Release 2026-09-03e: GitHub Actions bumped to v7 (Dependabot)

USPTO Final Petition Decisions MCP server: petition search by application, art unit and criteria, petition details, document content and downloads. Example application 17896175 (no petitions) replaced with 17414168; the accepted identifier forms now match the validator (digits and slash only).

Updated to FastMCP 4.0.1 on the MCP Python SDK 2.x, speaking the 2026-07-28 MCP
protocol revision (MCP Apps now import from fastmcp.apps; a compat shim restores
defer_loading on the wire).

Security and robustness pass from the 2026-09-03 review: INTERNAL_AUTH_SECRET
rotation overlap window with per-purpose derived keys, bounded request bodies,
archives and PDF buffers, USPTO-authored text escaped before it reaches the
view HTML, response-size guard with paging markers on every tool, shared
cross-process USPTO rate limiter, health checks that can actually fail.

Documentation refresh: every example application, patent and proceeding number
verified live against the USPTO API and rewritten in the form the identifier
resolver expects; stale tool counts, env-var tables and response shapes fixed.
Removed the cost and spend wording around OCR; the extraction tiers are now
described by capability (native text layer first, OCR for scanned pages) and a
self-hosted Docling backend can be configured via DOCLING_SERVE_URL. Secrets and
prompt-injection baselines regenerated.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CeSWJpSaEHe9Cx66xzahVV

Author: john-walkoe

.github/workflows/secret-scan.yaml

@@ -13,12 +13,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full history for comprehensive scanning
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 

.github/workflows/security-scan.yaml

@@ -13,12 +13,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full history for comprehensive scanning
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
@@ -72,15 +72,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
         run: uv sync

.github/workflows/tests.yaml

@@ -13,15 +13,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
         run: uv sync