From 4de199e30d67c7cad0b17e7f1ab776abed38d9ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Sep 2026 20:14:39 +0000
Subject: [PATCH] chore(deps): Bump the python-dependencies group across 1
 directory with 5 updates

Updates the requirements on [ruff](https://github.com/astral-sh/ruff), [matplotlib](https://github.com/matplotlib/matplotlib), [numpy](https://github.com/numpy/numpy), [mcp](https://github.com/modelcontextprotocol/python-sdk) and [cryptography](https://github.com/pyca/cryptography) to permit the latest version.

Updates `ruff` to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.7)

Updates `matplotlib` to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](https://github.com/matplotlib/matplotlib/compare/v3.11.1...v3.11.2)

Updates `numpy` to 2.5.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](https://github.com/numpy/numpy/compare/v2.5.2...v2.5.3)

Updates `mcp` to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v2.0.0...v2.2.0)

Updates `cryptography` to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: numpy
  dependency-version: 2.5.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: mcp
  dependency-version: 2.2.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index f238bff..3a5f4d5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,8 +21,8 @@ classifiers = [
 ]
 dependencies = [
     "pandas (>=3.0.5,<4.0.0)",
-    "matplotlib (>=3.11.1,<4.0.0)",
-    "numpy (>=2.5.2,<3.0.0)",
+    "matplotlib (>=3.11.2,<4.0.0)",
+    "numpy (>=2.5.3,<3.0.0)",
     # matplotlib's image backend (pulled transitively); floored to the patched
     # release that fixes the 2026 Pillow CVEs (GHSA/CVE image-parsing issues).
     "pillow (>=12.3.0)",
@@ -34,7 +34,7 @@ dependencies = [
 # the successor of 1.x FastMCP); capped <3.0.0 against the next breaking major.
 # cryptography comes transitively via mcp's auth stack; floored to the release
 # that fixes GHSA-g6cj-pr64-35w5 (PKCS#7 Bleichenbacher oracle).
-mcp = ["mcp>=2.0.0,<3.0.0", "cryptography>=50.0.0"]
+mcp = ["mcp>=2.2.0,<3.0.0", "cryptography>=50.0.1"]
 
 [project.scripts]
 dope-plot = "dope_plot.cli:main"
@@ -58,7 +58,7 @@ include = [
 ]
 
 [tool.poetry.group.dev.dependencies]
-ruff = "^0.16.3"
+ruff = "^0.16.7"
 pytest = "^9.1.1"
 
 [tool.ruff]