Open
Conversation
Added SDK Version Pin Agent documentation outlining its role, actions, scope, constraints, and examples for managing SDK dependencies across multiple repositories.
- CODEOWNERS: update auth-team paths to match v2 monorepo layout (old paths referenced /src/... which no longer exist, causing all auth-related PRs to skip required auth-team review) - ci: align actions/checkout and actions/setup-node to @v6 in the publish job of main.yml (was @v4, inconsistent with build/test jobs) - ci: add typecheck+lint gate to publish.yml before building preview packages (broken code could previously be published on every push) - ci: remove continue-on-error from conformance jobs; expected-failures is empty so real regressions were silently swallowed - security: remove internal error detail (String(error)) from the JSON-RPC parse-error response body in streamableHttp — stack traces and file paths should not be forwarded to clients - refactor: convert tasks/result polling handler from unbounded recursion to an explicit while-loop, eliminating deep promise-chain accumulation for long-running tasks https://claude.ai/code/session_01CCxV9DvdS7Bf7bck3R9FJs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Add CodeQL analysis workflow configuration
Version Packages
|
@modelcontextprotocol/client
@modelcontextprotocol/server
@modelcontextprotocol/express
@modelcontextprotocol/hono
@modelcontextprotocol/node
commit: |
There was a problem hiding this comment.
Pull request overview
This PR appears to finalize a 2.0.0 release across the TypeScript SDK’s workspace packages, including version bumps, generated package changelogs, and removal of now-consumed changesets. It also includes a couple of runtime behavior tweaks (task polling + error response sanitization) and CI/workflow updates.
Changes:
- Bump multiple workspace packages from
2.0.0-alpha.0→2.0.0and add packageCHANGELOG.mdfiles; remove corresponding.changeset/*entries. - Adjust runtime behavior: avoid leaking raw parse errors in Streamable HTTP JSON-RPC responses; refactor
tasks/resultto use an iterative polling loop. - CI/ops updates: add
check:allto publish workflow, make conformance jobs non-optional, add a CodeQL workflow, and update CODEOWNERS/agent docs.
Reviewed changes
Copilot reviewed 39 out of 39 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| test/integration/package.json | Release version bump to 2.0.0 for integration package. |
| test/integration/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/server/src/server/streamableHttp.ts | Stop including raw parse error details in JSON-RPC responses. |
| packages/server/package.json | Release version bump to 2.0.0. |
| packages/server/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/middleware/node/package.json | Release version bump to 2.0.0. |
| packages/middleware/node/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/middleware/hono/package.json | Release version bump to 2.0.0. |
| packages/middleware/hono/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/middleware/express/package.json | Release version bump to 2.0.0. |
| packages/middleware/express/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/core/src/shared/protocol.ts | Replace recursive tasks/result polling with an iterative loop. |
| packages/core/package.json | Release version bump to 2.0.0. |
| packages/core/CHANGELOG.md | Add generated changelog for 2.0.0. |
| packages/client/package.json | Release version bump to 2.0.0. |
| packages/client/CHANGELOG.md | Add generated changelog for 2.0.0. |
| .github/workflows/publish.yml | Add pnpm run check:all before build/publish. |
| .github/workflows/main.yml | Update action versions used by CI jobs. |
| .github/workflows/conformance.yml | Make conformance jobs blocking (continue-on-error: false). |
| .github/workflows/codeql.yml | Add CodeQL scanning workflow. |
| .github/agents/sdk-version-pin-agent.agent.md | Add agent instructions for tracking/upgrading SDK versions across dependent repos. |
| .github/CODEOWNERS | Update auth-related ownership paths to current repo layout. |
| .changeset/use-scopes-supported-in-dcr.md | Remove consumed changeset entry. |
| .changeset/twelve-dodos-taste.md | Remove consumed changeset entry. |
| .changeset/tender-snails-fold.md | Remove consumed changeset entry. |
| .changeset/shy-times-learn.md | Remove consumed changeset entry. |
| .changeset/rich-hounds-report.md | Remove consumed changeset entry. |
| .changeset/respect-capability-negotiation.md | Remove consumed changeset entry. |
| .changeset/quick-islands-occur.md | Remove consumed changeset entry. |
| .changeset/oauth-error-http200.md | Remove consumed changeset entry. |
| .changeset/heavy-walls-swim.md | Remove consumed changeset entry. |
| .changeset/funky-baths-attack.md | Remove consumed changeset entry. |
| .changeset/fix-unknown-tool-protocol-error.md | Remove consumed changeset entry. |
| .changeset/fix-task-session-isolation.md | Remove consumed changeset entry. |
| .changeset/expose-auth-server-discovery.md | Remove consumed changeset entry. |
| .changeset/cyan-cycles-pump.md | Remove consumed changeset entry. |
| .changeset/busy-weeks-hang.md | Remove consumed changeset entry. |
| .changeset/brave-lions-glow.md | Remove consumed changeset entry. |
| .changeset/add-hono-peer-dep.md | Remove consumed changeset entry. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation and Context
How Has This Been Tested?
Breaking Changes
Types of changes
Checklist
Additional context