Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps github.com/modelcontextprotocol/go-sdk from 0.1.0 to 0.8.0.

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v0.8.0

This release exists to include the API change from #518, mentioned in the v0.7.0 release. It also includes a small change to remove extraneous API.

This concludes our API audit. Barring a realization over the weekend, we will cut v1.0.0 and any further API changes will be handled in a backwards compatible way.

API Changes

  • #518: JSON schema fields are relaxed to type any, to decouple the SDK's API from the github.com/google/jsonschema-go/jsonschema package. Now that package is only used for inference (in mcp.AddTool) and validation.
  • #535: remove error code constants that were functionally inaccessible.

Full Changelog: modelcontextprotocol/go-sdk@v0.7.0...v0.8.0

v0.7.0

This release fixes a couple bugs related to the StreamableClientTransport, and relaxes it to be less strict so that it can talk to certain servers that don't perfectly conform to the spec. It also updates to google/[email protected], which includes a couple backwards incompatible bug fixes (see below).

For more details, see the v0.7.0 milestone.

API Changes

No changes in the API of the SDK itself, but the updated google/[email protected] contained the following incompatible bug fixes:

  • google/jsonschema-go#26: the key for ForOptions.TypeSchemas must be a reflect.Type, as incomparable values are not valid map keys.
  • google/jsonschema-go#23: validation of struct values is disallowed, because it can't verify certain schema properties such as 'required', and doesn't respect custom JSON marshalling

See #518 for a proposal to significantly decouple the SDK from the jsonschema-go package (though it would still be used for inference and validation). This decision blocks the v1.0.0 release.

New Contributors

Full Changelog: modelcontextprotocol/go-sdk@v0.6.0...v0.7.0

v0.6.0

This release makes a couple minor API tweaks that arose in preparation for v1.0.0, and adds significant feature documentation in the docs/ directory.

This is a release candidate, and all release blocking issues have now been addressed. We will tag v1.0.0 following a final audit (see also #328).

For more details, see the v0.6.0 milestone.

API Changes

  • Remove the distinguished StreamID type, which was inconsistent with (for example) session IDs, which are strings (#484).
  • Moved GetSessionID onto ServerOptions, as that is more generally useful, and since ServerSession exposes an ID method (#478).
  • Added options for the SSE HTTP handler (#503). The SSE transport is legacy, but it was still inconsistent that this constructor did not accept options.

Bug fixes

  • Unstructured content is now byte-wise equivalent to structured content (#475).
  • A few performance optimizations were made for streamable HTTP serving (capping off #190).

... (truncated)

Commits
  • ab09251 mcp: fix inaccurate package doc (#534)
  • 1489ba7 README: update for v0.8.0 (#532)
  • b2048cd mcp: unexport incidentally exported error codes (#536)
  • 964574b mcp: allow any value for schemas (#517)
  • 5f05f8a many: minor cosmetic changes (#529)
  • b9c1419 README: update for v0.7.0 (#528)
  • 07f6c49 mcp: make the streamable client transport less strict (#524)
  • 5d64d61 mcp: fix context propagation in StreamableClientTransport (#514)
  • 33ff851 mcp: update to jsonschema that does not validate structs (#511)
  • ef2fc60 docs: adjust example code to remove horizontal scroll bar (#509)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) from 0.1.0 to 0.8.0.
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v0.1.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 29, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 4, 2025

Looks like github.com/modelcontextprotocol/go-sdk is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Oct 4, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/modelcontextprotocol/go-sdk-0.8.0 branch October 4, 2025 06:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants