Upgrade to fastmcp 4.0.5 (fixes COR2-475 path traversal at the source)

pyproject.toml

@@ -23,8 +23,8 @@ classifiers = [
     "Programming Language :: Python :: 3.13"
 ]
 dependencies = [
-    "fastmcp==2.12.3",  # Pin to exact version to fix PublicIdentifier schema bug
-    "httpx>=0.25.0",
+    "fastmcp==4.0.5",
+    "httpx2>=2.13",
     "pydantic>=2.0.0",
 ]
 

src/clients/cortex.py

@@ -1,6 +1,6 @@
 """Cortex API client configuration."""
 
-import httpx
+import httpx2 as httpx
 
 from ..config import Config
 from ..utils.logging import get_logger

src/components/customizers.py

@@ -1,11 +1,11 @@
 """Component customization for MCP server."""
 
-from fastmcp.server.openapi import (
-    HTTPRoute,
+from fastmcp.server.providers.openapi import (
     OpenAPIResource,
     OpenAPIResourceTemplate,
     OpenAPITool,
 )
+from fastmcp.utilities.openapi.models import HTTPRoute
 
 from ..utils.logging import get_logger
 

src/routes/mappers.py

@@ -1,6 +1,7 @@
 """Route mapping logic for MCP server."""
 
-from fastmcp.server.openapi import HTTPRoute, MCPType
+from fastmcp.server.providers.openapi import MCPType
+from fastmcp.utilities.openapi.models import HTTPRoute
 
 from ..utils.logging import get_logger
 

src/utils/logging.py

@@ -26,7 +26,7 @@ def setup_logging(log_level: str | None = None) -> logging.Logger:
     )
 
     if not Config.DEBUG:
-        logging.getLogger("httpx").setLevel(logging.WARNING)
+        logging.getLogger("httpx2").setLevel(logging.WARNING)
         logging.getLogger("httpcore").setLevel(logging.WARNING)
         logging.getLogger("langchain").setLevel(logging.INFO)
         logging.getLogger("langchain_community").setLevel(logging.INFO)

tests/test_components.py

@@ -1,7 +1,11 @@
 """Tests for component customization."""
 from unittest.mock import Mock
 
-from fastmcp.server.openapi import OpenAPIResource, OpenAPIResourceTemplate, OpenAPITool
+from fastmcp.server.providers.openapi import (
+    OpenAPIResource,
+    OpenAPIResourceTemplate,
+    OpenAPITool,
+)
 
 from src.components.customizers import customize_components
 

tests/test_routes.py

@@ -1,7 +1,7 @@
 """Tests for route mapping logic."""
 from unittest.mock import Mock
 
-from fastmcp.server.openapi import MCPType
+from fastmcp.server.providers.openapi import MCPType
 
 from src.routes.mappers import custom_route_mapper