[Snyk] Upgrade @modelcontextprotocol/sdk from 1.15.1 to 1.20.0

[iFurySt]

Snyk has created this PR to upgrade @modelcontextprotocol/sdk from 1.15.1 to 1.20.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 12 versions ahead of your current version.

• The recommended version was released 24 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Allocation of Resources Without Limits or Throttling SNYK-JS-AXIOS-12613773	666	Proof of Concept
	Predictable Value Range from Previous Values SNYK-JS-FORMDATA-10841150	666	Proof of Concept

Release notes

Package name: @modelcontextprotocol/sdk

• 1.20.0 - 2025-10-09
  

  What's Changed

  • docs: improve main README with better quick start, include examples of stateless HTTP, explain tools v resources v prompts by @ domdomegg in #980
  • chore: add lint:fix script by @ mattzcarey in #1013
  • Default to S256 code challenge if not specified in authorization server metadata by @ LucaButBoring in #992

  New Contributors 🙏

  • @ mattzcarey made their first contribution in #1013

  Full Changelog: 1.19.0...1.20.0

• 1.19.1 - 2025-10-02
• 1.18.2 - 2025-09-25
  

  What's Changed

  • Updates the sampling code example in the README by @ viniciuscsouza in #958
  • Use redirect Uri passed in in demoInMemoryOAuthProvider by @ TylerLeonhardt in #931
  • fix(auth-router): correct Protected Resource Metadata for pathful RS and add explicit resourceServerUrl (RFC 9728) by @ blustAI in #858
  • chore: update version to 1.18.2 for weekly release by @ felixweinberger in #970

  New Contributors

  • @ viniciuscsouza made their first contribution in #958
  • @ TylerLeonhardt made their first contribution in #931
  • @ blustAI made their first contribution in #858

  Full Changelog: 1.18.1...1.18.2

• 1.18.1 - 2025-09-18
  

  What's Changed

  • fix: prevent streamable http wite after end from crashing the node process by @ MQ37 in #933
  • chore: update version to 1.18.1 for weekly release by @ felixweinberger in #950

  New Contributors

  • @ MQ37 made their first contribution in #933

  Full Changelog: 1.18.0...1.18.1

• 1.18.0 - 2025-09-11
  

  What's Changed

  • mcp: update SDK for SEP 973 + add to example server by @ jesselumarie in #904
  • feat: add _meta field support to tool definitions by @ knguyen-figma in #922
  • Fix automatic log level handling for sessionless connections by @ cliffhall in #917
  • 1.17.6 by @ ihrpr in #936
  • 1.18.0 by @ ihrpr in #937
  • ignore icons for now by @ ihrpr in #938

  New Contributors

  • @ jesselumarie made their first contribution in #904
  • @ knguyen-figma made their first contribution in #922

  Full Changelog: 1.17.5...1.18.0

• 1.17.5 - 2025-09-02
  

  What's Changed

  • Automatic handling of logging level by @ cliffhall in #882
  • Fix the SDK vs Spec types test that is breaking CI by @ cliffhall in #908

  Full Changelog: 1.17.4...1.17.5

• 1.17.4 - 2025-08-22
  

  What's Changed

  • feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns by @ m-paternostro in #485
  • restrict url schemes allowed in oauth metadata by @ pcarleton in #877
  • [auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 by @ pcarleton in #879
  • chore: bump version to 1.17.4 by @ felixweinberger in #894

  Full Changelog: 1.17.3...1.17.4

• 1.17.3 - 2025-08-14
• 1.17.2 - 2025-08-07
• 1.17.1 - 2025-07-31
• 1.17.0 - 2025-07-24
• 1.16.0 - 2025-07-17
• 1.15.1 - 2025-07-10

from @modelcontextprotocol/sdk GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs