From 456ffff1d543dc67231c7316f6b72c885c219611 Mon Sep 17 00:00:00 2001
From: glatinone <93207632+glatinone@users.noreply.github.com>
Date: Mon, 17 Aug 2026 22:12:50 +0800
Subject: [PATCH 1/2] fix(fetch,git): bump minimum mcp version to 1.23.0 for
 security fixes

Signed-off-by: glatinone <93207632+glatinone@users.noreply.github.com>
---
 src/fetch/pyproject.toml | 2 +-
 src/git/pyproject.toml   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/fetch/pyproject.toml b/src/fetch/pyproject.toml
index 84735f278a..bc6c8b51c7 100644
--- a/src/fetch/pyproject.toml
+++ b/src/fetch/pyproject.toml
@@ -18,7 +18,7 @@ classifiers = [
 dependencies = [
     "httpx>=0.27",
     "markdownify>=0.13.1",
-    "mcp>=1.1.3",
+    "mcp>=1.23.0",
     "protego>=0.3.1",
     "pydantic>=2.0.0",
     "readabilipy>=0.2.0",
diff --git a/src/git/pyproject.toml b/src/git/pyproject.toml
index c5113ae7d4..5840b5da9c 100644
--- a/src/git/pyproject.toml
+++ b/src/git/pyproject.toml
@@ -18,7 +18,7 @@ classifiers = [
 dependencies = [
     "click>=8.1.7",
     "gitpython>=3.1.50",
-    "mcp>=1.0.0",
+    "mcp>=1.23.0",
     "pydantic>=2.0.0",
 ]
 

From dd60a202da1b44435f81a6e9f92bfcfe5242fde9 Mon Sep 17 00:00:00 2001
From: glatinone <93207632+glatinone@users.noreply.github.com>
Date: Mon, 17 Aug 2026 22:43:58 +0800
Subject: [PATCH 2/2] fix(fetch,git): regenerate uv.lock for the mcp>=1.23.0
 bump

CI ran `uv sync --locked` and failed with 'The lockfile at uv.lock
needs to be updated, but --locked was provided' after the previous
commit raised the mcp floor in pyproject.toml without refreshing the
matching lockfile. Regenerated both via 'uv lock'.

Signed-off-by: glatinone <93207632+glatinone@users.noreply.github.com>
---
 src/fetch/uv.lock | 2 +-
 src/git/uv.lock   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/fetch/uv.lock b/src/fetch/uv.lock
index d79e776d42..2196f5949b 100644
--- a/src/fetch/uv.lock
+++ b/src/fetch/uv.lock
@@ -588,7 +588,7 @@ dev = [
 requires-dist = [
     { name = "httpx", specifier = ">=0.27" },
     { name = "markdownify", specifier = ">=0.13.1" },
-    { name = "mcp", specifier = ">=1.1.3" },
+    { name = "mcp", specifier = ">=1.23.0" },
     { name = "protego", specifier = ">=0.3.1" },
     { name = "pydantic", specifier = ">=2.0.0" },
     { name = "readabilipy", specifier = ">=0.2.0" },
diff --git a/src/git/uv.lock b/src/git/uv.lock
index 517aa8756d..03e949b39c 100644
--- a/src/git/uv.lock
+++ b/src/git/uv.lock
@@ -382,7 +382,7 @@ dev = [
 requires-dist = [
     { name = "click", specifier = ">=8.1.7" },
     { name = "gitpython", specifier = ">=3.1.50" },
-    { name = "mcp", specifier = ">=1.0.0" },
+    { name = "mcp", specifier = ">=1.23.0" },
     { name = "pydantic", specifier = ">=2.0.0" },
 ]