chore(deps): update module github.com/modelcontextprotocol/go-sdk to v1.3.1
This MR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| github.com/modelcontextprotocol/go-sdk | require | patch |
v1.3.0 -> v1.3.1
|
⚠️ WarningSome dependencies could not be looked up. Check the warning logs for more information.
MR created with the help of gitlab-org/frontend/renovate-gitlab-bot
Release Notes
modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)
v1.3.1
This release is a patch release for v1.3.0.
It contains a cherry-pick for a security issue reported in #805, which takes advantage of the default behavior of Go's standard library JSON decoder that allows case-insensitive matches to struct field names (or "json" tags). The issue has been addressed by changing the JSON decoder to one that supports case sensitive matching.
Fixes
- all: use case-sensitive JSON unmarshaling by @maciej-kisiel in https://github.com/modelcontextprotocol/go-sdk/pull/807
New external dependencies
- https://github.com/segmentio/encoding, which is the package that provides the new decoder.
Full Changelog: https://github.com/modelcontextprotocol/go-sdk/compare/v1.3.0...v1.3.1
Configuration
- If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.