Skip to content

build(deps): bump the codelit-platform group with 7 updates - #185

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/codelit-platform-f28cd41d99
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/codelit-platform-f28cd41d99

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown

Bumps the codelit-platform group with 7 updates:

Package From To
@codelitdev/mcp-server-kit 0.4.2 0.5.0
@codelitdev/oauth-server-kit 0.4.2 0.5.0
@codelitdev/observability 0.4.2 0.5.0
@codelitdev/platform 0.4.2 0.5.0
@codelitdev/billing 0.4.2 0.5.0
@codelitdev/platform-conformance 0.4.2 0.5.0
@codelitdev/design-system 0.4.2 0.5.0

Updates @codelitdev/mcp-server-kit from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/mcp-server-kit's releases.

@​codelitdev/mcp-server-kit@​0.5.0

Minor Changes

  • ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (@modelcontextprotocol/server) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.

    • Modern clients get the 2026-07-28 protocol: server/discover, per-request protocol envelopes, Mcp-Method/Mcp-Name header validation, resultType, and cache hints on tools/list and server/discover (five minutes, private by default; set catalogCacheHint to change it).
    • 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. initialize no longer mints an Mcp-Session-Id; GET and DELETE answer 405.
    • Tool results carry structuredContent plus one text copy. The invalid { type: "json" } content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
    • Tool failures, including a destructive call without confirm: true, are tool results with isError: true and structuredContent: { code, message, details }, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body ({ code, message }) with its HTTP status.
    • Tool input schemas are advertised as JSON Schema without $schema, so clients read them under MCP's default dialect. Annotations follow the spec (readOnlyHint, destructiveHint); the risk stays in the tool's _meta.risk.
    • New options: description, instructions, catalogCacheHint.
    • Removed exports: createMcpSessionStore, McpSession, McpSessionStore, StreamableHTTPServerTransport, WebStandardStreamableHTTPServerTransport, and the kit's sessions property.

    platform-conformance reads MCP tool failures from isError tool results.

Patch Changes

  • @​codelitdev/platform@​0.5.0
Changelog

Sourced from @​codelitdev/mcp-server-kit's changelog.

0.5.0

Minor Changes

  • ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (@modelcontextprotocol/server) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.

    • Modern clients get the 2026-07-28 protocol: server/discover, per-request protocol envelopes, Mcp-Method/Mcp-Name header validation, resultType, and cache hints on tools/list and server/discover (five minutes, private by default; set catalogCacheHint to change it).
    • 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. initialize no longer mints an Mcp-Session-Id; GET and DELETE answer 405.
    • Tool results carry structuredContent plus one text copy. The invalid { type: "json" } content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
    • Tool failures, including a destructive call without confirm: true, are tool results with isError: true and structuredContent: { code, message, details }, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body ({ code, message }) with its HTTP status.
    • Tool input schemas are advertised as JSON Schema without $schema, so clients read them under MCP's default dialect. Annotations follow the spec (readOnlyHint, destructiveHint); the risk stays in the tool's _meta.risk.
    • New options: description, instructions, catalogCacheHint.
    • Removed exports: createMcpSessionStore, McpSession, McpSessionStore, StreamableHTTPServerTransport, WebStandardStreamableHTTPServerTransport, and the kit's sessions property.

    platform-conformance reads MCP tool failures from isError tool results.

Patch Changes

  • @​codelitdev/platform@​0.5.0
Commits
  • d0c0f1d Release Platform packages
  • ffcabaa feat(mcp-server-kit): serve MCP 2026-07-28 statelessly on SDK 2
  • See full diff in compare view

Updates @codelitdev/oauth-server-kit from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/oauth-server-kit's releases.

@​codelitdev/oauth-server-kit@​0.5.0

No changes in this release.

Changelog

Sourced from @​codelitdev/oauth-server-kit's changelog.

0.5.0

No changes in this release.

Commits

Updates @codelitdev/observability from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/observability's releases.

@​codelitdev/observability@​0.5.0

No changes in this release.

Changelog

Sourced from @​codelitdev/observability's changelog.

0.5.0

No changes in this release.

Commits

Updates @codelitdev/platform from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/platform's releases.

@​codelitdev/platform-cli@​0.5.0

No changes in this release.

@​codelitdev/platform-conformance@​0.5.0

Patch Changes

  • ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (@modelcontextprotocol/server) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.

    • Modern clients get the 2026-07-28 protocol: server/discover, per-request protocol envelopes, Mcp-Method/Mcp-Name header validation, resultType, and cache hints on tools/list and server/discover (five minutes, private by default; set catalogCacheHint to change it).
    • 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. initialize no longer mints an Mcp-Session-Id; GET and DELETE answer 405.
    • Tool results carry structuredContent plus one text copy. The invalid { type: "json" } content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
    • Tool failures, including a destructive call without confirm: true, are tool results with isError: true and structuredContent: { code, message, details }, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body ({ code, message }) with its HTTP status.
    • Tool input schemas are advertised as JSON Schema without $schema, so clients read them under MCP's default dialect. Annotations follow the spec (readOnlyHint, destructiveHint); the risk stays in the tool's _meta.risk.
    • New options: description, instructions, catalogCacheHint.
    • Removed exports: createMcpSessionStore, McpSession, McpSessionStore, StreamableHTTPServerTransport, WebStandardStreamableHTTPServerTransport, and the kit's sessions property.

    platform-conformance reads MCP tool failures from isError tool results.

  • @​codelitdev/platform@​0.5.0

@​codelitdev/platform@​0.5.0

Patch Changes

  • @​codelitdev/billing@​0.5.0
Changelog

Sourced from @​codelitdev/platform's changelog.

0.5.0

Patch Changes

  • @​codelitdev/billing@​0.5.0
Commits

Updates @codelitdev/billing from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/billing's releases.

@​codelitdev/billing@​0.5.0

No changes in this release.

Changelog

Sourced from @​codelitdev/billing's changelog.

0.5.0

No changes in this release.

Commits

Updates @codelitdev/platform-conformance from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/platform-conformance's releases.

@​codelitdev/platform-conformance@​0.5.0

Patch Changes

  • ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (@modelcontextprotocol/server) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.

    • Modern clients get the 2026-07-28 protocol: server/discover, per-request protocol envelopes, Mcp-Method/Mcp-Name header validation, resultType, and cache hints on tools/list and server/discover (five minutes, private by default; set catalogCacheHint to change it).
    • 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. initialize no longer mints an Mcp-Session-Id; GET and DELETE answer 405.
    • Tool results carry structuredContent plus one text copy. The invalid { type: "json" } content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
    • Tool failures, including a destructive call without confirm: true, are tool results with isError: true and structuredContent: { code, message, details }, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body ({ code, message }) with its HTTP status.
    • Tool input schemas are advertised as JSON Schema without $schema, so clients read them under MCP's default dialect. Annotations follow the spec (readOnlyHint, destructiveHint); the risk stays in the tool's _meta.risk.
    • New options: description, instructions, catalogCacheHint.
    • Removed exports: createMcpSessionStore, McpSession, McpSessionStore, StreamableHTTPServerTransport, WebStandardStreamableHTTPServerTransport, and the kit's sessions property.

    platform-conformance reads MCP tool failures from isError tool results.

  • @​codelitdev/platform@​0.5.0

Changelog

Sourced from @​codelitdev/platform-conformance's changelog.

0.5.0

Patch Changes

  • ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (@modelcontextprotocol/server) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.

    • Modern clients get the 2026-07-28 protocol: server/discover, per-request protocol envelopes, Mcp-Method/Mcp-Name header validation, resultType, and cache hints on tools/list and server/discover (five minutes, private by default; set catalogCacheHint to change it).
    • 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. initialize no longer mints an Mcp-Session-Id; GET and DELETE answer 405.
    • Tool results carry structuredContent plus one text copy. The invalid { type: "json" } content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
    • Tool failures, including a destructive call without confirm: true, are tool results with isError: true and structuredContent: { code, message, details }, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body ({ code, message }) with its HTTP status.
    • Tool input schemas are advertised as JSON Schema without $schema, so clients read them under MCP's default dialect. Annotations follow the spec (readOnlyHint, destructiveHint); the risk stays in the tool's _meta.risk.
    • New options: description, instructions, catalogCacheHint.
    • Removed exports: createMcpSessionStore, McpSession, McpSessionStore, StreamableHTTPServerTransport, WebStandardStreamableHTTPServerTransport, and the kit's sessions property.

    platform-conformance reads MCP tool failures from isError tool results.

  • @​codelitdev/platform@​0.5.0

Commits
  • d0c0f1d Release Platform packages
  • ffcabaa feat(mcp-server-kit): serve MCP 2026-07-28 statelessly on SDK 2
  • See full diff in compare view

Updates @codelitdev/design-system from 0.4.2 to 0.5.0

Release notes

Sourced from @​codelitdev/design-system's releases.

@​codelitdev/design-system@​0.5.0

No changes in this release.

Changelog

Sourced from @​codelitdev/design-system's changelog.

0.5.0

No changes in this release.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the codelit-platform group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@codelitdev/mcp-server-kit](https://github.com/codelitdev/platform/tree/HEAD/packages/mcp-server-kit) | `0.4.2` | `0.5.0` |
| [@codelitdev/oauth-server-kit](https://github.com/codelitdev/platform/tree/HEAD/packages/oauth-server-kit) | `0.4.2` | `0.5.0` |
| [@codelitdev/observability](https://github.com/codelitdev/platform/tree/HEAD/packages/observability) | `0.4.2` | `0.5.0` |
| [@codelitdev/platform](https://github.com/codelitdev/platform/tree/HEAD/packages/platform) | `0.4.2` | `0.5.0` |
| [@codelitdev/billing](https://github.com/codelitdev/platform/tree/HEAD/packages/billing) | `0.4.2` | `0.5.0` |
| [@codelitdev/platform-conformance](https://github.com/codelitdev/platform/tree/HEAD/packages/platform-conformance) | `0.4.2` | `0.5.0` |
| [@codelitdev/design-system](https://github.com/codelitdev/platform/tree/HEAD/packages/design-system) | `0.4.2` | `0.5.0` |


Updates `@codelitdev/mcp-server-kit` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/mcp-server-kit/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/mcp-server-kit@0.5.0/packages/mcp-server-kit)

Updates `@codelitdev/oauth-server-kit` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/oauth-server-kit/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/oauth-server-kit@0.5.0/packages/oauth-server-kit)

Updates `@codelitdev/observability` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/observability/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/observability@0.5.0/packages/observability)

Updates `@codelitdev/platform` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/platform/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/platform@0.5.0/packages/platform)

Updates `@codelitdev/billing` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/billing/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/billing@0.5.0/packages/billing)

Updates `@codelitdev/platform-conformance` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/platform-conformance/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/platform-conformance@0.5.0/packages/platform-conformance)

Updates `@codelitdev/design-system` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/codelitdev/platform/releases)
- [Changelog](https://github.com/codelitdev/platform/blob/main/packages/design-system/CHANGELOG.md)
- [Commits](https://github.com/codelitdev/platform/commits/@codelitdev/design-system@0.5.0/packages/design-system)

---
updated-dependencies:
- dependency-name: "@codelitdev/mcp-server-kit"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/oauth-server-kit"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/observability"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/platform"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/billing"
  dependency-version: 0.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/platform-conformance"
  dependency-version: 0.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
- dependency-name: "@codelitdev/design-system"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codelit-platform
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/codelit-platform-f28cd41d99 branch November 3, 2026 03:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants