Summary

Update github.com/modelcontextprotocol/go-sdk dependency from v1.5.0 to v1.6.0.

Current State

• Package: github.com/modelcontextprotocol/go-sdk
• Current Version: v1.5.0
• Proposed Version: v1.6.0
• Update Type: Minor version update

Why Separate Issue

⚠️ Minor version update with new features

• This is a minor version update (v1.5.0 → v1.6.0)
• Introduces new ClientCredentialsHandler for OAuth client credentials grant
• New MCP protocol features targeting the 2026-06-30 spec release
• Individual review recommended to ensure compatibility with existing MCP usage

Safety Assessment

⚠️ Requires careful review

• New OAuth authentication handler added
• Changes related to the upcoming 2026-06-30 MCP spec
• Review MCP server/client initialization code for any API changes
• This is a core dependency used for MCP server management

Changes

• Added ClientCredentialsHandler implementing auth.OAuthHandler using OAuth 2.0 Client Credentials grant (RFC 6749 Section 4.4) for service-to-service authentication
• Several smaller fixes and improvements
• Started work for the 2026-06-30 MCP spec release

Links

• v1.6.0 Tag
• Package Repository
• Go Package

Recommended Action

go get -u github.com/modelcontextprotocol/go-sdk@v1.6.0
go mod tidy

Testing Notes

• Run all tests: make test-unit
• Verify MCP server configuration and startup
• Test gh aw mcp list and gh aw mcp inspect commands
• Check MCP gateway integration
• Verify OAuth-related workflows still function correctly

References:

• §25312977802

Generated by Dependabot Dependency Checker · ● 675K · ◷

• expires on May 6, 2026, 10:09 AM UTC