Update dependency @modelcontextprotocol/sdk to v1 #9

renovate · 2025-06-02T14:06:56Z

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@modelcontextprotocol/sdk (source)	dependencies	major	`^0.7.0` -> `^1.0.0`

Release Notes

modelcontextprotocol/typescript-sdk (@modelcontextprotocol/sdk)

`v1.17.5`

Compare Source

What's Changed

Automatic handling of logging level by @cliffhall in #882
Fix the SDK vs Spec types test that is breaking CI by @cliffhall in #908

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.4...1.17.5

`v1.17.4`

Compare Source

What's Changed

feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns by @m-paternostro in #485
restrict url schemes allowed in oauth metadata by @pcarleton in #877
[auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 by @pcarleton in #879
chore: bump version to 1.17.4 by @felixweinberger in #894

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.3...1.17.4

`v1.17.3`

Compare Source

What's Changed

Fix quit command in Example client with OAuth by @DaleSeo in #864
fix: client import & server imports by @jatinsandilya in #851
fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… by @arjunkmrm in #850
docs: correct parameter schema key in Dynamic Servers documentation by @bianbianzhu in #789
version: patch to 0.17.3 by @felixweinberger in #878

New Contributors

@DaleSeo made their first contribution in #864
@jatinsandilya made their first contribution in #851
@arjunkmrm made their first contribution in #850
@bianbianzhu made their first contribution in #789

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.2...1.17.3

`v1.17.2`

Compare Source

What's Changed

fix: retry next endpoint on CORS error during auth server discovery by @xiaoyijun in #827

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.1...1.17.2

`v1.17.1`

Compare Source

What's Changed

(fix): Update fallbackRequestHandler type to match _requestHandlers leaves type by @fredericbarthelet in #784
fix: prevent responses being sent to wrong client when multiple transports connect by @grimmerk in #820
1.17.1 by @ihrpr in #831

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.0...1.17.1

`v1.17.0`

Compare Source

What's Changed

Add CODEOWNERS file for sdk by @ihrpr in #781
Add more robust base64 check by @cliffhall in #786
update codeowners by @ihrpr in #803
Fix indent by @jiec-msft in #807
fix: Explicitly declare accpet type to json when exchanging oauth token by @JoJoJoJoJoJoJo in #801
feat: support oidc discovery in client sdk by @xiaoyijun in #652
fix: remove extraneous code block in README.md by @sd0ric4 in #791
Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #798
Bump version 1.17.0 by @ihrpr in #810

New Contributors 🙏

@jiec-msft made their first contribution in #807
@sd0ric4 made their first contribution in #791

Full Changelog: modelcontextprotocol/typescript-sdk@1.16.0...1.17.0

`v1.16.0`

Compare Source

What's Changed

Add type compatibility test between SDK and spec types by @ochafik in #729
Add OIDC ID token support by @dankelleher in #680
Add prompt=consent for OIDC offline_access scope by @dankelleher in #681
Non-critical: Readme syntax and typographical error fixes by @freakynit in #765
make client side client_id generation configurable in the oauth router by @cdaguerre in #734
Adding invalidateCredentials() to OAuthClientProvider by @geelen in #570
fix: use authorization_server_url as issuer when fetching metadata by @JoJoJoJoJoJoJo in #763
feat(protocol): Debounce notifications to improve network efficiancy by @jneums in #746
fix(731): StreamableHTTPClientTransport Fails to Reconnect on Non-Resumable Streams by @jneums in #732
fix: consistently use consumer-provided fetch function by @LucaButBoring in #767
fix client id issuance date should only be sent when generated by @cdaguerre in #775
1.16.0 by @ihrpr in #779

New Contributors 🙏

@dankelleher made their first contribution in #680
@freakynit made their first contribution in #765
@cdaguerre made their first contribution in #734
@JoJoJoJoJoJoJo made their first contribution in #763
@jneums made their first contribution in #746
@LucaButBoring made their first contribution in #767

Full Changelog: modelcontextprotocol/typescript-sdk@1.15.1...1.16.0

`v1.15.1`

Compare Source

What's Changed

fix(client): Some mcp server need default env(#393, #196) by @sunrabbit123 in #394
feat: Add CORS configuration for browser-based MCP clients by @jerome3o-anthropic in #713
Add onsessionclosed hook to StreamableHTTPServerTransport by @jerome3o-anthropic in #743
add custom headers on initial _startOrAuth call by @anthonjn in #318
Improve stdio test Windows compatibility and refactor command logic by @HoberMin in #284
Add missing app.listen error handling to server examples by @ochafik in #749
fix(server): validate expiresAt token value for non existence by @christian-bromann in #446
[auth]: support oauth client_secret_basic / none / custom methods by @jaredhanson, @SightStudio, @ochafik in #720
feat: support async callbacks for onsessioninitialized and onsessionclosed by @jerome3o-anthropic in #751
Fix oauth well-known paths to retain path and query by @ihrpr in #756
auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS by @ochafik in #752

New Contributors

@sunrabbit123 made their first contribution in #394
@anthonjn made their first contribution in #318
@HoberMin made their first contribution in #284

Full Changelog: modelcontextprotocol/typescript-sdk@1.15.0...1.15.1

`v1.15.0`

Compare Source

What's Changed

[!NOTE]
This release reverts a breaking change introduced in version 1.13.3.

Allow custom fetch in SSEClientTransport and StreamableHTTPClientTransport by @cliffhall in #721
Revert "fix: add type safety for tool output schemas in ToolCallback" by @sushichan044 in #725
bump version to 1.15.0 by @bhosmer-ant in #730

Full Changelog: modelcontextprotocol/typescript-sdk@1.14.0...1.15.0

`v1.14.0`

Compare Source

What's Changed

[!WARNING]
This introduces breaking changes, which are required to comply with the spec - more details

Rename reject to decline by @ihrpr in #727
1.14.0 by @ihrpr in #728

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.3...1.14.0

`v1.13.3`

Compare Source

What's Changed

Implement DNS Rebinding Protections per spec by @ddworken in #565
fix lint by @ihrpr in #704
fix: add missing eventsource-parser dependency by @domnit in #424
fix: add windows env PROGRAMFILES, avoid some exe can not be found by @muzea in #386
add overloads for registerResource method in McpServer class by @kentcdodds in #661
fix: extra headers when they are a Headers object by @garciasdos in #571
fix: missing "properties" property in empty schema by @sinedied in #598
fix: Expose the MCP child process PID as an accessible property in StdioClientTransport by @XiaofuHuang in #455
fix: add type safety for tool output schemas in ToolCallback by @sushichan044 in #670
doc minimum node version requirment by @marcopeg in #463
docs: add error handling when it fails to start HTTP server by @formulahendry in #371
Added Sampling Example to README by @RishiNandha in #698
Returning undefined from discoverOAuthMetadata for CORS errors by @geelen in #717
Bump version to 1.13.3 by @ihrpr in #719

New Contributors 🙏

@ddworken made their first contribution in #565
@domnit made their first contribution in #424
@muzea made their first contribution in #386
@kentcdodds made their first contribution in #661
@garciasdos made their first contribution in #571
@sinedied made their first contribution in #598
@XiaofuHuang made their first contribution in #455
@sushichan044 made their first contribution in #670
@marcopeg made their first contribution in #463
@formulahendry made their first contribution in #371
@RishiNandha made their first contribution in #698

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.2...1.13.3

`v1.13.2`

Compare Source

What's Changed

Fix /.well-known/oauth-authorization-server dropping path by @calclavia in #687
Fallback for /.well-known/oauth-authorization-server dropping path by @ihrpr in #692
[auth] refactor resource selection to not include resource if PRM is not present by @pcarleton in #693
fix: skip validation if tool reports error by @Areo-Joe in #655
feat(shared/auth): support software_statement in OAuthClientMetadata by @chrisdickinson in #696
Show session id per request in simpleStreamableHttp example server by @cliffhall in #640
Raw request propagation in tools - passed to callbacks via RequestHandlerExtra<ServerRequest, ServerNotification> by @KKonstantinov in #627
Update readme file to include a tip to allow mcp-session-id in CORS when using StreamableHTTP by @Achintha444 in #633
Pr/protocol overwriting transport hooks by @nichtsam in #477
docs: Add clarifying comments for stateless streamable HTTP endpoints by @dhodun in #542
Bump formidable from 3.5.2 to 3.5.4 in the npm_and_yarn group across 1 directory by @dependabot in #428
test(server): add more tests for SSEServerTransport class by @christian-bromann in #391
Update version of the package to 1.13.2 by @ihrpr in #701

New Contributors 🙏

@calclavia made their first contribution in #687
@Areo-Joe made their first contribution in #655
@KKonstantinov made their first contribution in #627
@Achintha444 made their first contribution in #633
@nichtsam made their first contribution in #477
@dhodun made their first contribution in #542
@christian-bromann made their first contribution in #391

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.1...1.13.2

`v1.13.1`

Compare Source

What's Changed

simpleStreamableHttp: fix example code by @ochafik in #660
build: add watching script targets for build & simple streamable http server by @ochafik in #663
feat: remove console statements from SDK code by @ashwin-ant in #668
[auth] adjust default validation for resource parameter in client flow, and server example by @pcarleton in #664
fix(client/sse): extract protected resource from eventsource 401 by @chrisdickinson in #675
1.13.1 by @ihrpr in #683

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.0...1.13.1

`v1.13.0`

Compare Source

🚀 Implementation for Spec revision 2025-06-18

https://github.com/modelcontextprotocol/modelcontextprotocol/releases/tag/2025-06-18

feat: implement MCP-Protocol-Version header requirement for HTTP transport by @ochafik in #614
Rename ResourceReference to ResourceTemplateReference by @ihrpr in #619
Adds _meta to additional interface types by @ihrpr in #630
Add title to tools, resources, prompts by @ihrpr in #631
Add support for resource link by @ihrpr in #632
Include context into completions by @ihrpr in #634
Add missing _meta fields to match spec requirements by @felixweinberger in #636
Introduce Elicitation capability by @ihrpr in #520
update _meta usage guidance in types.ts by @bhosmer-ant in #639
Jerome/fix/dev oauth server required scopes change by @jerome3o-anthropic in #629
remove hasCustomTitle by @ihrpr in #645
update latest protocol version by @ihrpr in #643
change version by @ihrpr in #647
RFC 8707 Resource Indicators Implementation by @ochafik in #638
rename decline to reject by @ihrpr in #657

New Contributors 🙏

@ochafik made their first contribution in #614
@felixweinberger made their first contribution in #636

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.3...1.13.0

`v1.12.3`

Compare Source

What's Changed

1.12.3 by @ihrpr in #623

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.2...1.12.3

`v1.12.2`

Compare Source

What's Changed

fix: Ensure completions capability is registered on setCompletionRequestHandler call by @fredericbarthelet in #546
fixes metadata for listed resources from resource templates so that they favor their own metadata by @carlpeaslee in #574
Adding tests to prevent regressions for: fixes metadata for listed resources from resource templates so that they favor their own metadata by @ihrpr in #621

New Contributors

@carlpeaslee made their first contribution in #574

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.1...1.12.2

`v1.12.1`

Compare Source

What's Changed

chore: fix typo by @Skn0tt in #315
Add request init headers defined on the sse transport on the start phase by @danielgek in #538
fix: Ensure _meta object is not lost when onprogress option is passed by @daidi in #560

New Contributors

@Skn0tt made their first contribution in #315
@danielgek made their first contribution in #538
@daidi made their first contribution in #560

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.0...1.12.1

`v1.12.0`

Compare Source

Authorization spec: DRAFT-2025-v2 🔐 🚀

feat: Add support for separate Authorization Server / Resource server in server flow (spec: DRAFT-2025-v2) by @pcarleton in #503
Feat: Separate authorization server and resource server on client auth flow by @0Itsuki0 in #416
Example Auth client by @ihrpr in #526

Other changes

Add support for message field in progress notifications by @bhosmer-ant in #502
Fix Ajv import compatibility issue by downgrading to v6 by @bhosmer-ant in #517
fix: ProxyOAuthServerProvider: redirect_uri missing in token request by @shubham-lohar in #519
Save existing refresh_token in store if no new refresh_token is returned by @fredericbarthelet in #483
#527
Add state param to OAuth provider by @jescalan in #529
Fix StreamableHttp example for tool calls - have a separate option for testing notifications resumption by @ihrpr in #534

New Contributors

@0Itsuki0 made their first contribution in #416
@shubham-lohar made their first contribution in #519
@jescalan made their first contribution in #529

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.4...1.12.0

`v1.11.5`

Compare Source

What's Changed

Make content in Tool Result required by @bhosmer-ant in #524

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.4...1.11.5

`v1.11.4`

Compare Source

What's Changed

Prototype support for outputSchema/structuredContent by @bhosmer-ant in #454
fix sse endpoint path preservation by @bhosmer-ant in #504
rollback path preservation fix by @bhosmer-ant in #506

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.3...1.11.4

`v1.11.3`

Compare Source

What's Changed

fix: preserve custom paths in SSE endpoint URLs by @bhosmer-ant in #466
chore: fix cross-spawn version to 7.0.5 (issue: #488) by @rafaelportomoura in #489
[FEAT] added support for AuthInfo in extra for StreamableHTTPServerTransport by @its-nikhil in #399
feat(auth): support custom scope in authorization requests by @xiaoyijun in #491
Fix notificaions in README.md by @Boyquotes in #480
docs: Fix import paths for ProxyOAuthServerProvider in README by @grimmerk in #457
Fix Table of Contents in README and markdown linter warnings. by @petervandenabeele in #449

New Contributors

@rafaelportomoura made their first contribution in #489
@its-nikhil made their first contribution in #399
@xiaoyijun made their first contribution in #491
@Boyquotes made their first contribution in #480
@grimmerk made their first contribution in #457
@petervandenabeele made their first contribution in #449

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.2...1.11.3

`v1.11.2`

Compare Source

What's Changed

feat: Add scope parameter to startAuthorization function by @pcarleton in #464
Fix Zod object detection logic by @geelen in #468

New Contributors

@pcarleton made their first contribution in #464

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.1...1.11.2

`v1.11.1`

Compare Source

What's Changed

Fix isZodRawShape return false on empty object and add test by @yuna0x0 in #448

New Contributors

@yuna0x0 made their first contribution in #448

Full Changelog: modelcontextprotocol/typescript-sdk@1.11.0...1.11.1

`v1.11.0`

Compare Source

🚀 Tool Annotations

Adding support for Tools Annotations for better describing tool behavior, like whether it is read-only or destructive, as per protocol version 2025-03-26

Spec Version Update

Since we implemented most of the features in the recent spec we are updating the latest protocol version

Other Changes

Pass requestId to handlers via metadata by @lforst in #358
stateless had a wrong example by @TomasRup in #338
fix SSE transport server examples by @ihrpr in #388
Update README.md to include working examples by @simonedstrom96 in #384
Pass request _meta to request handlers extra param by @iamarcel in #328
Update stateless streamable http usecase by @c121914yu in #417
Add 401 during POST request test case on StreamableHTTP transport to check auth flow by @fredericbarthelet in #411
Ensure JSONRPCError messages are sent for streamable http by @mhart in #409
nit: fix the comment format in the streamableHTTP.ts by @botengyao in #406
comment: fix stateless comments that no session-id is included in any responses by @botengyao in #403
Add stderr access before start by @hmwildermuth in #437

Please report any issues at https://github.com/modelcontextprotocol/typescript-sdk/issues.

New Contributors

@lforst made their first contribution in #358
@bhosmer-ant made their first contribution in #309
@TomasRup made their first contribution in #338
@simonedstrom96 made their first contribution in #384
@iamarcel made their first contribution in #328
@c121914yu made their first contribution in #417
@mhart made their first contribution in #409
@botengyao made their first contribution in #406
@hmwildermuth made their first contribution in #437

Full Changelog: modelcontextprotocol/typescript-sdk@1.10.2...1.11.0

`v1.10.2`

Compare Source

What's Changed

Update README.md to use correct location of InMemoryEventStore by @RamAnanth in #366
Streamable Http - fix server initialization validation in Stateless servers by @ihrpr in #377
Fixed Streamable HTTP Example by @ferrants in #374

New Contributors

@RamAnanth made their first contribution in #366
@ferrants made their first contribution in #374

Full Changelog: modelcontextprotocol/typescript-sdk@1.10.1...1.10.2

`v1.10.1`

Compare Source

What's Changed

Streamable Http - fix examples for stateless server by @ihrpr in #363

Full Changelog: modelcontextprotocol/typescript-sdk@1.10.0...1.10.1

`v1.10.0`

Compare Source

Streamable HTTP release

This is the first release supporting the new Streamable HTTP transport from protocol version 2025-03-26, which supersedes the SSE transport from protocol version 2024-11-05. 🎉

See the Streamable HTTP section of the README and the included examples for how to use this new transport in your client or server.
There's also a guide on backwards compatibility, to maintain support with SSE clients or servers while the ecosystem upgrades to Streamable HTTP.

Please report any issues at https://github.com/modelcontextprotocol/typescript-sdk/issues.

Other Changes

Improve SSE endpoint sessionId parameter handling by @akazwz in #177
Mutations for McpServer by @geelen in #247
StreamableHTTPClientTransport cleanup / fixes by @beaulac in #300
Add helper functions to distinguish between jsonRPC message types by @fredericbarthelet in #281
Bump to version 1.10.0 by @cliffhall in #305
Include Authorization Info in Tool Calls (and request handlers generally) by @allenzhou101 in #166

New Contributors

@akazwz made their first contribution in #177
@geelen made their first contribution in #247
@beaulac made their first contribution in #300
@fredericbarthelet made their first contribution in #281
@cliffhall made their first contribution in #305

Full Changelog: modelcontextprotocol/typescript-sdk@1.9.0...1.10.0

`v1.9.0`

Compare Source

What's Changed

Correctly pass redirect_uri to tokens call by @praboud-ant in #222
Add audio content by @nathanArseneau in #252
Fix bug in reset timeout on progress by @Ozamatash in [#160](https://github.com/modelcontextp

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cuspofaries · 2025-08-21T07:54:12Z

@claude review this PR

claude · 2025-08-21T07:54:28Z

Claude encountered an error —— View job

I'll analyze this and get back to you.

cuspofaries · 2025-08-21T07:55:20Z

@claude is this PR safe to merge ?

claude · 2025-08-21T07:55:32Z

Claude encountered an error —— View job

I'll analyze this and get back to you.

renovate bot force-pushed the renovate/modelcontextprotocol-sdk-1.x branch 2 times, most recently from d7fed17 to deafd8f Compare August 8, 2025 06:32

renovate bot force-pushed the renovate/modelcontextprotocol-sdk-1.x branch 5 times, most recently from b7a6963 to fb8485b Compare August 19, 2025 13:46

renovate bot force-pushed the renovate/modelcontextprotocol-sdk-1.x branch from fb8485b to 2df0001 Compare August 22, 2025 14:31

renovate bot force-pushed the renovate/modelcontextprotocol-sdk-1.x branch 2 times, most recently from 0ad4da0 to 9f29fda Compare September 4, 2025 20:44

Update dependency @modelcontextprotocol/sdk to v1

9518c1e

renovate bot force-pushed the renovate/modelcontextprotocol-sdk-1.x branch from 9f29fda to 9518c1e Compare September 4, 2025 20:46

cuspofaries merged commit 9e31957 into main Sep 4, 2025

renovate bot deleted the renovate/modelcontextprotocol-sdk-1.x branch September 4, 2025 20:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency @modelcontextprotocol/sdk to v1 #9

Update dependency @modelcontextprotocol/sdk to v1 #9

Uh oh!

renovate bot commented Jun 2, 2025 •

edited

Loading

Uh oh!

cuspofaries commented Aug 21, 2025

Uh oh!

claude bot commented Aug 21, 2025 •

edited

Loading

Uh oh!

cuspofaries commented Aug 21, 2025

Uh oh!

claude bot commented Aug 21, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Update dependency @modelcontextprotocol/sdk to v1 #9

Update dependency @modelcontextprotocol/sdk to v1 #9

Uh oh!

Conversation

renovate bot commented Jun 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors 🙏

What's Changed

New Contributors 🙏

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors 🙏

What's Changed

New Contributors 🙏

What's Changed

🚀 Implementation for Spec revision 2025-06-18

New Contributors 🙏

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Authorization spec: DRAFT-2025-v2 🔐 🚀

Other changes

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

🚀 Tool Annotations

Spec Version Update

Other Changes

New Contributors

What's Changed

New Contributors

What's Changed

Streamable HTTP release

Other Changes

New Contributors

What's Changed

Configuration

Uh oh!

cuspofaries commented Aug 21, 2025

Uh oh!

claude bot commented Aug 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cuspofaries commented Aug 21, 2025

Uh oh!

claude bot commented Aug 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Jun 2, 2025 •

edited

Loading

claude bot commented Aug 21, 2025 •

edited

Loading

claude bot commented Aug 21, 2025 •

edited

Loading