[dependabot]

Bumps the bundler group with 2 updates in the /mcp-client-ruby directory: anthropic and mcp.
Bumps the bundler group with 1 update in the /weather-server-ruby directory: mcp.

Updates anthropic from 2.4.0 to 2.6.0

Release notes

Sourced from anthropic's releases.

v2.6.0

Features

• api: add error code for ramp limit errors
• api: add error codes for External Key validation failures
• api: add support for signing organization members out everywhere

Bug Fixes

• client: make to_yaml work when the program has not loaded yaml
• types: declare ConfigurationError in the rbi and rbs signatures

Chores

• docs: describe the type and message of API errors
• internal: add this repository's review rules
• internal: tell contributors when a runtime type check belongs

Documentation

• client: describe the type, message, code and details of API errors
• client: list each method's errors without their descriptions

v2.5.0

Features

• api: add error details types and new error type values
• api: add ids filter to list workspaces
• client: add error classes for HTTP statuses and API error codes, and #api_message, #error_code and #details on APIStatusError
• foundry: add Microsoft Foundry client

Bug Fixes

• api: capitalize CMEK in error details type names
• api: move some error details types to the resource they describe
• client: reject ..;x, .;x and ;x in path parameters

Chores

• api: update example values for pattern-constrained string fields
• ci: build the gem
• docs: clarify plugin reach values
• docs: clarify plugin version description and plugin reach
• docs: clarify plugin version description length
• docs: clarify some API field descriptions

... (truncated)

Changelog

Sourced from anthropic's changelog.

2.6.0 (2026-11-05)

Features

• api: add error code for ramp limit errors
• api: add error codes for External Key validation failures
• api: add support for signing organization members out everywhere

Bug Fixes

• client: make to_yaml work when the program has not loaded yaml
• types: declare ConfigurationError in the rbi and rbs signatures

Chores

• docs: describe the type and message of API errors
• internal: add this repository's review rules
• internal: tell contributors when a runtime type check belongs

Documentation

• client: describe the type, message, code and details of API errors
• client: list each method's errors without their descriptions

2.5.0 (2026-11-04)

Features

• api: add error details types and new error type values
• api: add ids filter to list workspaces
• client: add error classes for HTTP statuses and API error codes, and #api_message, #error_code and #details on APIStatusError
• foundry: add Microsoft Foundry client

Bug Fixes

• api: capitalize CMEK in error details type names
• api: move some error details types to the resource they describe
• client: reject ..;x, .;x and ;x in path parameters

Chores

• api: update example values for pattern-constrained string fields
• ci: build the gem
• docs: clarify plugin reach values
• docs: clarify plugin version description and plugin reach

... (truncated)

Commits

• 5d2db5f release: 2.6.0
• e3aefe8 Merge pull request #390 from anthropics/synced/published
• 6f48a91 codegen metadata
• 052488c codegen metadata
• 3c00db5 feat(api): add support for signing organization members out everywhere
• 44ad690 codegen metadata
• 36cbb7c feat(api): add error codes for External Key validation failures
• ebe293f ci: accept notes under the title of a changelog entry file
• b3a1361 codegen metadata
• 907ca5f codegen metadata
• Additional commits viewable in compare view

Updates mcp from 1.8.2 to 1.9.0

Release notes

Sourced from mcp's releases.

v1.9.0

This release adds the Skills extension (SEP-2640): a server publishes Agent Skills from a directory or a handler, and the client lists, reads and verifies them against the manifest digests. It also keeps a tool's _meta and other members on the client, stops the output schema default from overriding a root $dynamicRef, and answers request headers and _meta values the server could not read with a client error instead of failing. The Changed entry alters an answer on the wire under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md.

Added

• Add the Skills extension (SEP-2640) (#635)

Changed

• Refuse a _meta that is not an object as invalid params (#651)

Fixed

• Skip the reaper join when close runs on the reaper thread (#637)
• Parse request headers as bytes so invalid UTF-8 cannot raise (#639)
• Keep a tool's _meta, title, icons, and execution on the client (#641)
• Refuse a skill URI that is not valid UTF-8 and escape the echoed strings (#646)
• Recognize a root $dynamicRef when defaulting an output schema to an object (#649)
• Handle a _meta that is not an object without raising (#650)

Changelog

Sourced from mcp's changelog.

[1.9.0] - 2026-11-03

This release adds the Skills extension (SEP-2640): a server publishes Agent Skills from a directory or a handler, and the client lists, reads and verifies them against the manifest digests. It also keeps a tool's _meta and other members on the client, stops the output schema default from overriding a root $dynamicRef, and answers request headers and _meta values the server could not read with a client error instead of failing. The Changed entry alters an answer on the wire under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md.

Added

• Add the Skills extension (SEP-2640) (#635)

Changed

• Refuse a _meta that is not an object as invalid params (#651)

Fixed

• Skip the reaper join when close runs on the reaper thread (#637)
• Parse request headers as bytes so invalid UTF-8 cannot raise (#639)
• Keep a tool's _meta, title, icons, and execution on the client (#641)
• Refuse a skill URI that is not valid UTF-8 and escape the echoed strings (#646)
• Recognize a root $dynamicRef when defaulting an output schema to an object (#649)
• Handle a _meta that is not an object without raising (#650)

Commits

• 2cd02af Merge pull request #653 from koic/release_1_9_0
• 8115b37 Release 1.9.0
• 69c08b6 Merge pull request #652 from koic/run_every_referee_scenario_in_the_server_co...
• aeb871e Merge pull request #651 from koic/refuse_a_meta_that_is_not_an_object_as_inva...
• 1ab5242 Run every referee scenario in the server conformance leg
• 7b00aec Refuse a _meta that is not an object as invalid params
• 51db52a Merge pull request #650 from emirn/fix-non-object-meta
• 35a8df2 Merge pull request #646 from koic/refuse_a_skill_uri_that_is_not_valid_utf_8_...
• 8f6a206 Merge pull request #649 from koic/recognize_a_root_dynamic_ref_when_defaultin...
• 96b50f2 Handle a _meta that is not an object without raising
• Additional commits viewable in compare view

Updates mcp from 1.8.2 to 1.9.0

Release notes

Sourced from mcp's releases.

v1.9.0

This release adds the Skills extension (SEP-2640): a server publishes Agent Skills from a directory or a handler, and the client lists, reads and verifies them against the manifest digests. It also keeps a tool's _meta and other members on the client, stops the output schema default from overriding a root $dynamicRef, and answers request headers and _meta values the server could not read with a client error instead of failing. The Changed entry alters an answer on the wire under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md.

Added

• Add the Skills extension (SEP-2640) (#635)

Changed

• Refuse a _meta that is not an object as invalid params (#651)

Fixed

• Skip the reaper join when close runs on the reaper thread (#637)
• Parse request headers as bytes so invalid UTF-8 cannot raise (#639)
• Keep a tool's _meta, title, icons, and execution on the client (#641)
• Refuse a skill URI that is not valid UTF-8 and escape the echoed strings (#646)
• Recognize a root $dynamicRef when defaulting an output schema to an object (#649)
• Handle a _meta that is not an object without raising (#650)

Changelog

Sourced from mcp's changelog.

[1.9.0] - 2026-11-03

This release adds the Skills extension (SEP-2640): a server publishes Agent Skills from a directory or a handler, and the client lists, reads and verifies them against the manifest digests. It also keeps a tool's _meta and other members on the client, stops the output schema default from overriding a root $dynamicRef, and answers request headers and _meta values the server could not read with a client error instead of failing. The Changed entry alters an answer on the wire under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md.

Added

• Add the Skills extension (SEP-2640) (#635)

Changed

• Refuse a _meta that is not an object as invalid params (#651)

Fixed

• Skip the reaper join when close runs on the reaper thread (#637)
• Parse request headers as bytes so invalid UTF-8 cannot raise (#639)
• Keep a tool's _meta, title, icons, and execution on the client (#641)
• Refuse a skill URI that is not valid UTF-8 and escape the echoed strings (#646)
• Recognize a root $dynamicRef when defaulting an output schema to an object (#649)
• Handle a _meta that is not an object without raising (#650)

Commits

• 2cd02af Merge pull request #653 from koic/release_1_9_0
• 8115b37 Release 1.9.0
• 69c08b6 Merge pull request #652 from koic/run_every_referee_scenario_in_the_server_co...
• aeb871e Merge pull request #651 from koic/refuse_a_meta_that_is_not_an_object_as_inva...
• 1ab5242 Run every referee scenario in the server conformance leg
• 7b00aec Refuse a _meta that is not an object as invalid params
• 51db52a Merge pull request #650 from emirn/fix-non-object-meta
• 35a8df2 Merge pull request #646 from koic/refuse_a_skill_uri_that_is_not_valid_utf_8_...
• 8f6a206 Merge pull request #649 from koic/recognize_a_root_dynamic_ref_when_defaultin...
• 96b50f2 Handle a _meta that is not an object without raising
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions