From 4e97d2fd7511f832ef008c1b30433b16d4ef2c0c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 14:13:27 +0000
Subject: [PATCH] chore(deps-dev): Bump @modelcontextprotocol/client from 2.1.0
 to 2.3.0

Bumps [@modelcontextprotocol/client](https://github.com/modelcontextprotocol/typescript-sdk) from 2.1.0 to 2.3.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/client@2.1.0...@modelcontextprotocol/client@2.3.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/client"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json         | 39 +++++++++++++--------------------------
 package.json              |  2 +-
 packages/mcp/package.json |  2 +-
 3 files changed, 15 insertions(+), 28 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9333df87..4a97668d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -27,7 +27,7 @@
       "devDependencies": {
         "@eslint/js": "10.0.1",
         "@hey-api/openapi-ts": "0.99.0",
-        "@modelcontextprotocol/client": "2.1.0",
+        "@modelcontextprotocol/client": "2.3.0",
         "@types/mime-types": "3.0.1",
         "@types/node": "26.6.4",
         "@types/semver": "7.8.0",
@@ -630,16 +630,16 @@
       }
     },
     "node_modules/@modelcontextprotocol/client": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.1.0.tgz",
-      "integrity": "sha512-mDVhoy5WjDb0U+4dQPzLcciC2erSex/GRVQqnoZdiuMoE3YiTZdiS7ezNcFwX4XEOWOaj7jZr0kLYnILnL8orA==",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.3.0.tgz",
+      "integrity": "sha512-pbHtGj6EeFCHngFE8gtNPaKrsj8Mb1IMw45BLcaPML/m2WTxI7pyYmeNQvaux88Lw8BSO5r7nyRbUyIkICmGrg==",
       "dev": true,
-      "license": "MIT",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@modelcontextprotocol/core": "2.1.0",
+        "@modelcontextprotocol/core": "2.3.0",
         "cross-spawn": "^7.0.5",
         "eventsource": "^3.0.2",
-        "eventsource-parser": "^3.0.0",
+        "eventsource-parser": "^3.0.8",
         "jose": "^6.1.3",
         "pkce-challenge": "^5.0.0",
         "zod": "^4.2.0"
@@ -649,11 +649,10 @@
       }
     },
     "node_modules/@modelcontextprotocol/core": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.1.0.tgz",
-      "integrity": "sha512-YdFj5gMRHr0gYNAhTbQDgjLHiEJdIAUYxomhKseUNye7ZGlISQmUoLh2sveFFCiQ7j2YMffT1kgSND0FSfIFjQ==",
-      "dev": true,
-      "license": "MIT",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.3.0.tgz",
+      "integrity": "sha512-09BHFaNVBe5pB2AhzCfLj0cqmsKLERvZQ4FblzP90UMGLaXVqdZPByFjURwsUYCmxonUW2yAwgTTvle+8O2/8w==",
+      "license": "Apache-2.0",
       "dependencies": {
         "zod": "^4.2.0"
       },
@@ -674,18 +673,6 @@
         "node": ">=20"
       }
     },
-    "node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.3.0.tgz",
-      "integrity": "sha512-09BHFaNVBe5pB2AhzCfLj0cqmsKLERvZQ4FblzP90UMGLaXVqdZPByFjURwsUYCmxonUW2yAwgTTvle+8O2/8w==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "zod": "^4.2.0"
-      },
-      "engines": {
-        "node": ">=20"
-      }
-    },
     "node_modules/@noble/ciphers": {
       "version": "2.4.0",
       "resolved": "https://registry.npmjs.org/@noble/ciphers/-/ciphers-2.4.0.tgz",
@@ -2638,7 +2625,7 @@
       "version": "0.6.6",
       "license": "Apache-2.0",
       "dependencies": {
-        "@better-auth/core": "^1.7.7",
+        "@better-auth/core": "1.7.7",
         "better-auth": "1.7.6"
       },
       "bin": {
@@ -2690,7 +2677,7 @@
       },
       "devDependencies": {
         "@jimhoyd/urlcode": "file:../..",
-        "@modelcontextprotocol/client": "2.1.0",
+        "@modelcontextprotocol/client": "2.3.0",
         "@types/node": "26.6.4",
         "typescript": "6.0.3"
       },
diff --git a/package.json b/package.json
index 5afd6a55..61c07839 100644
--- a/package.json
+++ b/package.json
@@ -196,7 +196,7 @@
   "devDependencies": {
     "@eslint/js": "10.0.1",
     "@hey-api/openapi-ts": "0.99.0",
-    "@modelcontextprotocol/client": "2.1.0",
+    "@modelcontextprotocol/client": "2.3.0",
     "@types/mime-types": "3.0.1",
     "@types/node": "26.6.4",
     "@types/semver": "7.8.0",
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index 1e952bb1..6bfbd97a 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -47,7 +47,7 @@
     "@jimhoyd/urlcode": "file:../..",
     "@types/node": "26.6.4",
     "typescript": "6.0.3",
-    "@modelcontextprotocol/client": "2.1.0"
+    "@modelcontextprotocol/client": "2.3.0"
   },
   "peerDependencies": {
     "@jimhoyd/urlcode": "0.6.6"