deps: bump dash from 4.2.0 to 4.3.0

[dependabot]

Bumps dash from 4.2.0 to 4.3.0.

Release notes

Sourced from dash's releases.

v4.3.0

Added

• #3796 MCP: Add configure_mcp_server() to toggle which content the MCP server exposes (include_layout, include_callbacks, include_clientside_callbacks, include_pages, expose_callback_docstrings). Only the parameters explicitly passed are updated; omitted parameters retain their current value.
• #3710 MCP: Framework utilities, types for interacting with layout
• #3711 MCP: CallbackAdapter for representing callback-related data in MCP-friendly format
• #3712 MCP: Resources for exposing app layout, components, and pages
• #3731 MCP: Expose callbacks as Tools
• #3747 MCP: Support pattern-matching callbacks in Tools
• #3748 MCP: Format callback results for LLM consumption (rendered graphs, markdown tables)
• #3749 MCP: get_dash_component Tool and callback execution
• #3750 MCP: Server routes, mcp_enabled function decorator, and Streamable HTTP transport
• #3766 MCP: Support background callbacks in Tools

Changed

• #3796 MCP: Remove the mcp_expose_docstrings Dash() constructor argument; callback docstring exposure is now controlled via configure_mcp_server(expose_callback_docstrings=...).

Fixed

• #3817 Fix background callback context serialisation for non-dict request args on the FastAPI and Quart backends. Fixes #3816.
• #3805 Fix FastAPI POST routes deadlock caused by middleware consuming request body. Fixes #3801.
• #3813 Fix websockets using incorrect path when deployed behind a proxy
• #3830 MCP: Respond to the Streamable HTTP GET (SSE) request with an empty event stream instead of 405 Method Not Allowed

v4.3.0rc0

Added

• #3710 MCP: Framework utilities, types for interacting with layout
• #3711 MCP: CallbackAdapter for representing callback-related data in MCP-friendly format
• #3712 MCP: Resources for exposing app layout, components, and pages
• #3731 MCP: Expose callbacks as Tools
• #3747 MCP: Support pattern-matching callbacks in Tools
• #3748 MCP: Format callback results for LLM consumption (rendered graphs, markdown tables)
• #3749 MCP: get_dash_component Tool and callback execution
• #3750 MCP: Server routes, mcp_enabled function decorator, and Streamable HTTP transport
• #3766 MCP: Support background callbacks in Tools

Changelog

Sourced from dash's changelog.

[4.3.0] - 2026-06-18

Added

• #3796 MCP: Add configure_mcp_server() to toggle which content the MCP server exposes (include_layout, include_callbacks, include_clientside_callbacks, include_pages, expose_callback_docstrings). Only the parameters explicitly passed are updated; omitted parameters retain their current value.

Changed

• #3796 MCP: Remove the mcp_expose_docstrings Dash() constructor argument; callback docstring exposure is now controlled via configure_mcp_server(expose_callback_docstrings=...).

Fixed

• #3817 Fix background callback context serialisation for non-dict request args on the FastAPI and Quart backends. Fixes #3816.
• #3805 Fix FastAPI POST routes deadlock caused by middleware consuming request body. Fixes #3801.
• #3813 Fix websockets using incorrect path when deployed behind a proxy
• #3830 MCP: Respond to the Streamable HTTP GET (SSE) request with an empty event stream instead of 405 Method Not Allowed

[4.3.0rc0] - 2026-05-21

Added

• #3710 MCP: Framework utilities, types for interacting with layout
• #3711 MCP: CallbackAdapter for representing callback-related data in MCP-friendly format
• #3712 MCP: Resources for exposing app layout, components, and pages
• #3731 MCP: Expose callbacks as Tools
• #3747 MCP: Support pattern-matching callbacks in Tools
• #3748 MCP: Format callback results for LLM consumption (rendered graphs, markdown tables)
• #3749 MCP: get_dash_component Tool and callback execution
• #3750 MCP: Server routes, mcp_enabled function decorator, and Streamable HTTP transport
• #3766 MCP: Support background callbacks in Tools

Commits

• d95db60 Merge pull request #3832 from plotly/master-4.3.0
• 904e5ed ci: skip Typing Tests on PRs targeting master
• b3babe4 build artifacts
• 0c89b98 Merge branch 'dev' into master-4.3.0
• 86d02b4 Merge pull request #3831 from plotly/release/4.3.0
• 16e09f2 Version bump of component suites
• adb6bb2 bump version
• 27b8c45 Merge pull request #3807 from plotly/mcp
• 7fe7a32 Fix failing mcp test
• ff4d66d Merge remote-tracking branch 'origin/dev' into mcp
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)