Skip to content

Bump mcp from 0.15.0 to 0.18.0 in /docs#404

Merged
cirdes merged 1 commit into
mainfrom
dependabot/bundler/docs/mcp-0.18.0
Jun 1, 2026
Merged

Bump mcp from 0.15.0 to 0.18.0 in /docs#404
cirdes merged 1 commit into
mainfrom
dependabot/bundler/docs/mcp-0.18.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 31, 2026

Bumps mcp from 0.15.0 to 0.18.0.

Release notes

Sourced from mcp's releases.

v0.18.0

Added

  • Support server-to-client ping per MCP specification (#358)

Changed

  • Warn on implicit stdio initialization (#338)
  • Cache Tool::Schema validation to avoid re-validating identical schemas (#363)

Fixed

  • Fix case-sensitive Accept header comparison (#359)

v0.17.0

Added

  • Add OAuth 2.1 client support for MCP authorization flow (#353)

Fixed

  • Validate MCP-Protocol-Version header in StreamableHTTPTransport (#347)
  • Reject duplicate initialize requests (#350)
  • Reject non-Hash JSON-RPC bodies in StreamableHTTPTransport (#354)

v0.16.0

Added

  • Add opt-in tool output validation (#344)

Changed

  • Advertise JSON Schema 2020-12 dialect on emitted tool schemas (#342)

Fixed

  • Preserve client tool output schemas (#343)
  • Fix missing output_schema argument in define_tool API (#301)
Changelog

Sourced from mcp's changelog.

[0.18.0] - 2026-05-30

Added

  • Support server-to-client ping per MCP specification (#358)

Changed

  • Warn on implicit stdio initialization (#338)
  • Cache Tool::Schema validation to avoid re-validating identical schemas (#363)

Fixed

  • Fix case-sensitive Accept header comparison (#359)

[0.17.0] - 2026-05-19

Added

  • Add OAuth 2.1 client support for MCP authorization flow (#353)

Fixed

  • Validate MCP-Protocol-Version header in StreamableHTTPTransport (#347)
  • Reject duplicate initialize requests (#350)
  • Reject non-Hash JSON-RPC bodies in StreamableHTTPTransport (#354)

[0.16.0] - 2026-05-14

Added

  • Add opt-in tool output validation (#344)

Changed

  • Advertise JSON Schema 2020-12 dialect on emitted tool schemas (#342)

Fixed

  • Preserve client tool output schemas (#343)
  • Fix missing output_schema argument in define_tool API (#301)
Commits
  • 3ff237a Merge pull request #367 from koic/release_0_18_0
  • 3988291 Release 0.18.0
  • f6e43d9 Merge pull request #363 from koic/cache-tool-schema-validation
  • 5c8b132 Cache Tool::Schema Validation to Avoid Re-validating Identical Schemas
  • fd2fd27 Merge pull request #338 from atesgoral/warn-stdio-implicit-connect
  • c4c1f2b Merge pull request #360 from yuki3738/fix_typo_for_client_method_references
  • a28a343 [Doc] Fix typos in MCP::Client method references
  • b6462fe feat: warn on implicit stdio initialization
  • dd7daca Merge pull request #359 from koic/case_insensitive_accept_header
  • 9b89620 Fix case-sensitive Accept header comparison
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Update mcp to 0.18.0 in docs to align with the latest MCP spec and improve reliability and performance.

  • Dependencies
    • mcp: 0.15.0 → 0.18.0 — adds server-to-client ping, OAuth 2.1 client flow, opt-in tool output validation, schema validation caching, and header handling fixes.
    • addressable: 2.8.7 → 2.9.0
    • public_suffix: 6.0.1 → 7.0.5

Written for commit 7c2941a. Summary will update on new commits.

Review in cubic

Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.15.0 to 0.18.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/ruby-sdk@v0.15.0...v0.18.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 31, 2026
@dependabot dependabot Bot requested a review from cirdes as a code owner May 31, 2026 10:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 31, 2026
@cirdes cirdes merged commit df2d436 into main Jun 1, 2026
6 of 7 checks passed
@cirdes cirdes deleted the dependabot/bundler/docs/mcp-0.18.0 branch June 1, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant