Skip to content

fix(deps): update dependency io.modelcontextprotocol.sdk:mcp to v1#20

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-deps.mcpsdk.version
Open

fix(deps): update dependency io.modelcontextprotocol.sdk:mcp to v1#20
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-deps.mcpsdk.version

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 23, 2026

This PR contains the following updates:

Package Change Age Confidence
io.modelcontextprotocol.sdk:mcp 0.12.11.0.0 age confidence

Release Notes

modelcontextprotocol/java-sdk (io.modelcontextprotocol.sdk:mcp)

v1.0.0

Compare Source

MCP Java SDK 1.0.0

We are pleased to announce the 1.0.0 GA release of the MCP Java SDK — the official Java SDK for Model Context Protocol servers and clients, maintained in collaboration with Spring AI.


Major Features

  • MCP Protocol Implementation — Spec-compliant implementation of the Model Context Protocol, including tools, resources, prompts, sampling, elicitation, and progress tracking.
  • Synchronous and Asynchronous APIs — First-class support for both blocking (McpSyncClient / McpSyncServer) and reactive (McpAsyncClient / McpAsyncServer) programming models.
  • Official Transport Options — STDIO, Servlet-based (Streamable HTTP and HTTP/SSE) transports out of the box.
  • Pluggable JSON Serialization — Supports both Jackson 2 and Jackson 3, with Jackson 3 as the default. Integration is decoupled so projects can supply their own binding.
  • MCP Protocol Version Negotiation — Clients and servers automatically negotiate the highest mutually supported protocol version at connection time.
  • Authorization & Security — DNS rebinding protection, Origin header validation, and conformance-tested OAuth/auth flows via relevant hooks.
  • OSGi Support — All modules ship with correct OSGi bundle manifests for use in Eclipse/OSGi runtimes.
  • BOM for Dependency Managementmcp-bom keeps all SDK module versions aligned with a single import.
  • MCP Test Module — Reusable test utilities and a conformance test suite for validating server and client implementations.

Spec Compliance

The SDK is compliant with the 2025-06-18 MCP specification and supports protocol version negotiation across 2024-11-05, 2025-03-26, and 2025-06-18.

Work towards 2025-11-25 spec compliance is actively in progress. Key features in that revision include tasks (durable request tracking), tool calling in sampling, URL elicitation, icon metadata, enhanced JSON Schema support, and updated OAuth/security flows. See the Roadmap for details.


Stability in the 1.x Line

With 1.0.0, the SDK transitions to a stable, semantically versioned release line. The project follows Semantic Versioning 2.0.0:

  • Patch releases (1.0.x) deliver backward-compatible bug fixes.
  • Minor releases (1.x.0) deliver new, backward-compatible features — including new MCP spec support.
  • Major releases (2.x) are reserved for breaking API changes or MCP spec revisions that require code changes on the caller side.

Breaking changes are always documented with migration instructions, APIs are deprecated before removal, and pull requests containing breaking changes are labeled accordingly. See VERSIONING.md for the full policy.


What's Changed in 1.0.0

Spring Transports Move to Spring AI 2.0
  • Moved mcp-spring-webflux and mcp-spring-webmvc to Spring AI 2.0 (#​805)
API Cleanup
  • Removed all APIs deprecated during the RC cycle to establish a clean stable baseline (#​807)
Security & Conformance
  • Added authorization conformance testing using Spring Security (#​806)
  • Updated SECURITY.md to use GitHub Security Advisories (#​801)
OSGi
  • Fixed and simplified OSGi manifest.mf generation (#​792)
Governance & Community
  • Added governance documentation (#​808)
  • Updated community support channel to Stack Overflow (#​824)

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.18.1...v1.0.0

v0.18.1

Compare Source

What's Changed

  • Fix and simplification for osgi manifest.mf contents generation - Cherry-picked from main (159eb96)

Full Changelog: modelcontextprotocol/java-sdk@v0.18.0...v0.18.1

v0.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.17.2...v0.18.0

v0.17.2

Compare Source

This release:

  • Addresses mostly the testing infrastructure issues.
  • Fixes a client-side issue with servers that process client-initiated notifications with a 202 Accepted HTTP Header.

Full Changelog: modelcontextprotocol/java-sdk@v0.17.1...v0.17.2

v0.17.1

Compare Source

Bug fix release:

Full Changelog: modelcontextprotocol/java-sdk@v0.17.0...v0.17.1

v0.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.16.0...v0.17.0

v0.16.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.15.0...v0.16.0

v0.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.14.1...v0.15.0

v0.14.1

Compare Source

Full Changelog: modelcontextprotocol/java-sdk@v0.14.0...v0.14.1

v0.14.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.13.1...v0.14.0

v0.13.1

Compare Source

Full Changelog: modelcontextprotocol/java-sdk@v0.13.0...v0.13.1

v0.13.0

Compare Source

Release Notes

🚀 Major Features & Enhancements

Protocol Version Support
  • Added MCP protocol version 2025-06-18 support for streamable-http and stateless transports (#​558)
    • Set MCP_2025_06_18 as upper supported protocol version
    • Updated LATEST_PROTOCOL_VERSION constant to reflect new upper bound
Module Restructuring
  • Extracted mcp-core module (#​557) - ⚠️ BREAKING CHANGE

    • Created new mcp-core module free of Jackson dependencies
    • mcp module now serves as an umbrella module bringing together mcp-json-jackson2 and mcp-core
    • Classes are now in different JARs, which may affect classpath dependencies
  • Jackson decoupling (#​543) - Related to (#​557)

    • Abstract away Jackson usage with SPI interfaces
      Creates two modules, mcp-json and mcp-json-jackson. It removes the com.fasterxml.jackson.core:jackson-databind and com.networknt:json-schema-validator dependencies from the mcp (now mcp-core) module. The mcp-core (mcp previously) module now only depends on com.fasterxml.jackson.core:jackson-annotations.
      To use Jackson, you have to add mcp-jackson to your dependencies in addition to mcp-core. I added the dependency mcp-jackson to both mcp-spring-mvc and mcp-spring-webflux to avoid a breaking change in those modules.
Enhanced Tool Output Support
  • Support for array-type structured content in tools (#​551) - ⚠️ BREAKING CHANGE
    • Changed CallToolResult.structuredContent type from Map<String,Object> to Object
    • Now supports both objects and arrays as structured content output
    • Updated JsonSchemaValidator to validate any Object type
    • Deprecated CallToolResult constructors in favor of builder pattern
    • Aligns with MCP specification requirements for array-type output schemas

🐛 Bug Fixes

Session Management
  • Fixed LifecycleInitializer error recovery (#​549)
    • Initializer can now recover from errors during doInitialize (e.g., HTTP errors)
    • Prevents getting stuck in error state and allows subsequent initialization calls to work
    • Particularly beneficial for OAuth2 token fetch scenarios
Serialization Improvements
  • Added JsonInclude annotation to notification records (#​552)
    • Enhanced proper JSON serialization for ResourcesUpdatedNotification and LoggingMessageNotification
    • Excludes absent (null/Optional.empty()) fields from serialized output
    • Ensures consistent serialization behavior across all notification types
Test Infrastructure
  • Standardized test parameterization (#​556)
    • Replaced @​ValueSource with @​MethodSource for parameterized tests
    • Added consistent clientsForTesting() methods
    • Removed hardcoded Spring-related labels from framework-agnostic mcp-test module
    • Minor breaking change: moved utility classes from io.modelcontextprotocol.utils to io.modelcontextprotocol.util

⚠️ Breaking Changes Summary

  1. Module Structure Changes (#​557 and #​543))

    • Classes previously in mcp are now in mcp-core. mcp module now serves as an umbrella module bringing together mcp-json-jackson2 and mcp-core.
    • May require classpath adjustments
  2. Tool Result API Changes (#​551)

    • CallToolResult.structuredContent() now returns Object instead of Map<String,Object>
    • Requires explicit casting when accessing map-like content: ((Map<String,Object>) result.structuredContent()).get("key")
    • Deprecated constructors - use builder pattern instead
    • Custom JsonSchemaValidator implementations need signature updates
  3. Package Name Changes (#​556)

    • Utility classes moved from io.modelcontextprotocol.utils to io.modelcontextprotocol.util

📝 Migration Guide

For Tool Result Changes
// Before
result.structuredContent().get("key")

// After  
((Map<String,Object>) result.structuredContent()).get("key")

// Use builder pattern instead of deprecated constructors
CallToolResult.builder()
  .content(content)
  .isError(isError)
  .structuredContent(structuredContent)
  .build()
For Module Dependencies

Ensure your dependencies account for the new module structure:

  • mcp-core for Jackson-free core functionality
  • mcp continues to work as umbrella module with Jackson support

New Contributors

Full Changelog: modelcontextprotocol/java-sdk@v0.12.1...v0.13.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants