chore(deps): update dependency fastmcp to v4.1.1 (dev) #23

2026-10-21T04:02:24Z

renovate Bot commented

2026-10-21 04:02:24 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
fastmcp	`4.1.0` → `4.1.1`

Release Notes

PrefectHQ/fastmcp (fastmcp)

`v4.1.1`: : Regex Marks the Spot

Compare Source

Regex tool search now rejects patterns over 1,000 characters and stops after about a second, and SkillsDirectoryProvider discovers skill folders that are links again, including links to folders outside the skills root; a skill's own files must still resolve inside the folder it links to. All 4.x users are encouraged to upgrade. Thanks to our 4 contributors, including 1 first-time contributor.

What's Changed

Security 🔒

Keep linked skill folders discoverable by @zzstoatzz in #5766
Bound regex tool search by pattern length and time by @zzstoatzz and @SAYUTIM in #5771

Fixes 🐞

Keep an unparseable proxy setting from aborting the update check by @zzstoatzz and @ker2xu in #5639
Keep the JWKS refresh lock clear of subclass attributes by @zzstoatzz in #5770

Examples & Contrib 💡

fix: convert version query param to VersionSpec in component manager routes by @BlueX888 in #5575

New Contributors

@ker2xu made their first contribution in #5639

Full Changelog: https://github.com/PrefectHQ/fastmcp/compare/v4.1.0...v4.1.1

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [fastmcp](https://github.com/PrefectHQ/fastmcp) | `4.1.0` → `4.1.1` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/fastmcp/4.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/fastmcp/4.1.0/4.1.1?slim=true) | --- ### Release Notes <details> <summary>PrefectHQ/fastmcp (fastmcp)</summary> ### [`v4.1.1`](https://github.com/PrefectHQ/fastmcp/releases/tag/v4.1.1): : Regex Marks the Spot [Compare Source](https://github.com/PrefectHQ/fastmcp/compare/v4.1.0...v4.1.1) Regex tool search now rejects patterns over 1,000 characters and stops after about a second, and `SkillsDirectoryProvider` discovers skill folders that are links again, including links to folders outside the skills root; a skill's own files must still resolve inside the folder it links to. All 4.x users are encouraged to upgrade. Thanks to our 4 contributors, including 1 first-time contributor.  #### What's Changed ##### Security 🔒 - Keep linked skill folders discoverable by [@zzstoatzz](https://github.com/zzstoatzz) in [#5766](https://github.com/PrefectHQ/fastmcp/pull/5766) - Bound regex tool search by pattern length and time by [@zzstoatzz](https://github.com/zzstoatzz) and [@SAYUTIM](https://github.com/SAYUTIM) in [#5771](https://github.com/PrefectHQ/fastmcp/pull/5771) ##### Fixes 🐞 - Keep an unparseable proxy setting from aborting the update check by [@zzstoatzz](https://github.com/zzstoatzz) and [@ker2xu](https://github.com/ker2xu) in [#5639](https://github.com/PrefectHQ/fastmcp/pull/5639) - Keep the JWKS refresh lock clear of subclass attributes by [@zzstoatzz](https://github.com/zzstoatzz) in [#5770](https://github.com/PrefectHQ/fastmcp/pull/5770) ##### Examples & Contrib 💡 - fix: convert version query param to VersionSpec in component manager routes by [@BlueX888](https://github.com/BlueX888) in [#5575](https://github.com/PrefectHQ/fastmcp/pull/5575) #### New Contributors - [@ker2xu](https://github.com/ker2xu) made their first contribution in [#5639](https://github.com/PrefectHQ/fastmcp/pull/5639) **Full Changelog**: <https://github.com/PrefectHQ/fastmcp/compare/v4.1.0...v4.1.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate Bot added the deps-code renovate labels 2026-10-21 04:02:24 +00:00

renovate Bot added 1 commit 2026-10-21 04:02:24 +00:00

chore(deps): update dependency fastmcp to v4.1.1

renovate/stability-days Updates have met minimum release age requirement

Details

renovate/artifacts Artifact file update failure

286afa8d92

renovate Bot scheduled this pull request to auto merge when all checks succeed 2026-10-21 04:02:25 +00:00

renovate Bot commented

2026-10-21 04:02:25 +00:00

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: backend/pyproject.toml

Artifact update for fastmcp resolved to version 4.1.3, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.1.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: backend/pyproject.toml ``` Artifact update for fastmcp resolved to version 4.1.3, which is a pending version that has not yet passed the Minimum Release Age threshold. Renovate was attempting to update to 4.1.1 This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them. Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries) See also: https://docs.renovatebot.com/dependency-pinning/ ```

renovate Bot merged commit 7697ba3e3c into dev

2026-10-21 04:02:26 +00:00

renovate Bot deleted branch renovate/dev-code-dependencies

2026-10-21 04:02:26 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beaver/beavergram#23