FastMCP 3.4.4 restores HTTP deployment compatibility after the 3.4.3 Host/Origin guard changed default behavior for existing ASGI, serverless, and reverse-proxy deployments. The guard implementation remains available for deployments that opt in with explicit trusted hosts and origins, while 3.x returns to accepting traffic that worked before the patch. This release also adds Hugging Face OAuth provider support, with docs and examples for public and private apps, PKCE, Dynamic Client Registration, and CIMD.
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `==3.4.3` → `==3.4.4` |  |  |
---
### Release Notes
<details>
<summary>PrefectHQ/fastmcp (fastmcp)</summary>
### [`v3.4.4`](https://github.com/PrefectHQ/fastmcp/releases/tag/v3.4.4): : Host in Translation
[Compare Source](https://github.com/PrefectHQ/fastmcp/compare/v3.4.3...v3.4.4)
FastMCP 3.4.4 restores HTTP deployment compatibility after the 3.4.3 Host/Origin guard changed default behavior for existing ASGI, serverless, and reverse-proxy deployments. The guard implementation remains available for deployments that opt in with explicit trusted hosts and origins, while 3.x returns to accepting traffic that worked before the patch. This release also adds Hugging Face OAuth provider support, with docs and examples for public and private apps, PKCE, Dynamic Client Registration, and CIMD.
<!-- Release notes generated using configuration in .github/release.yml at release/3.x -->
#### What's Changed
##### Enhancements ✨
- Hugging Face Auth Integration by [@​evalstate](https://github.com/evalstate) in [#​4385](https://github.com/PrefectHQ/fastmcp/pull/4385)
##### Fixes 🐞
- Relax host origin guard defaults by [@​jlowin](https://github.com/jlowin) in [#​4439](https://github.com/PrefectHQ/fastmcp/pull/4439)
- Restore HTTP host guard compatibility by [@​jlowin](https://github.com/jlowin) in [#​4472](https://github.com/PrefectHQ/fastmcp/pull/4472)
##### Docs 📚
- Docs: add v3.4.4 changelog entries by [@​jlowin](https://github.com/jlowin) in [#​4473](https://github.com/PrefectHQ/fastmcp/pull/4473)
#### New Contributors
- [@​evalstate](https://github.com/evalstate) made their first contribution in [#​4385](https://github.com/PrefectHQ/fastmcp/pull/4385)
**Full Changelog**: <https://github.com/PrefectHQ/fastmcp/compare/v3.4.3...v3.4.4>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI1MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
==3.4.3→==3.4.4Release Notes
PrefectHQ/fastmcp (fastmcp)
v3.4.4: : Host in TranslationCompare Source
FastMCP 3.4.4 restores HTTP deployment compatibility after the 3.4.3 Host/Origin guard changed default behavior for existing ASGI, serverless, and reverse-proxy deployments. The guard implementation remains available for deployments that opt in with explicit trusted hosts and origins, while 3.x returns to accepting traffic that worked before the patch. This release also adds Hugging Face OAuth provider support, with docs and examples for public and private apps, PKCE, Dynamic Client Registration, and CIMD.
What's Changed
Enhancements ✨
Fixes 🐞
Docs 📚
New Contributors
Full Changelog: https://github.com/PrefectHQ/fastmcp/compare/v3.4.3...v3.4.4
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.