Bump mcp from 1.13.1 to 1.23.0 in /src/backend

Open dependabot[bot] opened this issue 4 weeks ago • 0 comments

Bumps mcp from 1.13.1 to 1.23.0.

Release notes

v1.23.0

Summary

This release brings us up to speed with the latest MCP spec 2025-11-25. Take a look at the latest spec as well as the release blog post.

What's Changed

Add tests for JSON Schema 2020-12 field preservation (SEP-1613) by @felixweinberger in modelcontextprotocol/python-sdk#1649

Add client_secret_basic authentication support by @jonshea in modelcontextprotocol/python-sdk#1334

Implement SEP-1577 - Sampling With Tools by @ochafik in modelcontextprotocol/python-sdk#1594

SEP-1330: Elicitation Enum Schema Improvements and Standards Compliance by @chughtapan in modelcontextprotocol/python-sdk#1246

[auth][conformance] add conformance auth client by @pcarleton in modelcontextprotocol/python-sdk#1640

Implement SEP-986: Tool name validation by @felixweinberger in modelcontextprotocol/python-sdk#1655

fix: url for spec by @felixweinberger in modelcontextprotocol/python-sdk#1659

feat: implement SEP-991 URL-based client ID (CIMD) support by @pcarleton in modelcontextprotocol/python-sdk#1652

Update doc string on custom_route by @pcarleton in modelcontextprotocol/python-sdk#1660

Implement SEP-1036: URL mode elicitation for secure out-of-band interactions by @cbcoutinho in modelcontextprotocol/python-sdk#1580

Skip empty SSE data to avoid parsing errors by @felixweinberger in modelcontextprotocol/python-sdk#1670

SEP-1686: Tasks by @maxisbey in modelcontextprotocol/python-sdk#1645

Add on_session_created callback option by @crondinini-ant in modelcontextprotocol/python-sdk#1710

Add SSE polling support (SEP-1699) by @felixweinberger in modelcontextprotocol/python-sdk#1654

Support client_credentials flow with JWT and Basic auth by @pcarleton in modelcontextprotocol/python-sdk#1663

feat: backwards-compatible create_message overloads for SEP-1577 by @felixweinberger in modelcontextprotocol/python-sdk#1713

Auto-enable DNS rebinding protection for localhost servers by @pcarleton (d3a184119e4479ea6a63590bc41f01dc06e3fa99)

New Contributors

@ochafik made their first contribution in modelcontextprotocol/python-sdk#1594

Full Changelog: https://github.com/modelcontextprotocol/python-sdk/compare/v1.22.0...v1.23.0

v1.22.0

What's Changed

feat: Pass through and expose additional parameters in ClientSessionGroup.call_tool and .connect_to_server by @inaku-Gyan in modelcontextprotocol/python-sdk#1576

chore: Lazy import jsonschema library by @wuliang229 in modelcontextprotocol/python-sdk#1596

docs: Update examples to use stateless HTTP with JSON responses by @domdomegg in modelcontextprotocol/python-sdk#1499

New Contributors

@wuliang229 made their first contribution in modelcontextprotocol/python-sdk#1596

Full Changelog: https://github.com/modelcontextprotocol/python-sdk/compare/v1.21.1...v1.22.0

v1.21.2

Hotfix Release

This is a hotfix release to address a critical bug in OAuth scope handling that caused failures on 401 responses.

Related:

modelcontextprotocol/python-sdk#1630

modelcontextprotocol/python-sdk#1632

What's Changed

... (truncated)

Commits

d3a1841 Merge commit from fork
fa851d9 feat: backwards-compatible create_message overloads for SEP-1577 (#1713)
f82b0c9 Support client_credentials flow with JWT and Basic auth (#1663)
281fd47 Add SSE polling support (SEP-1699) (#1654)
2cd178a Add on_session_created callback option (#1710)
c92bb2f SEP-1686: Tasks (#1645)
5983a65 Skip empty SSE data to avoid parsing errors (#1670)
02b7889 Implement SEP-1036: URL mode elicitation for secure out-of-band interactions ...
27279bc Update doc string on custom_route (#1660)
f225013 feat: implement SEP-991 URL-based client ID (CIMD) support (#1652)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Dec 02 '25 16:12 dependabot[bot]