deps(deps): bump io.modelcontextprotocol:kotlin-sdk from 0.8.1 to 0.9.0

[dependabot]

Bumps io.modelcontextprotocol:kotlin-sdk from 0.8.1 to 0.8.4.

Release notes

Sourced from io.modelcontextprotocol:kotlin-sdk's releases.

0.8.4

Changes

• feat: Ktor extensions for streamable http (#504) by @​devcrocod
• fix: Add $defs to ToolSchema and tests (#526) by @​i1bro

Full Changelog: modelcontextprotocol/kotlin-sdk@0.8.3...0.8.4

0.8.3

What's Changed

Bugfixes

• breaking change!: StdioClientTransport.send(...) and StreamableHttpClientTransport.send(...) now throw McpException when not ready (#487) by @​kpavlov
• #450 Properly check content type (#451) by @​nerzhulart
• Fix flaky StdioClientTransportErrorHandlingTest (#457) by @​kpavlov
• Fix tests for notifications (#446) by @​tiginamaria
• Fix kotlin-mcp-server sample (#459) by @​devcrocod
• Fix GitHub Actions build workflow (#474) by @​kpavlov
• Fix confirmance tests (#483) by @​Fuud and @​kpavlov
• Refactor integration test infrastructure, fix and enable tests with ts-client (#478) by @​kpavlov

New features

• Mark DSL functions for types as public (#472) by @​kpavlov

Chores

• Update licensing to Apache 2.0 for new contributions (#481) by @​domdomegg
• Add centralized TypeScript server factory for integration tests (#477) by @​kpavlov
• Bump actions/setup-node from 4 to 6 (#453) by @​dependabot
• Update GitHub Actions workflow (#452) by @​kpavlov
• Bump io.mockk:mockk from 1.14.6 to 1.14.7 (#455) by @​dependabot
• Bump io.github.oshai:kotlin-logging from 7.0.13 to 7.0.14 (#471) by @​dependabot
• Bump org.jetbrains.kotlinx.kover from 0.9.3 to 0.9.4 (#466) by @​dependabot
• Bump io.netty:netty-bom from 4.2.7.Final to 4.2.9.Final (#468) by @​dependabot
• Bump actions/upload-artifact from 5 to 6 (#465) by @​dependabot

New Contributors

• @​nathaniellombardi-toast made their first contribution in modelcontextprotocol/kotlin-sdk#472
• @​domdomegg made their first contribution in modelcontextprotocol/kotlin-sdk#481
• @​Fuud made their first contribution in modelcontextprotocol/kotlin-sdk#483

Full Changelog: modelcontextprotocol/kotlin-sdk@0.8.1...0.8.2

Commits

• cc8cc76 chore: prepare for 0.8.4
• 58575ba Ktor extensions for streamable http (#504)
• 6969176 Add $defs to ToolSchema and tests (#526)
• 4811936 bump: update version to 0.8.3 (#488)
• bfb0516 ci: Update gradle-publish.yml
• 1e4003f ci: re-enable publishing release workflow
• 4d50502 fix(stdio-client)!: Stdio- and StreamableHttpClientTransport should throw Mcp...
• 9f16ae4 chore(ci): Update deploy pipeline (#485)
• ad7f372 Prepare for release version 0.8.2 (#461)
• c73507b fix conformance tests (#483)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[rustyrazorblade]

@dependabot rebase

[claude]

PR Review

Version Mismatch — Needs Attention

The PR title and description say this bumps from 0.8.1 → 0.8.4, but the actual diff upgrades to 0.9.0:

-mcp-sdk = "0.8.1"
+mcp-sdk = "0.9.0"

This is a significant discrepancy. The PR body only documents release notes through 0.8.4 and doesn't cover what changed in 0.9.0. A minor version bump (0.8.x → 0.9.0) may introduce breaking changes not disclosed here.

Breaking Change in 0.8.3 (in scope per the PR description)

The 0.8.3 release notes document a breaking change:

StdioClientTransport.send(...) and StreamableHttpClientTransport.send(...) now throw McpException when not ready

Impact on this codebase: The project uses SseServerTransport (server-side, not client-side) in McpServer.kt, so this specific change does not appear to affect our code directly. No usages of StdioClientTransport or StreamableHttpClientTransport exist in the codebase.

Recommendations

1. Investigate the 0.9.0 version: Check the kotlin-sdk changelog/release notes for 0.9.0 to understand what changed. If Dependabot generated this PR targeting 0.8.4 but the file now shows 0.9.0, that suggests either a manual edit was made or the PR is stale/conflicted.
2. Verify the build compiles against 0.9.0 before merging — the SseServerTransport API used in McpServer.configureSseRoutes() should be confirmed stable across this version jump.
3. If the intent is only to go to 0.8.4, update the version accordingly (or trigger a @dependabot recreate).

[rustyrazorblade]

@claude ignore the version issue. What needs to be done for this upgrade to work?

[claude]

Claude finished @rustyrazorblade's task in 2m 39s —— View job

---

Analysis: MCP SDK Upgrade Requirements

Root Cause

The SDK 0.9.0 changed the server.addTool() handler signature — it's now a suspend function that receives a ClientConnection as its first parameter:

• Before (0.8.x): handler: (CallToolRequest) -> CallToolResult
• After (0.9.0): handler: suspend (ClientConnection, CallToolRequest) -> CallToolResult

Fix Applied

Updated McpServer.kt in two places:

1. createStatusHandler() — return type and lambda updated to accept (ClientConnection, CallToolRequest)
2. createToolHandler() — same
3. Added import io.modelcontextprotocol.kotlin.sdk.server.ClientConnection

The ClientConnection parameter is unused in both handlers (the handlers don't need to inspect the connection), so it's destructured with _.

Tasks

• Gather context on the request
• Identify compilation errors from CI
• Understand the API change
• Fix createToolHandler() signature and lambda
• Fix createStatusHandler() signature and lambda
• Add ClientConnection import
• Push fix to branch

CI should now pass. The fix is in commit 0a8371f.
|

[claude]

Dependency Bump Review: io.modelcontextprotocol:kotlin-sdk 0.8.1 → 0.9.0

Note: The PR title says 0.9.0 but the Dependabot description references 0.8.4. The actual diff sets the version to 0.9.0, so the title is correct — the description appears to be a Dependabot artifact mismatch.

---

Summary

This is a standard dependency upgrade that adapts to a breaking API change in the MCP SDK: tool handlers now require the signature suspend (ClientConnection, CallToolRequest) -> CallToolResult instead of (CallToolRequest) -> CallToolResult.

Changes in McpServer.kt

Both createStatusHandler() and createToolHandler() correctly adopt the new signature:

• suspend modifier added — this is now required by the SDK
• ClientConnection parameter added as the first argument and discarded with _ — appropriate since neither handler currently needs per-connection context

This is minimal, correct adaptation. No logic changes were made.

Concerns / Notes

Version discrepancy in PR description. The Dependabot description references 0.8.2–0.8.4 release notes but sets the version to 0.9.0. Worth verifying the 0.8.4 → 0.9.0 changelog doesn't contain additional breaking changes that require adaptation beyond what's already here. The ClientConnection parameter addition appears to be the only breaking change based on the diff.

ClientConnection unused. Both handlers discard the ClientConnection with _. If the SDK provides useful per-connection data (e.g., client identity, session metadata), it could be worth logging or using in the status handler in the future — but that's out of scope here.

Test coverage. There are existing MCP test files (McpServerBackgroundTest, McpServerSimpleTest, etc.) that should exercise these handlers. If they compile and pass, that's sufficient validation for this change.

Verdict

The code changes are correct and appropriately minimal. ✅ Safe to merge once CI passes.

[github-actions]

Code Coverage

File	Coverage [9.36%]	❌
src/main/kotlin/com/rustyrazorblade/easydblab/mcp/McpServer.kt	9.36%	❌

Total Project Coverage	67.03%	❌

[dependabot]

A newer version of io.modelcontextprotocol:kotlin-sdk exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.