From 5dc8826fe4002e51e8cd7e380642872a9558e6b2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Jul 2026 06:59:27 +0000
Subject: [PATCH] build(deps): bump tower-http from 0.6.11 to 0.7.0

Bumps [tower-http](https://github.com/tower-rs/tower-http) from 0.6.11 to 0.7.0.
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](https://github.com/tower-rs/tower-http/compare/tower-http-0.6.11...tower-http-0.7.0)

---
updated-dependencies:
- dependency-name: tower-http
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                      | 26 +++++++++++++++++++++-----
 Cargo.toml                      |  2 +-
 examples/mcp-ui-demo/Cargo.toml |  2 +-
 3 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index e82d607..d42ef0b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1448,7 +1448,7 @@ dependencies = [
  "tokio-stream",
  "tokio-util",
  "tower",
- "tower-http",
+ "tower-http 0.7.0",
  "tracing",
  "tracing-subscriber",
  "ts-rs",
@@ -1468,7 +1468,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tokio",
- "tower-http",
+ "tower-http 0.7.0",
  "tracing",
 ]
 
@@ -2423,7 +2423,7 @@ dependencies = [
  "tokio",
  "tokio-util",
  "tower",
- "tower-http",
+ "tower-http 0.6.11",
  "tower-service",
  "url",
  "wasm-bindgen",
@@ -3161,6 +3161,24 @@ name = "tower-http"
 version = "0.6.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b11f75e912b0c2be01b63d8cf8057b8c3f97cf34abb3d431a3a4c8675498e233"
 dependencies = [
  "async-compression",
  "bitflags",
@@ -3178,10 +3196,8 @@ dependencies = [
  "pin-project-lite",
  "tokio",
  "tokio-util",
- "tower",
  "tower-layer",
  "tower-service",
- "url",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index f276b8c..41fa620 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -61,7 +61,7 @@ full = ["auth", "config", "sse", "streamable-http", "stdio", "bootstrap"]
 # Web / auth features (axum stack)
 axum = { version = "0.8", optional = true }
 tower = { version = "0.5", optional = true }
-tower-http = { version = "0.6", features = ["fs", "compression-gzip"], optional = true }
+tower-http = { version = "0.7", features = ["fs", "compression-gzip"], optional = true }
 base64 = { version = "0.22", optional = true }
 # Constant-time token comparison (auth + web login).
 subtle = { version = "2", optional = true }
diff --git a/examples/mcp-ui-demo/Cargo.toml b/examples/mcp-ui-demo/Cargo.toml
index b7f9e07..c0dbf36 100644
--- a/examples/mcp-ui-demo/Cargo.toml
+++ b/examples/mcp-ui-demo/Cargo.toml
@@ -11,7 +11,7 @@ mcp-core = { path = "../..", features = ["web-ui", "web-markdown", "streamable-h
 rmcp = { version = "1.7", features = ["server", "transport-streamable-http-server", "transport-io", "macros"] }
 clap = { version = "4.5", features = ["derive", "env"] }
 tokio = { version = "1", features = ["rt-multi-thread", "macros"] }
-tower-http = { version = "0.6", features = ["fs"] }
+tower-http = { version = "0.7", features = ["fs"] }
 axum = "0.8"
 schemars = "1"
 serde = { version = "1", features = ["derive"] }