chore(deps): drop the unused MCP SDK declaration - #127
Merged
Conversation
src/deno.json declared @modelcontextprotocol/sdk but no source file in this repo imports it. It entered in #22 during the workspace restructure and was never referenced. It was the sole root of an Express subtree in the lockfile, so removing it drops 87 npm packages including express, express-rate-limit, body-parser and qs@6.15.2 — the version both 2026-09 qs advisories (GHSA-4mjr-xmp4-gh2g, GHSA-x5fp-wj9c-mxmx) apply to. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
|
🎉 This PR is included in version 0.11.4 🎉 The release is available on: Your semantic-release bot 📦🚀 |
KyleJune
added a commit
that referenced
this pull request
Sep 11, 2026
Resolves the lock against #127 and the 0.11.4 release, and moves the example and the tailwindcss template to @udibo/esbuild-plugin-postcss 0.4.2. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
KyleJune
added a commit
that referenced
this pull request
Sep 11, 2026
Take every compatible third-party update across all workspace members, plus the global-jsdom 29 -> 30 major (jsdom 30), which needed no code changes. @modelcontextprotocol/sdk is left for #127 and @udibo/* packages are bumped separately. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
src/deno.jsondeclared@modelcontextprotocol/sdkbut nothing in thisrepository imports it. The declaration entered in #22 during the switch to Deno
workspaces and has never been referenced by a source file, example, template or
tutorial —
git log -Sshows that commit as the only one to ever touch theline.
It was the sole root of an Express subtree in
deno.lock, so removing it drops87 npm packages (0 added), among them
express@5.2.1,express-rate-limit@8.5.2,body-parser@2.2.2,cors,ajv,joseandqs@6.15.2— the exactqsversion both September 2026 advisories(GHSA-4mjr-xmp4-gh2g,
GHSA-x5fp-wj9c-mxmx) apply
to. Nothing here ever parsed a query string through
qs, so this was neverexploitable — it was install weight and supply-chain surface.
Changes
src/deno.json— remove the@modelcontextprotocol/sdkimport-map entry.deno.lock— regenerated withdeno install. 381 → 294 npm packages,2370 → 1872 lines.
Testing
deno task check— clean (286 files formatted, lint, doc-lint across 9entrypoints).
deno task test --parallel --reporter=dot— 33 passed, 382 steps, 0 failed(workspace) and the same from
src/.grep -rn modelcontextprotocol .now matches nothing outside.git.Closes
Nothing in this repository. This is the juniper half of udibo/udibo#1024; that
issue is tracked there and stays open until the udibo submodule pointer is
bumped.
🤖 Generated with Claude Code