Skip to content

chore(deps): bump github.com/mark3labs/mcp-go from 0.58.0 to 1.1.0 in /plugins/simulator/mcp-server - #108

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/plugins/simulator/mcp-server/github.com/mark3labs/mcp-go-1.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/plugins/simulator/mcp-server/github.com/mark3labs/mcp-go-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/mark3labs/mcp-go from 0.58.0 to 1.1.0.

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v1.1.0

No release notes provided.

Release v1.0.0

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.58.0...v1.0.0

Release v1.0.0-beta.1

What's Changed

Full Changelog: mark3labs/mcp-go@v0.58.0...v1.0.0-beta.1

Commits
  • c413b9e fix: reject SSE restart after close (#968)
  • 320fd42 fix(transport): skip unsupported SIGTERM on Windows stdio Close (#978)
  • d55a9a1 feat(mcp): keep tool schema property order through decode and encode (#984)
  • 65844e4 fix(server): cancel task execution on TTL expiration (#982)
  • 0407a98 fix(mcp): decode the result envelope in the prompts/get and resources/read pa...
  • 912f19e feat(mcptest): support roots handlers (#955)
  • e06b9e0 feat(client): configure in-process handlers together (#953)
  • 51930cf chore(otel): point the parent requirement at v1.0.0
  • fe753d7 chore: satisfy newer govet and modernize analyzers
  • 735bec2 fix(transport): repair readSSE test call after signature change
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) from 0.58.0 to 1.1.0.
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.58.0...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@gh-corezoid

Copy link
Copy Markdown
Contributor

AI Review

Dependabot bump of github.com/mark3labs/mcp-go from 0.58.0 to 1.1.0 (major version) — only go.mod and go.sum are changed.

Checklist

Check Result
U1 — Conventional commit format ⚠️ warning
U2 — No leaked credentials ✅ pass
U3 — No merge commits ✅ pass
U4 — PR targets correct base branch ⚠️ warning
U5 — Build & tests (Go) ✅ pass
U6 — Architectural & design consequences ⚠️ warning
S1 — No manual edits to public/ ⏭️ skip
S2 — API path parameter names match papi-openapi.json ⏭️ skip
S3 — New tools have eval scenarios ⏭️ skip
S4 — Discovery artifacts committed if source changed ⏭️ skip
S5 — All six manifest files version-synced ⏭️ skip
S6 — README.md and ARCHITECTURE.md updated for new tools ⏭️ skip

Issues found

[warning] U1 — Commit headline missing version suffix
The commit message headline is chore(deps): bump github.com/mark3labs/mcp-go, which omits the required , bump to 1.1.0 suffix for commits that touch a version manifest (go.mod). This is Dependabot's standard format, but it doesn't follow the project's conventional-commit convention. The version is visible in the PR title and commit body, but not the headline.
Fix: either accept Dependabot's format as an exception for dependency PRs, or squash-merge with a corrected headline (chore(deps): bump github.com/mark3labs/mcp-go, bump to 1.1.0).

[warning] U4 — PR targets main instead of develop
For simulator-ai-plugin, PRs must target develop, but this PR targets main. Because this is a chore-only dependency PR (not feature code), it is treated as a warning rather than a hard error — however, Dependabot appears to be configured to watch main rather than develop. If develop is the integration branch, Dependabot's target-branch setting in .github/dependabot.yml should be updated to develop so future dependency PRs land on the correct branch.

[warning] U6 — Major-version bump of core MCP framework may affect protocol compatibility
mcp-go jumped from 0.58.0 to 1.1.0; v1.0.0 introduced support for the 2026-07-28 MCP specification (a new protocol version). Concrete failure scenario: if any MCP client connecting to this server negotiates only the older protocol version and the library's default behaviour changes the advertised protocolVersion or alters the initialize handshake, those clients will fail to connect after this upgrade. No existing tests cover the end-to-end protocol handshake, so this risk cannot be confirmed from the diff alone. Recommend manually verifying with at least one MCP client (e.g. Claude Desktop or the eval runner) after merging.

Note — pre-existing test failure (not caused by this PR)
TestDefaultVersionMatchesManifest in app/mcpserver fails on both this branch and main (DefaultVersion = "2.7.0" vs plugin.json = "2.8.0"). This is a pre-existing repo issue unrelated to the dependency bump.


This review was generated automatically. A human maintainer should still make the merge decision.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant