@modelcontextprotocol/sdk 1.26.0

v1.26.0

on Node.js NPM

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

• chore: bump v1.25.3 for backport fixes by @pcarleton in #1412
• fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x backport) by @samuv in #1382
• Fix #1430: Client Credentials providers scopes support (backported) by @NSeydoux in #1442
• chore: bump version to 1.26.0 by @pcarleton in #1479

New Contributors

• @samuv made their first contribution in #1382
• @NSeydoux made their first contribution in #1442

Full Changelog: v1.25.3...v1.26.0