[Snyk] Security upgrade @modelcontextprotocol/sdk from 1.25.1 to 1.25.2

[gloomcheng]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MODELCONTEXTPROTOCOLSDK-14871802	828

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[Copilot]

Pull request overview

This PR upgrades the @modelcontextprotocol/sdk package from version 1.25.1 to 1.25.2 to address a high-severity Regular Expression Denial of Service (ReDoS) vulnerability with a priority score of 828.

Changes:

• Updated @modelcontextprotocol/sdk dependency version constraint from ^1.20.0 to ^1.25.2 in package.json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The package.json is being updated to specify version ^1.25.2, but the package-lock.json has not been updated accordingly (as noted in the PR warning). The package-lock.json currently references version 1.25.1 and needs to be regenerated before this PR can be merged. Run npm install to update the package-lock.json file to ensure version 1.25.2 is actually installed and locked.

Suggested change

	"@modelcontextprotocol/sdk": "^1.25.2",
	"@modelcontextprotocol/sdk": "^1.25.1",