chore(deps): bump rmcp 1.2 → 1.4 + unpin minor versions#13
Merged
Conversation
Bumps rmcp from 1.2.0 to 1.4.0 across both the universal dep and the native-only override. Removes the exact-version pin (`=1.2.0` → `"1.4"`) so future patch and minor updates flow through normally — the pin was insurance during the CF migration and isn't earning its keep now. ## Why not dependabot PR #9 The grouped PR only bumped the universal pin (Cargo.toml line 38) and left the native-only override (line 108) at `=1.2.0`. With cfg-conjoined exact pins at different versions, Cargo can't resolve a single rmcp version and the workspace fails to build. Closing #9 in favour of this manual fix. ## Why floor at 1.4 and not latest (1.7) rmcp 1.3 removed the default type param from `StreamableHttpService<S>` (rmcp #758), which means our native HTTPS handler now needs to specify both generics: `StreamableHttpService<MemoriaServer, LocalSessionManager>`. Fixed in src/main.rs. Beyond 1.4 there are further API shifts I haven't audited — floor at 1.4 matches the dependabot ask and keeps the diff auditable. Future bumps can move forward incrementally. ## Notable upstream changes 1.2 → 1.4 - fix(server): remove initialized notification gate to support Streamable HTTP (rmcp #788) — helpful for our HTTPS path - default session keep_alive to 5 minutes (rmcp #780) - fix(http): add host check (rmcp #764) - StreamableHttpService default generic removed (rmcp #758) — the type annotation in src/main.rs:1325 absorbs this ## Test plan - [x] `cargo build` — clean (2 pre-existing dead-code warnings) - [x] `cargo test` — 49 passed, 0 failed - [x] `cargo check --target wasm32-unknown-unknown --lib` — clean - [ ] CI green on PR Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
rmcpfrom 1.2.0 to 1.4.0 across both dep entries (universal + native-only)=1.2.0→"1.4") so future patch and minor updates flow through normallyLocalSessionManagertype argument toStreamableHttpService<…>insrc/main.rs:1325(rmcp 1.3 dropped the default generic, rmcp#758)Why not dependabot PR #9
PR #9 only updated the universal pin on line 38 of
Cargo.tomland left the native-only override on line 108 at=1.2.0. With two cfg-conjoined exact pins at different versions, Cargo cannot resolve a singlermcpversion and the workspace fails to build:```
error: failed to select a version for `rmcp`.
required by package `memoria v0.1.0`
versions that meet the requirements `=1.2.0` are: 1.2.0
previously selected package `rmcp v1.4.0`
```
Closing #9 in favour of this manual fix.
Why floor at 1.4 and not latest (1.7)
cargo update -p rmcp(unpinned) resolves to 1.7.0, but 1.5/1.6/1.7 introduce further API shifts I haven't audited yet. The dependabot ask was 1.4. Flooring there:cargo updateto move forward incrementally with intentional reviewNotable upstream changes 1.2 → 1.4
fix(server): remove initialized notification gate to support Streamable HTTP(#788) — helpful for our HTTPS pathdefault session keep_alive to 5 minutes(#780)fix(http): add host check(#764)StreamableHttpServicedefault generic removed (#758) — absorbed by the type annotation in this PRTest plan
MemoriaServer.db_pathandRateLimited.is_write)🤖 Generated with Claude Code