Skip to content

v2: pnpm audit fixes #1394

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
KKonstantinov merged 7 commits into from
Jan 22, 2026
Merged

v2: pnpm audit fixes #1394

KKonstantinov merged 7 commits into from
Jan 22, 2026
+30 −28

Conversation

@KKonstantinov
Copy link
Contributor

@KKonstantinov KKonstantinov commented Jan 16, 2026 •
edited
Loading

v2 - version bumps / audit fixes.

@modelcontextprotocol/conformance needs to be bumped via modelcontextprotocol/conformance#108 as well, as it uses the 1.25.1 v1 version, which has a CVE gainst it.

Motivation and Context

How Has This Been Tested?

Breaking Changes

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist

  • I have read the MCP Documentation
  • My code follows the repository's style guidelines
  • New and existing tests pass locally
  • I have added appropriate error handling
  • I have added or updated documentation as needed

Additional context

@KKonstantinov KKonstantinov requested a review from a team as a code owner January 16, 2026 13:40
@KKonstantinov KKonstantinov added P0 Broken core functionality, security issues, critical missing feature v2 Ideas, requests and plans for v2 of the SDK which will incorporate major changes and fixes labels Jan 16, 2026
@changeset-bot
Copy link

changeset-bot bot commented Jan 16, 2026 •
edited
Loading

⚠️ No Changeset found

Latest commit: 1c3e5ee

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@KKonstantinov KKonstantinov mentioned this pull request Jan 16, 2026
Closed
9 tasks
@pkg-pr-new
Copy link

pkg-pr-new bot commented Jan 16, 2026 •
edited
Loading

Open in StackBlitz

@modelcontextprotocol/client

npm i https://pkg.pr.new/modelcontextprotocol/typescript-sdk/@modelcontextprotocol/client@1394

@modelcontextprotocol/server

npm i https://pkg.pr.new/modelcontextprotocol/typescript-sdk/@modelcontextprotocol/server@1394

@modelcontextprotocol/express

npm i https://pkg.pr.new/modelcontextprotocol/typescript-sdk/@modelcontextprotocol/express@1394

@modelcontextprotocol/hono

npm i https://pkg.pr.new/modelcontextprotocol/typescript-sdk/@modelcontextprotocol/hono@1394

@modelcontextprotocol/node

npm i https://pkg.pr.new/modelcontextprotocol/typescript-sdk/@modelcontextprotocol/node@1394

commit: 1c3e5ee

@KKonstantinov KKonstantinov merged commit 3eb18ec into modelcontextprotocol:main Jan 22, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pcarleton pcarleton pcarleton approved these changes

Assignees

No one assigned

Labels

P0 Broken core functionality, security issues, critical missing feature v2 Ideas, requests and plans for v2 of the SDK which will incorporate major changes and fixes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@KKonstantinov @pcarleton