Skip to content

Bump rmcp from 1.7.0 to 1.8.0 in the rust-dependencies group - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-1b3644f789
Closed

Bump rmcp from 1.7.0 to 1.8.0 in the rust-dependencies group#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-1b3644f789

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 1 update: rmcp.

Updates rmcp from 1.7.0 to 1.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.8.0

Added

  • deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

  • strip and validate tool outputSchema and inputSchema (#860)
  • remove unnecessary fields from tools' inputSchema (#856)

Other

  • refine mcpmate listing copy (#885)
  • added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0

[!WARNING]

⚠️ Breaking Changes

Despite being a minor version bump, this release contains a source-breaking API change (it should have been 2.0.0). If you depend on rmcp = "1.7", Cargo will resolve to 1.8.0 automatically and your build may fail. Pin to =1.7.x if you are not ready to migrate.

Peer::peer_info() return type changed (#862):

- pub fn peer_info(&self) -> Option<&R::PeerInfo>
+ pub fn peer_info(&self) -> Option<Arc<R::PeerInfo>>

This was needed so peer info can be re-set on a duplicate initialize (it now lives behind an RwLock), which is why a borrow can no longer be returned.

Migration: field access still works through Arc's Deref. If you need the old &InitializeResult (e.g. you bound the type explicitly), use .as_deref():

// Before (1.7.x): info is &InitializeResult
let info: Option<&InitializeResult> = client.peer_info();
// After (1.8.0): info is Arc<InitializeResult>
let info: Option<Arc<InitializeResult>> = client.peer_info();
// To recover the old reference type:
let info: Option<&InitializeResult> = client.peer_info().as_deref();

Added

  • standardize resource-not-found error code (SEP-2164) (#899)
  • validate OAuth authorization response issuer (#896)
  • specify OIDC application_type during dynamic client registration (SEP-837) (#883)
  • deprecate roots, sampling, and logging (SEP-2577) (#884)

... (truncated)

Commits
  • 2522036 chore: release v1.8.0 (#850)
  • 6d020c9 fix(auth): preserve configured reqwest client (#917)
  • de898dd Allow custom HTTP clients for OAuth (#908)
  • 3c5ce2b fix(auth): align OAuth metadata discovery ordering (#887)
  • 443677c fix: align progress timeout token (#909)
  • 4fd4986 fix(elicitation): preserve enumNames through ElicitationSchema serde round-tr...
  • bf71eb8 chore(deps): bump actions/checkout from 6 to 7 (#911)
  • 5d00e20 Add progress-aware request timeout reset (#858)
  • 4b82e41 docs(server): document Err vs Ok(CallToolResult::error) visibility contract o...
  • 95a8e96 feat: standardize resource-not-found error code (SEP-2164) (#899)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 1 update: [rmcp](https://github.com/modelcontextprotocol/rust-sdk).


Updates `rmcp` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v1.8.0)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like rmcp is updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 3, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-dependencies-1b3644f789 branch July 3, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants