Bump the cargo group with 2 updates

Merged
DE
1d ago
+5-5

Bumps the cargo group with 2 updates: rmcp and similar.

Updates rmcp from 3.6.0 to 3.7.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.7.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.7.0

Added

  • (auth) support OIDC ID-token subjects in enterprise exchange (#1385)

Fixed

  • (auth) allow cross-origin resource_metadata urls (#1302)
  • (transport) keep 401/403 status when the body is a JSON-RPC error (#1341)

Other

  • Merge commit from fork
Commits
  • 5d6a11f chore: release v3.7.0 (#1384)
  • 7bc5c07 fix(auth): allow cross-origin resource_metadata urls (#1302)
  • ac808ab Merge commit from fork
  • b11a40d feat(auth): support OIDC ID-token subjects in enterprise exchange (#1385)
  • e0e7e50 fix(transport): keep 401/403 status when the body is a JSON-RPC error (#1341)
  • c960b4b ci(triage): redact command output from failure logs (#1380)
  • See full diff in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

  • Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
  • Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
  • Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101
Commits
  • 71d4831 chore(release): prepare 3.2.1
  • b61e6c3 test(histogram): skip small stack tests on WASI
  • a4ee936 fix(histogram): track pending ranges on the heap
  • 96993d9 docs: add runnable example output gallery (#104)
  • 1c64280 docs(changelog): describe diff performance and memory improvements
  • a3da6ec perf(compact): use a gap buffer for large operation lists
  • ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
  • 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
  • 5a5aa8d perf(text): accelerate line and word tokenization
  • 80bc240 perf(hash): accelerate content hashing and integer lookups
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates rmcp to 3.7.0 and similar to 3.2.1, with a transitive getrandom 0.3.4 → 0.4.3 bump in Cargo.lock.

Changes

  • rmcp 3.7.0 adds OIDC ID-token support and fixes cross-origin resource metadata URLs and 401/403 response handling.
  • similar 3.2.1 improves diff performance and fixes a Histogram stack overflow and label handling in conflict markers.