You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maka.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/21 00:19:04 UTC
[PR] chore(deps-dev): bump @modelcontextprotocol/server-legacy from 2.0.0 to 2.3.1 [maka]

dependabot[bot] opened a new pull request, #6203:
URL: https://github.com/apache/maka/pull/6203

   Bumps [@modelcontextprotocol/server-legacy](https://github.com/modelcontextprotocol/typescript-sdk) from 2.0.0 to 2.3.1.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a href="https://github.com/modelcontextprotocol/typescript-sdk/releases">@modelcontextprotocol/server-legacy's releases</a>.</em></p>
   <blockquote>
   <h2><code>@modelcontextprotocol/server-legacy</code><a href="https://github.com/2"><code>@2</code></a>.3.1</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>
   <p><a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2952">#2952</a> <a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/5a1867390b91b8836f49af76c45427279f513325"><code>5a18673</code></a> Thanks <a href="https://github.com/apps/claude"><code>@claude</code></a>! - <code>requireBearerAuth</code> in <code>@modelcontextprotocol/server-legacy</code> takes the optional <code>expectedResource</code> that <code>@modelcontextprotocol/server</code> 2.3.0 and <code>@modelcontextprotocol/sdk</code> 1.32.0 added: the resource the token must be issued for (its audience), usually the server's URL. When it is set, a token is accepted only if the verifier reports that value in <code>AuthInfo.resource</code>; the two are compared as strings, ignoring a fragment and one trailing slash. A token reported for another value, or for none, is answered <code>401 invalid_token</code> with the usual <code>WWW-Authenticate</code> challenge. When it is not set,
  nothing changes. The package stays frozen otherwise; this option is added so that its <code>requireBearerAuth</code> matches the 1.x middleware it is a copy of.</p>
   </li>
   <li>
   <p>Updated dependencies []:</p>
   <ul>
   <li><code>@modelcontextprotocol/core</code><a href="https://github.com/2"><code>@2</code></a>.3.1</li>
   </ul>
   </li>
   </ul>
   <h2><code>@modelcontextprotocol/server-legacy</code><a href="https://github.com/2"><code>@2</code></a>.3.0</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>
   <p><a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2908">#2908</a> <a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/633dd3e12bff6869c932c4a526341622320912b1"><code>633dd3e</code></a> Thanks <a href="https://github.com/apps/claude"><code>@claude</code></a>! - The <code>license</code> field of the package manifests is now <code>Apache-2.0</code>; the <code>LICENSE</code> file shipped in each package carries the full terms, including the MIT text for earlier contributions. No code change.</p>
   </li>
   <li>
   <p>Updated dependencies [<a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/633dd3e12bff6869c932c4a526341622320912b1"><code>633dd3e</code></a>]:</p>
   <ul>
   <li><code>@modelcontextprotocol/core</code><a href="https://github.com/2"><code>@2</code></a>.3.0</li>
   </ul>
   </li>
   </ul>
   <h2><code>@modelcontextprotocol/server-legacy</code><a href="https://github.com/2"><code>@2</code></a>.2.0</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>Updated dependencies [<a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/edd12e282620ebf770d67316f19cf91d4112a1bd"><code>edd12e2</code></a>]:
   <ul>
   <li><code>@modelcontextprotocol/core</code><a href="https://github.com/2"><code>@2</code></a>.2.0</li>
   </ul>
   </li>
   </ul>
   <h2><code>@modelcontextprotocol/server-legacy</code><a href="https://github.com/2"><code>@2</code></a>.1.0</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>Updated dependencies [<a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/dcc01028ff6a499a5728c2b6181c1727d52e2fab"><code>dcc0102</code></a>]:
   <ul>
   <li><code>@modelcontextprotocol/core</code><a href="https://github.com/2"><code>@2</code></a>.1.0</li>
   </ul>
   </li>
   </ul>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/fcef852f6cdafea07f36cf6fae69b37c8adf85be"><code>fcef852</code></a> Version Packages (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2953">#2953</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/e8b7f05f5b9e4204510289dc0596531265e9ddcb"><code>e8b7f05</code></a> docs: one opening note in the server and client package READMEs (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2955">#2955</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/5a1867390b91b8836f49af76c45427279f513325"><code>5a18673</code></a> feat(server-legacy): add expectedResource to requireBearerAuth (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2952">#2952</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/3ab61c61f5ff1cd6b67eec6222247c66635495fd"><code>3ab61c6</code></a> docs: update the README banners (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2940">#2940</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/8aabbdcef6e016978a3132045281dfbd51c69792"><code>8aabbdc</code></a> test(e2e): expect SdkHttpError after a second 401 from onUnauthorized (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2936">#2936</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/33fecfb119cb637022fcb345c61c09227ed04fc4"><code>33fecfb</code></a> test(e2e): cover tools/call without arguments (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2933">#2933</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/818f7828898f367bfd4436bf55ccdfa17c3757d6"><code>818f782</code></a> docs: state the principles in CLAUDE.md and shorten REVIEW.md (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2938">#2938</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/a202a3621fcb97918e09fa45d0f9efd2dbdee19b"><code>a202a36</code></a> Version Packages (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2896">#2896</a>)</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/2d731faef167b3df78d4be05f547a134f0e23bcf"><code>2d731fa</code></a> fix(client): refresh again when an SSE retry failed for a reason other than 4...</li>
   <li><a href="https://github.com/modelcontextprotocol/typescript-sdk/commit/b6e5c5574e107c33cb6ae33c2e869780f5684c3a"><code>b6e5c55</code></a> test(e2e): cover prompts/get without arguments for prompts with a schema (<a href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2928">#2928</a>)</li>
   <li>Additional commits viewable in <a href="https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/server-legacy@2.0.0...@modelcontextprotocol/server-legacy@2.3.1">compare view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@modelcontextprotocol/server-legacy&package-manager=npm_and_yarn&previous-version=2.0.0&new-version=2.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
   You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/maka/network/alerts).
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org