deps: fixes multiple Dependabot security advisories (#248)

## Summary

Dependency updates to fix multiple high security vulnerabilities
reported by Dependabot on `js-yaml`.

As part of the update, `@modelcontextprotocol/sdk` was updated to
v1.30.0 and that required update for the imports in all files because
type exports were added in v1.29.0 (see:
modelcontextprotocol/typescript-sdk#1623) that
didn't break building the package, but did affect linting
(no-unresolved-module started to fail without changes applied).

## Type of Change

### Breaking Changes (major semver update)

- [ ] Add a `!` after your change type to denote a change that breaks
current behavior

### Feature Additions (minor semver update)

- [ ] **feat**: Introduces a new feature to the codebase

### Patch Updates (patch semver update)

- [ ] **fix**: Bug fix
- [X] **deps**: Dependency upgrade
- [ ] **revert**: Revert a previous commit
- [ ] **chore**: Change that does not affect production code
- [ ] **refactor**: Refactoring existing code without changing behavior
- [ ] **test**: Add/update/remove tests

## Testing

1. Passing CI suffices.

## Related Issues

Dependabot alerts:
- https://github.com/heroku/heroku-mcp-server/security/dependabot/125
- https://github.com/heroku/heroku-mcp-server/security/dependabot/149
- https://github.com/heroku/heroku-mcp-server/security/dependabot/145

Author: sbosio

package-lock.json

@@ -78,7 +78,6 @@
     "start": "node bin/heroku-mcp-server.mjs",
     "format": "prettier . --write --config ./.prettier.mjs",
     "lint": "cd src && eslint ./",
-    "posttest": "npm run lint",
     "prepare": "husky",
     "pretest": "npm run build",
     "type-check": "tsc --noEmit",

package.json

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio';
 
 import * as pjson from '../package.json' with { type: 'json' };
 import * as apps from './tools/apps.js';

src/index.ts

@@ -1,6 +1,6 @@
 import { expect } from 'chai';
 import sinon from 'sinon';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { registerDevCenterResource } from './dev-center-resource.js';
 
 describe('registerDevCenterResource', () => {

src/resources/dev-center-resource.spec.ts

@@ -1,4 +1,4 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 
 /**
  * Registers the Heroku Dev Center resource with the MCP server.

src/resources/dev-center-resource.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { handleCliOutput } from '../utils/handle-cli-output.js';
 import { CommandBuilder } from '../utils/command-builder.js';
 import { TOOL_COMMAND_MAP } from '../utils/tool-commands.js';

src/tools/addons.ts

@@ -3,7 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import { z } from 'zod';
 
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { handleCliOutput } from '../utils/handle-cli-output.js';
 import { CommandBuilder } from '../utils/command-builder.js';
 import { TOOL_COMMAND_MAP } from '../utils/tool-commands.js';

src/tools/ai.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { handleCliOutput } from '../utils/handle-cli-output.js';
 import { CommandBuilder } from '../utils/command-builder.js';
 import { TOOL_COMMAND_MAP } from '../utils/tool-commands.js';

src/tools/apps.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { handleCliOutput } from '../utils/handle-cli-output.js';
 import { CommandBuilder } from '../utils/command-builder.js';
 import { TOOL_COMMAND_MAP } from '../utils/tool-commands.js';

src/tools/data.ts

@@ -2,7 +2,7 @@ import { execSync } from 'node:child_process';
 import { ValidatorResult } from 'jsonschema';
 import { AppSetup, Build, Dyno } from '@heroku-cli/schema';
 import { z } from 'zod';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { McpToolResponse } from '../utils/mcp-tool-response.js';
 import { AppJson, type EnvironmentVariables, readAppJson } from '../utils/read-app-json.js';
 import AppService from '../services/app-service.js';