[dependabot]

Bumps fastmcp from 3.4.7 to 4.1.0.

Release notes

Sourced from fastmcp's releases.

v4.1.0: Fourth and One

FastMCP 4.1.0 is a maintenance release at heart: a broad sweep of fixes across OpenAPI, proxies, auth, tasks, and the CLI, plus full Python 3.15 support. It doesn't change how most servers behave. A few security fixes do tighten inputs that FastMCP previously accepted, though, and our versioning policy keeps breaking changes out of patch releases, so this ships as a point-one release.

Check these before upgrading:

• MultiAuth now qualifies client IDs by source, so existing MultiAuth sessions and tasks start new ownership scopes. Finish pending tasks before upgrading.
• Regex tool search uses Pydantic's regex engine, which doesn't support lookarounds or backreferences.
• Skill files must resolve inside their configured directories.
• OpenAPI path parameters reject . and .. segments.
• HTTP sessions now expire after the MCP SDK's 30-minute idle default instead of never.
• CodeMode requires Monty 1.1, which renames max_duration_secs to max_feed_duration_secs.

Thanks to our 48 contributors, including 21 first-time contributors!

What's Changed

Breaking Changes ⚠️

• fix(http): preserve the SDK's default session idle timeout by @​asts-top in PrefectHQ/fastmcp#5229
• Restore full Python 3.15 support by @​Kludex in PrefectHQ/fastmcp#5558

Enhancements ✨

• enhancement: Configure token introspection audiences by @​jlowin and @​sajdakabir in PrefectHQ/fastmcp#5461
• fix: Make proxy HTTP header forwarding configurable by @​jlowin in PrefectHQ/fastmcp#5462
• enhancement: Configure upload retention in memory by @​jlowin and @​warlocksmurf in PrefectHQ/fastmcp#5463
• Clarify maintainer review decisions by @​jlowin in PrefectHQ/fastmcp#5466
• feat: persist encrypted CLI OAuth tokens by @​andreivince in PrefectHQ/fastmcp#5405
• feat(auth): add TokenCache support to GoogleTokenVerifier and GoogleProvider by @​jerive in PrefectHQ/fastmcp#5366
• Add gitleaks secret scanning to prek by @​strawgate in PrefectHQ/fastmcp#5355
• Keep review design decisions with maintainers by @​jlowin in PrefectHQ/fastmcp#5468

Security 🔒

• fix!: Qualify MultiAuth client identities by @​jlowin in PrefectHQ/fastmcp#5455
• fix!: Validate OpenAPI path parameter segments by @​jlowin in PrefectHQ/fastmcp#5457
• fix!: Resolve skill files within their configured directories by @​jlowin and @​GEONWOOHAN in PrefectHQ/fastmcp#5459
• fix!: Use Pydantic’s regex engine for tool search by @​jlowin in PrefectHQ/fastmcp#5467

Fixes 🐞

• fix: Share JWKS refreshes across key lookups by @​jlowin in PrefectHQ/fastmcp#5456
• fix: Reuse shared OpenAPI composition members by @​jlowin in PrefectHQ/fastmcp#5460
• Resolve app tool names against the transformed catalog by @​jlowin in PrefectHQ/fastmcp#5464
• fix: keep generator iteration inside dependency lifetime by @​mikamikasuki in PrefectHQ/fastmcp#5438
• fix(tools): consume synchronous generators within dispatched invocation by @​HootRock in PrefectHQ/fastmcp#5376
• fix(tools): reject results returned after timeout deadlines by @​HootRock in PrefectHQ/fastmcp#5379
• Fix #5368: Tool.from_tool: a transform_fn that declares ctx: Context fails on eve by @​nandanadileep and @​chrikrah in PrefectHQ/fastmcp#5371
• fix(auth): preserve AuthKit issuer identity by @​mikamikasuki and @​paddynatte in PrefectHQ/fastmcp#5452
• fix(auth): advertise resource_metadata only when a route serves it by @​alex-feel in PrefectHQ/fastmcp#5363
• fix: decode escaped JSON Pointer tokens during hydration by @​HuaTNA in PrefectHQ/fastmcp#5407
• fix: read MCP config files as UTF-8 in the install commands by @​ch-z-hc in PrefectHQ/fastmcp#5359
• Add regression coverage for root-context schema caching by @​hulkbig in PrefectHQ/fastmcp#5397
• Keep the original cause when ErrorHandlingMiddleware re-raises an error unchanged by @​asasemahmed in PrefectHQ/fastmcp#5344
• Resolve ASGIServer.http_client relative URLs against the server origin by @​asasemahmed in PrefectHQ/fastmcp#5341
• Raise startup failures from run_server_async instead of hanging by @​asasemahmed in PrefectHQ/fastmcp#5340

... (truncated)

Changelog

Sourced from fastmcp's changelog.

---

title: "Changelog" icon: "list-check" rss: true tag: NEW

v4.1.3: Root Awakening

This release updates certifi-backed dependencies following the eMudhra CA compromise and fixes public-client OAuth authentication, empty visibility selections, generator transforms, and per-server timeouts for ordinary requests. FastMCP 4 uses system trust by default: follow the security notice to update operating-system, container, custom, and installer trust stores; upgrading FastMCP alone is insufficient. Thanks to our 11 contributors, including 6 first-time contributors.

Security 🔒

• Require certifi 2026.10.19 or later for certifi-backed server dependencies and optional SDK integrations, and document system, custom, and installer trust-store updates by @​zzstoatzz in #5945.

Enhancements ✨

• Chart public backlog counts and closure outcomes by @​zzstoatzz in #5942

Fixes 🐞

• Default the upstream token auth method to none without a client secret by @​asasemahmed in #5879
• fix: preserve empty session visibility selections by @​himanshuchawla0807-gif in #5944
• test(mount): make unreachable proxy failures deterministic by @​CharlesYXW and @​ch-z-hc in #5584
• fix(tools): materialize generator transform_fn results in TransformedTool.run by @​BlueX888 and @​nandanadileep in #5672
• Honor per-server MCP config timeouts by @​atty57, @​phnmn, and @​CRYPTONIKAV in #5758
• fix: don't classify a tool body's own TimeoutError as the tool timeout by @​Wilson0511 in #5940

New Contributors

• @​phnmn made their first contribution in #5758
• @​CRYPTONIKAV made their first contribution in #5758
• @​himanshuchawla0807-gif made their first contribution in #5944
• @​CharlesYXW made their first contribution in #5584
• @​atty57 made their first contribution in #5758
• @​Wilson0511 made their first contribution in #5940

Full Changelog: v4.1.2...v4.1.3

v4.1.2: License to Deny

Component authorization now applies after transforms, denied resources cannot fall through matching templates, and OAuth client credentials providers support issuer binding across fresh and cached-token flows. Existing configurations remain compatible, but users of ClientCredentialsOAuthProvider or PrivateKeyJWTOAuthProvider must set issuer to enable this protection; upgrading alone is insufficient. Thanks to our 18 contributors, including 9 first-time contributors.

Security 🔒

• Authorize transformed components and prevent denied-resource template fallback by @​zzstoatzz and @​rishid in #5933
• Bind OAuth client credentials to a configured issuer, including cached-token renewal, by @​zzstoatzz and @​LHMisme420 in #5933

Enhancements ✨

• Add SEP-2640 Skills extension foundation by @​strawgate in #5057
• Write down triage and merge norms in docs/development by @​zzstoatzz in #5872
• Add experimental Skills discovery to SkillsDirectoryProvider by @​zzstoatzz in #5704

... (truncated)

Commits

• 51b618f Merge pull request #5635 from PrefectHQ/docs/changelog-4.1.0
• e8327ee docs: structure v4.1.0 release notes
• d7186ba docs: exclaim v4.1.0 contributor thanks
• d87d171 docs: add v4.1.0 changelog entries
• f3cf3ee chore: Update SDK documentation (#5465)
• 1ed0e6d fix(client): hydrate formatted scalars and positional array items (#5203)
• f6cfbf7 fix(docstrings): don't leak Returns/Raises into description for parameterless...
• aa6aac8 fix: preserve input requests in resource and prompt tools (#5476)
• 0921c96 fix(resources): separate URI fragments from query values (#5132)
• f8439a3 Propagate child cancellation from gather (#5161)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)