Release v1.10.3

Release type: stable
Release line: 1.10.x
Branch: release/1.10.x

npm install @frontmcp/sdk@1.10.3

Bug Fixes

Upgraded @modelcontextprotocol/sdk from version 1.29.0 to 1.32.1 to address a high-severity security vulnerability (GHSA-6qxp-vccf-f47h). This ensures that downstream applications no longer need to use a resolutions override to mitigate the issue (#896).
Resolved an issue where the Content-Type: application/json header was incorrectly included in empty successful notification responses. This prevents JSON parsing errors in the development bridge (#896).
Fixed the handling of request body limits, ensuring that configured limits above the default 4 MiB are respected on Workers and edge environments. Requests exceeding the limit now correctly receive an HTTP 413 response (#896).
Updated redirect handling for remote MCP apps to only follow same-origin redirects that maintain the request method. This prevents potential security issues with redirects involving credentials (#896).

What's Changed

fix(protocol): upgrade @modelcontextprotocol/sdk to 1.32.1 (GHSA-6qxp-vccf-f47h) by @frontegg-david in #896

Full Changelog: v1.10.2...v1.10.3