chore(deps): Bump io.modelcontextprotocol.sdk:mcp from 0.17.2 to 1.1.0

[dependabot]

Bumps io.modelcontextprotocol.sdk:mcp from 0.17.2 to 1.1.0.

Release notes

Sourced from io.modelcontextprotocol.sdk:mcp's releases.

v1.1.0

What's Changed

• Use dynamic jar discovery for conformance tests by @​chemicL in modelcontextprotocol/java-sdk#832
• Add migration notes for 0.18.1 to 1.0.0 update by @​chemicL in modelcontextprotocol/java-sdk#828
• Support resource subscriptions by @​chemicL in modelcontextprotocol/java-sdk#839
• Add explicit UTF-8 charset to InputStreamReader in StdioServerTransportProvider by @​xxxxxxjun in modelcontextprotocol/java-sdk#826
• Document resource subscription support in server and client guides by @​tzolov in modelcontextprotocol/java-sdk#843
• Fix elicitation and resource subscription tests that deadlock on a single CPU by @​chemicL in modelcontextprotocol/java-sdk#854
• HttpClientStreamHttpTransport: add authorization error handler by @​Kehrlann in modelcontextprotocol/java-sdk#861
• fix: prepare POMs for Maven Central release readiness by @​tzolov in modelcontextprotocol/java-sdk#863

New Contributors

• @​xxxxxxjun made their first contribution in modelcontextprotocol/java-sdk#826

Full Changelog: modelcontextprotocol/java-sdk@v1.0.0...v1.1.0

v1.0.0

MCP Java SDK 1.0.0

We are pleased to announce the 1.0.0 GA release of the MCP Java SDK — the official Java SDK for Model Context Protocol servers and clients, maintained in collaboration with Spring AI.

---

Major Features

• MCP Protocol Implementation — Spec-compliant implementation of the Model Context Protocol, including tools, resources, prompts, sampling, elicitation, and progress tracking.
• Synchronous and Asynchronous APIs — First-class support for both blocking (McpSyncClient / McpSyncServer) and reactive (McpAsyncClient / McpAsyncServer) programming models.
• Official Transport Options — STDIO, Servlet-based (Streamable HTTP and HTTP/SSE) transports out of the box.
• Pluggable JSON Serialization — Supports both Jackson 2 and Jackson 3, with Jackson 3 as the default. Integration is decoupled so projects can supply their own binding.
• MCP Protocol Version Negotiation — Clients and servers automatically negotiate the highest mutually supported protocol version at connection time.
• Authorization & Security — DNS rebinding protection, Origin header validation, and conformance-tested OAuth/auth flows via relevant hooks.
• OSGi Support — All modules ship with correct OSGi bundle manifests for use in Eclipse/OSGi runtimes.
• BOM for Dependency Management — mcp-bom keeps all SDK module versions aligned with a single import.
• MCP Test Module — Reusable test utilities and a conformance test suite for validating server and client implementations.

---

Spec Compliance

The SDK is compliant with the 2025-06-18 MCP specification and supports protocol version negotiation across 2024-11-05, 2025-03-26, and 2025-06-18.

Work towards 2025-11-25 spec compliance is actively in progress. Key features in that revision include tasks (durable request tracking), tool calling in sampling, URL elicitation, icon metadata, enhanced JSON Schema support, and updated OAuth/security flows. See the Roadmap for details.

---

Stability in the 1.x Line

With 1.0.0, the SDK transitions to a stable, semantically versioned release line. The project follows Semantic Versioning 2.0.0:

• Patch releases (1.0.x) deliver backward-compatible bug fixes.

... (truncated)

Commits

• d4d8072 Release version 1.1.0
• c4b5857 fix: prepare POMs for Maven Central release readiness (#863)
• abcd19c HttpClientStreamHttpTransport: add authorization error handler (#861)
• 6e4ce1c Fix elicitation and resource subscription tests that deadlock on a single CPU...
• 26304a7 Document resource subscription support in server and client guides (#843)
• ed02736 Update dependabot PR labels
• 05f37ad Use explicit UTF-8 charset in StdioServerTransportProvider (#826)
• 7f68ea5 Support resource subscriptions (#839)
• ce2c747 Bump spring-javaformat 0.0.43 -> 0.0.47
• d4c4a25 Fix instructions for running conformance tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)