build(deps): update mcp requirement from ~> 0.9.2 to >= 0.9.2, < 0.11.0 in the mcp-sdk group across 1 directory

[dependabot]

Updates the requirements on mcp to permit the latest version.
Updates mcp to 0.10.0

Release notes

Sourced from mcp's releases.

v0.10.0

Added

• Session expiry controls for StreamableHTTPTransport via session_idle_timeout: option (#268)

Changed

• ServerSession for per-connection state (#275)

Removed

• Remove Server#notify_progress broadcast API (#276)
• Remove undocumented handler override methods (#270)

Fixed

• Reject POST requests without session ID in stateful mode (#274)

Changelog

Sourced from mcp's changelog.

[0.10.0] - 2026-03-30

Added

• Session expiry controls for StreamableHTTPTransport via session_idle_timeout: option (#268)

Changed

• ServerSession for per-connection state (#275)

Removed

• Remove Server#notify_progress broadcast API (#276)
• Remove undocumented handler override methods (#270)

Fixed

• Reject POST requests without session ID in stateful mode (#274)

[0.9.2] - 2026-03-27

Fixed

• Use accessor method in server_context_with_meta instead of ivar (#273)
• Reject duplicate SSE connections with 409 to prevent stream hijacking

[0.9.1] - 2026-03-23

Added

• Allow Client#call_tool to accept a tool name (#266)

Fixed

• Return 404 for invalid session ID in handle_delete (#261)

[0.9.0] - 2026-03-20

Added

• MCP::Client::Stdio transport (#262)
• Progress notifications per MCP specification (#254)
• Automatic _meta parameter extraction support (#172)
• CORS and Accept wildcard support for browser-based MCP clients (#253)

Changed

• Use autoload to defer loading of unused subsystems (#255)
• Reduce release package size (#239)

... (truncated)

Commits

• 03a78f9 Merge pull request #277 from koic/release_0_10_0
• 73b018c Release 0.10.0
• f0186d0 Merge pull request #268 from koic/security__missing_session_expiry_controls
• 9f3435a Merge pull request #276 from koic/remove_notify_progress_broadcast
• b89f6e3 Remove Server#notify_progress broadcast API
• 49fc501 Support session expiry controls for StreamableHTTPTransport
• 8969edf Merge pull request #274 from koic/reject_missing_session_id
• 0cc8a30 Merge pull request #275 from koic/introduce_server_sessoin_for_per_connection...
• 719e5e7 Introduce ServerSession for per-connection state
• 234d134 Merge pull request #269 from koic/align_stdio_casing_with_spec
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.