[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@modelcontextprotocol/sdk (source)	1.32.1 → 1.32.2

---

Release Notes

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.32.2

Compare Source

What's Changed

• fix: add explicit | undefined to Transport optional properties (v1.x backport of #​1766) by @​kishormorol in #​2814
• [v1.x] fix: allow registering after connect() when the capability was declared by @​claude[bot] in #​2958
• chore: bump version to 1.32.2 by @​claude[bot] in #​3089

New Contributors

• @​kishormorol made their first contribution in #​2814

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[GraemeF]

Review for an unattended merge under Risk and security's Renovate rule.

What moves. @modelcontextprotocol/sdk goes from 1.32.1 to 1.32.2 in the plugin's dev dependencies. No other package in the lock moves.

Age. 1.32.2 was published to npm on 2026-10-23, so it is more than seven days old. That clears both the rule's three days and the repo's own seven-day minimumReleaseAge.

Notes. The release carries two fixes. The first adds an explicit | undefined to the Transport interface's optional properties, for consumers built with exactOptionalPropertyTypes. The plugin sets that option, but it only uses the SDK's own StdioServerTransport and implements no Transport itself, so the change can only loosen what it type-checks against. The second lets a server register a handler after connect() when the capability was declared. The plugin registers its handlers before it connects, so the change does not touch it. Neither fix adds a setting, changes a default, or touches authentication, networking or storage.

The hash. The plugin's node_modules is a fixed-output derivation in flake.nix, so the bump moves its outputHash. The first CI run failed on exactly that mismatch. A commit on this branch moves it to the value the cold build reported.

Checks. nix flake check runs the plugin's typecheck, lint and tests against the new SDK, and it is the gate on the head commit.