Merge pull request #4052 from liam-hq/renovate/npm-modelcontextprotocol-sdk-vulnerability

renovate[bot] · web-flow · commit 7a9e81af4e79 · 2026-02-08T07:57:48.000Z
fix(deps): update dependency @modelcontextprotocol/sdk to v1.26.0 [security]
diff --git a/frontend/internal-packages/mcp-server/package.json b/frontend/internal-packages/mcp-server/package.json
@@ -6,7 +6,7 @@
   "type": "module",
   "main": "src/index.ts",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.25.2",
+    "@modelcontextprotocol/sdk": "1.26.0",
     "zod": "4.0.0"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -4,3 +4,6 @@ packages:
   - "frontend/packages/__mocks__/*"
   - "frontend/internal-packages/*"
 minimumReleaseAge: 2880 # 2 days
+minimumReleaseAgeExclude:
+  # Renovate security update: @modelcontextprotocol/sdk@1.26.0
+  - "@modelcontextprotocol/sdk@1.26.0"
