[dependabot]

Bumps the dependabot-gomod-minor group with 1 update: github.com/mark3labs/mcp-go.

Updates github.com/mark3labs/mcp-go from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v1.4.0

What's Changed

• fix(mcp): preserve integer request IDs across decoding and cancellation by @​mikamikasuki in mark3labs/mcp-go#1032
• fix(server): replace resource and prompt registries atomically by @​rudycelekli in mark3labs/mcp-go#1072
• fix(server): unlock when Start fails with a conflicting address by @​hmdsefi in mark3labs/mcp-go#1083
• fix(server): generate unique in-process session IDs by @​pbednarcik in mark3labs/mcp-go#1091
• fix(server): order task hooks; a cancel during the created hook reaches the handler by @​pbednarcik in mark3labs/mcp-go#1093
• fix(mcp): distinguish package paths in schema cache keys by @​po-et in mark3labs/mcp-go#1094
• fix: clean up stdio processes when Close races with startup by @​allenflux in mark3labs/mcp-go#1095
• fix(server): render validation errors with jsonschema LocalizedString by @​SamuelMolero26 in mark3labs/mcp-go#1099
• test(transport): make the SSE custom client timeout test deterministic by @​raven-clown in mark3labs/mcp-go#1100
• fix(otel): leave nil _meta nil when there is no trace context to inject by @​rudycelekli in mark3labs/mcp-go#1101
• fix(server): process the final stdio message when it has no trailing newline by @​rudycelekli in mark3labs/mcp-go#1103
• fix(mcp): retain fixed array lengths in schema tag fallback by @​rudycelekli in mark3labs/mcp-go#1056
• fix(mcp): recognize pointer protocol errors in classification helpers by @​rudycelekli in mark3labs/mcp-go#1058
• fix(server): avoid overflow with large positive pagination limits by @​rudycelekli in mark3labs/mcp-go#1062
• fix(server): invoke middleware factories outside registration lock by @​rudycelekli in mark3labs/mcp-go#1068
• fix(server): stop dropping notifications when no event store is configured by @​Sriram-PR in mark3labs/mcp-go#1097
• fix(oauth): derive fallback endpoints from server origin by @​skulitom in mark3labs/mcp-go#1098
• fix(transport): reset the SSE event type after an event with no data by @​rudycelekli in mark3labs/mcp-go#1104
• fix(client): retain registered resource subscriptions for Listen by @​rudycelekli in mark3labs/mcp-go#1064
• fix(oauth): send application_type during dynamic client registration by @​po-et in mark3labs/mcp-go#1003
• feat(oauth): bind authorization callbacks to their initiating transaction by @​po-et in mark3labs/mcp-go#1006

New Contributors

• @​Sriram-PR made their first contribution in mark3labs/mcp-go#1097
• @​skulitom made their first contribution in mark3labs/mcp-go#1098

Full Changelog: mark3labs/mcp-go@v1.3.0...v1.4.0

Commits

• 84ad98e feat(oauth): bind authorization callbacks to their initiating transaction (#1...
• cac41e0 fix(oauth): send application_type during dynamic client registration (#1003)
• 75424c7 fix(client): retain registered resource subscriptions for Listen (#1064)
• 8824682 fix(transport): reset the SSE event type after an event with no data (#1104)
• a4c700b fix(oauth): derive fallback endpoints from server origin (#1098)
• 606be9b fix(server): stop dropping notifications when no event store is configured (#...
• 69786db fix(server): invoke middleware factories outside registration lock (#1068)
• 8f6eeeb fix(server): positive pagination overflow (#1062)
• d813bb7 fix(mcp): recognize pointer protocol errors in classification helpers (#1058)
• e335af8 fix(mcp): retain fixed array lengths in schema tag fallback (#1056)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

🟢 Approval recommended

No active review issues are reported for the mcp-go dependency update from v1.3.0 to v1.4.0.

No open issues 🎉

What changed in this PR

Updates the mcp-go dependency used by azldev’s Model Context Protocol integration from v1.3.0 to v1.4.0.

Changes:

• Adopts the upstream release’s protocol, transport, server, and OAuth fixes.
• Updates module checksums to match the new version.

File	Description
go.sum	Replaces the mcp-go checksums with those for v1.4.0.
go.mod	Bumps github.com/mark3labs/mcp-go to v1.4.0.

_{Review effort: Balanced}