Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 4 updates - #620

Merged
pdettori merged 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-ab50b33034
Jul 8, 2026
Merged

chore(deps): Bump the minor-and-patch group across 1 directory with 4 updates#620
pdettori merged 1 commit into
mainfrom
dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-ab50b33034

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates in the /mcp/cloud_storage_tool directory: google-cloud-storage, boto3, azure-storage-blob and fastmcp.

Updates google-cloud-storage from 3.11.0 to 3.12.0

Changelog

Sourced from google-cloud-storage's changelog.

3.12.0 (2026-03-23)

Features

Commits
  • 6547012 chore: librarian release pull request: 20260611T192009Z (#17432)
  • 2e75c78 feat: update API sources and regenerate (#17431)
  • f59c2b2 fix: bump pyarrow from 15.0.2 to 23.0.1 in /packages/bigframes (#17386)
  • dd823f5 chore(bigtable): add bigtable samples (#17240)
  • 7d230af chore(deps): bump pyspark from 3.5.1 to 3.5.2 in /packages/bigframes (#17400)
  • 57269d5 fix(auth): configure mTLS for impersonated credentials (#17404)
  • 59fe7cf feat: update API sources and regenerate (#17413)
  • ca02afc feat(google/developers/knowledge/v1): add google-developer-knowledge (#17417)
  • 3a90cc8 fix(bigframes): improve error message when unescaped { are found in SQL cel...
  • 384724c feat: support row_range in sample_row_keys method (#17330)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.23 to 1.43.40

Commits
  • dd59a59 Merge branch 'release-1.43.40'
  • b416ca0 Bumping version to 1.43.40
  • b228d05 Add changelog entries from botocore
  • 121db7a Merge branch 'release-1.43.39'
  • 00141f6 Merge branch 'release-1.43.39' into develop
  • 310317d Bumping version to 1.43.39
  • ff7c1cf Add changelog entries from botocore
  • 805c683 Update CODEOWNERS to shared Python SDK and CLI team (#4809)
  • efcfb65 Merge branch 'release-1.43.38'
  • d7aa957 Merge branch 'release-1.43.38' into develop
  • Additional commits viewable in compare view

Updates azure-storage-blob from 12.29.0 to 12.30.0

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.30.0

12.30.0 (2026-06-08)

Features Added

  • Stable release of features from 12.30.0b1
Commits
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102
  • 33075a4 [Storage] Fix Changelog Typos (#46930)
  • 4b183cf [Storage] Updated changelogs after 101 GA (#46914)
  • edf5833 Regenerate azure-mgmt-storagesync with latest code generator tool (#46884)
  • 1f5e399 [Storage] [Datalake] Fixed all next-pylint errors for `azure-storage-file-d...
  • 1a07881 [Storage] Fixed all errors in next-pylint for azure-storage-file-share (#...
  • 49343c0 [Storage] Fix all next-pylint errors for azure-storage-blob (#46601)
  • a1e9a01 ensure that when azure-storage-extensions is added as a dev_req to any of azu...
  • Additional commits viewable in compare view

Updates fastmcp from 3.4.0 to 3.4.2

Release notes

Sourced from fastmcp's releases.

v3.4.2: Heads Up

FastMCP 3.4.2 restores JWT compatibility for providers that include private, non-critical JWS header parameters. Tokens from providers like Clerk can carry header metadata such as cat without being rejected before signature and claim validation, while unsupported critical headers are still rejected.

What's Changed

Fixes 🐞

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.1...v3.4.2

v3.4.1: Floor It

FastMCP 3.4.1 floors Starlette at >=1.0.1 so installs can no longer resolve to a version affected by CVE-2026-48710 — previously the dependency was only constrained transitively through mcp, which allowed vulnerable versions. It also makes OAuthProxy log refresh-token cache misses instead of failing silently.

What's Changed

Enhancements ✨

Security 🔒

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.0...v3.4.1

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 19, 2026
@clawgenti clawgenti mentioned this pull request Jun 22, 2026
Closed
@dependabot
dependabot Bot force-pushed the dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-ab50b33034 branch from 62e35d8 to 64b58a8 Compare June 26, 2026 05:09
@dependabot
chore(deps): Bump the minor-and-patch group across 1 directory with 4…
6ebfd20 
… updates

Bumps the minor-and-patch group with 4 updates in the /mcp/cloud_storage_tool directory: [google-cloud-storage](https://github.com/googleapis/google-cloud-python), [boto3](https://github.com/boto/boto3), [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) and [fastmcp](https://github.com/PrefectHQ/fastmcp).


Updates `google-cloud-storage` from 3.11.0 to 3.12.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.11.0...google-cloud-storage-v3.12.0)

Updates `boto3` from 1.43.23 to 1.43.40
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.23...1.43.40)

Updates `azure-storage-blob` from 12.29.0 to 12.30.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.29.0...azure-storage-blob_12.30.0)

Updates `fastmcp` from 3.4.0 to 3.4.2
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.0...v3.4.2)

---
updated-dependencies:
- dependency-name: azure-storage-blob
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fastmcp
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google-cloud-storage
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-ab50b33034 branch from 64b58a8 to 6ebfd20 Compare July 3, 2026 05:10
pdettori
pdettori approved these changes Jul 8, 2026
View reviewed changes

@pdettori pdettori left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Low-risk grouped Dependabot update (minor/patch only). All CI checks green and mergeable. Approved via triage.

@pdettori
pdettori merged commit 91fd41f into main Jul 8, 2026
10 checks passed
@github-project-automation github-project-automation Bot moved this from New/ToDo to Done in Rossoctl Issue Prioritization Jul 8, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/mcp/cloud_storage_tool/minor-and-patch-ab50b33034 branch July 8, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pdettori pdettori pdettori approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Rossoctl Issue Prioritization
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@pdettori @rubambiza