Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 7, 2025

Bumps io.modelcontextprotocol.sdk:mcp from 0.11.2 to 0.14.1.

Release notes

Sourced from io.modelcontextprotocol.sdk:mcp's releases.

v0.14.1

Full Changelog: modelcontextprotocol/java-sdk@v0.14.0...v0.14.1

v0.14.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.13.1...v0.14.0

v0.13.1

Full Changelog: modelcontextprotocol/java-sdk@v0.13.0...v0.13.1

v0.13.0

Release Notes

🚀 Major Features & Enhancements

Protocol Version Support

  • Added MCP protocol version 2025-06-18 support for streamable-http and stateless transports (#558)
    • Set MCP_2025_06_18 as upper supported protocol version
    • Updated LATEST_PROTOCOL_VERSION constant to reflect new upper bound

Module Restructuring

  • Extracted mcp-core module (#557) - ⚠️ BREAKING CHANGE

    • Created new mcp-core module free of Jackson dependencies
    • mcp module now serves as an umbrella module bringing together mcp-json-jackson2 and mcp-core
    • Classes are now in different JARs, which may affect classpath dependencies
  • Jackson decoupling (#543) - Related to (#557)

    • Abstract away Jackson usage with SPI interfaces Creates two modules, mcp-json and mcp-json-jackson. It removes the com.fasterxml.jackson.core:jackson-databind and com.networknt:json-schema-validator dependencies from the mcp (now mcp-core) module. The mcp-core (mcp previously) module now only depends on com.fasterxml.jackson.core:jackson-annotations. To use Jackson, you have to add mcp-jackson to your dependencies in addition to mcp-core. I added the dependency mcp-jackson to both mcp-spring-mvc and mcp-spring-webflux to avoid a breaking change in those modules.

Enhanced Tool Output Support

  • Support for array-type structured content in tools (#551) - ⚠️ BREAKING CHANGE
    • Changed CallToolResult.structuredContent type from Map<String,Object> to Object
    • Now supports both objects and arrays as structured content output
    • Updated JsonSchemaValidator to validate any Object type

... (truncated)

Commits
  • 0e16bac Release version 0.14.1
  • d19cdae fix: improve URI template matching to properly escape special characters (#599)
  • 61f7be2 refactor: change int to Integer for optional numeric fields (#604)
  • b49ab3a fix remove name when using deduction (#600)
  • 4754565 define explicitely that values should always be included in code completions ...
  • 531c5b8 Update theREADME team section
  • 1f1386a Add section describing our architectural and design choices (#595)
  • 60b12b4 Next development version
  • 23b81e1 Release version 0.14.0
  • 8e11fa8 feat(client): add client tool output schema validation and caching (#302)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.modelcontextprotocol.sdk:mcp](https://github.com/modelcontextprotocol/java-sdk) from 0.11.2 to 0.14.1.
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Commits](modelcontextprotocol/java-sdk@v0.11.2...v0.14.1)

---
updated-dependencies:
- dependency-name: io.modelcontextprotocol.sdk:mcp
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Development

Successfully merging this pull request may close these issues.

0 participants