From 9f4acc8f14f5baf77b54b040d156a1b094d8d366 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 8 Oct 2026 11:05:20 -0700
Subject: [PATCH] build(deps): bump @modelcontextprotocol/sdk from 1.30.0 to
1.31.0 (#15361)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk)
from 1.30.0 to 1.31.0.
Release notes
Sourced from @modelcontextprotocol/sdk's
releases.
1.31.0
Upgrade notes
- Stored OAuth tokens and client information now include an
issuer field. Storage that rejects unknown fields needs to
allow it.
- Pass
expectedIssuer when constructing
ClientCredentialsProvider,
PrivateKeyJwtProvider or
StaticPrivateKeyJwtProvider. Constructing them without it
is deprecated.
What's Changed
Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0
1.30.1
What's Changed
New Contributors
Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.30.1
Commits
4b0051f
chore: bump version to 1.31.0 (#2890)51ad4f0
[v1.x] Bind stored OAuth credentials to the authorization server that
issued ...289ac2c
chore: bump version to 1.30.1 (#2848)12b4256
fix(auth): preserve resource URI without trailing slash (#1968)
(#1972)a9f6eb7
[v1.x] fix(server): read HTTP request bodies with a size limit and bound
JSON...- See full diff in compare
view
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.../google-sheets-mcp-server/package.json | 2 +-
packages/kv-demo-mcp-server/package.json | 2 +-
packages/mcp-server/package.json | 2 +-
pnpm-lock.yaml | 100 +++++++++---------
server/package.json | 2 +-
5 files changed, 54 insertions(+), 54 deletions(-)
diff --git a/packages/google-sheets-mcp-server/package.json b/packages/google-sheets-mcp-server/package.json
index ff51871fe15..6f0e194e2ff 100644
--- a/packages/google-sheets-mcp-server/package.json
+++ b/packages/google-sheets-mcp-server/package.json
@@ -45,7 +45,7 @@
"test": "vitest run"
},
"dependencies": {
- "@modelcontextprotocol/sdk": "^1.30.0",
+ "@modelcontextprotocol/sdk": "^1.31.0",
"googleapis": "^182.0.0",
"zod": "^4.4.3"
},
diff --git a/packages/kv-demo-mcp-server/package.json b/packages/kv-demo-mcp-server/package.json
index 4748badd509..60dab9ae975 100644
--- a/packages/kv-demo-mcp-server/package.json
+++ b/packages/kv-demo-mcp-server/package.json
@@ -44,7 +44,7 @@
"test": "vitest run"
},
"dependencies": {
- "@modelcontextprotocol/sdk": "^1.30.0",
+ "@modelcontextprotocol/sdk": "^1.31.0",
"zod": "^4.4.3"
},
"devDependencies": {
diff --git a/packages/mcp-server/package.json b/packages/mcp-server/package.json
index 5af1dc180d3..7e87abac9fe 100644
--- a/packages/mcp-server/package.json
+++ b/packages/mcp-server/package.json
@@ -43,7 +43,7 @@
"test": "vitest run"
},
"dependencies": {
- "@modelcontextprotocol/sdk": "^1.30.0",
+ "@modelcontextprotocol/sdk": "^1.31.0",
"@paperclipai/shared": "workspace:*",
"zod": "^4.4.3"
},
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fdda7fe759d..f60cc365a75 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -174,7 +174,7 @@ importers:
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: ^0.73.0
- version: 0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.30.0(zod@4.6.5))
+ version: 0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.31.0(zod@4.6.5))
'@anthropic-ai/sdk':
specifier: 0.129.0
version: 0.129.0(zod@4.6.5)
@@ -426,8 +426,8 @@ importers:
packages/google-sheets-mcp-server:
dependencies:
'@modelcontextprotocol/sdk':
- specifier: ^1.30.0
- version: 1.30.0(zod@4.4.3)
+ specifier: ^1.31.0
+ version: 1.31.0(zod@4.4.3)
googleapis:
specifier: ^182.0.0
version: 182.0.0
@@ -448,8 +448,8 @@ importers:
packages/kv-demo-mcp-server:
dependencies:
'@modelcontextprotocol/sdk':
- specifier: ^1.30.0
- version: 1.30.0(zod@4.4.3)
+ specifier: ^1.31.0
+ version: 1.31.0(zod@4.4.3)
zod:
specifier: ^4.4.3
version: 4.4.3
@@ -467,8 +467,8 @@ importers:
packages/mcp-server:
dependencies:
'@modelcontextprotocol/sdk':
- specifier: ^1.30.0
- version: 1.30.0(zod@4.4.3)
+ specifier: ^1.31.0
+ version: 1.31.0(zod@4.4.3)
'@paperclipai/shared':
specifier: workspace:*
version: link:../shared
@@ -499,7 +499,7 @@ importers:
dependencies:
'@agentclientprotocol/claude-agent-acp':
specifier: 0.73.0
- version: 0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.30.0(zod@4.6.5))
+ version: 0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.31.0(zod@4.6.5))
'@agentclientprotocol/codex-acp':
specifier: 1.6.2
version: 1.6.2(patch_hash=ilkykmzaax6atpgtip6bxikv6i)
@@ -912,8 +912,8 @@ importers:
specifier: 1.14.5
version: 1.14.5
'@modelcontextprotocol/sdk':
- specifier: ^1.30.0
- version: 1.30.0(zod@4.4.3)
+ specifier: ^1.31.0
+ version: 1.31.0(zod@4.4.3)
'@openrouter/ai-sdk-provider':
specifier: 3.1.0
version: 3.1.0(ai@7.0.130(zod@4.4.3))(zod@4.4.3)
@@ -973,7 +973,7 @@ importers:
version: 2.1.0(@grpc/grpc-js@1.14.5)(nice-grpc-common@2.0.4)(nice-grpc@2.1.17)
'@vercel/connect':
specifier: 2.3.3
- version: 2.3.3(@chat-adapter/slack@4.39.0(patch_hash=226jj24akljccsfbw7bcxujz4u)(ai@7.0.130(zod@4.4.3))(zod@4.4.3))(@modelcontextprotocol/sdk@1.30.0(zod@4.4.3))(ai@7.0.130(zod@4.4.3))(better-auth@1.7.2(@opentelemetry/api@1.9.1)(drizzle-kit@0.31.10)(drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(kysely@0.29.5)(pg@8.18.0)(postgres@3.4.9(patch_hash=sryle6qd5qfmnxvoebal4gashi)))(pg@8.18.0)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(vitest@5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(jsdom@30.0.1(@noble/hashes@2.4.0))(vite@8.2.2(@types/node@24.13.3)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.15))))
+ version: 2.3.3(@chat-adapter/slack@4.39.0(patch_hash=226jj24akljccsfbw7bcxujz4u)(ai@7.0.130(zod@4.4.3))(zod@4.4.3))(@modelcontextprotocol/sdk@1.31.0(zod@4.4.3))(ai@7.0.130(zod@4.4.3))(better-auth@1.7.2(@opentelemetry/api@1.9.1)(drizzle-kit@0.31.10)(drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(kysely@0.29.5)(pg@8.18.0)(postgres@3.4.9(patch_hash=sryle6qd5qfmnxvoebal4gashi)))(pg@8.18.0)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(vitest@5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(jsdom@30.0.1(@noble/hashes@2.4.0))(vite@8.2.2(@types/node@24.13.3)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.15))))
acorn:
specifier: 8.18.0
version: 8.18.0
@@ -2662,8 +2662,8 @@ packages:
cpu: [x64]
os: [win32]
- '@hono/node-server@2.1.0':
- resolution: {integrity: sha512-XovyyCCnBzW+zKu+z/zq8hwNs4KOR5rEMAOxo2f40Q5xoOI37IMm6MIg2COOUtUApo0i6850MTBKH2u4QLGIqg==}
+ '@hono/node-server@2.1.3':
+ resolution: {integrity: sha512-TA//nWMqPhbfdfneACk6t5a9eqbS9lABEPyKn0/xZTah3H3U2XaVg85rJFl0/Fyit0I552YDHgXGVSf3GwqbUw==}
engines: {node: '>=20'}
peerDependencies:
hono: ^4
@@ -3141,8 +3141,8 @@ packages:
resolution: {integrity: sha512-tEdVCj76gEdgvxoYkBH3li+mr8Tfe94pp1cSOUMQNwOnsuKYvretKMZfAnt9adJCgGzGH2MYZeDDtgwmOBufGQ==}
engines: {node: '>=20'}
- '@modelcontextprotocol/sdk@1.30.0':
- resolution: {integrity: sha512-xKd8OIzlqNzcqcNumGAa6g+PW2kjD5vrpcKOnfldAUPP3j7lnqMPwlTXQm8gF+UwH72z0lqaRbjr9hqGz0eITA==}
+ '@modelcontextprotocol/sdk@1.31.0':
+ resolution: {integrity: sha512-UvTMgnNlnIBO/22ob2RcVGDlcvOslQs8T59+FTGdA0L27a39fdGF/EDETNtDVK4DZGpwomlsYpRdA8UXcVL/pw==}
engines: {node: '>=18'}
peerDependencies:
'@cfworker/json-schema': ^4.1.1
@@ -6057,8 +6057,8 @@ packages:
resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
engines: {node: '>= 0.6'}
- content-type@3.0.0:
- resolution: {integrity: sha512-AIi5H6p0xk5uknXcN3/rmhP8jgp69OfSe/JuKiQAFprJ7UGw7mwj7m4XcmDzlrnJDG+cGpphAINGdU3g3g7kDw==}
+ content-type@3.1.1:
+ resolution: {integrity: sha512-GW4qUsfFo59d0HbUibDlWv5wPz+vAAcaTWbKIuKCf0JkC7wWkSyf8f13IpXn5JkeMlB2P8iTSSIjwXljorg2vA==}
engines: {node: '>=22'}
convert-source-map@2.0.0:
@@ -6653,8 +6653,8 @@ packages:
resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
engines: {node: '>=12.0.0'}
- express-rate-limit@8.6.2:
- resolution: {integrity: sha512-YH4ru+eOJxQABscKFfRCy9R7x9QFGdezclVMwwgFFndzS2Xnm0uo6B0ABZsLhcpeptGv2qvuJVWlQr9gQZoC3A==}
+ express-rate-limit@8.7.1:
+ resolution: {integrity: sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==}
engines: {node: '>= 16'}
peerDependencies:
express: '>= 4.11'
@@ -6877,8 +6877,8 @@ packages:
help-me@5.0.0:
resolution: {integrity: sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg==}
- hono@4.13.2:
- resolution: {integrity: sha512-JydRilDRkYBQMt9qR9U92mXxmbGqsqSn/IKOrh4e7/gEbn+0zSr8igTu0obwJoNGN4sez28DIql7FBHWydoJpA==}
+ hono@4.13.13:
+ resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==}
engines: {node: '>=16.9.0'}
html-encoding-sniffer@6.0.0:
@@ -6950,8 +6950,8 @@ packages:
resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
engines: {node: '>=12'}
- ip-address@10.5.0:
- resolution: {integrity: sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==}
+ ip-address@10.7.3:
+ resolution: {integrity: sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==}
engines: {node: '>= 12'}
ipaddr.js@1.9.1:
@@ -7039,8 +7039,8 @@ packages:
jose@6.2.10:
resolution: {integrity: sha512-iiW7J9qRFlGxvCOIBDBDxFePQSn7ZMAnrYGhrrOo6siO/MIqwfyilLR27pkfDgUk+raLuzADS8A3S/KLBisc0g==}
- jose@6.2.8:
- resolution: {integrity: sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==}
+ jose@6.2.12:
+ resolution: {integrity: sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw==}
joycon@3.1.1:
resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
@@ -9110,10 +9110,10 @@ snapshots:
'@adobe/css-tools@4.5.0': {}
- '@agentclientprotocol/claude-agent-acp@0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.30.0(zod@4.6.5))':
+ '@agentclientprotocol/claude-agent-acp@0.73.0(patch_hash=riqgguivxjxydoydnzpedjy5au)(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.31.0(zod@4.6.5))':
dependencies:
'@agentclientprotocol/sdk': 1.4.0(zod@4.4.3)
- '@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.30.0(zod@4.6.5))(zod@4.4.3)
+ '@anthropic-ai/claude-agent-sdk': 0.3.286(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.31.0(zod@4.6.5))(zod@4.4.3)
zod: 4.4.3
transitivePeerDependencies:
- '@anthropic-ai/sdk'
@@ -9209,10 +9209,10 @@ snapshots:
'@anthropic-ai/claude-agent-sdk-win32-x64@0.3.286':
optional: true
- '@anthropic-ai/claude-agent-sdk@0.3.286(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.30.0(zod@4.6.5))(zod@4.4.3)':
+ '@anthropic-ai/claude-agent-sdk@0.3.286(@anthropic-ai/sdk@0.129.0(zod@4.6.5))(@modelcontextprotocol/sdk@1.31.0(zod@4.6.5))(zod@4.4.3)':
dependencies:
'@anthropic-ai/sdk': 0.129.0(zod@4.6.5)
- '@modelcontextprotocol/sdk': 1.30.0(zod@4.6.5)
+ '@modelcontextprotocol/sdk': 1.31.0(zod@4.6.5)
zod: 4.4.3
optionalDependencies:
'@anthropic-ai/claude-agent-sdk-darwin-arm64': 0.3.286
@@ -10558,9 +10558,9 @@ snapshots:
'@heif2jpeg/heif2jpeg-win32-x64-msvc@0.1.6':
optional: true
- '@hono/node-server@2.1.0(hono@4.13.2)':
+ '@hono/node-server@2.1.3(hono@4.13.13)':
dependencies:
- hono: 4.13.2
+ hono: 4.13.13
'@iconify/types@2.0.0': {}
@@ -11160,9 +11160,9 @@ snapshots:
- debug
- supports-color
- '@modelcontextprotocol/sdk@1.30.0(zod@4.4.3)':
+ '@modelcontextprotocol/sdk@1.31.0(zod@4.4.3)':
dependencies:
- '@hono/node-server': 2.1.0(hono@4.13.2)
+ '@hono/node-server': 2.1.3(hono@4.13.13)
ajv: 8.20.0
ajv-formats: 3.0.1(ajv@8.20.0)
content-type: 1.0.5
@@ -11171,9 +11171,9 @@ snapshots:
eventsource: 3.0.7
eventsource-parser: 3.1.1
express: 5.2.1
- express-rate-limit: 8.6.2(express@5.2.1)
- hono: 4.13.2
- jose: 6.2.8
+ express-rate-limit: 8.7.1(express@5.2.1)
+ hono: 4.13.13
+ jose: 6.2.12
json-schema-typed: 8.0.2
pkce-challenge: 5.0.1
raw-body: 3.0.2
@@ -11182,9 +11182,9 @@ snapshots:
transitivePeerDependencies:
- supports-color
- '@modelcontextprotocol/sdk@1.30.0(zod@4.6.5)':
+ '@modelcontextprotocol/sdk@1.31.0(zod@4.6.5)':
dependencies:
- '@hono/node-server': 2.1.0(hono@4.13.2)
+ '@hono/node-server': 2.1.3(hono@4.13.13)
ajv: 8.20.0
ajv-formats: 3.0.1(ajv@8.20.0)
content-type: 1.0.5
@@ -11193,9 +11193,9 @@ snapshots:
eventsource: 3.0.7
eventsource-parser: 3.1.1
express: 5.2.1
- express-rate-limit: 8.6.2(express@5.2.1)
- hono: 4.13.2
- jose: 6.2.8
+ express-rate-limit: 8.7.1(express@5.2.1)
+ hono: 4.13.13
+ jose: 6.2.12
json-schema-typed: 8.0.2
pkce-challenge: 5.0.1
raw-body: 3.0.2
@@ -11320,7 +11320,7 @@ snapshots:
'@octokit/endpoint': 11.0.5
'@octokit/request-error': 7.1.2
'@octokit/types': 18.0.0
- content-type: 3.0.0
+ content-type: 3.1.1
json-with-bigint: 3.5.12
universal-user-agent: 7.0.3
@@ -13387,12 +13387,12 @@ snapshots:
dependencies:
execa: 5.1.1
- '@vercel/connect@2.3.3(@chat-adapter/slack@4.39.0(patch_hash=226jj24akljccsfbw7bcxujz4u)(ai@7.0.130(zod@4.4.3))(zod@4.4.3))(@modelcontextprotocol/sdk@1.30.0(zod@4.4.3))(ai@7.0.130(zod@4.4.3))(better-auth@1.7.2(@opentelemetry/api@1.9.1)(drizzle-kit@0.31.10)(drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(kysely@0.29.5)(pg@8.18.0)(postgres@3.4.9(patch_hash=sryle6qd5qfmnxvoebal4gashi)))(pg@8.18.0)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(vitest@5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(jsdom@30.0.1(@noble/hashes@2.4.0))(vite@8.2.2(@types/node@24.13.3)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.15))))':
+ '@vercel/connect@2.3.3(@chat-adapter/slack@4.39.0(patch_hash=226jj24akljccsfbw7bcxujz4u)(ai@7.0.130(zod@4.4.3))(zod@4.4.3))(@modelcontextprotocol/sdk@1.31.0(zod@4.4.3))(ai@7.0.130(zod@4.4.3))(better-auth@1.7.2(@opentelemetry/api@1.9.1)(drizzle-kit@0.31.10)(drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(kysely@0.29.5)(pg@8.18.0)(postgres@3.4.9(patch_hash=sryle6qd5qfmnxvoebal4gashi)))(pg@8.18.0)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(vitest@5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(jsdom@30.0.1(@noble/hashes@2.4.0))(vite@8.2.2(@types/node@24.13.3)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.15))))':
dependencies:
'@vercel/oidc': 3.8.9
optionalDependencies:
'@chat-adapter/slack': 4.39.0(patch_hash=226jj24akljccsfbw7bcxujz4u)(ai@7.0.130(zod@4.4.3))(zod@4.4.3)
- '@modelcontextprotocol/sdk': 1.30.0(zod@4.4.3)
+ '@modelcontextprotocol/sdk': 1.31.0(zod@4.4.3)
ai: 7.0.130(zod@4.4.3)
better-auth: 1.7.2(@opentelemetry/api@1.9.1)(drizzle-kit@0.31.10)(drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(kysely@0.29.5)(pg@8.18.0)(postgres@3.4.9(patch_hash=sryle6qd5qfmnxvoebal4gashi)))(pg@8.18.0)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(vitest@5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(jsdom@30.0.1(@noble/hashes@2.4.0))(vite@8.2.2(@types/node@24.13.3)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.15)))
@@ -13900,7 +13900,7 @@ snapshots:
content-type@1.0.5: {}
- content-type@3.0.0: {}
+ content-type@3.1.1: {}
convert-source-map@2.0.0: {}
@@ -14482,11 +14482,11 @@ snapshots:
expect-type@1.4.0: {}
- express-rate-limit@8.6.2(express@5.2.1):
+ express-rate-limit@8.7.1(express@5.2.1):
dependencies:
debug: 4.4.3
express: 5.2.1
- ip-address: 10.5.0
+ ip-address: 10.7.3
transitivePeerDependencies:
- supports-color
@@ -14780,7 +14780,7 @@ snapshots:
help-me@5.0.0: {}
- hono@4.13.2: {}
+ hono@4.13.13: {}
html-encoding-sniffer@6.0.0(@noble/hashes@2.4.0):
dependencies:
@@ -14846,7 +14846,7 @@ snapshots:
internmap@2.0.3: {}
- ip-address@10.5.0: {}
+ ip-address@10.7.3: {}
ipaddr.js@1.9.1: {}
@@ -14907,7 +14907,7 @@ snapshots:
jose@6.2.10: {}
- jose@6.2.8: {}
+ jose@6.2.12: {}
joycon@3.1.1: {}
diff --git a/server/package.json b/server/package.json
index 7c3b0acf9db..c96aabd922f 100644
--- a/server/package.json
+++ b/server/package.json
@@ -55,7 +55,7 @@
"@chat-adapter/telegram": "4.39.0",
"@discordjs/ws": "1.2.3",
"@grpc/grpc-js": "1.14.5",
- "@modelcontextprotocol/sdk": "^1.30.0",
+ "@modelcontextprotocol/sdk": "^1.31.0",
"@opentelemetry/api": "^1.9.0",
"@paperclipai/adapter-claude-local": "workspace:*",
"@paperclipai/adapter-codex-local": "workspace:*",