rootly-mcp-server 2.2.19__tar.gz → 2.2.20__tar.gz

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.github/dependabot.yml

@@ -1,35 +1,51 @@
 version: 2
+
 updates:
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 20
     cooldown:
       default-days: 3
+      semver-major-days: 7
     groups:
-      actions:
+      minor-and-patch:
+        applies-to: version-updates
+        update-types:
+          - "minor"
+          - "patch"
         patterns:
           - "*"
 
-  - package-ecosystem: "pip"
+  - package-ecosystem: "docker"
     directory: "/"
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 20
     cooldown:
       default-days: 3
-      semver-major-days: 7
     groups:
       minor-and-patch:
         applies-to: version-updates
         update-types:
           - "minor"
           - "patch"
+        patterns:
+          - "*"
 
-  - package-ecosystem: "docker"
+  - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 20
     cooldown:
       default-days: 3
-      semver-major-days: 7
+    groups:
+      minor-and-patch:
+        applies-to: version-updates
+        update-types:
+          - "minor"
+          - "patch"
+        patterns:
+          - "*"

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.github/workflows/ci.yml

@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 
@@ -53,10 +53,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -87,13 +87,13 @@ jobs:
     name: Container Tests
     runs-on: ubuntu-latest
     needs: test
-    if: ${{ secrets.ROOTLY_API_TOKEN != '' }}
+    if: ${{ github.repository == 'Rootly-AI-Labs/rootly-mcp-server' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 
@@ -135,10 +135,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 
@@ -161,10 +161,10 @@ jobs:
     needs: [quality, test, security]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 
@@ -175,7 +175,7 @@ jobs:
         run: uv build
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: dist
           path: dist/

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.github/workflows/dependency-review.yml

@@ -12,4 +12,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.github/workflows/openapi-audit.yml

@@ -36,10 +36,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 
@@ -58,10 +58,10 @@ jobs:
     if: ${{ github.event_name != 'pull_request' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.12"
 

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.github/workflows/pypi-release.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: '3.12'
 

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/.gitignore

@@ -1,3 +1,7 @@
+# Benchmark and performance tracking files
+*benchmark*.json
+*_benchmark_*.json
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to the Rootly MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.20] - Released 2026-04-21
+
+### Security
+
+- **Critical Security Updates**: Upgraded vulnerable dependencies to address 3 security advisories
+- **authlib**: Updated from `1.6.9` to `1.7.0` to fix CSRF protection vulnerability (GHSA-jj8c-mmj3-mmgv)
+- **python-dotenv**: Updated from `1.1.0` to `1.2.2` to fix symlink attack vulnerability (GHSA-m8f7-34r5-grfg) 
+- **python-multipart**: Updated from `0.0.22` to `0.0.26` to fix denial of service vulnerability (CVE-2026-40347)
+- **Dependabot Configuration**: Fixed unsupported `semver-major-days` property for docker and github-actions ecosystems
+
+### Dependencies
+
+- **joserfc**: Added `1.6.4` as new dependency (required by updated authlib)
+- **Security Scanning**: All known vulnerabilities resolved as confirmed by pip-audit
+
 ## [2.2.19] - Released 2026-04-17
 
 ### Features

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rootly-mcp-server
-Version: 2.2.19
+Version: 2.2.20
 Summary: Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation
 Project-URL: Homepage, https://github.com/Rootly-AI-Labs/Rootly-MCP-server
 Project-URL: Issues, https://github.com/Rootly-AI-Labs/Rootly-MCP-server/issues
@@ -21,7 +21,7 @@ Classifier: Topic :: Software Development :: Build Tools
 Classifier: Topic :: System :: Monitoring
 Classifier: Topic :: System :: Systems Administration
 Requires-Python: >=3.12
-Requires-Dist: authlib>=1.6.9
+Requires-Dist: authlib>=1.6.11
 Requires-Dist: brotli>=1.2.0
 Requires-Dist: cryptography>=46.0.7
 Requires-Dist: fastmcp[code-mode]==3.2.0
@@ -29,6 +29,8 @@ Requires-Dist: httpx==0.28.1
 Requires-Dist: numpy>=1.24.0
 Requires-Dist: pydantic==2.12.5
 Requires-Dist: pygments>=2.20.0
+Requires-Dist: python-dotenv>=1.2.2
+Requires-Dist: python-multipart>=0.0.26
 Requires-Dist: requests==2.33.1
 Requires-Dist: scikit-learn>=1.3.0
 Provides-Extra: dev

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "rootly-mcp-server"
-version = "2.2.19"
+version = "2.2.20"
 description = "Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation"
 readme = "README.md"
 requires-python = ">=3.12"
@@ -37,7 +37,9 @@ classifiers = [
 ]
 dependencies = [
     "fastmcp[code-mode]==3.2.0",  # Pin to patched version with Code Mode support
-    "authlib>=1.6.9",  # Override vulnerable transitive authlib from fastmcp
+    "authlib>=1.6.11",  # Override vulnerable transitive authlib (GHSA-jj8c-mmj3-mmgv)
+    "python-dotenv>=1.2.2",  # Override vulnerable transitive python-dotenv (GHSA-m8f7-34r5-grfg)
+    "python-multipart>=0.0.26",  # Override vulnerable transitive python-multipart (CVE-2026-40347)
     "cryptography>=46.0.7",  # Override vulnerable transitive cryptography
     "Pygments>=2.20.0",  # Override vulnerable transitive Pygments
     "requests==2.33.1", # Pin to patched version

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/__main__.py

@@ -50,9 +50,7 @@ def normalize_transport(value: str) -> TransportName:
     return mapped
 
 
-def normalize_transport_or_default(
-    value: str, default: TransportName = "stdio"
-) -> TransportName:
+def normalize_transport_or_default(value: str, default: TransportName = "stdio") -> TransportName:
     """Normalize transport value, falling back to default when invalid."""
     try:
         return normalize_transport(value)
@@ -275,7 +273,9 @@ def run_dual_http_server(
             stateless=stateless_http,
         )
         code_mode_http_app = StreamableHTTPASGIApp(code_mode_session_manager)
-        routes.append(Route(code_mode_path, endpoint=code_mode_http_app, methods=streamable_methods))
+        routes.append(
+            Route(code_mode_path, endpoint=code_mode_http_app, methods=streamable_methods)
+        )
 
     routes.extend(server._get_additional_http_routes())  # noqa: SLF001
 
@@ -373,7 +373,11 @@ def main():
         # argparse already normalizes/validates --transport via type=normalize_transport
         normalized_transport = args.transport
         code_mode_enabled = args.enable_code_mode or code_mode_enabled_from_env(default=True)
-        code_mode_path = normalize_code_mode_path(args.code_mode_path) if args.code_mode_path else code_mode_path_from_env()
+        code_mode_path = (
+            normalize_code_mode_path(args.code_mode_path)
+            if args.code_mode_path
+            else code_mode_path_from_env()
+        )
         server = create_rootly_mcp_server(
             swagger_path=args.swagger_path,
             name=args.name,

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/code_mode.py

@@ -172,8 +172,7 @@ class CompatibleMontySandboxProvider(MontySandboxProvider):
 
         inputs = inputs or {}
         async_functions = {
-            key: _ensure_async(value)
-            for key, value in (external_functions or {}).items()
+            key: _ensure_async(value) for key, value in (external_functions or {}).items()
         }
 
         monty = self._build_monty_runner(
@@ -219,10 +218,9 @@ class RootlyCodeMode(CodeMode):
             async def call_tool(tool_name: str, params: dict[str, Any]) -> Any:
                 resolved_name = _normalize_execute_tool_name(tool_name)
                 backend_tools = await _get_cached_tools()
-                tool = (
-                    transform._find_tool(resolved_name, transform._build_discovery_tools())
-                    or transform._find_tool(resolved_name, backend_tools)
-                )
+                tool = transform._find_tool(
+                    resolved_name, transform._build_discovery_tools()
+                ) or transform._find_tool(resolved_name, backend_tools)
                 if tool is None:
                     raise NotFoundError(f"Unknown tool: {tool_name}")
 

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/server.py

@@ -201,16 +201,14 @@ def _log_tool_usage_event(
         event["error_type"] = error_type
     if error_context:
         event.update(
-            {
-                key: value
-                for key, value in error_context.items()
-                if value not in ("", [], None, {})
-            }
+            {key: value for key, value in error_context.items() if value not in ("", [], None, {})}
         )
 
     _configure_tool_usage_json_logger()
     _tool_usage_json_logger.info(
-        json.dumps({k: v for k, v in event.items() if v not in ("", [], None)}, separators=(",", ":"))
+        json.dumps(
+            {k: v for k, v in event.items() if v not in ("", [], None)}, separators=(",", ":")
+        )
     )
 
 
@@ -405,8 +403,7 @@ def create_rootly_mcp_server(
         f"/v1{path}" if not path.startswith("/v1") else path for path in allowed_paths
     ]
     delete_allowed_paths_v1 = [
-        f"/v1{path}" if not path.startswith("/v1") else path
-        for path in delete_allowed_paths
+        f"/v1{path}" if not path.startswith("/v1") else path for path in delete_allowed_paths
     ]
 
     logger.info(f"Creating Rootly MCP Server with allowed paths: {allowed_paths_v1}")
@@ -518,7 +515,9 @@ def create_rootly_mcp_server(
                 logger.debug(
                     f"make_authenticated_request: client_ip={client_ip}, headers_keys={list(request_headers.keys()) if request_headers else []}"
                 )
-                direct_auth_header = request_headers.get("authorization", "") if request_headers else ""
+                direct_auth_header = (
+                    request_headers.get("authorization", "") if request_headers else ""
+                )
                 effective_auth_header = direct_auth_header or _session_auth_token.get("")
                 if direct_auth_header:
                     logger.debug("make_authenticated_request: Found auth header, adding to request")

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/spec_transform.py

@@ -164,8 +164,7 @@ def _filter_openapi_spec(
         if not allow_delete:
             path_item.pop("delete", None)
         if not any(
-            method.lower() in ["get", "post", "put", "patch", "delete"]
-            for method in path_item
+            method.lower() in ["get", "post", "put", "patch", "delete"] for method in path_item
         ):
             paths_to_remove.append(path)
     for path in paths_to_remove:

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/tools/incidents.py

@@ -119,10 +119,13 @@ def register_incident_tools(
 
                 for candidate in response.json().get("data", []):
                     attrs = candidate.get("attributes", {})
-                    candidate_value = attrs.get("slug") if filter_key == "filter[slug]" else attrs.get(
-                        "name"
+                    candidate_value = (
+                        attrs.get("slug") if filter_key == "filter[slug]" else attrs.get("name")
                     )
-                    if isinstance(candidate_value, str) and candidate_value.lower() == expected_value.lower():
+                    if (
+                        isinstance(candidate_value, str)
+                        and candidate_value.lower() == expected_value.lower()
+                    ):
                         matched_id = str(candidate.get("id"))
                         break
 
@@ -137,8 +140,7 @@ def register_incident_tools(
 
         if unresolved_teams:
             raise ValueError(
-                "Could not resolve team names/slugs to team IDs: "
-                + ", ".join(unresolved_teams)
+                "Could not resolve team names/slugs to team IDs: " + ", ".join(unresolved_teams)
             )
 
         return ",".join(dict.fromkeys(resolved_team_ids)), resolved_team_lookup
@@ -214,9 +216,7 @@ def register_incident_tools(
     async def list_incidents(
         query: Annotated[
             str,
-            Field(
-                description="Optional free-text search across incident titles and summaries"
-            ),
+            Field(description="Optional free-text search across incident titles and summaries"),
         ] = "",
         teams: Annotated[
             str,
@@ -238,9 +238,7 @@ def register_incident_tools(
         ] = "",
         severity: Annotated[
             str,
-            Field(
-                description="Optional severity filter (e.g., critical, high, medium, low)"
-            ),
+            Field(description="Optional severity filter (e.g., critical, high, medium, low)"),
         ] = "",
         status: Annotated[
             str,
@@ -250,15 +248,11 @@ def register_incident_tools(
         ] = "",
         started_after: Annotated[
             str,
-            Field(
-                description="Filter incidents that started at or after this ISO 8601 timestamp"
-            ),
+            Field(description="Filter incidents that started at or after this ISO 8601 timestamp"),
         ] = "",
         started_before: Annotated[
             str,
-            Field(
-                description="Filter incidents that started at or before this ISO 8601 timestamp"
-            ),
+            Field(description="Filter incidents that started at or before this ISO 8601 timestamp"),
         ] = "",
         custom_field_selected_option_ids: Annotated[
             str,
@@ -340,9 +334,7 @@ def register_incident_tools(
     async def collect_incidents(
         query: Annotated[
             str,
-            Field(
-                description="Optional free-text search across incident titles and summaries"
-            ),
+            Field(description="Optional free-text search across incident titles and summaries"),
         ] = "",
         teams: Annotated[
             str,
@@ -364,9 +356,7 @@ def register_incident_tools(
         ] = "",
         severity: Annotated[
             str,
-            Field(
-                description="Optional severity filter (e.g., critical, high, medium, low)"
-            ),
+            Field(description="Optional severity filter (e.g., critical, high, medium, low)"),
         ] = "",
         status: Annotated[
             str,
@@ -376,15 +366,11 @@ def register_incident_tools(
         ] = "",
         started_after: Annotated[
             str,
-            Field(
-                description="Filter incidents that started at or after this ISO 8601 timestamp"
-            ),
+            Field(description="Filter incidents that started at or after this ISO 8601 timestamp"),
         ] = "",
         started_before: Annotated[
             str,
-            Field(
-                description="Filter incidents that started at or before this ISO 8601 timestamp"
-            ),
+            Field(description="Filter incidents that started at or before this ISO 8601 timestamp"),
         ] = "",
         custom_field_selected_option_ids: Annotated[
             str,
@@ -452,7 +438,9 @@ def register_incident_tools(
                 page_params["page[size]"] = batch_size
                 page_params["page[number]"] = page_number
 
-                response = await make_authenticated_request("GET", "/v1/incidents", params=page_params)
+                response = await make_authenticated_request(
+                    "GET", "/v1/incidents", params=page_params
+                )
                 response.raise_for_status()
 
                 response_data = strip_heavy_nested_data(response.json())
@@ -483,7 +471,9 @@ def register_incident_tools(
                 results_truncated = True
 
             return {
-                "incidents": [_summarize_incident_record(incident) for incident in collected_incidents],
+                "incidents": [
+                    _summarize_incident_record(incident) for incident in collected_incidents
+                ],
                 "returned_incidents": len(collected_incidents),
                 "collection": {
                     "max_results": max_results,
@@ -861,7 +851,8 @@ def register_incident_tools(
                 return cast(
                     JsonDict,
                     mcp_error.tool_error(
-                    "Must provide either incident_id or incident_description", "validation_error"
+                        "Must provide either incident_id or incident_description",
+                        "validation_error",
                     ),
                 )
 

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/tools/oncall.py

@@ -36,7 +36,7 @@ def _truncate_text(value: Any, max_length: int = 280) -> str | None:
         return None
 
     if len(value) <= max_length:
-        return value
+        return str(value)
 
     return f"{value[: max_length - 1].rstrip()}…"
 
@@ -100,6 +100,7 @@ def register_oncall_tools(
     mcp_error: MCPErrorLike,
 ) -> None:
     """Register on-call analysis and scheduling tools on the MCP server."""
+
     @mcp.tool()
     async def get_oncall_shift_metrics(
         start_date: Annotated[
@@ -1229,7 +1230,9 @@ def register_oncall_tools(
     _lookup_maps_lock = asyncio.Lock()
 
     # Helper function to fetch users and schedules for enrichment
-    async def _fetch_users_and_schedules_maps() -> tuple[dict[str, Any], dict[str, Any], dict[str, Any]]:
+    async def _fetch_users_and_schedules_maps() -> tuple[
+        dict[str, Any], dict[str, Any], dict[str, Any]
+    ]:
         """Fetch all users, schedules, and teams to build lookup maps.
 
         Results are cached for 5 minutes to avoid repeated API calls.

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/src/rootly_mcp_server/transport.py

@@ -49,7 +49,7 @@ def _sanitize_log_excerpt(value: Any, max_length: int = _MAX_LOG_EXCERPT_CHARS)
 
     text = str(value).replace("\r\n", "\n").strip()
     text = re.sub(r"/[\w/.-]+\.py", "[file]", text)
-    text = re.sub(r'C:\\[\w\\.-]+\.py', "[file]", text)
+    text = re.sub(r"C:\\[\w\\.-]+\.py", "[file]", text)
     text = re.sub(r'File "[^"]+"', 'File "[file]"', text)
     text = re.sub(r"Bearer\s+[A-Za-z0-9._~\-]+", "Bearer ***REDACTED***", text, flags=re.I)
     text = re.sub(r"\brootly_[A-Za-z0-9]+\b", "rootly_***REDACTED***", text)
@@ -73,7 +73,7 @@ def _sanitize_error_context_value(value: Any) -> Any:
                 normalized = _sanitize_error_context_value(parsed)
                 if isinstance(normalized, dict | list):
                     return json.dumps(normalized, separators=(",", ":"))
-            except Exception:
+            except Exception:  # nosec B110 - Safe fallback for malformed JSON in log sanitization
                 pass
         return _sanitize_log_excerpt(value)
 
@@ -260,9 +260,7 @@ class AuthCaptureMiddleware:
         self.app = app
         self._sse_path = _normalize_path(os.getenv("FASTMCP_SSE_PATH", "/sse"))
         self._message_path = _normalize_path(os.getenv("FASTMCP_MESSAGE_PATH", "/messages"))
-        self._streamable_path = _normalize_path(
-            os.getenv("FASTMCP_STREAMABLE_HTTP_PATH", "/mcp")
-        )
+        self._streamable_path = _normalize_path(os.getenv("FASTMCP_STREAMABLE_HTTP_PATH", "/mcp"))
         self._code_mode_path = _normalize_path(os.getenv("ROOTLY_CODE_MODE_PATH", "/mcp-codemode"))
         self._capture_paths = {
             self._sse_path,
@@ -509,7 +507,9 @@ def strip_heavy_shift_data(data: dict[str, Any]) -> dict[str, Any]:
             kept_relationships = {}
             for rel_key in ("user", "shift_override"):
                 if rel_key in relationships:
-                    kept_relationships[rel_key] = _collapse_relationship_data(relationships[rel_key])
+                    kept_relationships[rel_key] = _collapse_relationship_data(
+                        relationships[rel_key]
+                    )
             shift["relationships"] = kept_relationships
 
     if isinstance(data["data"], list):
@@ -857,9 +857,7 @@ class AuthenticatedHTTPXClient:
             _record_upstream_response_context(request.method, response)
 
         response = self._maybe_strip_alert_response(request.method, str(request.url), response)
-        response = self._maybe_strip_collection_response(
-            request.method, str(request.url), response
-        )
+        response = self._maybe_strip_collection_response(request.method, str(request.url), response)
         return response
 
     async def __aenter__(self):

{rootly_mcp_server-2.2.19 → rootly_mcp_server-2.2.20}/tests/integration/local/test_basic.py

@@ -205,9 +205,9 @@ class TestLocalWithRealToken:
         token = os.getenv("ROOTLY_API_TOKEN")
 
         # Basic format validation
-        assert token is not None and token.startswith(
-            "rootly_"
-        ), "Token should start with 'rootly_'"
+        assert token is not None and token.startswith("rootly_"), (
+            "Token should start with 'rootly_'"
+        )
         assert token is not None and len(token) > 20, "Token should be reasonably long"
         assert token is not None and "_" in token, "Token should contain underscores"