chore: update github.com/modelcontextprotocol/go-sdk v1.3.1 → v1.4.0#19203
Merged
chore: update github.com/modelcontextprotocol/go-sdk v1.3.1 → v1.4.0#19203
Conversation
…1.4.0 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Update github.com/modelcontextprotocol/go-sdk to version v1.4.0
chore: update github.com/modelcontextprotocol/go-sdk v1.3.1 → v1.4.0
Mar 2, 2026
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the github.com/modelcontextprotocol/go-sdk Go dependency from v1.3.1 to v1.4.0 (notable upstream behavior changes called out in the PR description).
Changes:
- Bump
github.com/modelcontextprotocol/go-sdkrequirement to v1.4.0 ingo.mod - Refresh
go.sumentries for the updated module and transitive deps (includinggithub.com/golang-jwt/jwt/v5to v5.3.0)
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| go.mod | Updates the direct dependency version for github.com/modelcontextprotocol/go-sdk to v1.4.0. |
| go.sum | Updates checksums to match the new module graph after the version bump. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Minor version bump with two notable behavior changes: DNS rebinding protection (localhost servers now reject requests with non-localhost
Hostheaders) and HTML escaping disabled by default in JSON marshaling. Both can be reverted viaMCPGODEBUGuntil v1.6.0.Changes
go.mod: bumpgithub.com/modelcontextprotocol/go-sdkto v1.4.0go.sum: updated checksums; picks upgithub.com/golang-jwt/jwt/v5 v5.3.0as new transitive dep (required for experimental client-side OAuth in go-sdk)Notable upstream changes in v1.4.0
Hostheaders by default (MCPGODEBUG=disablelocalhostprotection=1to disable)MCPGODEBUG=jsonescaping=1to restore)Content-LengthparsingWarning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
https://api.github.com/graphql/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw 4.0/oauth2.go x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git _.a --global 64/pkg/tool/linu--show-toplevel git(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw nly /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel 647249/b404/imporev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v3/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -unreachable=false /tmp/go-build332647249/b055/vet.cfg 647249/b361/vet.cfg(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha 3628-17862/test-3767061143 git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� runs/20260302-123628-17862/test-3066656146 git /usr/bin/git l s9ZXZGY/X4XoDkfirev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v5/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha get cfg 64/pkg/tool/linux_amd64/vet user.email(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha /tmp/gh-aw-test-runs/20260302-123504-13404/test-419102839 rev-parse /opt/hostedtoolcache/node/24.13.1/x64/bin/node @{u}(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel 64/pkg/tool/linu/tmp/go-build332647249/b436/_testmain.go /usr/bin/git --local user.email 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git FETCH_HEAD cfg 64/pkg/tool/linu--show-toplevel git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v6/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha s/test.md --json /usr/bin/git --repo owner/repo(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel -tests 647249/b421/vet.cfg(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel 51RFpkM/58sERvdotCvyK1taGOl6 /usr/bin/git get --local 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git rd cfg 64/pkg/tool/linu--show-toplevel git(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v8/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build332647249/b385/importcfg -embedcfg /tmp/go-build332647249/b385/embedcfg -pack(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha d -n 10(http block)https://api.github.com/repos/actions/setup-go/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha -stringintconv -tests /usr/bin/git(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha /var/lib/waagent git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git -C /tmp/compile-instructions-test-2836695038/.github/workflows rev-parse(http block)https://api.github.com/repos/actions/setup-node/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha s/test.md -tests 647249/b418/vet.cfg(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /var/lib/waagent(http block)https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha --noprofile(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --git-dir x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts/usr/bin/gh gh run download 1 --dir test-logs/run-1(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build332rev-parse ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile /usr/bin/git 647249/b428/_pkggit /tmp/go-build332config clusion,workflowuser.email git(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git --show-toplevel l /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git om/testorg/testruser.email git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts/usr/bin/gh gh run download 12345 --dir test-logs/run-12345(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git ithub/workflows/git -buildtags 647249/b419/stri--git-dir git rev-�� --show-toplevel 647249/b419/stringutil.test /usr/bin/infocmp t0 -buildtags clusion,workflow--show-toplevel infocmp(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 git /usr/bin/git --show-toplevel l /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /home/REDACTED/.lo--show-toplevel git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts/usr/bin/gh gh run download 12346 --dir test-logs/run-12346(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build332-C ache/node/24.13./tmp/gh-aw-test-runs/20260302-123628-17862/test-3767061143 git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/gh sistency_GoAndJagit -buildtags /usr/bin/git gh(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel(http block)https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts/usr/bin/gh gh run download 2 --dir test-logs/run-2(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit tmain.go 1/x64/bin/node git rev-�� --show-toplevel 1/x64/bin/node /usr/bin/git 647249/b424/testgit -buildtags ache/go/1.25.0/x--git-dir git(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/git runs/20260302-12git git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel l /usr/bin/bash git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts/usr/bin/gh gh run download 3 --dir test-logs/run-3(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git ithub/workflows/git /tmp/go-build332checkout ache/node/24.13..github/workflows/test.md git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git sistency_GoAndJagit -buildtags /usr/bin/git git(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/git runs/20260302-12git git /usr/bin/git git rev-�� --show-toplevel(http block)https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts/usr/bin/gh gh run download 4 --dir test-logs/run-4(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build332-C cfg git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/link /usr/bin/git 647249/b428/timegit -buildtags 647249/b428/impo--show-toplevel git(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/tail git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts/usr/bin/gh gh run download 5 --dir test-logs/run-5(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build332reset epo.git git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/x-short /usr/bin/git sistency_GoAndJagit -buildtags /usr/bin/git git(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /opt/hostedtoolc--show-toplevel git(http block)https://api.github.com/repos/github/gh-aw/actions/workflows/usr/bin/gh gh workflow list --json name,state,path(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --get-regexp --global 64/pkg/tool/linux_amd64/vet(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel 647249/b408/importcfg x_amd64/vet ithub-script/gitgit -buildtags /tmp/go-build332--show-toplevel x_amd64/vet rev-�� --show-toplevel /tmp/go-build332647249/b402/logger.test /usr/bin/git /v1.0.0 -test.v=true /usr/bin/git git(http block)https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --get-regexp --global 64/pkg/tool/linux_amd64/vet(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet x_amd64/vet sistency_GoAndJagit 647249/b405/_tesrev-parse /usr/bin/infocmp--show-toplevel x_amd64/vet rev-�� --show-toplevel infocmp /usr/bin/git f/tags/v999.999.git -tests /usr/bin/git git(http block)https://api.github.com/repos/nonexistent/repo/actions/runs/12345/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion(http block)/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion -unreachable=falgit /tmp/go-build332rev-parse /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel 49388bd533a6bf33816285cb..HEAD /usr/bin/git /tmp/go-build332git -trimpath /usr/bin/git git(http block)/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel l /usr/bin/git git |g --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git(http block)https://api.github.com/repos/owner/repo/actions/workflows/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo de/node/bin/git ader(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git se 647249/b041/vet.rev-parse cfg git 1/x6�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git 3504-13404/test-git 647249/b164/vet.rev-parse ache/go/1.25.0/x--show-toplevel git(http block)https://api.github.com/repos/owner/repo/contents/file.md/tmp/go-build332647249/b383/cli.test /tmp/go-build332647249/b383/cli.test -test.testlogfile=/tmp/go-build332647249/b383/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true(http block)/tmp/go-build1592370005/b001/cli.test /tmp/go-build1592370005/b001/cli.test -test.testlogfile=/tmp/go-build1592370005/b001/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true _.a(http block)/tmp/go-build3114898353/b001/cli.test /tmp/go-build3114898353/b001/cli.test -test.testlogfile=/tmp/go-build3114898353/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true -test.short=true -test.run=^Test /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git 3767061143 git /usr/bin/git git(http block)https://api.github.com/repos/test-owner/test-repo/actions/secrets/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name(http block)/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet 64/bin/node l && debian-sa1 git 647249/b025/vet.rev-parse cfg git 1/x6�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git HEAD(http block)/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git(http block)If you need me to access, download, or install something from one of these locations, you can either:
Original prompt
🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.
✨ PR Review Safe Output Test - Run 22576477395