A routine deployment of a Model Context Protocol (MCP) server using the fastmcp library resulted in a production outage, with all requests returning a 421 Misdirected Request error. The issue stemmed from an unbounded version constraint in the project's pyproject.toml file, which allowed the dependency resolver to automatically update fastmcp from version 3.4.2 to 3.4.3. This newer version introduced a default-enabled DNS rebinding protection feature that blocked requests to the custom domain, as the allowed hosts were not explicitly configured. The problem was exacerbated by the fact that the 3.4.3 release, which included this breaking change, was treated as a patch update. AI
IMPACT Highlights the critical importance of precise dependency management in AI infrastructure to prevent unexpected outages.
RANK_REASON The item describes a specific software development issue and its resolution, which is a common occurrence in software engineering but not a major industry event.
- ci.sh
- Cloud Run
- fastmcp
- HTTP
- MCP
- pyproject.toml
- TransportSecurityMiddleware
- TransportSecuritySettings
- uv.lock
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
