Bump io.modelcontextprotocol.sdk:mcp from 0.13.0 to 2.0.0#615
Bump io.modelcontextprotocol.sdk:mcp from 0.13.0 to 2.0.0#615dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [io.modelcontextprotocol.sdk:mcp](https://github.com/modelcontextprotocol/java-sdk) from 0.13.0 to 2.0.0. - [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases) - [Commits](modelcontextprotocol/java-sdk@v0.13.0...v2.0.0) --- updated-dependencies: - dependency-name: io.modelcontextprotocol.sdk:mcp dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Bumps the test-scope io.modelcontextprotocol.sdk:mcp dependency from 0.13.0 to 2.0.0 (dependabot #615). The SDK is used only by the two client integration tests that exercise the hand-rolled MCP server over real HTTP; nothing in the shipped product depends on it. 2.0.0 modularised the SDK: the `mcp` artifact is now an empty umbrella that pulls `mcp-core` and `mcp-json-jackson3` transitively, so the version bump alone resolves the real classes — but the JSON binding moved to Jackson 3. One source change was required. HttpClientStreamableHttpTransport.Builder dropped customizeRequest(Consumer<HttpRequest.Builder>) in favour of httpRequestCustomizer(McpSyncHttpClientRequestCustomizer), whose customize() also receives the method, URI, body and transport context. The bearer-token client in SigningMcpClientTest is updated to the new signature. Everything else the tests touch was stable or absorbed: Tool.inputSchema() now returns a Map rather than JsonSchema but is only null-checked; structuredContent() is unchanged; the sealed-type removals are not pattern-matched here; and the tests already used Streamable HTTP, which 2.0.0 blesses over the deprecated SSE transport. Protocol negotiation still succeeds (both sides top out at 2025-11-25) and the new mandatory client-side argument validation trips nothing. Verified: the two SDK client tests 29/29, full convex-restapi suite 389/389, and a full reactor clean install green across all 14 modules. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
Landed on |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps io.modelcontextprotocol.sdk:mcp from 0.13.0 to 2.0.0.
Release notes
Sourced from io.modelcontextprotocol.sdk:mcp's releases.
... (truncated)
Commits
f56d038Release version 2.0.0d20af91Add 2025-11-25 spec version to all transports (#1025)c42d313Return void from McpStatelessSyncServer#closeGracefully instead of Mono (#1019)2756337Update documentation and migration notes for v2 (#1024)fe82ad5Add schemas for form-based elicitation (#1020)99faac6Clarify tool validation error messages (#1023)df75857fix: avoid dropped errors when transport is closed or uninitialized (#995)dbb9bdaAdd URL elicitation support (SEP-1036) (#993)c49a994Add missing Export-Package to mcp-json-jackson2 and mcp-json-jackson3c8ab341feat: Refine logging levels (#985)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)