fix: update rmcp to resolve CVE-2026-42559

acarl005 · oz-agent · acarl005 · commit f36dfa7851df · 2026-05-08T16:09:35.000Z
Co-Authored-By: Oz &lt;oz-agent@warp.dev&gt;
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -377,7 +377,7 @@ typed-path = "0.10.0"
 streaming-iterator = "0.1.0"
 derivative = "2.2.0"
 parquet = { version = "55.0.0", features = ["arrow"] }
-rmcp = { git = "https://github.com/warpdotdev/rmcp.git", rev = "c0f65dc441af7d714b9c453ac5e7ef641451abe3" }
+rmcp = { git = "https://github.com/warpdotdev/rmcp.git", rev = "321ab14f67da734a8e0cfa0bfcdee1690663d9dc" }
 
 [profile.release]
 # Use line-tables-only (debug = 1) rather than full debuginfo (debug = 2 /
diff --git a/app/Cargo.toml b/app/Cargo.toml
@@ -294,7 +294,6 @@ aws-types = "1"
 rmcp = { workspace = true, features = [
     "auth",
     "transport-streamable-http-client-reqwest",
-    "transport-sse-client-reqwest",
     "transport-child-process",
 ] }
 notify-debouncer-full.workspace = true
