fix(security): move @modelcontextprotocol/sdk past GHSA-6qxp-vccf-f47h

[aviggiano]

Problem

CI on unstable (e35eeea) fails the production dependency advisory gate on a High advisory published on 2026-10-06:

dependency advisory policy: unapproved high production advisory GHSA-6qxp-vccf-f47h in @modelcontextprotocol/sdk

The SDK's OAuth client could send credentials to an authorization server that the MCP server chooses. The vulnerable range is >= 1.12.0, < 1.31.0, and the workspace lock pins 1.29.0 through @smthrs/agents (^1.29.0).

Change

• pnpm-lock.yaml: @modelcontextprotocol/sdk 1.29.0 → 1.31.0. The parent's range already allows it, so there is no override. No new packages; the rest of the diff is peer-hash renames.
• 1.31.0 is the version the workflow engine that run installs from npm already resolves at its 2026-10-01 dependency cutoff (fix(security): move proxy-addr, vue, source-map-js and prosemirror-view past the October advisories #1283), so the workspace and the shipped engine now match.
• CHANGELOG entry.

Tests

• pnpm install --frozen-lockfile from a clean node_modules: passes.
• pnpm -w security:dependency-advisories: passes (only the existing http-cache-semantics exception remains).
• pnpm -w build, pnpm -w typecheck: pass.
• bun test --timeout 30000 scripts/ci/*.test.ts: 79/79.

🤖 Generated with Claude Code

Confidence Score: 5/5

The PR appears safe to merge; no actionable regression was identified.

Summary

The PR moves the workspace’s @modelcontextprotocol/sdk resolution from 1.29.0 to 1.31.0 and updates its dependent peer-resolution references.

• Adds a changelog entry describing the advisory addressed and distinguishing the workspace install from the workflow engine’s npm install.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Lock[Workspace pnpm lockfile] --> SDK[SDK 1.31.0]
  Lock --> Smithers[Workspace Smithers peer instances]
  Run[Run workflow installation] --> Npm[npm resolution at fixed cutoff]

Loading

_{Reviews (1) · Last reviewed commit: "fix(security): move @modelcontextprotoco..."}