From 4e7deac6182ed668916ddb0e33868c6cf9047afd Mon Sep 17 00:00:00 2001
From: Soares <ricardo.soares@sap.com>
Date: Tue, 20 Oct 2026 15:13:14 -0300
Subject: [PATCH] chore(deps): batch dependabot bumps

Aggregates the mechanical dependabot updates into a single PR:

- mcp: >=1.1.0,<2 -> >=1.1.0,<3 (#340)
- setuptools: >=83.0,<84 -> >=83.0,<85 (#310)
- ruff: 0.16.0 -> 0.17.1 (part of #338)

The ty bump (0.0.64 -> 0.0.88, also part of #338) is intentionally
excluded: ty 0.0.88 is stricter and surfaces ~19 pre-existing
diagnostics that need real code changes, so it will be handled in a
dedicated follow-up PR.

Closes #340
Closes #310
---
 pyproject.toml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 9f27e64d..be707355 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,7 +10,7 @@ authors = [
 requires-python = ">=3.11"
 dependencies = [
     "minio>=7.2.16,<7.2.21",
-    "setuptools>=83.0,<84",
+    "setuptools>=83.0,<85",
     "requests>=2.33.0,<3",
     "requests-oauthlib>=2.0.0,<3",
     "pydantic~=2.12.3",
@@ -36,7 +36,7 @@ dependencies = [
     "opentelemetry-instrumentation-sqlalchemy~=0.65b0",
     "opentelemetry-instrumentation-django~=0.65b0",
     "opentelemetry-instrumentation-flask~=0.65b0",
-    "mcp>=1.1.0,<2",
+    "mcp>=1.1.0,<3",
     "python-odata>=0.7.0",
     "cryptography>=48.0.1,<51",
 ]
@@ -67,7 +67,7 @@ dev = [
     "python-dotenv>=1.0.0",
     "ty==0.0.64",
     "cryptography>=48.0.1,<51",
-    "ruff==0.16.0",
+    "ruff==0.17.1",
     "starlette>=0.40.0",
     "anyio>=3.6.2",
     "httpx>=0.27.0",