Sourced from @​modelcontextprotocol/sdk's releases.

1.15.1

What's Changed

• fix(client): Some mcp server need default env(#393, #196) by @​sunrabbit123 in modelcontextprotocol/typescript-sdk#394
• feat: Add CORS configuration for browser-based MCP clients by @​jerome3o-anthropic in modelcontextprotocol/typescript-sdk#713
• Add onsessionclosed hook to StreamableHTTPServerTransport by @​jerome3o-anthropic in modelcontextprotocol/typescript-sdk#743
• add custom headers on initial _startOrAuth call by @​anthonjn in modelcontextprotocol/typescript-sdk#318
• Improve stdio test Windows compatibility and refactor command logic by @​HoberMin in modelcontextprotocol/typescript-sdk#284
• Add missing app.listen error handling to server examples by @​ochafik in modelcontextprotocol/typescript-sdk#749
• fix(server): validate expiresAt token value for non existence by @​christian-bromann in modelcontextprotocol/typescript-sdk#446
• [auth]: support oauth client_secret_basic / none / custom methods by @​jaredhanson, @​SightStudio, @​ochafik in modelcontextprotocol/typescript-sdk#720
• feat: support async callbacks for onsessioninitialized and onsessionclosed by @​jerome3o-anthropic in modelcontextprotocol/typescript-sdk#751
• Fix oauth well-known paths to retain path and query by @​ihrpr in modelcontextprotocol/typescript-sdk#756
• auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS by @​ochafik in modelcontextprotocol/typescript-sdk#752

New Contributors

• @​sunrabbit123 made their first contribution in modelcontextprotocol/typescript-sdk#394
• @​anthonjn made their first contribution in modelcontextprotocol/typescript-sdk#318
• @​HoberMin made their first contribution in modelcontextprotocol/typescript-sdk#284

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.15.0...1.15.1

1.15.0

What's Changed

[!NOTE] This release reverts a breaking change introduced in version 1.13.3.

• Allow custom fetch in SSEClientTransport and StreamableHTTPClientTransport by @​cliffhall in modelcontextprotocol/typescript-sdk#721
• Revert "fix: add type safety for tool output schemas in ToolCallback" by @​sushichan044 in modelcontextprotocol/typescript-sdk#725
• bump version to 1.15.0 by @​bhosmer-ant in modelcontextprotocol/typescript-sdk#730

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.14.0...1.15.0

1.14.0

What's Changed

[!WARNING] This introduces breaking changes, which are required to comply with the spec - more details

• Rename reject to decline by @​ihrpr in modelcontextprotocol/typescript-sdk#727
• 1.14.0 by @​ihrpr in modelcontextprotocol/typescript-sdk#728

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.3...1.14.0

1.13.3

What's Changed

• Implement DNS Rebinding Protections per spec by @​ddworken in modelcontextprotocol/typescript-sdk#565
• fix lint by @​ihrpr in modelcontextprotocol/typescript-sdk#704
• fix: add missing eventsource-parser dependency by @​domnit in modelcontextprotocol/typescript-sdk#424

... (truncated)

• c6ac083 Bumped version
• 9dfd025 Merge pull request #752 from modelcontextprotocol/ochafik/fix-path-as
• 1e32f14 Update auth.ts
• 1b8d63e add metadataServerUrl to discoverMetadataWithFallback to allow external AS
• ea8caa9 Merge branch 'main' into ochafik/fix-path-as
• 442e13b Merge pull request #756 from modelcontextprotocol/patch-1
• de1ade2 fix unmerge
• 9ca7fd2 Merge branch 'main' into ochafik/fix-path-as
• 5eacdf1 fallback and refactor
• 72cb9a7 add tests
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)