From f91379d367652de28b011f51533ba360d0b3382d Mon Sep 17 00:00:00 2001 From: Matthew Podwysocki Date: Mon, 26 Oct 2026 10:25:10 -0400 Subject: [PATCH 1/2] chore: bump MCP TypeScript SDK to 2.4.0 Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 1 + package-lock.json | 28 ++++++++++++++-------------- package.json | 6 +++--- 3 files changed, 18 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index abe153a..7eaee7a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -34,6 +34,7 @@ ### Dependencies +- Bumped `@modelcontextprotocol/server`, `/core` and `/client` from 2.3.1 to 2.4.0 (#PR), same as mapbox/mcp-server#303. 2.4.0 adds the SDK's Skills extension (`@modelcontextprotocol/server/ext/skills`, SEP-2640). Its patch changes don't affect our tools: none of our schemas use `$id`, a `$ref` root or `x-mcp-header`. - Bumped `@modelcontextprotocol/sdk` to `1.30.0`. Not adopting the `2026-07-28` spec revision this release covers (stateless request/response model, elicitation replaced by Multi Round-Trip Requests, Sampling deprecated) — that's a separate migration, tracked in #130, given this repo's own elicitation-based features depend on the mechanism being replaced. Regenerated `patches/@modelcontextprotocol+sdk+1.30.0.patch` (previously pinned to `1.29.0`) — same patch content, applies cleanly to the new version, verified live against the built server. ## 0.8.2 - 2026-07-30 diff --git a/package-lock.json b/package-lock.json index e2a7f33..69e0cca 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,9 +12,9 @@ "dependencies": { "@mapbox/mapbox-gl-style-spec": "^14.26.0", "@mcp-ui/server": "^6.1.0", - "@modelcontextprotocol/core": "^2.3.1", + "@modelcontextprotocol/core": "^2.4.0", "@modelcontextprotocol/ext-apps": "^2.0.3", - "@modelcontextprotocol/server": "^2.3.1", + "@modelcontextprotocol/server": "^2.4.0", "@opentelemetry/api": "^1.9.1", "@opentelemetry/auto-instrumentations-node": "^0.74.0", "@opentelemetry/exporter-trace-otlp-http": "^0.216.0", @@ -30,7 +30,7 @@ }, "devDependencies": { "@eslint/js": "^9.27.0", - "@modelcontextprotocol/client": "^2.3.1", + "@modelcontextprotocol/client": "^2.4.0", "@types/geojson": "^7946.0.16", "@types/node": "^22.0.0", "@typescript-eslint/eslint-plugin": "^8.58.2", @@ -1524,12 +1524,12 @@ ] }, "node_modules/@modelcontextprotocol/client": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.3.1.tgz", - "integrity": "sha512-mIGZXpHsjnZ6lD+gD/WCMpR5k8yVQQ8nNFH1N0Srf7AvnwTUMYD6pvTY8ng2+He5FfV7YMZLmrjL7cLa/cc3dQ==", + "version": "2.4.0", + "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.4.0.tgz", + "integrity": "sha512-LgrD2OphHuG12vfKFKz6SOnq7bKHQmhGJIAYdD+MZBn2npHEyry6uD8zvktodtl5CQM85MO0anUyD9JwmUmxww==", "license": "Apache-2.0", "dependencies": { - "@modelcontextprotocol/core": "2.3.1", + "@modelcontextprotocol/core": "2.4.0", "cross-spawn": "^7.0.5", "eventsource": "^3.0.2", "eventsource-parser": "^3.0.8", @@ -1542,9 +1542,9 @@ } }, "node_modules/@modelcontextprotocol/core": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.3.1.tgz", - "integrity": "sha512-laVmIhPGpWi7rG9q+0UigblRN0Hws/Yjlb6qLFtVqryXVLkc4h+yN8z731POD2LnAGQlFe7/tXhUm7Bi0YB91g==", + "version": "2.4.0", + "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.4.0.tgz", + "integrity": "sha512-z8QBKqdfXLPzkLQuG4xp8hrVEMm1PZ1IgxMN2sMbJiFiAKOWXnAzogXn2W4aqIBlP1ea6U5yiqVquvUNM1Cj6Q==", "license": "Apache-2.0", "dependencies": { "zod": "^4.2.0" @@ -1650,12 +1650,12 @@ "license": "MIT" }, "node_modules/@modelcontextprotocol/server": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/@modelcontextprotocol/server/-/server-2.3.1.tgz", - "integrity": "sha512-e59MfWuSssj6DoQ96JCTqdW1AXT5/XtnTl0WWd6MU1Ka434fFUGGosCLJbGNySDhHGvxQWoRWK137FXYFkYNWw==", + "version": "2.4.0", + "resolved": "https://registry.npmjs.org/@modelcontextprotocol/server/-/server-2.4.0.tgz", + "integrity": "sha512-rgR9yxSaAJ+bcsi/XroT/S2AfPiIWloXAnrdfYSCms9ivVju0ishu/wW0J21Ho6+ZOR1r7RyeRbjiRuF87ix5Q==", "license": "Apache-2.0", "dependencies": { - "@modelcontextprotocol/core": "2.3.1", + "@modelcontextprotocol/core": "2.4.0", "zod": "^4.2.0" }, "engines": { diff --git a/package.json b/package.json index 3034649..7c213a7 100644 --- a/package.json +++ b/package.json @@ -51,9 +51,9 @@ "dependencies": { "@mapbox/mapbox-gl-style-spec": "^14.26.0", "@mcp-ui/server": "^6.1.0", - "@modelcontextprotocol/core": "^2.3.1", + "@modelcontextprotocol/core": "^2.4.0", "@modelcontextprotocol/ext-apps": "^2.0.3", - "@modelcontextprotocol/server": "^2.3.1", + "@modelcontextprotocol/server": "^2.4.0", "@opentelemetry/api": "^1.9.1", "@opentelemetry/auto-instrumentations-node": "^0.74.0", "@opentelemetry/exporter-trace-otlp-http": "^0.216.0", @@ -66,7 +66,7 @@ }, "devDependencies": { "@eslint/js": "^9.27.0", - "@modelcontextprotocol/client": "^2.3.1", + "@modelcontextprotocol/client": "^2.4.0", "@types/geojson": "^7946.0.16", "@types/node": "^22.0.0", "@typescript-eslint/eslint-plugin": "^8.58.2", From 9a1576ee5c8e533fcfc654c92470a6c7c4398acf Mon Sep 17 00:00:00 2001 From: Matthew Podwysocki Date: Mon, 26 Oct 2026 10:25:21 -0400 Subject: [PATCH 2/2] docs: add PR number to CHANGELOG Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7eaee7a..1de74ff 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -34,7 +34,7 @@ ### Dependencies -- Bumped `@modelcontextprotocol/server`, `/core` and `/client` from 2.3.1 to 2.4.0 (#PR), same as mapbox/mcp-server#303. 2.4.0 adds the SDK's Skills extension (`@modelcontextprotocol/server/ext/skills`, SEP-2640). Its patch changes don't affect our tools: none of our schemas use `$id`, a `$ref` root or `x-mcp-header`. +- Bumped `@modelcontextprotocol/server`, `/core` and `/client` from 2.3.1 to 2.4.0 (#144), same as mapbox/mcp-server#303. 2.4.0 adds the SDK's Skills extension (`@modelcontextprotocol/server/ext/skills`, SEP-2640). Its patch changes don't affect our tools: none of our schemas use `$id`, a `$ref` root or `x-mcp-header`. - Bumped `@modelcontextprotocol/sdk` to `1.30.0`. Not adopting the `2026-07-28` spec revision this release covers (stateless request/response model, elicitation replaced by Multi Round-Trip Requests, Sampling deprecated) — that's a separate migration, tracked in #130, given this repo's own elicitation-based features depend on the mechanism being replaced. Regenerated `patches/@modelcontextprotocol+sdk+1.30.0.patch` (previously pinned to `1.29.0`) — same patch content, applies cleanly to the new version, verified live against the built server. ## 0.8.2 - 2026-07-30