chore(deps): update dependency @modelcontextprotocol/sdk to v1.20.1 (#1370)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [@modelcontextprotocol/sdk](https://modelcontextprotocol.io)
([source](https://redirect.github.com/modelcontextprotocol/typescript-sdk))
| dependencies | patch | [`1.20.0` ->
`1.20.1`](https://renovatebot.com/diffs/npm/@modelcontextprotocol%2fsdk/1.20.0/1.20.1)
| [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/modelcontextprotocol/typescript-sdk/badge)](https://securityscorecards.dev/viewer/?uri=github.com/modelcontextprotocol/typescript-sdk)
|

---

### Release Notes

<details>
<summary>modelcontextprotocol/typescript-sdk
(@&#8203;modelcontextprotocol/sdk)</summary>

###
[`v1.20.1`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.20.1)

[Compare
Source](https://redirect.github.com/modelcontextprotocol/typescript-sdk/compare/1.20.0...1.20.1)

#### What's Changed

- fix: Add Accept header to auth metadata request by
[@&#8203;SVLaursen](https://redirect.github.com/SVLaursen) in
[#&#8203;901](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/901)
- Allow empty string as valid URL in DCR workflow by
[@&#8203;fredericbarthelet](https://redirect.github.com/fredericbarthelet)
in
[#&#8203;987](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/987)
- docs: fix summary contents at readme by
[@&#8203;starfish719](https://redirect.github.com/starfish719) in
[#&#8203;1025](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1025)
- chore: bump version to 1.20.1 for release by
[@&#8203;felixweinberger](https://redirect.github.com/felixweinberger)
in
[#&#8203;1032](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1032)

#### New Contributors

- [@&#8203;SVLaursen](https://redirect.github.com/SVLaursen) made their
first contribution in
[#&#8203;901](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/901)
- [@&#8203;starfish719](https://redirect.github.com/starfish719) made
their first contribution in
[#&#8203;1025](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1025)

**Full Changelog**:
<modelcontextprotocol/typescript-sdk@1.20.0...1.20.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00
PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only
on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/settlemint/sdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

    
<!-- This is an auto-generated description by cubic. -->
---

## Summary by cubic
Update @modelcontextprotocol/sdk to 1.20.1 to pull in the auth metadata
Accept header fix and relaxed URL handling in the DCR flow. This
improves reliability of MCP auth with no app changes required.

<!-- End of auto-generated description by cubic. -->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

bun.lock

@@ -142,7 +142,7 @@
         "@commander-js/extra-typings": "14.0.0",
         "@graphql-tools/load": "8.1.2",
         "@graphql-tools/url-loader": "9.0.0",
-        "@modelcontextprotocol/sdk": "1.20.0",
+        "@modelcontextprotocol/sdk": "1.20.1",
         "@settlemint/sdk-js": "workspace:*",
         "@settlemint/sdk-utils": "workspace:*",
         "commander": "14.0.1",
@@ -533,7 +533,7 @@
 
     "@manypkg/tools": ["@manypkg/tools@2.1.0", "", { "dependencies": { "jju": "^1.4.0", "js-yaml": "^4.1.0", "tinyglobby": "^0.2.13" } }, "sha512-0FOIepYR4ugPYaHwK7hDeHDkfPOBVvayt9QpvRbi2LT/h2b0GaE/gM9Gag7fsnyYyNaTZ2IGyOuVg07IYepvYQ=="],
 
-    "@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.20.0", "", { "dependencies": { "ajv": "^6.12.6", "content-type": "^1.0.5", "cors": "^2.8.5", "cross-spawn": "^7.0.5", "eventsource": "^3.0.2", "eventsource-parser": "^3.0.0", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^5.0.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" } }, "sha512-kOQ4+fHuT4KbR2iq2IjeV32HiihueuOf1vJkq18z08CLZ1UQrTc8BXJpVfxZkq45+inLLD+D4xx4nBjUelJa4Q=="],
+    "@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.20.1", "", { "dependencies": { "ajv": "^6.12.6", "content-type": "^1.0.5", "cors": "^2.8.5", "cross-spawn": "^7.0.5", "eventsource": "^3.0.2", "eventsource-parser": "^3.0.0", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^5.0.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" } }, "sha512-j/P+yuxXfgxb+mW7OEoRCM3G47zCTDqUPivJo/VzpjbG8I9csTXtOprCf5FfOfHK4whOJny0aHuBEON+kS7CCA=="],
 
     "@multiformats/dns": ["@multiformats/dns@1.0.9", "", { "dependencies": { "buffer": "^6.0.3", "dns-packet": "^5.6.1", "hashlru": "^2.3.0", "p-queue": "^8.0.1", "progress-events": "^1.0.0", "uint8arrays": "^5.0.2" } }, "sha512-Ja4hevWI9p96ICx11K3suFvFirnMmXILzS7FpsR2KG3FoKF/XJijm8ylf3vY6kRFGr98yfZYM+zIn18KaINs3A=="],
 

sdk/mcp/package.json

@@ -43,7 +43,7 @@
     "@commander-js/extra-typings": "14.0.0",
     "@graphql-tools/load": "8.1.2",
     "@graphql-tools/url-loader": "9.0.0",
-    "@modelcontextprotocol/sdk": "1.20.0",
+    "@modelcontextprotocol/sdk": "1.20.1",
     "@settlemint/sdk-js": "workspace:*",
     "@settlemint/sdk-utils": "workspace:*",
     "commander": "14.0.1",