Skip to content

fix: Update MCP SDK from 1.11.2 to 1.27.1 - #23

Open
thebookofiz wants to merge 1 commit into
mainfrom
fix/update-mcp-sdk-to-1.27.1
Open

fix: Update MCP SDK from 1.11.2 to 1.27.1#23
thebookofiz wants to merge 1 commit into
mainfrom
fix/update-mcp-sdk-to-1.27.1

Conversation

@thebookofiz

Copy link
Copy Markdown
Collaborator

Summary

  • Upgrades @modelcontextprotocol/sdk from 1.11.2 to 1.27.1
  • Resolves 2 high severity vulnerabilities (hono IP spoofing, minimatch ReDoS)
  • Uses --legacy-peer-deps to handle graphql-request peer dependency conflict

Changes

  • Updated package.json dependency version
  • Regenerated package-lock.json with npm audit fix --force

Testing

  • npm install --legacy-peer-deps succeeds
  • npm audit shows 0 vulnerabilities

- Upgrades @modelcontextprotocol/sdk to latest version
- Resolves 2 high severity vulnerabilities (hono, minimatch)
- Uses --legacy-peer-deps to handle graphql-request peer dependency conflict
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant