Skip to content

Bump @modelcontextprotocol/sdk from 1.17.2 to 1.26.0#34

Merged
liranfarage89 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0
Jun 18, 2026
Merged

Bump @modelcontextprotocol/sdk from 1.17.2 to 1.26.0#34
liranfarage89 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 4, 2026

Copy link
Copy Markdown
Contributor

Bumps @modelcontextprotocol/sdk from 1.17.2 to 1.26.0.

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.26.0

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

v1.25.3

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.2...v1.25.3

v1.25.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.25.1...v1.25.2

1.25.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.25.0...1.25.1

1.25.0

What's Changed

... (truncated)

Commits
  • fe9c07b chore: bump version to 1.26.0 (#1479)
  • 4f01e7e fix: add non-null assertions for optional setupServer fields in stateful test
  • a05be17 Merge commit from fork
  • 50d9fa3 Fix #1430: Client Credentials providers scopes support (backported) (#1442)
  • aa81a66 fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...
  • 6aba065 chore: bump v1.25.3 for backport fixes (#1412)
  • 6e8f7e1 fix: prevent Hono from overriding global Response object (v1.x) (#1411)
  • 12ae856 [v1.x backport] Use correct schema for client sampling validation when tools ...
  • b392f02 fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)
  • a0c9b13 fix: README badges links destinations (#907)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by pcarleton, a new releaser for @​modelcontextprotocol/sdk since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 4, 2026
@liranfarage89

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.17.2 to 1.26.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.17.2...v1.26.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.26.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0 branch from 02949f0 to 04de9e3 Compare June 18, 2026 13:16
@modelcontextprotocol/sdk 1.26 types tool input schemas against zod/v3
(its AnySchema = z3.ZodTypeAny). Import zod from 'zod/v3' so our schemas
match, and cast StreamableHTTPServerTransport to Transport at connect to
satisfy exactOptionalPropertyTypes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@liranfarage89 liranfarage89 merged commit 7563d7d into main Jun 18, 2026
4 checks passed
@liranfarage89 liranfarage89 deleted the dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0 branch June 18, 2026 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant