From 626c6c7fd23b202f0304393f63f1c106244492a8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 07:46:32 +0000
Subject: [PATCH] chore(deps): update mcp requirement from <2.0,>=1.6.0 to
 >=1.6.0,<3.0

Updates the requirements on [mcp](https://github.com/modelcontextprotocol/python-sdk) to permit the latest version.
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.6.0...v2.0.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 5a05157..48cf3ea 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -53,7 +53,7 @@ dependencies = [
     "textual>=0.50.0",
     "pydantic>=2.10.0",
     # <2.0: mcp 2.0.0 removes mcp.server.fastmcp, which aegis_memory/mcp_server.py is built on.
-    "mcp>=1.6.0,<2.0",
+    "mcp>=1.6.0,<3.0",
     # Transitive security floors (OpenSSF Scorecard / OSV) — pulled in transitively
     # (idna<-httpx, pygments<-rich); loose upstream bounds otherwise let known-vulnerable
     # versions resolve. Pinned to the first patched release of each advisory.