Skip to content

chore(deps): bump @modelcontextprotocol/sdk from 1.31.0 to 1.32.0 - #1369

Merged
BYK merged 1 commit into
mainfrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.32.0
Oct 21, 2026
Merged

BYK merged 1 commit into
mainfrom
dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.32.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @modelcontextprotocol/sdk from 1.31.0 to 1.32.0.

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

Commits
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • c2ce003 docs: point SECURITY.md at GitHub Security Advisories (v1.x) (#2910)
  • 30bfe51 [v1.x] fix(client): follow redirects only within the endpoint's origin (#2902)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@vercel

vercel Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
spotlightjs Skipped Skipped Oct 21, 2026 2:17pm UTC

Request Review

@github-actions

github-actions Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Coverage Results 📊

✅ Patch coverage is 100.00% (no changed executable lines found; target 80%).
Project statement coverage is 51.85% (unchanged from base (5c6cd13) to head (4179a09)).

Coverage diff
@@            Coverage Diff             @@
##          main     #1369       +/-##
==========================================
  Coverage    51.85%    51.85%        —%
==========================================
  Files           79        79         —
  Tracked lines      2520      2520         —
  Branches      1825      1825         —
==========================================
  Hits          1310      1310         —
  Misses        1210      1210         —
  Partials       176       176         —

Generated by Coverage Action

Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.31.0 to 1.32.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.31.0...1.32.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.32.0 branch from 49cf386 to 4179a09 Compare October 21, 2026 14:17
@BYK
BYK merged commit 91e862a into main Oct 21, 2026
22 checks passed
@BYK
BYK deleted the dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.32.0 branch October 21, 2026 17:05

This branch was successfully deployed

1 active deployment
Preview — 4179a094 Deployed Oct 21, 2026 by dependabot[bot] via Build #2434
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant