Repository navigation
chore(deps): bump @modelcontextprotocol/sdk and openclaw - #127
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [openclaw](https://github.com/openclaw/openclaw). These dependencies needed to be updated together. Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.31.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.31.0) Updates `openclaw` from 2026.4.10 to 2026.10.3 - [Release notes](https://github.com/openclaw/openclaw/releases) - [Changelog](https://github.com/openclaw/openclaw/blob/main/CHANGELOG.md) - [Commits](openclaw/openclaw@v2026.4.10...v2026.10.3) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.31.0 dependency-type: indirect - dependency-name: openclaw dependency-version: 2026.10.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
AssigneesThe following users could not be added as assignees: LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
This PR is quite large (17951 lines changed across 1 files). Consider breaking it into smaller PRs for easier review:
If this is intentional (refactor, major feature), feel free to ignore. |
🔍 Quality PreviewThe full CI pipeline is running. Expected checks:
Check the CI workflow for details. |
|
Superseded by #131. |
Bumps @modelcontextprotocol/sdk and openclaw. These dependencies needed to be updated together.
Updates
@modelcontextprotocol/sdkfrom 1.29.0 to 1.31.0Release notes
Sourced from @modelcontextprotocol/sdk's releases.
Commits
4b0051fchore: bump version to 1.31.0 (#2890)51ad4f0[v1.x] Bind stored OAuth credentials to the authorization server that issued ...289ac2cchore: bump version to 1.30.1 (#2848)12b4256fix(auth): preserve resource URI without trailing slash (#1968) (#1972)a9f6eb7[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...2d889f2chore: bump version to 1.30.0 (#2563)e3f3daaFix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...bb5a718fix(deps): widen@hono/node-serverpast GHSA-frvp-7c67-39w9 (#2549)1dad263fix: send SSE keep-alive comment frames from Streamable HTTP server transport...69749aaValidate Content-Type by parsed media type instead of substring match (v1.x) ...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
openclawfrom 2026.4.10 to 2026.10.3Release notes
Sourced from openclaw's releases.
... (truncated)
Changelog
Sourced from openclaw's changelog.
... (truncated)
Commits
59cb447docs(changelog): refresh 2026.10.3 notes8dd1adafix(minimax): OAuth sign-in stops working about two hours after login because...aa850b1test(plugins): status test fails since metadata snapshots carry diagnostics (...0ba1eb0fix(release): pin copied Codex e2e fixture to the host version after #170306 ...316f104test(agents): distinguish startup from retry projection waits9747038fix(release): compare accepted discovery origins order-insensitively after #1...d0b3dfbfix(release): add update-rehearsal-paths to PR wrapper inventory after #17019...497c471test(update): expect classified native authority refusals2fdef4cfix(update): stop reporting a repair as succeeded when Doctor could not run (...be67e8aRevert "fix(status): correct stale context limits after model discovery (#165...Install script changes
This version adds
preinstallscript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.