chore: mcp 1.24.0

[RomneyDa]

Description

remake of #8971

---

Summary by cubic

Upgrade @modelcontextprotocol/sdk to ^1.24.0 across core and CLI to align with the latest protocol changes and improve stability. Adds small compatibility fixes to MCP prompt role parsing and resource text handling; also bumps AWS Bedrock SDKs and pins vectordb.

• Bug Fixes

  • Prompt stringification now derives role from content.role or _meta.role, defaulting to assistant.
  • Validate MCP resources include a text field and use resource.text for content.

• Dependencies

  • @modelcontextprotocol/sdk: ^1.24.0 (ajv v8, ajv-formats, jose, eventsource-parser; zod peer ^3.25 || ^4; zod-to-json-schema ^3.25.0)
  • @aws-sdk/client-bedrock-runtime: ^3.925.0; @aws-sdk/credential-providers: ^3.929.0
  • vectordb: pinned to 0.4.20

^{Written for commit c8066e6. Summary will update automatically on new commits.}

[continue]

Keep this PR in a mergeable state →

Learn more

---

All Green is an AI agent that automatically:

✅ Addresses code review comments

✅ Fixes failing CI checks

✅ Resolves merge conflicts

[continue-development-app]

Keep this PR in a mergeable state →

Learn more

---

All Green is an AI agent that automatically:

✅ Addresses code review comments

✅ Fixes failing CI checks

✅ Resolves merge conflicts

[continue-development-app]

Keep this PR in a mergeable state →

Learn more

---

All Green is an AI agent that automatically:

✅ Addresses code review comments

✅ Fixes failing CI checks

✅ Resolves merge conflicts

[github-actions]

✅ Review Complete

This PR upgrades @modelcontextprotocol/sdk from version 1.12.0/1.17.2 to 1.24.0 and updates related AWS Bedrock SDK dependencies. Here's my review:

Overall Assessment

✅ The changes look clean and focused. This is primarily a dependency upgrade with appropriate version pinning.

Key Changes Reviewed

1. MCP SDK Upgrade (1.12.0 → 1.24.0)

• New dependencies added: ajv-formats, eventsource-parser, jose
• Breaking change: Upgraded from ajv v6 to v8
• New peer dependency: zod is now a required peer dependency (was previously just a dependency)
• Zod version constraint: Now supports both ^3.25 || ^4.0

Potential Issues:

• ⚠️ Ajv v6 → v8 migration: This is a major version change that could introduce breaking changes in JSON schema validation. The codebase should be tested to ensure any MCP-related validation still works correctly.
• ✅ The zod peer dependency requirement is satisfied since the project already uses zod@^3.25.0

2. AWS Bedrock SDK Upgrades

-"@aws-sdk/client-bedrock-runtime": "^3.842.0"
+"@aws-sdk/client-bedrock-runtime": "^3.925.0"
-"@aws-sdk/credential-providers": "^3.913.0"
+"@aws-sdk/credential-providers": "^3.925.0"

✅ These are minor version bumps within the same major version - should be safe.

3. Vectordb Pinning

-"vectordb": "^0.4.20"
+"vectordb": "0.4.20"

✅ Good defensive practice - pinning prevents unexpected updates.

Testing Recommendations

1. MCP functionality: Test all MCP-related features, especially:

   • MCP server connections
   • MCP context providers
   • OAuth flows (new jose dependency suggests enhanced JWT handling)

2. Schema validation: Verify any code using MCP SDK's validation (likely using ajv internally)

3. Bedrock integration: Test AWS Bedrock runtime if used in the codebase

Questions

• Are there any integration tests covering MCP functionality that can validate this upgrade?
• Has this been tested against existing MCP servers in use?

Verdict

APPROVE with recommended thorough testing of MCP features due to the ajv major version change.

---

[continue]

Reviewed PR #8974 for documentation updates. No documentation changes needed because:

1. Internal dependency upgrade: This is a routine update of the MCP SDK from 1.12.0/1.17.2 to 1.24.0
2. Backward compatible: The upgrade maintains compatibility with existing configurations
3. No user-facing changes: The existing MCP documentation in extensions/cli/spec/mcp.md describes integration architecture, not version-specific features
4. Automatic benefits: Users automatically benefit from improved stability and new MCP protocol features (Tasks, URL Elicitation, Sampling With Tools) without needing documentation changes

The PR appropriately updates internal dependencies (ajv v8, AWS SDKs, pinned vectordb) without requiring corresponding documentation updates.

[cubic-dev-ai]

No issues found across 4 files

[sestinj]

🎉 This PR is included in version 1.7.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀