[dependabot]

Bumps the cargo-minor-and-patch group with 2 updates in the / directory: clap and rmcp.

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates rmcp from 3.1.4 to 3.4.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.4.0

Added

• (model) add ServerConfig and ClientConfig (#1266)

Fixed

• (model) deprecate ServerInfo and ClientInfo aliases (#1156)

rmcp-v3.4.0

Added

• (model) add ServerConfig and ClientConfig (#1266)

Fixed

• (rmcp) use ServerConfig in cancellation test (#1273)
• (rmcp) route peer cancellation by lifecycle (#1262)
• run first pre-init request in service loop (#1263)
• (auth) let url origin decide prm discovery (#1264)
• (model) deprecate ServerInfo and ClientInfo aliases (#1156)
• (auth) ignore non-metadata JSON when probing for protected resource metadata (#1204)
• do not treat malformed JSON 200 as Accepted for requests (#1208)
• (streamable-http-server) map handler-generated HeaderMismatch to HTTP 400 (#1259)
• (http) enforce Origin validation semantics (#1192)

rmcp-macros-v3.3.0

Added

• (macros) reject empty tool_router (#1233)

rmcp-v3.3.0

Added

• add ServerHandler::negotiate_initialize (#1247)
• (macros) reject empty tool_router (#1233)
• (auth) add enterprise refresh-token and ID-JAG exchanges (#1234)

Fixed

• (sse) saturate exponential reconnect backoff to avoid overflow panic (#1231)
• resolve clippy warnings across workspace (#1195)
• (auth) unify refresh checks and error handling (#1236)

Other

• (deps) update process-wrap requirement from 9.0 to 10.0 (#1229)

rmcp-macros-v3.2.0

Added

... (truncated)

Commits

• fd7811f chore: release v3.4.0 (#1258)
• 0550e13 fix(rmcp): use ServerConfig in cancellation test (#1273)
• b037c0f fix(rmcp): route peer cancellation by lifecycle (#1262)
• d481cb0 fix: run first pre-init request in service loop (#1263)
• 47fcdf4 fix(auth): let url origin decide prm discovery (#1264)
• 165ff92 feat(model): add ServerConfig and ClientConfig (#1266)
• fbfc5cc ci: add OpenSSF Scorecard analysis (#1214)
• 3075dc9 fix(model): deprecate ServerInfo and ClientInfo aliases (#1156)
• a5d1169 fix(auth): ignore non-metadata JSON when probing for protected resource metad...
• 4fa84a5 fix: do not treat malformed JSON 200 as Accepted for requests (#1208)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.