Skip to content

Conversation

@SamMorrowDrums
Copy link
Collaborator

Summary

Upgrades github.com/modelcontextprotocol/go-sdk from v1.2.0 to the latest HEAD commit (52e03de6c86c).

Changes in go-sdk

This update includes:

Notes

The schema caching feature is available via ServerOptions.SchemaCache for stateless deployments (like the remote server). The stdio server doesn't benefit much since it's long-lived, but this keeps us on the latest SDK.

Fixes code scanning alerts #10 and #11 by removing the @latest
version for local development and using the pinned v2.0.1 version
consistently across all environments.

This ensures deterministic builds and addresses the CWE-494
'Download of Code Without Integrity Check' security concern.
…-52e03de6c86c

This updates to the latest HEAD of the go-sdk which includes:
- Schema caching for stateless deployments (perf improvement)
- Allow header on 405 responses per RFC 9110
@SamMorrowDrums SamMorrowDrums requested a review from a team as a code owner January 22, 2026 14:23
Copilot AI review requested due to automatic review settings January 22, 2026 14:23
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the go-sdk dependency from v1.2.0 to the latest HEAD commit, bringing performance improvements and RFC compliance fixes. The update removes unused color-related dependencies and modernizes the build configuration.

Changes:

  • Upgraded github.com/modelcontextprotocol/go-sdk to latest HEAD (52e03de6c86c) for schema caching and RFC 9110 compliance
  • Removed unused fatih/color and related dependencies from go.mod
  • Modernized go-licenses installation to use v2 module path
  • Simplified Dockerfile build command to use directory path instead of specific file

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
go.mod Updated go-sdk to HEAD commit and removed unused color dependencies
go.sum Reflected dependency changes with updated checksums
script/licenses Simplified go-licenses installation using v2 module path
Dockerfile Updated build command to reference directory instead of main.go file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants