Bump `mcp` and other dependencies for Dependabot alerts by dsfaccini · Pull Request #4047 · pydantic/pydantic-ai

dsfaccini · 2026-01-20T04:50:41Z

Bumping several packages.

mcp.py needs a bit of a refactor because of an http function that changes name
at the same time, mcp 1.24 introduces a hang that has a (draft) PR open modelcontextprotocol/python-sdk#1838 so we need to pragma: no cover a couple lines and wait for that to merge

Summary

mcp: 1.18.0 → 1.25.0
fastmcp: 2.12.0 → 2.14.3
gradio: 5.9.0 → 6.3.0
aiohttp: 3.13.2 → 3.13.3
urllib3: 2.6.2 → 2.6.3
pyasn1: 0.6.1 → 0.6.2
cbor2: 5.7.1 → 5.8.0

Updated MCP integration for breaking API changes.

Test plan

MCP tests pass
Full CI

🤖 Generated with Claude Code

Bumping several packages to address Dependabot security alerts: - mcp: 1.18.0 → 1.25.0 - fastmcp: 2.12.0 → 2.14.3 - gradio: 5.9.0 → 6.3.0 - aiohttp: 3.13.2 → 3.13.3 - urllib3: 2.6.2 → 2.6.3 - pyasn1: 0.6.1 → 0.6.2 - cbor2: 5.7.1 → 5.8.0 Updated MCP integration for breaking API changes: - Handle new SamplingMessageContentBlock types (ToolUseContent, ToolResultContent) - Use streamable_http_client instead of deprecated streamablehttp_client - Override client_streams in MCPServerStreamableHTTP for new API Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

- Remove deprecated type='messages' from Gradio Chatbot (now default) - Update SamplingMessage docstring to include new meta field Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

DouweM · 2026-01-20T21:25:45Z

                    messages.BinaryContent(data=base64.b64decode(content.data), media_type=content.mimeType)
                ]
+            else:
+                raise NotImplementedError(f'Unsupported user content type: {type(content).__name__}')


What are the new types we could support here and below? Add a comment at lease please

the painful stuff is that content: SamplingMessageContentBlock | list[SamplingMessageContentBlock]

but I've moved the NotImplementedError into an explicit branch checking all rest-types and added an assert_never at the end

Could we support AudioContent easily in the ImageContent branch above?

Let's make it clear in the error which types are not yet supported (like in map_from_sampling_content) but relatively easily could be, vs anything that is fundamentally unsupported. Just so people know what their options are when they hit this error (e.g. contribute a fix)

DouweM · 2026-01-20T21:26:04Z

        ],
    ]: ...

+    # Only used by MCPServerSSE which has a hang bug (https://github.com/modelcontextprotocol/python-sdk/issues/1811).


Should this just be on that subclass then? We may not need the _transport_client thing anymore if each class will have its own implementation of this entire thing

yeahp I wanted to keep this lean but I made that change now

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>

DouweM · 2026-01-21T17:51:50Z

                    messages.BinaryContent(data=base64.b64decode(content.data), media_type=content.mimeType)
                ]
+            else:
+                raise NotImplementedError(f'Unsupported user content type: {type(content).__name__}')


Could we support AudioContent easily in the ImageContent branch above?

Let's make it clear in the error which types are not yet supported (like in map_from_sampling_content) but relatively easily could be, vs anything that is fundamentally unsupported. Just so people know what their options are when they hit this error (e.g. contribute a fix)

DouweM · 2026-01-21T17:56:08Z

-    def _transport_client(self):
-        return sse_client  # pragma: no cover
+    # sse_client has a hang bug (https://github.com/modelcontextprotocol/python-sdk/issues/1811).
+    # Remove pragma once https://github.com/modelcontextprotocol/python-sdk/pull/1838 is released.


It's not obvious why a hang bug results in a pragma: no cover, and why we can remove the pragma once the hang bug is fixed. I think we'd need to add a new test to actually cover SSE, but your point is that we can't because of the hang bug?

Remove pragma "and add a test", right? Also worth marking as "TODO:"

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

DouweM · 2026-01-22T16:39:38Z

    if isinstance(content, mcp_types.TextContent):  # pragma: no branch
        return messages.TextPart(content=content.text)
    else:
+        # TODO(Marcelo): Add support for Image/Audio using FilePart.


Why for Marcelo lol

DouweM · 2026-01-22T16:40:10Z

-    def _transport_client(self):
-        return sse_client  # pragma: no cover
+    # sse_client has a hang bug (https://github.com/modelcontextprotocol/python-sdk/issues/1811).
+    # Remove pragma once https://github.com/modelcontextprotocol/python-sdk/pull/1838 is released.


Remove pragma "and add a test", right? Also worth marking as "TODO:"

Updated comment to indicate a future test addition after a specific pull request is released.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>

dsfaccini added the chore label Jan 20, 2026

dsfaccini and others added 2 commits January 20, 2026 00:01

fix: Update for Gradio 6.x and MCP 1.25.0 API changes

782a995

- Remove deprecated type='messages' from Gradio Chatbot (now default) - Update SamplingMessage docstring to include new meta field Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

bump and pragmas

e8d0496

dsfaccini mentioned this pull request Jan 20, 2026

fix: send error on SSE disconnect without resumption token modelcontextprotocol/python-sdk#1838

Closed

bumpe xamples too

634d5eb

dsfaccini marked this pull request as ready for review January 20, 2026 19:41

dsfaccini requested a review from DouweM January 20, 2026 19:41

DouweM requested changes Jan 20, 2026

View reviewed changes

dsfaccini and others added 3 commits January 20, 2026 16:52

exhaust types

4e00834

remove base _transport_client and client_streams methods

99fa07d

test: Add coverage for unsupported user content type in MCP

94bc306

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

dsfaccini mentioned this pull request Jan 21, 2026

Fix MCPServerStreamableHTTP closing user-provided HTTP clients with MCP SDK 1.25+ #3854

Closed

Kludex reviewed Jan 21, 2026

View reviewed changes

Comment thread pydantic_ai_slim/pydantic_ai/mcp.py Outdated

Kludex reviewed Jan 21, 2026

View reviewed changes

Comment thread pydantic_ai_slim/pydantic_ai/mcp.py Outdated

dsfaccini and others added 2 commits January 21, 2026 11:38

Apply suggestions from code review

840099e

Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>

fix merge

0194063

DouweM requested changes Jan 21, 2026

View reviewed changes

dsfaccini and others added 4 commits January 21, 2026 22:20

address requested changes

023a518

bump wrangler

8922929

fix merge

b53d48c

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

coverage

e706269

DouweM requested changes Jan 22, 2026

View reviewed changes

DouweM self-assigned this Jan 22, 2026

DouweM added the awaiting author revision label Jan 22, 2026

dsfaccini added 2 commits January 22, 2026 11:50

Update TODO comment for Image/Audio support

0885571

Refine comment regarding SSE client testing

e832160

Updated comment to indicate a future test addition after a specific pull request is released.

DouweM merged commit bb9f877 into pydantic:main Jan 22, 2026
30 checks passed

DouweM changed the title ~~chore: Bump dependencies for Dependabot alerts~~ Bump mcp and other dependencies for Dependabot alerts Jan 22, 2026

DouweM removed the chore label Jan 22, 2026

DouweM added the feature New feature request, or PR implementing a feature (enhancement) label Jan 22, 2026

thiagohora pushed a commit to thiagohora/pydantic-ai that referenced this pull request Feb 10, 2026

chore: Bump dependencies for Dependabot alerts (pydantic#4047)

650a423

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>

wenming-ma pushed a commit to wenming-ma/pydantic-ai that referenced this pull request Mar 12, 2026

chore: Bump dependencies for Dependabot alerts (pydantic#4047)

566b992

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>

Uh oh!

Conversation

dsfaccini commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dsfaccini commented Jan 20, 2026 •

edited

Loading