip to content

chore(deps): Bump the minor-and-patch group in /mcp/cloud_storage_tool with 3 updates#589

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-93ae9bc53a
Open

chore(deps): Bump the minor-and-patch group in /mcp/cloud_storage_tool with 3 updates#589
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-93ae9bc53a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /mcp/cloud_storage_tool with 3 updates: boto3, azure-storage-blob and fastmcp.

Updates boto3 from 1.43.23 to 1.43.28

Commits
  • 803cba4 Merge branch 'release-1.43.28'
  • 0044dd3 Bumping version to 1.43.28
  • 43e2d2a Add changelog entries from botocore
  • 5d9ac3e Merge branch 'release-1.43.27'
  • 52b9481 Merge branch 'release-1.43.27' into develop
  • 5e9f049 Bumping version to 1.43.27
  • d15fe8f Add changelog entries from botocore
  • 5b09082 Bump github/codeql-action in the github-actions group (#4794)
  • 2dbd090 Merge branch 'release-1.43.26'
  • c0b69fb Merge branch 'release-1.43.26' into develop
  • Additional commits viewable in compare view

Updates azure-storage-blob from 12.29.0 to 12.30.0

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.30.0

12.30.0 (2026-06-08)

Features Added

  • Stable release of features from 12.30.0b1
Commits
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102
  • 33075a4 [Storage] Fix Changelog Typos (#46930)
  • 4b183cf [Storage] Updated changelogs after 101 GA (#46914)
  • edf5833 Regenerate azure-mgmt-storagesync with latest code generator tool (#46884)
  • 1f5e399 [Storage] [Datalake] Fixed all next-pylint errors for `azure-storage-file-d...
  • 1a07881 [Storage] Fixed all errors in next-pylint for azure-storage-file-share (#...
  • 49343c0 [Storage] Fix all next-pylint errors for azure-storage-blob (#46601)
  • a1e9a01 ensure that when azure-storage-extensions is added as a dev_req to any of azu...
  • Additional commits viewable in compare view

Updates fastmcp from 3.4.0 to 3.4.2

Release notes

Sourced from fastmcp's releases.

v3.4.2: Heads Up

FastMCP 3.4.2 restores JWT compatibility for providers that include private, non-critical JWS header parameters. Tokens from providers like Clerk can carry header metadata such as cat without being rejected before signature and claim validation, while unsupported critical headers are still rejected.

What's Changed

Fixes 🐞

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.1...v3.4.2

v3.4.1: Floor It

FastMCP 3.4.1 floors Starlette at >=1.0.1 so installs can no longer resolve to a version affected by CVE-2026-48710 — previously the dependency was only constrained transitively through mcp, which allowed vulnerable versions. It also makes OAuthProxy log refresh-token cache misses instead of failing silently.

What's Changed

Enhancements ✨

Security 🔒

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.0...v3.4.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group in /mcp/cloud_storage_tool with 3 updates: [boto3](https://github.com/boto/boto3), [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) and [fastmcp](https://github.com/PrefectHQ/fastmcp).


Updates `boto3` from 1.43.23 to 1.43.28
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.23...1.43.28)

Updates `azure-storage-blob` from 12.29.0 to 12.30.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.29.0...azure-storage-blob_12.30.0)

Updates `fastmcp` from 3.4.0 to 3.4.2
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.0...v3.4.2)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: azure-storage-blob
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastmcp
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New /:ToDo

Development

Successfully merging this pull request may close these issues.

1 participant