From a642b7a8ac987933da2747aaec1293abadb8fb77 Mon Sep 17 00:00:00 2001 From: "hash-worker[bot]" <180894564+hash-worker[bot]@users.noreply.github.com> Date: Wed, 4 Feb 2026 20:54:43 +0000 Subject: [PATCH] Update npm package `@modelcontextprotocol/sdk` to v1.26.0 [SECURITY] --- apps/mcp/linear/package.json | 2 +- apps/mcp/notion/package.json | 2 +- yarn.lock | 97 ++++++++++++++++++++++++------------ 3 files changed, 68 insertions(+), 33 deletions(-) diff --git a/apps/mcp/linear/package.json b/apps/mcp/linear/package.json index cd570b6e26d..cb9c86274ad 100644 --- a/apps/mcp/linear/package.json +++ b/apps/mcp/linear/package.json @@ -21,7 +21,7 @@ "@local/eslint": "0.0.0-private", "@local/hash-backend-utils": "0.0.0-private", "@local/tsconfig": "0.0.0-private", - "@modelcontextprotocol/sdk": "1.25.2", + "@modelcontextprotocol/sdk": "1.26.0", "dotenv-flow": "3.3.0", "zod": "4.1.12", "zod-to-json-schema": "3.24.6" diff --git a/apps/mcp/notion/package.json b/apps/mcp/notion/package.json index 8636a6b9486..430fb54ef12 100644 --- a/apps/mcp/notion/package.json +++ b/apps/mcp/notion/package.json @@ -19,7 +19,7 @@ "dependencies": { "@local/eslint": "0.0.0-private", "@local/tsconfig": "0.0.0-private", - "@modelcontextprotocol/sdk": "1.25.2", + "@modelcontextprotocol/sdk": "1.26.0", "@notionhq/client": "5.3.0", "dotenv-flow": "3.3.0", "notion-to-md": "3.1.9", diff --git a/yarn.lock b/yarn.lock index 7c95bb4fd60..481d7eac013 100644 --- a/yarn.lock +++ b/yarn.lock @@ -766,7 +766,7 @@ __metadata: "@local/eslint": "npm:0.0.0-private" "@local/hash-backend-utils": "npm:0.0.0-private" "@local/tsconfig": "npm:0.0.0-private" - "@modelcontextprotocol/sdk": "npm:1.25.2" + "@modelcontextprotocol/sdk": "npm:1.26.0" "@types/dotenv-flow": "npm:3.3.3" "@types/node": "npm:22.18.13" chokidar-cli: "npm:3.0.0" @@ -789,7 +789,7 @@ __metadata: dependencies: "@local/eslint": "npm:0.0.0-private" "@local/tsconfig": "npm:0.0.0-private" - "@modelcontextprotocol/sdk": "npm:1.25.2" + "@modelcontextprotocol/sdk": "npm:1.26.0" "@notionhq/client": "npm:5.3.0" "@types/dotenv-flow": "npm:3.3.3" "@types/node": "npm:22.18.13" @@ -8461,12 +8461,12 @@ __metadata: languageName: unknown linkType: soft -"@hono/node-server@npm:^1.19.7": - version: 1.19.8 - resolution: "@hono/node-server@npm:1.19.8" +"@hono/node-server@npm:^1.19.9": + version: 1.19.9 + resolution: "@hono/node-server@npm:1.19.9" peerDependencies: hono: ^4 - checksum: 10c0/47955a497523f7c90db83e9a7a3cf589a824a9ddc8b0ba80c11f849638f6b9a08f519df4e15facd69381a1993ae19bb3fa5fe31b3d562b0341940eb51b99848b + checksum: 10c0/de18c06b6b266dc45fe55fb82053bd1da8fe84939c49b6fbab4d2448b679d54ab5affbf8b15de9bead26f29b1755284d770aafb5ad14a8e4b3cfb4f79334554e languageName: node linkType: hard @@ -10730,11 +10730,11 @@ __metadata: languageName: node linkType: hard -"@modelcontextprotocol/sdk@npm:1.25.2": - version: 1.25.2 - resolution: "@modelcontextprotocol/sdk@npm:1.25.2" +"@modelcontextprotocol/sdk@npm:1.26.0": + version: 1.26.0 + resolution: "@modelcontextprotocol/sdk@npm:1.26.0" dependencies: - "@hono/node-server": "npm:^1.19.7" + "@hono/node-server": "npm:^1.19.9" ajv: "npm:^8.17.1" ajv-formats: "npm:^3.0.1" content-type: "npm:^1.0.5" @@ -10742,14 +10742,15 @@ __metadata: cross-spawn: "npm:^7.0.5" eventsource: "npm:^3.0.2" eventsource-parser: "npm:^3.0.0" - express: "npm:^5.0.1" - express-rate-limit: "npm:^7.5.0" - jose: "npm:^6.1.1" + express: "npm:^5.2.1" + express-rate-limit: "npm:^8.2.1" + hono: "npm:^4.11.4" + jose: "npm:^6.1.3" json-schema-typed: "npm:^8.0.2" pkce-challenge: "npm:^5.0.0" raw-body: "npm:^3.0.0" zod: "npm:^3.25 || ^4.0" - zod-to-json-schema: "npm:^3.25.0" + zod-to-json-schema: "npm:^3.25.1" peerDependencies: "@cfworker/json-schema": ^4.1.1 zod: ^3.25 || ^4.0 @@ -10758,7 +10759,7 @@ __metadata: optional: true zod: optional: false - checksum: 10c0/ffc024398e1b7841fb1ff2dc540e2e84f4b97a2a4058ef48e58836ce6077321c536a3858e9155472b7933c4773975b375167815bd4d721c3ca1e92db62e9488c + checksum: 10c0/b4098789d9fbbc4d9e0df240b18ba28867e4990ca4305322d6724fd03bba6685bbf21b39e02578b959da620b5a704ab1d565d3dbf377778ee9e4a0677b790728 languageName: node linkType: hard @@ -29302,7 +29303,7 @@ __metadata: languageName: node linkType: hard -"express-rate-limit@npm:8.2.1": +"express-rate-limit@npm:8.2.1, express-rate-limit@npm:^8.2.1": version: 8.2.1 resolution: "express-rate-limit@npm:8.2.1" dependencies: @@ -29313,16 +29314,7 @@ __metadata: languageName: node linkType: hard -"express-rate-limit@npm:^7.5.0": - version: 7.5.1 - resolution: "express-rate-limit@npm:7.5.1" - peerDependencies: - express: ">= 4.11" - checksum: 10c0/b07de84d700a2c07c4bf2f040e7558ed5a1f660f03ed5f30bf8ff7b51e98ba7a85215640e70fc48cbbb9151066ea51239d9a1b41febc9b84d98c7915b0186161 - languageName: node - linkType: hard - -"express@npm:5.2.0, express@npm:^5.0.1": +"express@npm:5.2.0": version: 5.2.0 resolution: "express@npm:5.2.0" dependencies: @@ -29397,6 +29389,42 @@ __metadata: languageName: node linkType: hard +"express@npm:^5.2.1": + version: 5.2.1 + resolution: "express@npm:5.2.1" + dependencies: + accepts: "npm:^2.0.0" + body-parser: "npm:^2.2.1" + content-disposition: "npm:^1.0.0" + content-type: "npm:^1.0.5" + cookie: "npm:^0.7.1" + cookie-signature: "npm:^1.2.1" + debug: "npm:^4.4.0" + depd: "npm:^2.0.0" + encodeurl: "npm:^2.0.0" + escape-html: "npm:^1.0.3" + etag: "npm:^1.8.1" + finalhandler: "npm:^2.1.0" + fresh: "npm:^2.0.0" + http-errors: "npm:^2.0.0" + merge-descriptors: "npm:^2.0.0" + mime-types: "npm:^3.0.0" + on-finished: "npm:^2.4.1" + once: "npm:^1.4.0" + parseurl: "npm:^1.3.3" + proxy-addr: "npm:^2.0.7" + qs: "npm:^6.14.0" + range-parser: "npm:^1.2.1" + router: "npm:^2.2.0" + send: "npm:^1.1.0" + serve-static: "npm:^2.2.0" + statuses: "npm:^2.0.1" + type-is: "npm:^2.0.1" + vary: "npm:^1.1.2" + checksum: 10c0/45e8c841ad188a41402ddcd1294901e861ee0819f632fb494f2ed344ef9c43315d294d443fb48d594e6586a3b779785120f43321417adaef8567316a55072949 + languageName: node + linkType: hard + "exsolve@npm:^1.0.7, exsolve@npm:^1.0.8": version: 1.0.8 resolution: "exsolve@npm:1.0.8" @@ -31885,6 +31913,13 @@ __metadata: languageName: node linkType: hard +"hono@npm:^4.11.4": + version: 4.11.7 + resolution: "hono@npm:4.11.7" + checksum: 10c0/c7cde1779c9352fc6aacb242af009f280f4d89315cf95135d08df5c680f845fcfb1c3c1a650ec15e1d1c2d0af26fdc87b745bb3c471c5045d88c247a7bd2aae4 + languageName: node + linkType: hard + "hookable@npm:5.5.3": version: 5.5.3 resolution: "hookable@npm:5.5.3" @@ -34111,7 +34146,7 @@ __metadata: languageName: node linkType: hard -"jose@npm:^6.1.1": +"jose@npm:^6.1.3": version: 6.1.3 resolution: "jose@npm:6.1.3" checksum: 10c0/b9577b4a7a5e84131011c23823db9f5951eae3ba796771a6a2401ae5dd50daf71104febc8ded9c38146aa5ebe94a92ac09c725e699e613ef26949b9f5a8bc30f @@ -49151,12 +49186,12 @@ __metadata: languageName: node linkType: hard -"zod-to-json-schema@npm:^3.23.3, zod-to-json-schema@npm:^3.25.0": - version: 3.25.0 - resolution: "zod-to-json-schema@npm:3.25.0" +"zod-to-json-schema@npm:^3.23.3, zod-to-json-schema@npm:^3.25.1": + version: 3.25.1 + resolution: "zod-to-json-schema@npm:3.25.1" peerDependencies: zod: ^3.25 || ^4 - checksum: 10c0/2d2cf6ca49752bf3dc5fb37bc8f275eddbbc4020e7958d9c198ea88cd197a5f527459118188a0081b889da6a6474d64c4134cd60951fa70178c125138761c680 + checksum: 10c0/711b30e34d1f1211f1afe64bf457f0d799234199dc005cca720b236ea808804c03164039c232f5df33c46f462023874015a8a0b3aab1585eca14124c324db7e2 languageName: node linkType: hard