Bump the python group across 1 directory with 3 updates

[dependabot]

Bumps the python group with 3 updates in the / directory: mcp, portalocker and pydantic-core.

Updates mcp from 1.29.0 to 2.0.0

Commits

• 6f69a37 Present v2 as the stable release across the README, docs, and policies (#3178)
• 78e6fbb Serve v2 docs at the site root, with permanent per-major paths (#3176)
• af06330 Remove unused StreamableHTTPTransport.get_session_id() (#3205)
• 68ca87e Document the two-line release process for stable v2 (#3179)
• c9c431b Expose the middleware chain on MCPServer and stop sending unrequested change ...
• 528e366 Fail fast on server-to-client requests in JSON-response mode instead of hangi...
• 27f5cc7 Remove unused mcpserver.exceptions.ValidationError (#3199)
• 89c5e70 Gate log notifications on the per-request log-level opt-in at 2026-07-28 (#3198)
• b61ce38 docs: fix off-by-one hl_lines in apps.md (#3196)
• b7c9a91 Add mcp.types as a permanent alias for mcp_types (#3190)
• Additional commits viewable in compare view

Updates portalocker from 3.2.0 to 4.1.0

Changelog

Sourced from portalocker's changelog.

4.1.0:

• Documentation release. No runtime behaviour changed; the only edits to executable code replaced two ... bodies on the abstract LockBase.acquire/LockBase.release stubs with docstrings.
• Every module, class, function, private helper and dunder method in the package now carries a Google-style docstring. ruff's pydocstyle rules are enabled for portalocker/ with no exemptions
• Added seven narrative guides: quickstart, lock types, platform behaviour, Redis locks, the combine CLI, troubleshooting, and a 3.x to 4.0.0 migration guide. The API reference moved under docs/api/ and a changelog page was added
• docs/platforms.rst documents the advisory-versus-mandatory distinction, flock versus lockf, msvcrt versus pywin32, and the networked-filesystem caveats that cause most locking confusion
• docs/cli.rst documents the combiner's ASCII-only requirement on portalocker/*.py, README.rst and LICENSE, which was previously only discoverable by reading __main__.py
• Doctests now run for docs/*.rst and README.rst as well as the package, so every documented example is executed on each supported platform and interpreter. No # doctest: +SKIP remains anywhere
• Fixed the README telling readers to unlock a filehandle it had already closed, which raised ValueError: I/O operation on closed file
• Fixed the README demonstrating BoundedSemaphore without a name, which the library itself deprecates in favour of NamedBoundedSemaphore
• Removed the obsolete Python 2 installation section from the README

4.0.0:

• Fixed open_atomic() replacing a destination created while its context was open on POSIX; publication now raises FileExistsError and preserves the concurrent winner (#114)
• Python 3.10 or later is now required; Python 3.9 (EOL) support dropped
• pywin32 is no longer installed by default on Windows; the msvcrt-based locker is the default and works dependency-free for exclusive locks. Shared locks on Windows require portalocker[win32], and an informative ImportError is raised otherwise (#104)
• POSIX lock exceptions now populate .strerror and pass the message as a second positional argument, matching the Windows exception contract. This changes the str() output of these exceptions on POSIX from the bare OSError text to a 2-tuple repr
• LockBase is now generic over the acquire return type (typing-only change; downstream Lock subclasses are unaffected)
• Added PidFileLock for pidfile-based locking (#106)
• Added PidFileLock.fail_closed() for ownership-only contexts; contention raises AlreadyLocked before entering the body and exposes the competing PID through AlreadyLocked.holder_pid when readable (#118)
• Packaging switched to the uv_build backend; releases are published to PyPI through GitHub Actions Trusted Publishing
• python -m portalocker combine: --output-file now opens lazily;

... (truncated)

Commits

• 5bf95b2 bumped the version to 4.1.0 and documented the release in the changelog
• 505156d Merge branch 'feature/elaborate-documentation' into develop
• 16772fd Bump the actions group with 5 updates (#134)
• 430e863 Update uv-build requirement in the actions group (#133)
• 2436b0b gave the redis doctests the timeout their contention scenarios need
• 62ca97f documented the whole package and added seven narrative guides
• cf1e80d 4.0.0:
• 4172e4b Merge pull request #132 from wolph/release/4.0.0-integration
• 34fa2ee fix: address release review feedback
• 42a0d85 Merge master into develop before v4.0.0
• Additional commits viewable in compare view

Updates pydantic-core from 2.46.4 to 2.48.0

Commits

• 5922459 Prepare release v2.14.0b1 (#13597)
• 111c942 Refactor model namespace inspection (#13596)
• b348cf0 Add initial support for Python 3.15 (#13587)
• 4792336 Bump PyO3 to 0.29.2 (#13572)
• 57d0ad8 Raise explicit TypeError on invalid index_key serialization wrap handler ...
• 53b39c3 Add a named-tuple core schema (#13505)
• 98a08d3 Revert moving pydantic-core tests (#13589)
• 5f49d85 Add AllowInfNan type to the field metadata gathering (#13586)
• 2e5f0e2 Try Format.VALUE before FORWARDREF when evaluating annotations in `ModelM...
• de3175c Migrate pydantic-core tests to main tests directory (#13582)
• Additional commits viewable in compare view

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.