chore: update MCP SDK

[zereight]

Summary

• Update @modelcontextprotocol/sdk to ^1.29.0 in the root package and lockfile.
• Align the nested mcp-server package with the same SDK range.

Sources inspected

• package.json
• package-lock.json
• mcp-server/package.json
• npm metadata for @modelcontextprotocol/sdk@1.29.0

Validation

• npm run build
• npm run test:schema — 105 passed, 0 failed; JSON schema helper tests passed
• node --import tsx/esm --test test/remote-auth-simple-test.ts test/mcp-oauth-tests.ts test/streamable-http-static-token-auth.test.ts test/streamable-http-concurrent-session.test.ts test/streamable-http-unauthenticated-discovery.test.ts test/nullish-tool-arguments-schema.test.ts — 52 passed, 0 failed
• cd mcp-server && npm install --ignore-scripts --package-lock=false && npm run build

Notes

• Left zod and zod-to-json-schema pinned to avoid reintroducing the previous schema conversion breakage.

---

Note

Low Risk
Dependency-only version bump with no application code changes; prior zod pins are explicitly left unchanged to avoid schema regressions.

Overview
Bumps @modelcontextprotocol/sdk to ^1.29.0 in the root package.json and mcp-server/package.json, with matching package-lock.json updates so both packages resolve the same SDK release (root lockfile moves from 1.26.0 to 1.29.0).

No TypeScript or runtime code changes in this diff—only dependency alignment between the main GitLab MCP server and the nested OMG MCP server.

^{Reviewed by Cursor Bugbot for commit ab2f40c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

📝 Walkthrough

Walkthrough

Two package.json files are updated to bump the @modelcontextprotocol/sdk dependency to ^1.29.0: the root manifest moves from ^1.24.2 and the mcp-server manifest moves from ^1.12.1.

Changes

SDK Dependency Bump

Layer / File(s)	Summary
@modelcontextprotocol/sdk version update package.json, mcp-server/package.json	@modelcontextprotocol/sdk is updated to ^1.29.0 in both manifests (root: from ^1.24.2; mcp-server: from ^1.12.1).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• zereight/gitlab-mcp#526: Also modifies package.json dependency resolution in a context involving @modelcontextprotocol/sdk transitive dependencies, specifically addressing an express-rate-limit import issue that can surface when the SDK's transitive graph changes.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore: update MCP SDK' directly and clearly summarizes the main change of updating the Model Context Protocol SDK dependency across the project.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description check	✅ Passed	The description matches the diff: it describes updating the MCP SDK in the root and nested package files.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/update-mcp-sdk-1-29

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch chore/update-mcp-sdk-1-29

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}