Sourced from @​modelcontextprotocol/sdk's releases.

1.17.4

What's Changed

• feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns by @​m-paternostro in modelcontextprotocol/typescript-sdk#485
• restrict url schemes allowed in oauth metadata by @​pcarleton in modelcontextprotocol/typescript-sdk#877
• [auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 by @​pcarleton in modelcontextprotocol/typescript-sdk#879
• chore: bump version to 1.17.4 by @​felixweinberger in modelcontextprotocol/typescript-sdk#894

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.17.3...1.17.4

1.17.3

What's Changed

• Fix quit command in Example client with OAuth by @​DaleSeo in modelcontextprotocol/typescript-sdk#864
• fix: client import & server imports by @​jatinsandilya in modelcontextprotocol/typescript-sdk#851
• fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… by @​arjunkmrm in modelcontextprotocol/typescript-sdk#850
• docs: correct parameter schema key in Dynamic Servers documentation by @​bianbianzhu in modelcontextprotocol/typescript-sdk#789
• version: patch to 0.17.3 by @​felixweinberger in modelcontextprotocol/typescript-sdk#878

New Contributors

• @​DaleSeo made their first contribution in modelcontextprotocol/typescript-sdk#864
• @​jatinsandilya made their first contribution in modelcontextprotocol/typescript-sdk#851
• @​arjunkmrm made their first contribution in modelcontextprotocol/typescript-sdk#850
• @​bianbianzhu made their first contribution in modelcontextprotocol/typescript-sdk#789

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.17.2...1.17.3

1.17.2

What's Changed

• fix: retry next endpoint on CORS error during auth server discovery by @​xiaoyijun in modelcontextprotocol/typescript-sdk#827

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.17.1...1.17.2

1.17.1

What's Changed

• (fix): Update fallbackRequestHandler type to match _requestHandlers leaves type by @​fredericbarthelet in modelcontextprotocol/typescript-sdk#784
• fix: prevent responses being sent to wrong client when multiple transports connect by @​grimmerk in modelcontextprotocol/typescript-sdk#820
• 1.17.1 by @​ihrpr in modelcontextprotocol/typescript-sdk#831

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.17.0...1.17.1

• 3bc2235 chore: bump version to 1.17.4 (#894)
• 1f5950b [auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 (#879)
• 64f7cdd restrict url schemes allowed in oauth metadata (#877)
• abb2f0a feature(middleware): Composable fetch middleware for auth and cross‑cutting c...
• 4a63974 version: patch to 0.17.3 (#878)
• 65119eb docs: correct parameter schema key in Dynamic Servers documentation (#789)
• aad33a1 fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… (#850)
• 69d4eb1 fix: client import & server imports (#851)
• 4d0977b Fix quit command in Example client with OAuth (#864)
• a1608a6 1.17.2 (#855)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)