# Positive fixture for CVE-2026-55786: the last release whose HTTP MCP route
# takes tools/call without authentication.
flyto-core==2.26.3
