chore(keycardai-fastmcp): bump fastmcp lock to 3.4.x

[Larry-Osakwe]

Summary

• Bumps the locked fastmcp version from 3.2.4 to 3.4.2 via uv lock --upgrade-package fastmcp.
• fastmcp 3.4.1 is a security patch (CVE-2026-48710) that raises the Starlette floor; the lock now resolves starlette 1.0.0 -> 1.3.1 and picks up the new fastmcp-slim companion package introduced by fastmcp's 3.4.x packaging split.
• Lock-only change: the fastmcp>=3.0.0 floor in packages/fastmcp/pyproject.toml is unchanged.

Refs: Linear ECO-97

Testing

• uv run --extra test pytest tests/ in packages/fastmcp (61 passed)
• uv run --extra test pytest tests/ in packages/mcp-fastmcp (5 passed)
• uv run ruff check (clean)

🤖 Generated with Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​fastmcp@​3.2.4 ⏵ 3.4.2	+5		-10
	pypi/​starlette@​1.0.0 ⏵ 1.3.1	+1	+25

View full report