Skip to content

build(deps): bump mcp from 0.24.0 to 0.25.0 in /docs#486

Merged
cirdes merged 1 commit into
mainfrom
dependabot/bundler/docs/mcp-0.25.0
Jul 20, 2026
Merged

build(deps): bump mcp from 0.24.0 to 0.25.0 in /docs#486
cirdes merged 1 commit into
mainfrom
dependabot/bundler/docs/mcp-0.25.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps mcp from 0.24.0 to 0.25.0.

Release notes

Sourced from mcp's releases.

v0.25.0

Added

  • Support SEP-990 Cross-App Access via ID-JAG and the jwt-bearer grant (#454)
  • Support client-side sampling via MCP::Client#on_sampling (#458)

Fixed

  • Reject notifications carrying an unknown or expired session (#455)
  • Handle an initialize request sent without an ID (#456)
  • Bound client-side message buffering in the HTTP transport (#459)
  • Lowercase response header names in StreamableHTTPTransport (#460)
Changelog

Sourced from mcp's changelog.

[0.25.0] - 2026-07-18

Added

  • Support SEP-990 Cross-App Access via ID-JAG and the jwt-bearer grant (#454)
  • Support client-side sampling via MCP::Client#on_sampling (#458)

Fixed

  • Reject notifications carrying an unknown or expired session (#455)
  • Handle an initialize request sent without an ID (#456)
  • Bound client-side message buffering in the HTTP transport (#459)
  • Lowercase response header names in StreamableHTTPTransport (#460)
Commits
  • f9fd78e Merge pull request #462 from koic/release_0_25_0
  • df578d7 Release 0.25.0
  • 0b51173 Merge pull request #460 from koic/lowercase_response_header_names
  • b1b50da Merge pull request #461 from koic/avoid_cancelling_conformance_runs_on_main
  • c78d4a2 Avoid cancelling in-progress conformance runs on main
  • 991926a Lowercase response header names in StreamableHTTPTransport
  • cc219a2 Merge pull request #458 from koic/feature_sampling_client
  • 7ebaf98 Merge pull request #459 from koic/bound_client_sse_event_buffering
  • 5533a6d Merge pull request #454 from koic/cross_app_access
  • ced5cd1 Bound client-side message buffering in the HTTP transport
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade mcp in the /docs app from 0.24.0 to 0.25.0 to pick up new cross-app access and client sampling, plus transport stability fixes. This keeps docs examples aligned with the latest MCP behavior.

  • Dependencies
    • Bump mcp to 0.25.0.
    • Highlights: SEP-990 cross-app access via ID-JAG and jwt-bearer; client-side sampling via MCP::Client#on_sampling; fixes for session validation, missing initialize ID, bounded HTTP message buffering, and lowercase response headers in StreamableHTTPTransport.

Written for commit 6be39b0. Summary will update on new commits.

Review in cubic

Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/ruby-sdk@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from cirdes as a code owner July 19, 2026 10:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 19, 2026
@cirdes
cirdes merged commit fdd0267 into main Jul 20, 2026
7 checks passed
@cirdes
cirdes deleted the dependabot/bundler/docs/mcp-0.25.0 branch July 20, 2026 11:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant