v1.17.1

Compare Source

What's Changed

• (fix): Update fallbackRequestHandler type to match _requestHandlers leaves type by @​fredericbarthelet in https://github.com/modelcontextprotocol/typescript-sdk/pull/784
• fix: prevent responses being sent to wrong client when multiple transports connect by @​grimmerk in https://github.com/modelcontextprotocol/typescript-sdk/pull/820
• 1.17.1 by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/831

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.0...1.17.1

v1.17.0

Compare Source

What's Changed

• Add CODEOWNERS file for sdk by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/781
• Add more robust base64 check by @​cliffhall in https://github.com/modelcontextprotocol/typescript-sdk/pull/786
• update codeowners by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/803
• Fix indent by @​jiec-msft in https://github.com/modelcontextprotocol/typescript-sdk/pull/807
• fix: Explicitly declare accpet type to json when exchanging oauth token by @​JoJoJoJoJoJoJo in https://github.com/modelcontextprotocol/typescript-sdk/pull/801
• feat: support oidc discovery in client sdk by @​xiaoyijun in https://github.com/modelcontextprotocol/typescript-sdk/pull/652
• fix: remove extraneous code block in README.md by @​sd0ric4 in https://github.com/modelcontextprotocol/typescript-sdk/pull/791
• Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1 directory by @​dependabot[bot] inhttps://github.com/modelcontextprotocol/typescript-sdk/pull/7988
• Bump version 1.17.0 by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/810

New Contributors 🙏

• @​jiec-msft made their first contribution in https://github.com/modelcontextprotocol/typescript-sdk/pull/807
• @​sd0ric4 made their first contribution in https://github.com/modelcontextprotocol/typescript-sdk/pull/791

Full Changelog: modelcontextprotocol/typescript-sdk@1.16.0...1.17.0

v10.14.0

Compare Source

Minor Changes

• Added support for JavaScript runtime resolution

  Declare Node.js, Deno, or Bun in devEngines.runtime (inside package.json) and let pnpm download and pin it automatically.

  Usage example:

  {
    "devEngines": {
      "runtime": {
        "name": "node",
        "version": "^24.4.0",
        "onFail": "download" (we only support the "download" value for now)
      }
    }
  }

  How it works:

  1. pnpm install resolves your specified range to the latest matching runtime version.
  2. The exact version (and checksum) is saved in the lockfile.
  3. Scripts use the local runtime, ensuring consistency across environments.

  Why this is better:

  1. This new setting supports also Deno and Bun (vs. our Node-only settings useNodeVersion and executionEnv.nodeVersion)
  2. Supports version ranges (not just a fixed version).
  3. The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
  4. It can be used on any workspace project (like executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.
  5. For now devEngines.runtime setting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.

  Related PR: #​9755.

• Add --cpu, --libc, and --os to pnpm install, pnpm add, and pnpm dlx to customize supportedArchitectures via the CLI #​7510.

Patch Changes

• Fix a bug in which pnpm add downloads packages whose libc differ from pnpm.supportedArchitectures.libc.
• The integrities of the downloaded Node.js artifacts are verified #​9750.
• Allow dlx to parse CLI flags and options between the dlx command and the command to run or between the dlx command and -- #​9719.
• pnpm install --prod should removing hoisted dev dependencies #​9782.
• Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
• Fix a bug causing pnpm install to incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.