chore(deps)(deps): Bump the prod group across 1 directory with 6 updates

[dependabot]

Bumps the prod group with 6 updates in the / directory:

Package	From	To
http	1.4.1	1.4.2
regex	1.12.3	1.12.4
rmcp	1.7.0	2.0.0
open	5.3.5	5.3.6
chrono	0.4.44	0.4.45
jsonschema	0.46.5	0.46.6

Updates http from 1.4.1 to 1.4.2

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

• Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
• Fix Uri to properly reject DEL characters.

Commits

• 82db5b8 v1.4.2
• a9cdbf8 fix(uri): reject DEL character (#842)
• df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
• ec3f8ce feat(method): impl PartialOrd + Ord (#840)
• See full diff in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

• #1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

• 7b96fdc 1.12.4
• 7b89cf0 deps: update to regex-syntax 0.8.11
• 1401679 regex-syntax-0.8.11
• d709000 changelog: 1.12.4
• 9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
• a7f2ff6 docs: clarify regex-lite word boundaries
• 2c7b172 docs: clarify unsupported Anchored::Pattern searches
• 839d16b regex-syntax-0.8.10
• c4865a0 syntax: fix negation handling in HIR translation
• d8761c0 cargo: also include benches
• Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 2.0.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.0.0

Added

• [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• align README examples with v2 model API (#928)

rmcp-v2.0.0

Added

• [breaking] (rmcp) add Audio variant to PromptMessageContent (#865)
• [breaking] align model types with MCP 2025-11-25 spec (#927)
• deprecate roots/sampling/logging types (#923)

Fixed

• prevent OAuth resource spoofing (#937)
• block oauth metadata ssrf (#935)
• prevent streamable HTTP session leak (#934)
• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• consolidate repeated rmcp tests (#931)
• align README examples with v2 model API (#928)

rmcp-macros-v1.8.0

Added

• deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

• strip and validate tool outputSchema and inputSchema (#860)
• remove unnecessary fields from tools' inputSchema (#856)

Other

• refine mcpmate listing copy (#885)
• added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0

[!WARNING]

⚠️ Breaking Changes

... (truncated)

Commits

• 67a3085 chore: release v2.0.0 (#920)
• c1a8b29 fix: prevent OAuth resource spoofing (#937)
• eb435c6 fix: block oauth metadata ssrf (#935)
• dfa7fd6 fix: prevent streamable HTTP session leak (#934)
• e1af378 chore: consolidate repeated rmcp tests (#931)
• 4b9bea7 Revert "feat!: relax tool result structuredContent type (#919)" (#932)
• b8a936c feat!: relax tool result structuredContent type (#919)
• 4158528 fix: fill missing fully qualified syntax in prompt_handler macros (#866)
• d1cabb4 feat: deprecate roots/sampling/logging types (#923)
• f07ee4a docs: align README examples with v2 model API (#928)
• Additional commits viewable in compare view

Updates open from 5.3.5 to 5.3.6

Release notes

Sourced from open's releases.

v5.3.6

Bug Fixes

• use PowerShell instead of wslview on WSL WSL users reported that wslu's wslview is discontinued and unavailable in some package managers. The regression tests cover the WSL command builder and initially failed because the first generated command was still wslview.

  Build the WSL opener as a PowerShell Start-Process -FilePath script argument with the target quoted as data, then retain the xdg-open, gio, gnome-open, and kde-open fallbacks. Update the user-facing docs and keep the WSL command builder testable from host builds without adding dev-dependencies.

Commit Statistics

• 2 commits contributed to the release.
• 48 days passed between releases.
• 1 commit was understood as conventional.
• 1 unique issue was worked on: #122

Commit Details

• #122
  • Use PowerShell instead of wslview on WSL (44d1d41)
• Uncategorized
  • Merge pull request #123 from Byron/avoid-wslview (41c4cf0)

Changelog

Sourced from open's changelog.

5.3.6 (2026-06-29)

Bug Fixes

• use PowerShell instead of wslview on WSL WSL users reported that wslu's wslview is discontinued and unavailable in some package managers. The regression tests cover the WSL command builder and initially failed because the first generated command was still wslview.

  Build the WSL opener as a PowerShell Start-Process -FilePath script argument with the target quoted as data, then retain the xdg-open, gio, gnome-open, and kde-open fallbacks. Update the user-facing docs and keep the WSL command builder testable from host builds without adding dev-dependencies.

Commit Statistics

• 2 commits contributed to the release.
• 48 days passed between releases.
• 1 commit was understood as conventional.
• 1 unique issue was worked on: #122

Commit Details

• #122
  • Use PowerShell instead of wslview on WSL (44d1d41)
• Uncategorized
  • Merge pull request #123 from Byron/avoid-wslview (41c4cf0)

Commits

• cfb39d8 Release open v5.3.6
• 41c4cf0 Merge pull request #123 from Byron/avoid-wslview
• 44d1d41 fix: use PowerShell instead of wslview on WSL (#122)
• See full diff in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in chronotope/chrono#1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in chronotope/chrono#1789

Commits

• 1703382 Prepare 0.4.45 release
• 881f9ab tz_data: fix tzdata locations on Android
• f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
• c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
• 120686c Bump codecov/codecov-action from 5 to 6
• See full diff in compare view

Updates jsonschema from 0.46.5 to 0.46.6

Release notes

Sourced from jsonschema's releases.

[CLI] Release 0.46.6

No release notes provided.

[Python] Release 0.46.6

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
• Reuse registry retrievers when only registry is passed.
• Reference leak when serializing large integers on Python 3.12+.

[Ruby] Release 0.46.6

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
• Reuse registry retrievers when only registry is passed.

[Rust] Release 0.46.6

Added

• IntoRegistryResource for Arc<Value>. #1129

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149

Changelog

Sourced from jsonschema's changelog.

[0.46.6] - 2026-06-24

Added

• IntoRegistryResource for Arc<Value>. #1129

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149

Commits

• 332f539 chore(rust): Release 0.46.6
• 7ceccf9 chore(ci): Add codecov config and CI/fuzz infra tweaks
• 210cc32 refactor(python): Extract pattern_options parsing into regex module
• bb50b10 refactor: Extract BuiltinFormat enum for format dispatch
• 0028582 test: Select test-suite draft explicitly for all drafts
• b15474c refactor(python): Add recursive JsonValue alias for returned JSON
• 488794c refactor(cli): Extract shared format-assertion args and registry builder
• a34caf6 test: Gate file-retrieval test helpers behind resolve-file feature
• ca9610e build(deps): bump crates/jsonschema-referencing/tests/suite
• f1b34da refactor: Reorder JsonType variants
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.