Build(deps): Bump @modelcontextprotocol/sdk from 1.13.2 to 1.13.3 in /mcp (#405)

Bumps
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk)
from 1.13.2 to 1.13.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/typescript-sdk/releases"><code>@​modelcontextprotocol/sdk</code>'s
releases</a>.</em></p>
<blockquote>
<h2>1.13.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Implement DNS Rebinding Protections per spec by <a
href="https://github.com/ddworken"><code>@​ddworken</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/565">modelcontextprotocol/typescript-sdk#565</a></li>
<li>fix lint by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/704">modelcontextprotocol/typescript-sdk#704</a></li>
<li>fix: add missing eventsource-parser dependency by <a
href="https://github.com/domnit"><code>@​domnit</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/424">modelcontextprotocol/typescript-sdk#424</a></li>
<li>fix: add windows env PROGRAMFILES, avoid some exe can not be found
by <a href="https://github.com/muzea"><code>@​muzea</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/386">modelcontextprotocol/typescript-sdk#386</a></li>
<li>add overloads for registerResource method in McpServer class by <a
href="https://github.com/kentcdodds"><code>@​kentcdodds</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/661">modelcontextprotocol/typescript-sdk#661</a></li>
<li>fix: extra headers when they are a Headers object by <a
href="https://github.com/garciasdos"><code>@​garciasdos</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/571">modelcontextprotocol/typescript-sdk#571</a></li>
<li>fix: missing &quot;properties&quot; property in empty schema by <a
href="https://github.com/sinedied"><code>@​sinedied</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/598">modelcontextprotocol/typescript-sdk#598</a></li>
<li>fix: Expose the MCP child process PID as an accessible property in
StdioClientTransport by <a
href="https://github.com/XiaofuHuang"><code>@​XiaofuHuang</code></a> in
<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/455">modelcontextprotocol/typescript-sdk#455</a></li>
<li>fix: add type safety for tool output schemas in ToolCallback by <a
href="https://github.com/sushichan044"><code>@​sushichan044</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/670">modelcontextprotocol/typescript-sdk#670</a></li>
<li>doc minimum node version requirment by <a
href="https://github.com/marcopeg"><code>@​marcopeg</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/463">modelcontextprotocol/typescript-sdk#463</a></li>
<li>docs: add error handling when it fails to start HTTP server by <a
href="https://github.com/formulahendry"><code>@​formulahendry</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/371">modelcontextprotocol/typescript-sdk#371</a></li>
<li>Added Sampling Example to README by <a
href="https://github.com/RishiNandha"><code>@​RishiNandha</code></a> in
<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/698">modelcontextprotocol/typescript-sdk#698</a></li>
<li>Returning undefined from <code>discoverOAuthMetadata</code> for CORS
errors by <a href="https://github.com/geelen"><code>@​geelen</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/717">modelcontextprotocol/typescript-sdk#717</a></li>
<li>Bump version to 1.13.3 by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/719">modelcontextprotocol/typescript-sdk#719</a></li>
</ul>
<h2>New Contributors 🙏</h2>
<ul>
<li><a href="https://github.com/ddworken"><code>@​ddworken</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/565">modelcontextprotocol/typescript-sdk#565</a></li>
<li><a href="https://github.com/domnit"><code>@​domnit</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/424">modelcontextprotocol/typescript-sdk#424</a></li>
<li><a href="https://github.com/muzea"><code>@​muzea</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/386">modelcontextprotocol/typescript-sdk#386</a></li>
<li><a
href="https://github.com/kentcdodds"><code>@​kentcdodds</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/661">modelcontextprotocol/typescript-sdk#661</a></li>
<li><a
href="https://github.com/garciasdos"><code>@​garciasdos</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/571">modelcontextprotocol/typescript-sdk#571</a></li>
<li><a href="https://github.com/sinedied"><code>@​sinedied</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/598">modelcontextprotocol/typescript-sdk#598</a></li>
<li><a
href="https://github.com/XiaofuHuang"><code>@​XiaofuHuang</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/455">modelcontextprotocol/typescript-sdk#455</a></li>
<li><a
href="https://github.com/sushichan044"><code>@​sushichan044</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/670">modelcontextprotocol/typescript-sdk#670</a></li>
<li><a href="https://github.com/marcopeg"><code>@​marcopeg</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/463">modelcontextprotocol/typescript-sdk#463</a></li>
<li><a
href="https://github.com/formulahendry"><code>@​formulahendry</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/371">modelcontextprotocol/typescript-sdk#371</a></li>
<li><a
href="https://github.com/RishiNandha"><code>@​RishiNandha</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/698">modelcontextprotocol/typescript-sdk#698</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.2...1.13.3">https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.2...1.13.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1b14bd7fa4"><code>1b14bd7</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/719">#719</a>
from modelcontextprotocol/ihrpr/1.13.3</li>
<li><a
href="cfec7d9b39"><code>cfec7d9</code></a>
1.13.3</li>
<li><a
href="6f5e53b44b"><code>6f5e53b</code></a>
Returning undefined from <code>discoverOAuthMetadata</code> for CORS
errors (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/717">#717</a>)</li>
<li><a
href="fb4d07f0ee"><code>fb4d07f</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/698">#698</a>
from RishiNandha/main</li>
<li><a
href="a8fa0b342a"><code>a8fa0b3</code></a>
build</li>
<li><a
href="3d6acd3d9a"><code>3d6acd3</code></a>
add an example and update readme</li>
<li><a
href="5e20ee1fc5"><code>5e20ee1</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/371">#371</a>
from formulahendry/junhan/http-doc</li>
<li><a
href="a02704cd32"><code>a02704c</code></a>
Merge branch 'main' into junhan/http-doc</li>
<li><a
href="0a1cfd949f"><code>0a1cfd9</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/463">#463</a>
from marcopeg/main</li>
<li><a
href="27a412cc65"><code>27a412c</code></a>
Merge branch 'main' into main</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.2...1.13.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@modelcontextprotocol/sdk&package-manager=npm_and_yarn&previous-version=1.13.2&new-version=1.13.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

mcp/package-lock.json

@@ -9,19 +9,20 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "@modelcontextprotocol/sdk": "^1.13.2"
+        "@modelcontextprotocol/sdk": "^1.13.3"
       }
     },
     "node_modules/@modelcontextprotocol/sdk": {
-      "version": "1.13.2",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.13.2.tgz",
-      "integrity": "sha512-Vx7qOcmoKkR3qhaQ9qf3GxiVKCEu+zfJddHv6x3dY/9P6+uIwJnmuAur5aB+4FDXf41rRrDnOEGkviX5oYZ67w==",
+      "version": "1.13.3",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.13.3.tgz",
+      "integrity": "sha512-bGwA78F/U5G2jrnsdRkPY3IwIwZeWUEfb5o764b79lb0rJmMT76TLwKhdNZOWakOQtedYefwIR4emisEMvInKA==",
       "dependencies": {
         "ajv": "^6.12.6",
         "content-type": "^1.0.5",
         "cors": "^2.8.5",
         "cross-spawn": "^7.0.5",
         "eventsource": "^3.0.2",
+        "eventsource-parser": "^3.0.0",
         "express": "^5.0.1",
         "express-rate-limit": "^7.5.0",
         "pkce-challenge": "^5.0.0",

mcp/package.json

@@ -9,7 +9,7 @@
     "dev": "node --watch server.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.13.2"
+    "@modelcontextprotocol/sdk": "^1.13.3"
   },
   "keywords": ["mcp", "server"],
   "author": "",