From b3d45b701b635d572bf9fd1a1c43bc588067db43 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Jun 2026 23:46:54 +0000
Subject: [PATCH] chore(deps): bump the python-deps group across 1 directory
 with 6 updates

Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [python-multipart](https://github.com/Kludex/python-multipart), [cryptography](https://github.com/pyca/cryptography), [pytest](https://github.com/pytest-dev/pytest) and [mcp](https://github.com/modelcontextprotocol/python-sdk) to permit the latest version.

Updates `fastapi` to 0.137.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.136.3...0.137.2)

Updates `uvicorn` to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.48.0...0.49.0)

Updates `python-multipart` to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.29...0.0.32)

Updates `cryptography` to 49.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/48.0.0...49.0.0)

Updates `pytest` to 9.1.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.0)

Updates `mcp` to 1.28.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.0.0...v1.28.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.137.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: cryptography
  dependency-version: 49.0.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.1.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mcp
  dependency-version: 1.28.0
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 16ccb2d..8dc5313 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -30,34 +30,34 @@ dependencies = [
     "rich>=15.0.0",
     "prompt_toolkit>=3.0.52",
     "httpx>=0.28.1",
-    "fastapi>=0.136.3",
-    "uvicorn>=0.48.0",
-    "python-multipart>=0.0.29",
+    "fastapi>=0.137.2",
+    "uvicorn>=0.49.0",
+    "python-multipart>=0.0.32",
     "jinja2>=3.1.6",
     # v2 / Milestone 2c: Ed25519 signatures for lineage_share grants.
     # Also provides Argon2id KDF for the web UI password store.
-    "cryptography>=48.0.0",
+    "cryptography>=49.0.0",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "pytest>=9.0.3",
+    "pytest>=9.1.0",
     "pytest-cov",
     "ruff",
     "mypy",
     "types-PyYAML",
 ]
 test = [
-    "pytest>=9.0.3",
+    "pytest>=9.1.0",
     "pytest-cov",
     # tests/test_chat_loop.py uses async def + @pytest.mark.asyncio.
     # Required in CI; locally most devs have it system-wide.
     "pytest-asyncio>=1.4.0",
     # CI exercises the MCP catalog/server as a first-class AgentDrive surface.
-    "mcp>=1.0.0",
+    "mcp>=1.28.0",
 ]
 mcp = [
-    "mcp>=1.0.0",
+    "mcp>=1.28.0",
 ]
 
 [project.scripts]