chore(deps): sync mcp 1.28.1 + cryptography 50.0.0 to develop, pin mcp below 2.0

.github/dependabot.yml

@@ -1,5 +1,25 @@
 version: 2
 
+# NOTE on `target-branch` and security updates
+#
+# `target-branch: "develop"` below applies ONLY to scheduled *version* updates.
+# Dependabot *security* updates (the ones opened in response to a Dependabot
+# alert) always target the repository's DEFAULT branch — `main` — and ignore
+# `target-branch`. There is no configuration option that changes this.
+#
+# Because `docs/release-process.md` uses git flow, and `.github/workflows/ci.yml`
+# only triggers on `develop`, a security PR left on `main` would both bypass the
+# release process and run zero tests (only `license/cla`).
+#
+# When a security PR appears against `main`, re-cut it against `develop`:
+#   1. Create a branch from `develop`.
+#   2. Cherry-pick the Dependabot commit (they are lockfile-only, so this is
+#      usually clean).
+#   3. Open a PR to `develop` and close the original with a pointer to it.
+# Do NOT simply `gh pr edit --base develop`: Dependabot resets the base back to
+# `main` the next time it rebases the branch, and retargeting alone does not
+# dispatch a CI run (it fires `edited`, not `synchronize`).
+
 updates:
   # Python dependencies (pyproject.toml)
   - package-ecosystem: "pip"

pyproject.toml

@@ -22,7 +22,10 @@ dependencies = [
 license = { file = "LICENSE" }
 
 [project.optional-dependencies]
-mcp = ["mcp>=1.0,<2"]
+# Upper bound is deliberate: mcp 2.x is a breaking rewrite (FastMCP -> MCPServer).
+# src/agentops/mcp/server.py targets the 1.x FastMCP API. Do not widen to <3
+# without porting that module first.
+mcp = ["mcp>=1.28.1,<2"]
 agent = [
   "fastapi>=0.110,<1.0",
   "uvicorn[standard]>=0.30,<1.0",