fix(deps): update dependency icalendar to >=7.2.0,<7.3.0

[renovate-bot-cbcoutinho]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
icalendar (changelog)	>=7.1.0,<7.2.0 → >=7.2.0,<7.3.0

---

Release Notes

collective/icalendar (icalendar)

v7.2.0

Compare Source

To view the changes, please see the Changelog. This release can be installed from PyPI.

v7.1.3

Compare Source

To view the changes, please see the Changelog. This release can be installed from PyPI.

v7.1.2

Compare Source

To view the changes, please see the Changelog. This release can be installed from PyPI.

v7.1.1

Compare Source

To view the changes, please see the Changelog. This release can be installed from PyPI.

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[claude]

Claude finished @renovate-bot-cbcoutinho[bot]'s task in 1m 51s —— View job

---

Review: icalendar 7.1.0 → 7.2.0

• Gather context on the dependency update
• Review changed files (pyproject.toml, uv.lock)
• Check how icalendar is used in the codebase
• Verify compatibility with v7.2.0 changelog
• Post final review

---

Verdict: Low risk — looks good to merge once CI passes.

What changed

Only two mechanical files:

• pyproject.toml: version pin updated >=7.1.0,<7.2.0 → >=7.2.0,<7.3.0
• uv.lock: hash/URL updated to the 7.2.0 wheel and sdist

No production source code was changed.

Usage surface

icalendar is imported in one file — nextcloud_mcp_server/client/calendar.py:15-17:

from icalendar import Alarm, Calendar, Timezone, vDDDTypes, vRecur
from icalendar import Event as ICalEvent
from icalendar import Todo as ICalTodo

All of these (Alarm, Calendar, Event, Todo, Timezone, vDDDTypes, vRecur) are long-stable core classes. A minor release (7.1 → 7.2) is unlikely to break their public API under the project's SemVer policy.

Risks

None identified. The dependency bump is narrowly scoped to uv.lock + the version pin. The existing calendar integration tests (tests/client/calendar/test_calendar_operations.py, tests/server/test_calendar_events_mcp.py, tests/server/test_calendar_todos_mcp.py) will exercise the updated library during CI.

CI

Tests, Pact contract tests, and this review run are all in progress at review time. No failures recorded.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud