build(deps): bump mcp from 0.24.0 to 0.25.0 in /docs

Merged
DE
3mo ago
+1-1

Bumps mcp from 0.24.0 to 0.25.0.

Release notes

Sourced from mcp's releases.

v0.25.0

Added

  • Support SEP-990 Cross-App Access via ID-JAG and the jwt-bearer grant (#454)
  • Support client-side sampling via MCP::Client#on_sampling (#458)

Fixed

  • Reject notifications carrying an unknown or expired session (#455)
  • Handle an initialize request sent without an ID (#456)
  • Bound client-side message buffering in the HTTP transport (#459)
  • Lowercase response header names in StreamableHTTPTransport (#460)
Changelog

Sourced from mcp's changelog.

[0.25.0] - 2026-07-18

Added

  • Support SEP-990 Cross-App Access via ID-JAG and the jwt-bearer grant (#454)
  • Support client-side sampling via MCP::Client#on_sampling (#458)

Fixed

  • Reject notifications carrying an unknown or expired session (#455)
  • Handle an initialize request sent without an ID (#456)
  • Bound client-side message buffering in the HTTP transport (#459)
  • Lowercase response header names in StreamableHTTPTransport (#460)
Commits
  • f9fd78e Merge pull request #462 from koic/release_0_25_0
  • df578d7 Release 0.25.0
  • 0b51173 Merge pull request #460 from koic/lowercase_response_header_names
  • b1b50da Merge pull request #461 from koic/avoid_cancelling_conformance_runs_on_main
  • c78d4a2 Avoid cancelling in-progress conformance runs on main
  • 991926a Lowercase response header names in StreamableHTTPTransport
  • cc219a2 Merge pull request #458 from koic/feature_sampling_client
  • 7ebaf98 Merge pull request #459 from koic/bound_client_sse_event_buffering
  • 5533a6d Merge pull request #454 from koic/cross_app_access
  • ced5cd1 Bound client-side message buffering in the HTTP transport
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade mcp in the /docs app from 0.24.0 to 0.25.0 to pick up new cross-app access and client sampling, plus transport stability fixes. This keeps docs examples aligned with the latest MCP behavior.

  • Dependencies
    • Bump mcp to 0.25.0.
    • Highlights: SEP-990 cross-app access via ID-JAG and jwt-bearer; client-side sampling via MCP::Client#on_sampling; fixes for session validation, missing initialize ID, bounded HTTP message buffering, and lowercase response headers in StreamableHTTPTransport.