Skip to content

deps(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.26.0#27

Open
dependabot[bot] wants to merge 51 commits into
releasefrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0
Open

deps(deps): bump @modelcontextprotocol/sdk from 1.21.0 to 1.26.0#27
dependabot[bot] wants to merge 51 commits into
releasefrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.26.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Feb 4, 2026

Bumps @modelcontextprotocol/sdk from 1.21.0 to 1.26.0.

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.26.0

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

v1.25.3

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.2...v1.25.3

v1.25.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.25.1...v1.25.2

1.25.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.25.0...1.25.1

1.25.0

What's Changed

... (truncated)

Commits
  • fe9c07b chore: bump version to 1.26.0 (#1479)
  • 4f01e7e fix: add non-null assertions for optional setupServer fields in stateful test
  • a05be17 Merge commit from fork
  • 50d9fa3 Fix #1430: Client Credentials providers scopes support (backported) (#1442)
  • aa81a66 fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...
  • 6aba065 chore: bump v1.25.3 for backport fixes (#1412)
  • 6e8f7e1 fix: prevent Hono from overriding global Response object (v1.x) (#1411)
  • 12ae856 [v1.x backport] Use correct schema for client sampling validation when tools ...
  • b392f02 fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)
  • a0c9b13 fix: README badges links destinations (#907)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by pcarleton, a new releaser for @​modelcontextprotocol/sdk since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Swetha S and others added 30 commits November 4, 2025 16:26
…mentation

- Simplified and clarified project description and features
- Added comprehensive Shelly GitHub integration documentation
- Included gap analysis and improvement roadmap
- Enhanced troubleshooting section with Shelly-specific solutions
- Improved architecture diagram and command reference
- Streamlined installation and configuration instructions
- Updated all OpenAI references to Vertex AI throughout README
- Changed configuration examples to use Google Cloud credentials
- Updated environment variables for Vertex AI setup
- Fixed architecture diagram to show Vertex AI PaLM
- Corrected troubleshooting commands for Google Cloud
- Updated planned improvements to mention PaLM 2 and Gemini Pro
- Create detailed commit policy document for Juspay organization standards
- Define conventional commit message format with NeuroPulse-specific scopes
- Include workflow guidelines for contributors and maintainers
- Add integration guidelines for Jira, AI, and Slack workflows
- Specify emergency procedures and exception handling
- Include tools and automation for policy enforcement
- Add training resources and onboarding checklist

Establishes professional git standards for enterprise-level development
…roubleshooting

- Update repository URL to juspay/NeuroPulse organization
- Replace misleading 'solved gaps' with honest current status tracking
- Document actual GitHub authentication errors encountered
- Add comprehensive troubleshooting for enterprise security policies
- Include step-by-step solutions for fine-grained token setup
- Add emergency procedures and rollback instructions
- Provide detailed Vertex AI configuration troubleshooting
- Include real error messages and specific command-line solutions

Ensures documentation reflects reality and helps users solve actual problems
- Move comprehensive troubleshooting from README to docs/TROUBLESHOOTING.md
- Keep concise troubleshooting section in README with quick fixes
- Add clear links to detailed troubleshooting guide
- Enhance TROUBLESHOOTING.md with enterprise-specific solutions
- Include step-by-step guides for all major issues encountered
- Add emergency procedures and performance optimization guides
- Improve documentation organization and accessibility

Makes README more focused while providing comprehensive help in dedicated file
- Add working .mcp-config.json configuration (resolves 'Found 0 MCP servers')
- Add .mcp-config.json.example template for user setup
- Create comprehensive docs/MCP_SETUP.md setup guide
- Add SLACK_JIRA_INTEGRATION.md with step-by-step connection instructions
- Document Shelly GitHub authentication issues in SHELLY_GITHUB_ISSUE.md
- Update README.md with MCP Server Integration section
- Enhance docs/TROUBLESHOOTING.md with MCP error resolution

This resolves the critical 'Found 0 MCP servers' error that was blocking
AI tool integration with NeuroLink. The filesystem server now connects
successfully with 14 available tools.

Fixes: #11
Related: Enterprise GitHub authentication challenges
Swetha-160303 and others added 21 commits November 6, 2025 12:17
- Update NeuroLink to v7.53.5 to resolve MCP protocol compatibility
- Add detailed MCP troubleshooting guide to docs/MCP_SETUP.md
- Fix MCP error -32601 'Method not found' issue
- Add working configuration for Slack, Jira, and filesystem MCP servers
- Include SLACK_TEAM_ID requirement for Slack MCP server
- Document version compatibility matrix and solutions
- Resolve conflicts in README.md and docs/PROJECT_STRUCTURE.md
- Integrate remote changes with local MCP documentation updates
- Maintain comprehensive documentation structure from both branches
- Remove .mcp-config.json from repository to prevent accidental token exposure
- Add .mcp-config.json to .gitignore for future protection
- Users should copy .mcp-config.json.example to .mcp-config.json locally
- Resolves GitHub push protection violations for secret scanning
- Remove SHELLY_GITHUB_ISSUE.md
- Remove SLACK_JIRA_INTEGRATION.md

These files are no longer needed in the repository.
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.21.0 to 1.26.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.21.0...v1.26.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.26.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Feb 4, 2026

Assignees

The following users could not be added as assignees: juspay-maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant