Bump @modelcontextprotocol/sdk from 1.17.3 to 1.24.0 #5164

dependabot · 2025-12-02T17:22:18Z

Bumps @modelcontextprotocol/sdk from 1.17.3 to 1.24.0.

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.24.0

Summary

This release brings us up to speed with the latest MCP spec 2025-11-25. Take a look at the latest spec as well as the release blog post.

What's Changed

fix: update spec links from latest to draft by @domdomegg in modelcontextprotocol/typescript-sdk#1171

Make sure to consume HTTP error response bodies by @GreenStage in modelcontextprotocol/typescript-sdk#1173

docs: add GET request handling for streamableHttp stateless mode by @saharis9988 in modelcontextprotocol/typescript-sdk#1161

SEP-1686: Tasks by @LucaButBoring in modelcontextprotocol/typescript-sdk#1041

Fix JSON parse error on SSE events with empty data by @felixweinberger in modelcontextprotocol/typescript-sdk#1184

Fix StreamableHTTPClientTransport instantiation by @yuwzho in modelcontextprotocol/typescript-sdk#944

feat: eslint rule to prefer node protocols by @mattzcarey in modelcontextprotocol/typescript-sdk#1187

fix: call tasks/result to deliver side-channel messages by @felixweinberger in modelcontextprotocol/typescript-sdk#1185

Add invalid_target oauth error (rfc 8707) by @GreenStage in modelcontextprotocol/typescript-sdk#1183

fix(client): use StreamableHTTPError instead of plain Error in send() by @yamadashy in modelcontextprotocol/typescript-sdk#1178

coerce 'expires_in' to be a number by @adam-kuhn in modelcontextprotocol/typescript-sdk#1111

Allow HTTP issuer URLs when MCP_DEV_MODE is enabled by @jerome3o-anthropic in modelcontextprotocol/typescript-sdk#1189

fix: update registerTool signature for proper typed ToolCallback by @mattzcarey in modelcontextprotocol/typescript-sdk#1188

SEP-1046: Client credentials flow for M2M without user interaction by @KKonstantinov in modelcontextprotocol/typescript-sdk#1157

adds the transitive @types/express-serve-static-core dependency as a direct devDependency by @mgyarmathy in modelcontextprotocol/typescript-sdk#1078

Fix optional argument handling in prompts for Zod V4 by @filip-bartuska-ipf in modelcontextprotocol/typescript-sdk#1199

fix hanging stdio servers by @mattzcarey in modelcontextprotocol/typescript-sdk#1200

README refactor by @KKonstantinov in modelcontextprotocol/typescript-sdk#1197

[Docs] Fix typo by @koic in modelcontextprotocol/typescript-sdk#1067

feat: add closeSSEStream callback to RequestHandlerExtra by @felixweinberger in modelcontextprotocol/typescript-sdk#1166

fix: improve SSE reconnection behavior by @felixweinberger in modelcontextprotocol/typescript-sdk#1191

fix: normalize headers in sse transport by @marcrasi in modelcontextprotocol/typescript-sdk#856

feat: add closeStandaloneSSEStream for GET stream polling by @felixweinberger in modelcontextprotocol/typescript-sdk#1203

fix: normalize null to undefined in ElicitResultSchema content field by @mattzcarey in modelcontextprotocol/typescript-sdk#1204

Modify Origin header validation in validateRequestHeaders (streamableHttp.ts and sse.ts) to allow requests without an Origin, as they are not relevant to server DNS rebinding protection. by @jacopoc in modelcontextprotocol/typescript-sdk#1205

fix: allow zod 4 transformations by @mattzcarey in modelcontextprotocol/typescript-sdk#1213

feat: backwards-compatible createMessage overloads for SEP-1577 by @felixweinberger in modelcontextprotocol/typescript-sdk#1212

chore: bump version for release by @felixweinberger in modelcontextprotocol/typescript-sdk#1215

New Contributors

@GreenStage made their first contribution in modelcontextprotocol/typescript-sdk#1173

@saharis9988 made their first contribution in modelcontextprotocol/typescript-sdk#1161

@yuwzho made their first contribution in modelcontextprotocol/typescript-sdk#944

@yamadashy made their first contribution in modelcontextprotocol/typescript-sdk#1178

@adam-kuhn made their first contribution in modelcontextprotocol/typescript-sdk#1111

@mgyarmathy made their first contribution in modelcontextprotocol/typescript-sdk#1078

@filip-bartuska-ipf made their first contribution in modelcontextprotocol/typescript-sdk#1199

@koic made their first contribution in modelcontextprotocol/typescript-sdk#1067

@marcrasi made their first contribution in modelcontextprotocol/typescript-sdk#856

@jacopoc made their first contribution in modelcontextprotocol/typescript-sdk#1205

Full Changelog: modelcontextprotocol/typescript-sdk@1.23.0...1.24.0

1.23.0

What's Changed

... (truncated)

Commits

356b7e6 chore: bump version for release (#1215)
09623e2 Merge commit from fork
cf51343 feat: backwards-compatible createMessage overloads for SEP-1577 (#1212)
8204126 fix: allow zod 4 transformations (#1213)
6083600 Modify Origin header validation in validateRequestHeaders (streamableHttp.ts ...
a6ee2cb fix: normalize null to undefined in ElicitResultSchema content field (#1204)
4b651b8 feat: add closeStandaloneSSEStream for GET stream polling (#1203)
5ceabfb fix: normalize headers in sse transport (#856)
f67fc2f fix: improve SSE reconnection behavior (#1191)
fab7e1e feat: add closeSSEStream callback to RequestHandlerExtra (#1166)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by pcarleton, a new releaser for @modelcontextprotocol/sdk since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

changeset-bot · 2025-12-02T17:22:22Z

⚠️ No Changeset found

Latest commit: a1b8568

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2025-12-02T17:22:31Z

📊 Tachometer Benchmark Results

Summary

nop-update

this-change, tip-of-tree, previous-release: unsure 🔍 -9% - +5% (-1.14ms - +0.69ms)
^{this-change vs tip-of-tree}

render

this-change: 61.35ms - 86.47ms
this-change, tip-of-tree, previous-release: unsure 🔍 -4% - +3% (-0.88ms - +0.68ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +1% (-0.92ms - +0.30ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -2% - +5% (-1.69ms - +4.94ms)
^{this-change vs tip-of-tree}

update

this-change: 485.58ms - 496.54ms
this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +6% (-1.07ms - +2.41ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -3% - +1% (-2.60ms - +1.03ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +1% (-5.76ms - +6.41ms)
^{this-change vs tip-of-tree}

update-reflect

this-change: 472.21ms - 478.23ms
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +2% (-3.70ms - +8.62ms)
^{this-change vs tip-of-tree}

Results

this-change

Browser: chrome-headless 142.0.0.0
Sample size: 50
Built by: Benchmarks #7050
Commit: a1b8568

render

Version	Avg time	vs
	61.35ms - 86.47ms	-

update

Version	Avg time	vs
	485.58ms - 496.54ms	-

update-reflect

Version	Avg time	vs
	472.21ms - 478.23ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 142.0.0.0
Sample size: 30
Built by: Benchmarks #7050
Commit: a1b8568

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	19.27ms - 20.36ms	-	unsure 🔍 -4% - +3% -0.88ms - +0.68ms	unsure 🔍 -5% - +2% -0.98ms - +0.38ms
tip-of-tree tip-of-tree	19.35ms - 20.48ms	unsure 🔍 -3% - +4% -0.68ms - +0.88ms	-	unsure 🔍 -4% - +2% -0.90ms - +0.49ms
previous-release previous-release	19.71ms - 20.53ms	unsure 🔍 -2% - +5% -0.38ms - +0.98ms	unsure 🔍 -2% - +5% -0.49ms - +0.90ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	38.46ms - 41.02ms	-	unsure 🔍 -3% - +6% -1.07ms - +2.41ms	unsure 🔍 -3% - +7% -1.19ms - +2.67ms
tip-of-tree tip-of-tree	37.89ms - 40.25ms	unsure 🔍 -6% - +3% -2.41ms - +1.07ms	-	unsure 🔍 -5% - +5% -1.79ms - +1.94ms
previous-release previous-release	37.55ms - 40.44ms	unsure 🔍 -7% - +3% -2.67ms - +1.19ms	unsure 🔍 -5% - +5% -1.94ms - +1.79ms	-

nop-update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	12.05ms - 13.33ms	-	unsure 🔍 -9% - +5% -1.14ms - +0.69ms	unsure 🔍 -10% - +3% -1.33ms - +0.45ms
tip-of-tree tip-of-tree	12.26ms - 13.57ms	unsure 🔍 -6% - +9% -0.69ms - +1.14ms	-	unsure 🔍 -8% - +5% -1.11ms - +0.69ms
previous-release previous-release	12.51ms - 13.75ms	unsure 🔍 -4% - +11% -0.45ms - +1.33ms	unsure 🔍 -5% - +9% -0.69ms - +1.11ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 142.0.0.0
Sample size: 50
Built by: Benchmarks #7050
Commit: a1b8568

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	35.73ms - 36.72ms	-	unsure 🔍 -3% - +1% -0.92ms - +0.30ms	unsure 🔍 -2% - +2% -0.63ms - +0.72ms
tip-of-tree tip-of-tree	36.18ms - 36.89ms	unsure 🔍 -1% - +3% -0.30ms - +0.92ms	-	unsure 🔍 -1% - +3% -0.22ms - +0.94ms
previous-release previous-release	35.72ms - 36.63ms	unsure 🔍 -2% - +2% -0.72ms - +0.63ms	unsure 🔍 -3% - +1% -0.94ms - +0.22ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	76.33ms - 78.88ms	-	unsure 🔍 -3% - +1% -2.60ms - +1.03ms	unsure 🔍 -3% - +2% -2.03ms - +1.60ms
tip-of-tree tip-of-tree	77.09ms - 79.68ms	unsure 🔍 -1% - +3% -1.03ms - +2.60ms	-	unsure 🔍 -2% - +3% -1.26ms - +2.40ms
previous-release previous-release	76.53ms - 79.11ms	unsure 🔍 -2% - +3% -1.60ms - +2.03ms	unsure 🔍 -3% - +2% -2.40ms - +1.26ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 142.0.0.0
Sample size: 50
Built by: Benchmarks #7050
Commit: a1b8568

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	107.28ms - 108.90ms	-	unsure 🔍 -2% - +5% -1.69ms - +4.94ms	unsure 🔍 -2% - +4% -1.85ms - +4.48ms
tip-of-tree tip-of-tree	103.25ms - 109.68ms	unsure 🔍 -5% - +2% -4.94ms - +1.69ms	-	unsure 🔍 -4% - +4% -4.75ms - +4.13ms
previous-release previous-release	103.72ms - 109.84ms	unsure 🔍 -4% - +2% -4.48ms - +1.85ms	unsure 🔍 -4% - +4% -4.13ms - +4.75ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	487.85ms - 496.23ms	-	unsure 🔍 -1% - +1% -5.76ms - +6.41ms	unsure 🔍 -1% - +1% -4.38ms - +7.19ms
tip-of-tree tip-of-tree	487.31ms - 496.13ms	unsure 🔍 -1% - +1% -6.41ms - +5.76ms	-	unsure 🔍 -1% - +1% -4.86ms - +7.03ms
previous-release previous-release	486.65ms - 494.62ms	unsure 🔍 -1% - +1% -7.19ms - +4.38ms	unsure 🔍 -1% - +1% -7.03ms - +4.86ms	-

update-reflect

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	499.20ms - 508.89ms	-	unsure 🔍 -1% - +2% -3.70ms - +8.62ms	unsure 🔍 -1% - +2% -3.19ms - +8.98ms
tip-of-tree tip-of-tree	497.78ms - 505.39ms	unsure 🔍 -2% - +1% -8.62ms - +3.70ms	-	unsure 🔍 -1% - +1% -4.86ms - +5.72ms
previous-release previous-release	497.47ms - 504.83ms	unsure 🔍 -2% - +1% -8.98ms - +3.19ms	unsure 🔍 -1% - +1% -5.72ms - +4.86ms	-

_{tachometer-reporter-action v2 for Benchmarks}

github-actions · 2025-12-02T17:24:05Z

The size of lit-html.js and lit-core.min.js are as expected.

Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.17.3 to 1.24.0. - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.3...1.24.0) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.24.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 2, 2025

dependabot bot requested a review from kevinpschaaf as a code owner December 2, 2025 17:22

dependabot bot force-pushed the dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.24.0 branch from 52f1481 to a1b8568 Compare December 2, 2025 22:48

Bump @modelcontextprotocol/sdk from 1.17.3 to 1.24.0 #5164

Are you sure you want to change the base?

Bump @modelcontextprotocol/sdk from 1.17.3 to 1.24.0 #5164

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.24.0

Summary

What's Changed

New Contributors

1.23.0

What's Changed

Uh oh!

changeset-bot bot commented Dec 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

github-actions bot commented Dec 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📊 Tachometer Benchmark Results

Summary

nop-update

render

update

update-reflect

Results

render

update

update-reflect

render

update

nop-update

render

update

render

update

update-reflect

Uh oh!

github-actions bot commented Dec 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Dec 2, 2025 •

edited

Loading

changeset-bot bot commented Dec 2, 2025 •

edited

Loading

github-actions bot commented Dec 2, 2025 •

edited

Loading