Skip to content

Upgrade @modelcontextprotocol/sdk to 1.32.1 - #3

Merged
jules-t merged 3 commits into
mainfrom
claude/dependency-check-2026-10-14
Oct 14, 2026
Merged

jules-t merged 3 commits into
mainfrom
claude/dependency-check-2026-10-14

Conversation

@jules-t

@jules-t jules-t commented Oct 14, 2026

Copy link
Copy Markdown
Contributor

Dependency check routine.

Package Old New Advisory Severity
@modelcontextprotocol/sdk (direct, exact pin) 1.30.0 1.32.1 GHSA-6qxp-vccf-f47h (OAuth client could send credentials to an authorization server chosen by the MCP server) high

Same major version; no source change.

Checks:

  • npm audit --audit-level=moderate: 0 vulnerabilities.
  • npm run check: 24 tests, 23 pass, 1 skipped (as before), 0 fail; package structure verified.

🤖 Generated with Claude Code

https://claude.ai/code/session_01G6fQMcZf7YL7tPqtZqiotg


Generated by Claude Code

Fixes GHSA-6qxp-vccf-f47h.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G6fQMcZf7YL7tPqtZqiotg
The installed bytes changed with the SDK upgrade, and the release check requires a new version. This does not publish a release.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G6fQMcZf7YL7tPqtZqiotg
@jules-t
jules-t merged commit b241bd0 into main Oct 14, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants