Skip to content

chore: bump version to 1.0.3 - #2754

Merged
cliffhall merged 2 commits into
v1/mainfrom
v1/chore/bump-1.0.3
Oct 21, 2026
Merged

cliffhall merged 2 commits into
v1/mainfrom
v1/chore/bump-1.0.3

Conversation

@cliffhall

Copy link
Copy Markdown
Member

Closes #2753

Change

Version fields only, no functional change.

  • version bumped 1.0.2 -> 1.0.3 in package.json, client/, server/, cli/
  • the three @modelcontextprotocol/inspector-* workspace dependency ranges in the root package.json (^1.0.2 -> ^1.0.3)
  • the matching version fields in package-lock.json

15 insertions, 15 deletions across 5 files.

Merge order

Merge after the pending fixes have landed on v1/main, so 1.0.3 contains them. Those changes are tracked privately until they are published; the release notes will list them.

Note on npm run update-version

Not used, for the same reason as #2081: its trailing bare npm install re-resolves the whole tree. The 8 lockfile version fields were edited directly.

Verification

  • npm run check-version passes (all 4 packages at 1.0.3; ranges and lock version consistent)
  • npm ci accepts the lockfile and leaves it unmodified
  • npm run build, npm run lint and npm run prettier-check pass
  • Tests: 539 client + 37 server + 85 CLI, all passing
  • Merges cleanly over a local merge of the pending fixes, which reads 1.0.3 throughout

Post-merge

Tag v1.0.3 on v1/main and publish a GitHub release for it. The release event's publish job runs npm run publish-all to the v1-latest dist-tag.

🤖 Generated with Claude Code

Releases the pending v1 security and hygiene fixes.

Version fields only — no functional change.

The lockfile version fields were edited directly rather than via
`npm run update-version`, which finishes with a bare `npm install`
that re-resolves the whole tree, matching the 1.0.2 bump (#2081).

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Signed-off-by: cliffhall <[email protected]>
@cliffhall cliffhall added the v1 label Oct 21, 2026
@cliffhall
cliffhall requested a balanced review from Copilot October 21, 2026 05:20
@cliffhall cliffhall linked an issue Oct 21, 2026 that may be closed by this pull request
4 tasks

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

A maintainer must confirm the private prerequisite security fixes have landed before merging this release bump.

No open issues 🎉

What changed in this PR

Prepares MCP Inspector v1.0.3 for release after the pending security fixes land, with no functional changes.

Changes:

  • Bumps all four package versions to 1.0.3.
  • Aligns workspace dependency ranges and lockfile metadata without re-resolving dependencies.
File Description
server/​package.json Bumps server version to 1.0.3.
package.json Updates root version and workspace dependency ranges.
package-lock.json Synchronizes package versions and dependency ranges.
client/​package.json Bumps client version to 1.0.3.
cli/​package.json Bumps CLI version to 1.0.3.

Review effort: Balanced

@cliffhall
cliffhall merged commit 5a33088 into v1/main Oct 21, 2026
3 checks passed
@cliffhall
cliffhall deleted the v1/chore/bump-1.0.3 branch October 21, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

v1: release 1.0.3 with the pending fixes

2 participants