[dependabot]

Bumps agent-client-protocol from 3.5.0 to 3.6.0.

Release notes

Sourced from agent-client-protocol's releases.

agent-client-protocol-conductor-v3.6.0

Fixed

• stop logging MCP env and header values (#445)

agent-client-protocol-cookbook-v3.6.0

Added

• (acp) update agent-client-protocol-schema to 1.13.0 (#443)

Fixed

• align examples, Testy and docs with ACP schema 1.13 (#444)

agent-client-protocol-derive-v3.6.0

Fixed

• align examples, Testy and docs with ACP schema 1.13 (#444)

agent-client-protocol-http-v3.6.0

Added

• (config) [breaking] make public configuration APIs extensible (#403)

Fixed

• (http) [breaking] honor custom configuration with safe WebSocket handshakes (#333)
• avoid sensitive transport logs and redact trace URL credentials (#401)
• (http) gracefully finish client transports after builder completion (#396)
• (acp) [breaking] preserve connection lifetimes and graceful drain (#385)
• (acp) [breaking] preserve protocol-neutral raw JSON-RPC errors (#384)

Other

• prepare v3 package metadata and release guidance (#404)
• slim dependency features and CI validation (#399)

Breaking changes

• WebSocket URLs passed to HttpClient::with_client or with_endpoint_and_client now return WebSocketRequiresBuilder before network I/O. Migrate to builder(...).configure_http(...).build() or builder_with_endpoint(...) so the transport can enforce connection policies. See the migration guide.
• Unconfigured WebSockets now share reqwest's proxy discovery and TLS verification defaults, replacing direct connections and bundled WebPKI roots. Environment proxies, enabled system-proxy discovery, and platform certificate verification can change routing and trust. Use no_proxy() and explicit tls_certs_only roots when those defaults are not appropriate.

... (truncated)

Commits

• a978f01 chore: release (#438)
• 0a04868 fix: stop logging MCP env and header values (#445)
• 06ae64e fix(acp): follow v2 initialize negotiation rules and reject null request IDs ...
• a01041c fix: align examples, Testy and docs with ACP schema 1.13 (#444)
• 952bf66 feat(acp): update agent-client-protocol-schema to 1.13.0 (#443)
• 644377a feat(deps): bump the minor group with 5 updates (#442)
• e1207e0 feat(deps): bump taiki-e/install-action from 2.87.29 to 2.87.31 (#441)
• 51b4b01 feat(deps): bump release-plz/action from 0.5.142 to 0.5.145 (#440)
• 5ef0fa3 chore(deps): bump ctutils to 0.4.5 for RUSTSEC-2026-0385 (#439)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.