build(deps): bump agent toolkit to 0.14.0 - #69
Merged
Conversation
The hosted MCP Worker remained pinned to ^0.11.0, so it could not receive the newly released toolkit behavior and fixes because pre-1.0 caret ranges do not cross minor versions.\n\nUpdate the dependency to ^0.14.0, refresh the lockfile, and apply the available non-breaking transitive security updates. The existing integration remains source-compatible, passes the full validation suite, and now has a clean npm audit.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
@sumup/agent-toolkitfrom^0.11.0to^0.14.0Why
The hosted MCP Worker remained on Agent Toolkit 0.11 because pre-1.0 caret ranges do not cross minor versions. Dependabot PR #63 only upgrades to 0.12.0; this PR brings the Worker directly to the current 0.14.0 release and supersedes it.
Agent Toolkit 0.14 reduces the MCP catalog payload by omitting output schemas by default; it does not filter registered tools. A runtime comparison shows 36 tools in 0.11.0 and 37 in 0.14.0, with no removals and
get_reader_statusadded. ThereadOnly,includeTools, andexcludeToolsfilters remain opt-in, and the Worker does not enable them.The upgrade is source-compatible with the existing Worker integration; no application code changes were required. Refreshing the transitive dependency tree also reduces
npm audit --omit=devfrom 13 findings to zero.Validation
npm cinpm run lintnpm run test— 11 tests passednpm run buildnpm audit --omit=dev— 0 vulnerabilities