Skip to content

fix: update MCP SDK to patched 1.32.1 - #537

Merged
0thernet merged 1 commit into
mainfrom
fix/mcp-sdk-audit-20261022
Oct 22, 2026
Merged

0thernet merged 1 commit into
mainfrom
fix/mcp-sdk-audit-20261022

Conversation

@0thernet

Copy link
Copy Markdown
Member

Update only the direct MCP SDK pin and root lockfile, including its transitive Hono lock entry (4.13.13) to clear the scheduled dependency audit. Keep @anthropic-ai/sdk pinned to 0.127.0 and leave its qualification guard intact; do not alter Dependabot PR #533.

Validation: bun audit (no vulnerabilities), bun install --frozen-lockfile --ignore-scripts, bun run build:dist, and bun run check:package passed. bun run check passed version/type/Convex stages but local native confinement rejects Unix socket binds in the egress-bridge tests; await the exact-head Required CI gate on ordinary runners. This PR does not request a release or host installation.

@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
xcb Ready Ready Preview Oct 22, 2026 4:40am UTC

Request Review

@0thernet
0thernet merged commit 1137f85 into main Oct 22, 2026
20 checks passed
@0thernet
0thernet deleted the fix/mcp-sdk-audit-20261022 branch October 22, 2026 04:51

This branch was successfully deployed

1 active deployment
Preview — 4312ffd5 Deployed Oct 22, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant