From 0a1aa6d90bd47c6f4327772fbf6fd75f960ed56c Mon Sep 17 00:00:00 2001 From: Mateusz Poliwczak Date: Tue, 18 Aug 2026 10:50:37 +0200 Subject: [PATCH] Pin mcp to versions <2 1.0 is still in maintenance mode and will receive security fixes, see https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.0.0 Fixes #826 --- pyproject.toml | 2 +- uv.lock | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 021d5b89..593e62d8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -33,7 +33,7 @@ dependencies = [] # Treat the same as NPM's `dependencies` [project.optional-dependencies] compat = ["six>=1.17.0"] -ai = ["httpx==0.28.1", "langchain>=1.2.18", "mcp>=1.27.1", "pydantic>=2.13.4"] +ai = ["httpx==0.28.1", "langchain>=1.2.18", "mcp>=1.27.1,<2", "pydantic>=2.13.4"] anthropic = ["splunk-sdk[ai]>=3.0.0", "langchain-anthropic>=1.4.3"] openai = ["splunk-sdk[ai]>=3.0.0", "langchain-openai>=1.2.1"] google = [ diff --git a/uv.lock b/uv.lock index e6c52780..6cd05651 100644 --- a/uv.lock +++ b/uv.lock @@ -1860,7 +1860,7 @@ requires-dist = [ { name = "langchain-anthropic", marker = "extra == 'anthropic'", specifier = ">=1.4.3" }, { name = "langchain-google-genai", marker = "extra == 'google'", specifier = "==4.2.2" }, { name = "langchain-openai", marker = "extra == 'openai'", specifier = ">=1.2.1" }, - { name = "mcp", marker = "extra == 'ai'", specifier = ">=1.27.1" }, + { name = "mcp", marker = "extra == 'ai'", specifier = ">=1.27.1,<2" }, { name = "pydantic", marker = "extra == 'ai'", specifier = ">=2.13.4" }, { name = "six", marker = "extra == 'compat'", specifier = ">=1.17.0" }, { name = "splunk-sdk", extras = ["ai"], marker = "extra == 'anthropic'", specifier = ">=3.0.0" },