Bump io.modelcontextprotocol.sdk:mcp from 0.11.2 to 0.11.3

[dependabot]

Bumps io.modelcontextprotocol.sdk:mcp from 0.11.2 to 0.11.3.

Release notes

Sourced from io.modelcontextprotocol.sdk:mcp's releases.

v0.11.3

🐛 Bug Fixes

HTTP Transport Improvements

• Fixed SSE endpoint Content-Type header issue (#489)

  • Removed incorrect Content-Type header from GET requests to SSE endpoints
  • Resolves compatibility issues with MCP servers that validate HTTP headers strictly
  • Content-Type header is now only included for POST requests as per HTTP specifications

• Added configurable connection timeout (#511)

  • Fixed intermittent connection timeout issues in HttpClientStreamableHttpTransport and HttpClientSseClientTransport
  • Replaced hard-coded 10-second timeout with configurable parameter
  • Allows users to set appropriate timeouts based on network conditions and latency requirements

Reactive Streams Compliance

• Fixed SseLineSubscriber request handling (#507)
  • Resolved missing request implementation in SseLineSubscriber
  • Improves reactive streams compliance and stability

Demand-Based Processing

• Implemented demand-based request handling in ResponseSubscribers (#516)
  • Added hasRequestedDemand tracking to prevent unnecessary data processing
  • Improved backpressure handling and resource efficiency
  • Guards event emission with demand checks to avoid processing when no downstream demand exists
  • Maintains same public API while improving internal resource management

Server Configuration Optimization

• Disabled logging capabilities for stateless servers (#517)
  • Removed LoggingCapabilities from stateless server features to align with actual functionality
  • Stateless servers don't support setLogging operations, so capabilities are now correctly advertised
  • Prevents client confusion and aligns async implementation with sync implementation

🔧 API Enhancements

Object Identity & Equality

• Implemented proper equals/hashCode for PromptReference (#514)
  • Added identifier-based equality comparison (ignores descriptive fields like title)
  • Enables proper use in collections (HashMap, HashSet, etc.)
  • Maintains standard Java object contracts with comprehensive test coverage
  • Two PromptReference objects with same identifier and type are now considered equal

📊 Summary

This release focuses on improving HTTP transport reliability, reactive streams compliance, and resource efficiency. Key highlights include:

• Better HTTP compatibility with proper header handling for SSE endpoints
• Configurable timeouts to handle varying network conditions
• Improved reactive streams handling with proper backpressure and demand management
• Enhanced object equality semantics for better collection usage
• Optimized server configurations that accurately reflect capabilities

... (truncated)

Commits

• 80b48e5 Release version 0.11.3
• d30480d feat: Add transport context extraction support to all MCP servers (#477)
• a6a8c4f fix: disable logging capabilities for stateless servers (#517)
• 0f635ee feat: implement demand-based request handling in ResponseSubscribers (#516)
• 1e29ade fix: When call the MCP SSE endpoint, the Content-Type header not passed by de...
• 4b7d729 fix: http streamable client connect timeout (#511)
• 228be24 fix: Fix SseLineSubscriber lacking request. (#507)
• 6eb8a26 feat: implement identifier-based equals/hashCode for PromptReference (#514)
• a96da37 fix: ServerCapabilities should not enable logging by default (#463)
• 369e925 Next development version
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #675.