Bump @modelcontextprotocol/sdk from 1.12.3 to 1.13.2 in /mcp (#389)

Bumps
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk)
from 1.12.3 to 1.13.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/typescript-sdk/releases"><code>@​modelcontextprotocol/sdk</code>'s
releases</a>.</em></p>
<blockquote>
<h2>1.13.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <code>/.well-known/oauth-authorization-server</code> dropping
path by <a
href="https://github.com/calclavia"><code>@​calclavia</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/687">modelcontextprotocol/typescript-sdk#687</a></li>
<li>Fallback for<code> /.well-known/oauth-authorization-server</code>
dropping path by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/692">modelcontextprotocol/typescript-sdk#692</a></li>
<li>[auth] refactor resource selection to not include resource if PRM is
not present by <a
href="https://github.com/pcarleton"><code>@​pcarleton</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/693">modelcontextprotocol/typescript-sdk#693</a></li>
<li>fix: skip validation if tool reports error by <a
href="https://github.com/Areo-Joe"><code>@​Areo-Joe</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/655">modelcontextprotocol/typescript-sdk#655</a></li>
<li>feat(shared/auth): support software_statement in OAuthClientMetadata
by <a
href="https://github.com/chrisdickinson"><code>@​chrisdickinson</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/696">modelcontextprotocol/typescript-sdk#696</a></li>
<li>Show session id per request in simpleStreamableHttp example server
by <a href="https://github.com/cliffhall"><code>@​cliffhall</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/640">modelcontextprotocol/typescript-sdk#640</a></li>
<li>Raw request propagation in tools - passed to callbacks via
RequestHandlerExtra<!-- raw HTML omitted --> by <a
href="https://github.com/KKonstantinov"><code>@​KKonstantinov</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/627">modelcontextprotocol/typescript-sdk#627</a></li>
<li>Update readme file to include a tip to allow
<code>mcp-session-id</code> in CORS when using StreamableHTTP by <a
href="https://github.com/Achintha444"><code>@​Achintha444</code></a> in
<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/633">modelcontextprotocol/typescript-sdk#633</a></li>
<li>Pr/protocol overwriting transport hooks by <a
href="https://github.com/nichtsam"><code>@​nichtsam</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/477">modelcontextprotocol/typescript-sdk#477</a></li>
<li>docs: Add clarifying comments for stateless streamable HTTP
endpoints by <a
href="https://github.com/dhodun"><code>@​dhodun</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/542">modelcontextprotocol/typescript-sdk#542</a></li>
<li>Bump formidable from 3.5.2 to 3.5.4 in the npm_and_yarn group across
1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/428">modelcontextprotocol/typescript-sdk#428</a></li>
<li>test(server): add more tests for <code>SSEServerTransport</code>
class by <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/391">modelcontextprotocol/typescript-sdk#391</a></li>
<li>Update version of the package to 1.13.2 by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/701">modelcontextprotocol/typescript-sdk#701</a></li>
</ul>
<h2>New Contributors 🙏</h2>
<ul>
<li><a href="https://github.com/calclavia"><code>@​calclavia</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/687">modelcontextprotocol/typescript-sdk#687</a></li>
<li><a href="https://github.com/Areo-Joe"><code>@​Areo-Joe</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/655">modelcontextprotocol/typescript-sdk#655</a></li>
<li><a
href="https://github.com/KKonstantinov"><code>@​KKonstantinov</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/627">modelcontextprotocol/typescript-sdk#627</a></li>
<li><a
href="https://github.com/Achintha444"><code>@​Achintha444</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/633">modelcontextprotocol/typescript-sdk#633</a></li>
<li><a href="https://github.com/nichtsam"><code>@​nichtsam</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/477">modelcontextprotocol/typescript-sdk#477</a></li>
<li><a href="https://github.com/dhodun"><code>@​dhodun</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/542">modelcontextprotocol/typescript-sdk#542</a></li>
<li><a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>
made their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/391">modelcontextprotocol/typescript-sdk#391</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.1...1.13.2">https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.1...1.13.2</a></p>
<h2>1.13.1</h2>
<h2>What's Changed</h2>
<ul>
<li>simpleStreamableHttp: fix example code by <a
href="https://github.com/ochafik"><code>@​ochafik</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/660">modelcontextprotocol/typescript-sdk#660</a></li>
<li>build: add watching script targets for build &amp; simple streamable
http server by <a
href="https://github.com/ochafik"><code>@​ochafik</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/663">modelcontextprotocol/typescript-sdk#663</a></li>
<li>feat: remove console statements from SDK code by <a
href="https://github.com/ashwin-ant"><code>@​ashwin-ant</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/668">modelcontextprotocol/typescript-sdk#668</a></li>
<li>[auth] adjust default validation for resource parameter in client
flow, and server example by <a
href="https://github.com/pcarleton"><code>@​pcarleton</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/664">modelcontextprotocol/typescript-sdk#664</a></li>
<li>fix(client/sse): extract protected resource from eventsource 401 by
<a
href="https://github.com/chrisdickinson"><code>@​chrisdickinson</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/675">modelcontextprotocol/typescript-sdk#675</a></li>
<li>1.13.1 by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/683">modelcontextprotocol/typescript-sdk#683</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.0...1.13.1">https://github.com/modelcontextprotocol/typescript-sdk/compare/1.13.0...1.13.1</a></p>
<h2>1.13.0</h2>
<h2>🚀 Implementation for Spec revision 2025-06-18</h2>
<p><a
href="https://github.com/modelcontextprotocol/modelcontextprotocol/releases/tag/2025-06-18">https://github.com/modelcontextprotocol/modelcontextprotocol/releases/tag/2025-06-18</a></p>
<ul>
<li>feat: implement MCP-Protocol-Version header requirement for HTTP
transport by <a
href="https://github.com/ochafik"><code>@​ochafik</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/614">modelcontextprotocol/typescript-sdk#614</a></li>
<li>Rename ResourceReference to ResourceTemplateReference by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/619">modelcontextprotocol/typescript-sdk#619</a></li>
<li>Adds _meta to additional interface types by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/630">modelcontextprotocol/typescript-sdk#630</a></li>
<li>Add title to tools, resources, prompts by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/631">modelcontextprotocol/typescript-sdk#631</a></li>
<li>Add support for resource link by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/632">modelcontextprotocol/typescript-sdk#632</a></li>
<li>Include context into completions by <a
href="https://github.com/ihrpr"><code>@​ihrpr</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/634">modelcontextprotocol/typescript-sdk#634</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1e52f38f36"><code>1e52f38</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/701">#701</a>
from modelcontextprotocol/ihrpr/1.13.2</li>
<li><a
href="9d678ce591"><code>9d678ce</code></a>
1.13.2</li>
<li><a
href="be845dd4ea"><code>be845dd</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/391">#391</a>
from christian-bromann/cb/sse-tests</li>
<li><a
href="f76652bb10"><code>f76652b</code></a>
Update src/server/sse.test.ts</li>
<li><a
href="362acfc1ce"><code>362acfc</code></a>
Update package-lock.json</li>
<li><a
href="08c767f8e1"><code>08c767f</code></a>
Merge branch 'main' into cb/sse-tests</li>
<li><a
href="6e0b699718"><code>6e0b699</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/428">#428</a>
from modelcontextprotocol/dependabot/npm_and_yarn/npm...</li>
<li><a
href="a783c5a5ef"><code>a783c5a</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/542">#542</a>
from dhodun/dhodun/add-streamable-http-comments</li>
<li><a
href="71d309d0d8"><code>71d309d</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/477">#477</a>
from nichtsam/pr/protocol-overwriting-transport-hooks</li>
<li><a
href="909fe5df07"><code>909fe5d</code></a>
Merge pull request <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/633">#633</a>
from Achintha444/main</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.12.3...1.13.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@modelcontextprotocol/sdk&package-manager=npm_and_yarn&previous-version=1.12.3&new-version=1.13.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

mcp/package-lock.json

@@ -9,14 +9,13 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "@modelcontextprotocol/sdk": "^1.12.3"
+        "@modelcontextprotocol/sdk": "^1.13.2"
       }
     },
     "node_modules/@modelcontextprotocol/sdk": {
-      "version": "1.12.3",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.12.3.tgz",
-      "integrity": "sha512-DyVYSOafBvk3/j1Oka4z5BWT8o4AFmoNyZY9pALOm7Lh3GZglR71Co4r4dEUoqDWdDazIZQHBe7J2Nwkg6gHgQ==",
-      "license": "MIT",
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.13.2.tgz",
+      "integrity": "sha512-Vx7qOcmoKkR3qhaQ9qf3GxiVKCEu+zfJddHv6x3dY/9P6+uIwJnmuAur5aB+4FDXf41rRrDnOEGkviX5oYZ67w==",
       "dependencies": {
         "ajv": "^6.12.6",
         "content-type": "^1.0.5",

mcp/package.json

@@ -9,7 +9,7 @@
     "dev": "node --watch server.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.3"
+    "@modelcontextprotocol/sdk": "^1.13.2"
   },
   "keywords": ["mcp", "server"],
   "author": "",