deps: bump the minor-and-patch group with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates: mcp, tree-sitter-language-pack and ruff.

Updates mcp from 2.2.0 to 2.3.0

Release notes

Sourced from mcp's releases.

v2.3.0

pip install -U mcp. Docs: https://py.sdk.modelcontextprotocol.io/

Mostly fixes, plus three new options. A few things behave differently, so skim these first:

Behaviour changes

httpx2>=2.10.0 is now required (#3600)

• It was >=2.5.0. The new max_sse_event_size option needs it.
• Nothing to do unless you pin httpx2 below 2.10.

A tool with an invalid x-mcp-header annotation fails at registration (#3620)

• @mcp.tool(), add_tool and Tool.from_function raise InvalidSignature, naming the tool and the problem.
• Until now the server started, and 2026-07-28 clients silently dropped the tool from their listing.
• Refused: anything other than a plain str, int or bool parameter (so also str | None, float, lists and enums), a header name that isn't a valid token, and two names that differ only by case.
• For an optional header parameter, give the schema directly: Annotated[str | None, WithJsonSchema({"type": "string", "x-mcp-header": "Region"})] = None.

Empty _meta and params are no longer sent (#3628)

• On 2025-11-25 and earlier connections, 2.x sent "_meta": {} on every request. Some servers reject that. It is now left out, as in v1.
• ping and list requests without a cursor go out with no params member.
• On the receiving side ctx.meta is None rather than {}, and middleware sees ctx.params as None for a request without params.
• 2026-07-28 connections are unchanged.

initialize leaves out experimental when none is configured (#3614)

• It used to send "experimental": {}. server/discover already left it out.
• Client code reading capabilities.experimental on a legacy connection should handle None.

Mcp-Param-* validation looks the tool up by name (#3630)

• MCPServer no longer runs tools/list for every tools/call, so middleware no longer sees that extra request.
• The registered schema is what gets checked. Middleware that filters or rewrites tools/list no longer affects it.

An interactive OAuth login no longer counts against request timeouts (#3635)

• The timeout pauses while OAuthClientProvider waits on redirect_handler and callback_handler.
• This fixes Client(mode="auto") settling on 2025-11-25 when the login took longer than 10 seconds.
• A request timeout no longer ends a login nobody finishes. Put a limit inside callback_handler if you need one.

New

• max_sse_event_size= on streamable_http_client and StreamableHttpParameters. The default stays 1 MiB per SSE event; raise it, or pass None, for larger tool results (#3600).
• MCPServer(subscriptions=False) stops serving subscriptions/listen and advertises listChanged and subscribe as false (#3626).
• Server(get_tool_input_schema=...) lets a low-level server supply a tool's schema for header validation without running its tools/list handler (#3630).
• Client.call_tool re-lists the tools and retries once after a HeaderMismatch (-32020) rejection (#3627).

Fixes

• ctx: Context[AppState] works on prompts and resource templates, not only on tools (#3624).
• An explicit "structuredContent": null is checked against the output schema instead of being treated as missing (#3621).
• A progress_callback that raises no longer fails the call on an in-process Client(server) (#3623).
• Client OpenTelemetry spans record JSON-RPC error responses. With mode="auto", connecting to a server without server/discover now shows one ERROR span for the probe (#3629).
• stdio_client resolves the executable off the event loop on Windows (#3510).

... (truncated)

Commits

• 2118f14 docs: refresh translations for recent English changes (#3636)
• ed9b2d6 Stop counting an interactive OAuth login against request timeouts (#3635)
• d5cebd1 Keep inline-snapshot disabled when pytest runs in a terminal (#3634)
• c15566c Link What's new to the Header parameters page (#3632)
• 4d29994 Let a newer Deploy Docs run cancel the one in progress (#3633)
• 0acea60 Bump urllib3 from 2.7.0 to 2.8.0 (#3607)
• c54075c Look the tool schema up by name for Mcp-Param-* validation instead of running...
• 9afccae Retry a tool call once after a HeaderMismatch rejection (#3627)
• cafa33b Record JSON-RPC error responses on the client OpenTelemetry span (#3629)
• 0b2fd3e Omit an empty _meta and empty params from outbound requests (#3628)
• Additional commits viewable in compare view

Updates tree-sitter-language-pack from 1.20.0 to 1.21.0

Release notes

Sourced from tree-sitter-language-pack's releases.

Release v1.21.0

What's Changed

• fix(intel): Swift and TypeScript declarations, configuration DataNode paths by @​robertsfeir in xberg-io/tree-sitter-language-pack#186
• feat: restore Rust extension ambiguity lookup by @​Goldziher in xberg-io/tree-sitter-language-pack#187
• chore(release): prepare 1.17.0 by @​Goldziher in xberg-io/tree-sitter-language-pack#188
• feat(intel): SQL, Justfile, Dockerfile, C, Cedar, dotenv and plist declarations by @​robertsfeir in xberg-io/tree-sitter-language-pack#190
• Bump rustls to 0.23.45 in the Elixir and Ruby lock files by @​robertsfeir in xberg-io/tree-sitter-language-pack#198

Full Changelog: xberg-io/tree-sitter-language-pack@v1.16.0...v1.21.0

Changelog

Sourced from tree-sitter-language-pack's changelog.

[1.21.0] - 2026-10-04

Added

• BAML grammar (baml, from BoundaryML/baml-treesitter, Apache-2.0), bringing the pack to 372 languages (#200). Upstream ships an ABI 15 parser.c; it is regenerated at ABI 14 like the rest of the pack. Known limitation: the grammar rejects the documented backtick prompt form until BoundaryML/baml#5012 is fixed upstream.
• Parser bundles now carry the pinned licence and NOTICE text for every grammar they contain, so redistributors can retain the applicable upstream notices (#191). Coverage is fail-closed: a grammar with no resolvable licence text fails the build.
• A root-owned, non-writable parser cache directory is accepted, so a grammar cache baked into a read-only container image works without a chown (#202). Group- or other-writable directories are still rejected.
• Python DocstringFormat, StructureKind and SymbolKind gain a from_other() factory, and the unit enums are hashable. WASM classes gain copyForTransfer().

Changed

• Refresh 48 grammar pins to their latest upstream revisions. No grammar changed ABI or lost a query; F#, F# Signature and Protocol Buffers gained locals/tags queries. cuda stays held: its upstream parser.c is past the regeneration size threshold and would lose its injections and tags queries.
• BREAKING (Java, C#): DocstringFormat, StructureKind and SymbolKind are sealed types, not enums. Java uses sealed interfaces with record variants and C# uses abstract records with sealed record variants, so StructureKind.FUNCTION / StructureKind.Function becomes new StructureKind.Function(). Other now carries its string payload, and Java's values(), getValue() and case-insensitive fromValue() are gone, so match with pattern matching or instanceof/is. The JSON wire format is unchanged. Java ErrorException now extends TreeSitterLanguagePackRsException.
• BREAKING (Python): cache_dir, clean_cache, configure, download, download_all, download_group, init, manifest_groups, manifest_languages, prefetch and process raise the typed tree_sitter_language_pack.Error subclasses (DownloadError, LanguageNotFoundError, ...) instead of RuntimeError, matching get_language. except RuntimeError: no longer catches them. The .pyi stubs also drop the never-present type attribute and TypedDict variants on the kind types and tighten constructor parameter types.
• BREAKING (WASM): the data and bodySpan setters no longer accept null/undefined. Use the new clearData() and clearBodySpan() instead.
• BREAKING (PHP, Ruby type signatures): the PHP stubs describe the kind types as classes with a type_tag property, an other property and static factories, not as string constants. The Ruby RBS enum classes become enum_* type aliases. Kotlin Android unit enums now return the wire string from toString() ("Line", not "LINE").
• Regenerate all bindings, fixtures, documentation and workflows with Alef 0.103.14 (was 0.87.1 at 1.20.0), which is the source of the changes above. The PHP extension now builds against ext-php-rs 0.16 and the Elixir package requires rustler_precompiled ~> 0.10. Ruby builds against magnus 0.9 and the MCP server against rmcp 3.5. libc is held at 0.2.189 because 0.2.190 breaks iOS builds rust-lang/libc#5601

Fixed

• download([...]) fetches languages the manifest knows but the cache does not hold. It previously

... (truncated)

Commits

• 09a3688 chore(swift): update Package.swift with checksum for v1.21.0
• cfb486e ci(validate): pin Zig 0.16.0 for snippet validation
• 225d6c5 docs(changelog): list the 1.21.0 binding API breaks
• 7c7c226 fix(wasm): trap instead of importing env.exit from grammar scanners
• 31aafde test(java): follow the sealed-interface kind types from the alef 0.103 regen
• af651f2 fix(deps): hold libc at 0.2.189 for iOS builds
• c09f7f1 chore(plugin): regenerate bundles with ai-rulez 4.24.2
• 3a9d589 chore(release): 1.21.0
• 21500cc refactor(build): split build.rs into build_support modules (#184)
• dc41475 feat(grammars): add BAML grammar (#200)
• Additional commits viewable in compare view

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Commits

• 3265ed1 Bump version to 0.16.10 (#29055)
• e786964 Authorize shared PR security-review workflow to publish findings (#29052)
• a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
• b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
• 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
• 317e0a3 [ty] Bound nested callable signature display (#29049)
• 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
• 56180bc [ty] Specialize instance members once (#29043)
• aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
• 2d25346 [ty] Improve unresolved-import documentation (#29039)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cdeust]

ZETETIC-REVIEW: APPROVE
5fc3ad7

Cortex #673: deps: bump the minor-and-patch group with 3 updates (uv)

Reviewer: code-reviewer (read-only). Stakes: Medium (runtime dependency mcp and optional codebase dependency move; no Cortex source change). Base: 206ac67 is an ancestor of the head.

Findings

1. Diff (gh pr diff 673, git diff 206ac67b 5fc3ad72 --stat): pyproject.toml (2 lines) and uv.lock (37 lines each way), nothing else.
   • pyproject.toml: codebase extra tree-sitter-language-pack>=1.12.5,<1.21 to <1.22; lint group ruff==0.16.9 to ruff==0.16.10. The uv.lock requires-dist and lint metadata mirror both edits.
   • uv.lock package entries changed (git diff ... -- uv.lock | grep name =): mcp 2.2.0 to 2.3.0, mcp-types 2.2.0 to 2.3.0, ruff 0.16.9 to 0.16.10, tree-sitter-language-pack 1.20.0 to 1.21.0. mcp is a lock-only move inside the unchanged mcp>=2.0.0 range; mcp-types moves with it, so four lock entries for Dependabot's three updates.
2. None of the seven ignored packages is touched: grep of the pyproject and lock diff for torch, onnxruntime, numpy, transformers, cryptography, setuptools lines returns nothing. No marker rewrite: the only marker-bearing lines in the diff are the unchanged tree-sitter-language-pack extra == 'codebase' requires-dist line (specifier only) and the context lines around the torch launcher-ml entries, which are unchanged context, not +/- lines.
3. mcp 2.3.0 dependency floor: upstream pyproject at tag v2.3.0 requires httpx2>=2.10.0; the PR lock holds httpx2 2.12.0. The mcp dependency list in the lock is otherwise unchanged.
4. Release notes at the source:
   • mcp v2.3.0 (gh release view, published 2026-10-02): behaviour changes are an httpx2 floor, registration-time rejection of invalid x-mcp-header annotations, omission of empty _meta/params on legacy-protocol requests (receiver sees ctx.meta as None), experimental omitted from initialize when unset, and OAuth login not counted against timeouts. Grep of mcp_server for x-mcp-header, ctx.meta and .experimental finds no use.
   • tree-sitter-language-pack v1.21.0 (published 2026-10-04, changelog in PR body from xberg-io): Python breaking change is that cache_dir/clean_cache/configure/download*/init/manifest_*/prefetch/process raise typed Error subclasses instead of RuntimeError. Cortex calls none of those; mcp_server/core/ast_parser.py uses get_parser and already catches the typed DownloadError, and tests_py/core/test_ast_parser_language_contract.py exercises that contract. Other changes are grammar pin refreshes (no ABI change, per upstream) and non-Python binding changes.
   • ruff 0.16.10 (gh release view 0.16.10 -R astral-sh/ruff, 2026-10-01): preview rule UP052, memory reduction, server and docs changes; no stable rule change listed.
5. Python requirements: mcp v2.3.0 and tree-sitter-language-pack v1.21.0 upstream pyproject both declare requires-python = ">=3.10"; tslp wheels in the lock are cp310-abi3. Matches Cortex's 3.10 floor, and the 3.10 leg passed with the lock installed.
6. gh pr checks 673: all finished, all pass or skipping. Test (Python 3.10, 3.11, 3.12, 3.13), Test (SQLite backend), Test (Windows, SQLite backend), Lint, Type Check, Craftsmanship Gate, Build Package, Release dependency set (uv.lock dev+postgresql), Docker Smoke, Validate MCP host configurations, Fuzz (address, undefined), HOL plugin scan, CI Green: pass. No CANCELLED leg and no timeout, so no rerun is needed. gh run list --commit 5fc3ad72: CI, HOL plugin scanner, Fuzz, Upstream identity all completed/success.
7. Lock consistency: the Lint job log of run 37743622762 shows + ruff==0.16.10 installed from the locked lint group and uv lock --check ran and resolved 181 packages without error.
8. Docker: Docker Build (runtime image) was skipped because ci.yml's docker path filter only matches Dockerfile, .dockerignore, docker/, .devcontainer/. Docker Smoke does build ./Dockerfile from the PR checkout with docker/build-push-action (context ., load true) and passed.
9. Other ruff pins: docs/adr/ADR-1092 line 105 mentions ruff 0.16.9 as the version a past verification ran under; that is a historical record, not a pin to update. No other ruff pin found in .github, scripts or CONTRIBUTING.md.
10. mergeStateStatus: CLEAN.

Not verified

• PyPI JSON metadata directly (curl to pypi.org was denied in this session); requires-python taken from upstream pyproject files at the release tags and from the lock's wheel tags.
• Live MCP client interop against mcp 2.3.0 beyond what the test matrix and "Validate MCP host configurations" cover (e.g. a legacy-protocol client that relied on "_meta": {} being sent).
• The devcontainer and runtime images via the Docker Build jobs (skipped by path filter); only Docker Smoke built ./Dockerfile.
• I did not run uv lock --check or pytest locally; I relied on the CI logs above.

Merge order

Merge #672 first, then this PR; the reverse is equally safe. Disjoint files, both based on 206ac67. main has required_status_checks.strict: false and 0 rulesets (consistent with #614 merging while BEHIND today), so this PR does not need @dependabot rebase after #672 lands.