Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This PR upgrades rmcp from version 0.15.0 to 0.16.0 to achieve more compliant authentication for MCP (Model Context Protocol) servers. The upgrade also requires updating reqwest to 0.13.x, which includes improvements to TLS certificate verification using the platform's native certificate verifier.
Changes:
- Upgraded rmcp to 0.16.0 and adapted to new StoredCredentials API that requires granted_scopes field
- Upgraded reqwest to 0.13.x with simplified rustls feature configuration
- Updated reqwest feature flags across all crates from rustls-tls-native-roots/rustls-tls to rustls
Reviewed changes
Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| Cargo.toml | Updated workspace dependencies: rmcp 0.15.0→0.16.0, reqwest 0.12.28→0.13.0, added "form" feature to reqwest |
| crates/goose/Cargo.toml | Updated reqwest features from "rustls-tls-native-roots" to "rustls" |
| crates/goose-server/Cargo.toml | Updated reqwest features from "rustls-tls" to "rustls" |
| crates/goose-mcp/Cargo.toml | Updated reqwest features from "rustls-tls-native-roots" to "rustls" |
| crates/goose/src/oauth/mod.rs | Added granted_scopes field (empty vec) to StoredCredentials to match rmcp 0.16.0 API |
| Cargo.lock | Resolved dependency tree with new versions and transitive dependencies including rustls-platform-verifier |
zanesq
approved these changes
Feb 17, 2026
jamadeo
approved these changes
Feb 18, 2026
2d22d62 to
591a24d
Compare
katzdave
added a commit
that referenced
this pull request
Feb 19, 2026
* 'main' of github.com:block/goose: (40 commits) Remove trailing space from links (#7156) fix: detect low balance and prompt for top up (#7166) feat(apps): add support for MCP apps to sample (#7039) Typescript SDK for ACP extension methods (#7319) chore: upgrade to rmcp 0.16.0 (#7274) docs: add monitoring subagent activity section (#7323) docs: document Desktop UI recipe editing for model/provider and extensions (#7327) docs: add CLAUDE_THINKING_BUDGET and CLAUDE_THINKING_ENABLED environm… (#7330) fix: display 'Code Mode' instead of 'code_execution' in CLI (#7321) docs: add Permission Policy documentation for MCP Apps (#7325) update RPI plan prompt (#7326) docs: add CLI syntax highlighting theme customization (#7324) fix(cli): replace shell-based update with native Rust implementation (#7148) docs: rename Code Execution extension to Code Mode extension (#7316) docs: remove ALPHA_FEATURES flag from documentation (#7315) docs: escape variable syntax in recipes (#7314) docs: update OTel environment variable and config guides (#7221) docs: system proxy settings (#7311) docs: add Summon extension tutorial and update Skills references (#7310) docs: agent session id (#7289) ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
rmcp -> 0.16.0
will get us more compliant auth for mcp
relevant changelogs
https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v0.15.0
https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v0.16.0