chore: update dependencies to latest versions (#206)

updated @modelcontextprotocol/sdk from 1.20.0 to 1.20.1

pinned zod to 3.25.76 (matching mcp sdk version)

updated dev dependencies (cdxgen, types/node, eslint, vite)

added documentation for zod version pinning to CLAUDE.md

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <[email protected]>

Author: sapientpants

.changeset/update-dependencies-20251020.md

@@ -0,0 +1,19 @@
+---
+'deepsource-mcp-server': patch
+---
+
+Updated dependencies:
+
+Production:
+
+- @modelcontextprotocol/sdk: 1.20.0 → 1.20.1
+- zod: pinned to 3.25.76 (matching @modelcontextprotocol/sdk version)
+
+Dev:
+
+- @cyclonedx/cdxgen: 11.9.0 → 11.10.0
+- @types/node: 24.7.2 → 24.8.1
+- eslint: 9.37.0 → 9.38.0
+- vite: 7.1.10 → 7.1.11
+
+All tests passing, no breaking changes.

CLAUDE.md

@@ -188,6 +188,24 @@ Structured error categorization:
 - `LOG_FILE` (optional): File path for log output
 - `LOG_LEVEL` (optional): Minimum log level (DEBUG, INFO, WARN, ERROR)
 
+## Dependency Management
+
+### Zod Version Pinning
+
+**IMPORTANT**: The `zod` dependency must be pinned to the exact version used by `@modelcontextprotocol/sdk`.
+
+- **Current version**: `3.25.76` (pinned, no caret)
+- **Reason**: We use zod directly in `src/utils/graphql/processors/run-checks-processor.ts` for GraphQL response validation
+- **Maintenance**: When updating `@modelcontextprotocol/sdk`, check its zod dependency version and update our pinned version to match
+
+To check the MCP SDK's zod version:
+
+```bash
+pnpm list zod --depth=1
+```
+
+This ensures compatibility and avoids duplicate zod versions in the dependency tree.
+
 ## Development Guidelines
 
 ### Code Quality Rules

package.json

@@ -86,22 +86,22 @@
     ]
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.20.0",
+    "@modelcontextprotocol/sdk": "^1.20.1",
     "axios": "^1.12.2",
-    "zod": "^3.25.76"
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@changesets/cli": "^2.29.7",
     "@commitlint/cli": "^20.1.0",
     "@commitlint/config-conventional": "^20.0.0",
-    "@cyclonedx/cdxgen": "11.9.0",
-    "@types/node": "^24.7.2",
+    "@cyclonedx/cdxgen": "11.10.0",
+    "@types/node": "^24.8.1",
     "@typescript-eslint/eslint-plugin": "^8.46.1",
     "@typescript-eslint/parser": "^8.46.1",
     "@vitest/coverage-v8": "^3.2.4",
     "changelog-github-custom": "^1.2.7",
     "depcheck": "^1.4.7",
-    "eslint": "^9.37.0",
+    "eslint": "^9.38.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-jsonc": "2.21.0",
     "eslint-plugin-prettier": "^5.5.4",
@@ -114,7 +114,7 @@
     "prettier": "^3.6.2",
     "rimraf": "^6.0.1",
     "typescript": "^5.9.3",
-    "vite": "7.1.10",
+    "vite": "7.1.11",
     "vitest": "^3.2.4",
     "yaml-lint": "1.7.0"
   },