FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `==3.4.4` → `==3.4.5` |  |  |
---
> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information.
---
### Release Notes
<details>
<summary>PrefectHQ/fastmcp (fastmcp)</summary>
### [`v3.4.5`](https://github.com/PrefectHQ/fastmcp/releases/tag/v3.4.5): : Key Change
[Compare Source](https://github.com/PrefectHQ/fastmcp/compare/v3.4.4...v3.4.5)
FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single [`Ed25519`](https://github.com/PrefectHQ/fastmcp/commit/Ed25519) key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made `JWTVerifier` reject every token, including ones correctly signed by supported keys in the same set.
<!-- Release notes generated using configuration in .github/release.yml at release/3.x -->
#### What's Changed
##### Fixes 🐞
- Backport [#​4517](https://github.com/PrefectHQ/fastmcp/issues/4517) to release/3.x: skip unsupported JWKS keys ([#​4515](https://github.com/PrefectHQ/fastmcp/issues/4515)) by [@​kakiii](https://github.com/kakiii) in [#​4631](https://github.com/PrefectHQ/fastmcp/pull/4631)
- Backport [#​4469](https://github.com/PrefectHQ/fastmcp/issues/4469) to release/3.x: fix Azure scope fallback by [@​jlowin](https://github.com/jlowin) in [#​4662](https://github.com/PrefectHQ/fastmcp/pull/4662)
- Backport [#​4523](https://github.com/PrefectHQ/fastmcp/issues/4523) to release/3.x: serialize deep object query parameters by [@​jlowin](https://github.com/jlowin) in [#​4664](https://github.com/PrefectHQ/fastmcp/pull/4664)
- Backport [#​4564](https://github.com/PrefectHQ/fastmcp/issues/4564) to release/3.x: make transformed tool required order deterministic by [@​jlowin](https://github.com/jlowin) in [#​4665](https://github.com/PrefectHQ/fastmcp/pull/4665)
- Backport [#​4492](https://github.com/PrefectHQ/fastmcp/issues/4492) to release/3.x: don't mutate the caller's schema in compress\_schema by [@​jlowin](https://github.com/jlowin) in [#​4663](https://github.com/PrefectHQ/fastmcp/pull/4663)
##### Docs 📚
- Docs: add v3.4.5 changelog entries by [@​jlowin](https://github.com/jlowin) in [#​4673](https://github.com/PrefectHQ/fastmcp/pull/4673)
#### New Contributors
- [@​kakiii](https://github.com/kakiii) made their first contribution in [#​4631](https://github.com/PrefectHQ/fastmcp/pull/4631)
**Full Changelog**: <https://github.com/PrefectHQ/fastmcp/compare/v3.4.4...v3.4.5>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODQuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI4NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
==3.4.4→==3.4.5Release Notes
PrefectHQ/fastmcp (fastmcp)
v3.4.5: : Key ChangeCompare Source
FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single
Ed25519key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — madeJWTVerifierreject every token, including ones correctly signed by supported keys in the same set.What's Changed
Fixes 🐞
Docs 📚
New Contributors
Full Changelog: https://github.com/PrefectHQ/fastmcp/compare/v3.4.4...v3.4.5
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.