chore(deps): bump @modelcontextprotocol/sdk from 1.25.3 to 1.27.1#156
chore(deps): bump @modelcontextprotocol/sdk from 1.25.3 to 1.27.1#156dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
Greptile SummaryThis PR bumps Notable changes included in this bump:
Confidence Score: 5/5
Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["thoughtbox (this project)"] --> B["@modelcontextprotocol/sdk\n1.25.3 → 1.27.1"]
B --> C["hono\n4.12.5 → 4.12.8\n(was peer dep, now direct dep of SDK)"]
B --> D["express-rate-limit\n7.5.1 → 8.3.1\n(major bump, internal to SDK)"]
B --> E["express 5.2.1\n(unchanged)"]
B --> F["zod 3.25.76\n(unchanged, still peer dep)"]
D --> G["ip-address 10.1.0\n(new transitive dep)"]
style B fill:#f9c74f,stroke:#f3722c
style D fill:#f9c74f,stroke:#f3722c
style C fill:#90be6d,stroke:#43aa8b
style G fill:#90be6d,stroke:#43aa8b
Last reviewed commit: "chore(deps): bump @m..." |
🤖 Augment PR SummarySummary: Updates the MCP TypeScript SDK dependency to a newer minor/patch release. Changes:
Technical Notes: Brings in upstream conformance/auth additions plus transport and security-related fixes mentioned in the release notes. 🤖 Was this summary useful? React with 👍 or 👎 |
fec872b to
b0ab3df
Compare
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.25.3 to 1.27.1. - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.25.3...v1.27.1) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
b0ab3df to
199e0f4
Compare
Bumps @modelcontextprotocol/sdk from 1.25.3 to 1.27.1.
Release notes
Sourced from
@modelcontextprotocol/sdk's releases.Commits
4faa8c8chore: bump version to 1.27.1 (#1581)09a85a8fix: call onerror for silently swallowed transport errors (#1580)e79d14afix: prevent command injection in example URL opening (v1.x backport) (#1579)342ea39docs: comprehensive feature documentation for SEP-1730 Tier 1 (#1548)2084a22docs: add governance documentation for SEP-1730 (#1547)f2d2145feat: implement auth/pre-registration conformance scenario (#1545)8cbc658chore: bump version for v1.27.0 (#1541)5c16ae3[v1.x] feat(tasks): add streaming methods for elicitation and sampling (#1528)97ab379feat: add url property to RequestInfo interface (#1353)825e9abfeat: backport discoverOAuthServerInfo() and discovery caching to v1.x (#1533)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)