Skip to content

deps(composer): bump mcp/sdk from 0.4.0 to 0.5.0 in the composer-dependencies group#56

Merged
mneudert merged 4 commits into5.x-devfrom
dependabot/composer/5.x-dev/composer-dependencies-374f7efce4
May 5, 2026
Merged

deps(composer): bump mcp/sdk from 0.4.0 to 0.5.0 in the composer-dependencies group#56
mneudert merged 4 commits into5.x-devfrom
dependabot/composer/5.x-dev/composer-dependencies-374f7efce4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the composer-dependencies group with 1 update: mcp/sdk.

Updates mcp/sdk from 0.4.0 to 0.5.0

Release notes

Sourced from mcp/sdk's releases.

v0.5.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/php-sdk@v0.4.0...v0.5.0

Changelog

Sourced from mcp/sdk's changelog.

0.5.0

  • Add built-in authentication middleware for HTTP transport using OAuth
  • Add client component for building MCP clients
  • Add Builder::setReferenceHandler() to allow custom ReferenceHandlerInterface implementations (e.g. authorization decorators)
  • Add elicitation enum schema types per SEP-1330: TitledEnumSchemaDefinition, MultiSelectEnumSchemaDefinition, TitledMultiSelectEnumSchemaDefinition
  • [BC break] Make Symfony Finder component optional. Users would need to install symfony/finder now themselves
  • Add LenientOidcDiscoveryMetadataPolicy for identity providers that omit code_challenge_methods_supported (e.g. FusionAuth, Microsoft Entra ID)
  • Add OAuth 2.0 Dynamic Client Registration middleware (RFC 7591)
  • Add optional title field to Prompt and McpPrompt for MCP spec compliance
  • [BC Break] Builder::addPrompt() signature changed — $title parameter added between $name and $description. Callers using positional arguments for $description must switch to named arguments.
  • Add optional title field to Tool and McpTool for MCP spec compliance
  • [BC Break] Tool::__construct() signature changed — $title parameter added between $name and $inputSchema. Callers using positional arguments must switch to named arguments or pass null for $title.
  • [BC Break] McpTool attribute signature changed — $title parameter added between $name and $description. Callers using positional arguments for $description must switch to named arguments.
  • [BC Break] Builder::addTool() signature changed — $title parameter added between $name and $description. Callers using positional arguments for $description must switch to named arguments.
Commits
  • fb2c8c2 [Schema][Server] Add top-level title to Tool (#288)
  • 97979ec CS update after release of v3.95 (#282)
  • abae36e [Client] add client conformance test suite (#279)
  • d5b00cd Fix PHPDoc type of GetPromptRequest::$arguments (#285)
  • 73e4cc2 style: apply php-cs-fixer and PHPStan fixes (#289)
  • 7af5a34 Add title field to Prompt for MCP spec compliance (#278)
  • 863cfc1 [Server] feat: relax StrictOidcDiscoveryMetadataPolicy and add Dynamic Client...
  • 5d57b68 Fix to let schema attribute enum type hint allow null values (#271)
  • ea38ef7 Fix to make Symfony Finder component optional (#267)
  • 85fddf5 [Client] docs: introduce client SDK documentation and improve README structur...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@mneudert mneudert force-pushed the dependabot/composer/5.x-dev/composer-dependencies-374f7efce4 branch from 0bc570e to be98b2b Compare April 28, 2026 15:19
dependabot Bot and others added 4 commits May 5, 2026 16:10
Bumps the composer-dependencies group with 1 update: [mcp/sdk](https://github.com/modelcontextprotocol/php-sdk).


Updates `mcp/sdk` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/modelcontextprotocol/php-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/php-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/php-sdk@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: mcp/sdk
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@mneudert mneudert force-pushed the dependabot/composer/5.x-dev/composer-dependencies-374f7efce4 branch from be98b2b to bb442c6 Compare May 5, 2026 14:10
@mneudert mneudert merged commit 9f3e05a into 5.x-dev May 5, 2026
9 checks passed
@mneudert mneudert deleted the dependabot/composer/5.x-dev/composer-dependencies-374f7efce4 branch May 5, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant