marvin-context-protocol[bot]
352525c8e5
chore: Update SDK documentation ( #3573 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-03-22 19:59:33 -04:00
marvin-context-protocol[bot]
25d550caf1
chore: Update SDK documentation ( #3478 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-03-15 16:51:51 -04:00
marvin-context-protocol[bot]
2c451bf6ba
chore: Update SDK documentation ( #3378 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-03-13 18:07:14 -04:00
Jeremiah Lowin
f84b2dae04
Add verify_id_token option to OIDCProxy ( #3248 )
...
* Add verify_id_token option to OIDCProxy
Closes #3240
* chore: Update SDK documentation
* Preserve raw_token_data fields across token refresh
* chore: Update SDK documentation
* Use client_id as verifier audience in verify_id_token mode
* chore: Update SDK documentation
* Return upstream access_token in AccessToken when verifying id_token
* chore: Update SDK documentation
* Skip verifier scope checks in verify_id_token mode
* chore: Update SDK documentation
* Recompute derived scope state after restoring required_scopes in verify_id_token mode
* chore: Update SDK documentation
---------
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-20 14:20:47 -05:00
Jeremiah Lowin
9b248a15b3
Update repository references for transfer to prefecthq ( #3207 )
...
* Update repository references from jlowin/fastmcp to prefecthq/fastmcp
* Retrigger CI after repo transfer
* chore: Update SDK documentation
* Only run deep triage on bug issues for jlowin
---------
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-18 10:33:56 -05:00
Jeremiah Lowin
5dd8cde2f9
Drop diskcache dependency (CVE-2025-69872) ( #3185 )
...
* Drop diskcache dependency (CVE-2025-69872)
Switch default OAuth proxy storage from DiskStore (backed by diskcache,
which uses pickle serialization) to FileTreeStore (file-per-key JSON).
This removes diskcache from the dependency tree entirely, resolving
CVE-2025-69872 for pip-audit and similar scanners.
* chore: Update SDK documentation
* Add comments explaining FileTreeStore warning suppression
* chore: Update SDK documentation
* Isolate storage by encryption key, gracefully handle decryption failures
* chore: Update SDK documentation
* Bump py-key-value-aio lower bound to 0.4.2 for FileTreeStore security hardening
* chore: Update SDK documentation
* Document storage backend change and update DiskStore references
* Bump py-key-value-aio lower bound to 0.4.3
* Bump py-key-value-aio to 0.4.4, remove warning suppression
* chore: Update SDK documentation
---------
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-16 16:43:15 -05:00
marvin-context-protocol[bot]
3e3ed76a8c
chore: Update SDK documentation ( #3089 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-06 20:27:29 -05:00
marvin-context-protocol[bot]
f6988c9206
chore: Update SDK documentation ( #2995 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-03 21:08:20 -05:00
marvin-context-protocol[bot]
e98e04fb83
chore: Update SDK documentation ( #2932 )
...
Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-01-19 10:16:14 -05:00
