Skip to content

Update dependency @modelcontextprotocol/sdk to v1.32.0 - #298

Merged
GraemeF merged 1 commit into
mainfrom
renovate/modelcontextprotocol-sdk-1.x
Oct 10, 2026
Merged

GraemeF merged 1 commit into
mainfrom
renovate/modelcontextprotocol-sdk-1.x

Conversation

@renovate

@renovate renovate Bot commented Oct 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@modelcontextprotocol/sdk (source) 1.31.0 → 1.32.0 age confidence

Release Notes

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.32.0

Compare Source

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

  • [v1.x] fix(client): follow redirects only within the endpoint's origin by @​claude[bot] in #​2902
  • docs: point SECURITY.md at GitHub Security Advisories (v1.x) by @​claude[bot] in #​2910
  • [v1.x] examples: close idle sessions and cap the session map by @​maxisbey in #​2914
  • [v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by @​claude[bot] in #​2925
  • [v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by @​claude[bot] in #​2927
  • [v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by @​raashish1601 in #​2045
  • [v1.x] feat(auth): add expectedResource to requireBearerAuth by @​claude[bot] in #​2930
  • [v1.x] test(e2e): cover tools/call and prompts/get without arguments by @​claude[bot] in #​2931
  • chore: bump version to 1.32.0 by @​claude[bot] in #​2935

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@GraemeF
GraemeF merged commit 2f002aa into main Oct 10, 2026
3 checks passed
@GraemeF
GraemeF deleted the renovate/modelcontextprotocol-sdk-1.x branch October 10, 2026 00:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant