chore(deps): update dependency @modelcontextprotocol/sdk to v1.21.1 (#1410)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [@modelcontextprotocol/sdk](https://modelcontextprotocol.io)
([source](https://redirect.github.com/modelcontextprotocol/typescript-sdk))
| dependencies | patch | [`1.21.0` ->
`1.21.1`](https://renovatebot.com/diffs/npm/@modelcontextprotocol%2fsdk/1.21.0/1.21.1)
| [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/modelcontextprotocol/typescript-sdk/badge)](https://securityscorecards.dev/viewer/?uri=github.com/modelcontextprotocol/typescript-sdk)
|

---

### Release Notes

<details>
<summary>modelcontextprotocol/typescript-sdk
(@&#8203;modelcontextprotocol/sdk)</summary>

###
[`v1.21.1`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.21.1)

[Compare
Source](https://redirect.github.com/modelcontextprotocol/typescript-sdk/compare/1.21.0...1.21.1)

#### What's Changed

- Only use path-based discovery URLs from the authorization server to
discover metadata by
[@&#8203;roadmapper](https://redirect.github.com/roadmapper) in
[#&#8203;1070](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1070)
- Add [@&#8203;deprecated](https://redirect.github.com/deprecated)
annotations to legacy APIs by
[@&#8203;domdomegg](https://redirect.github.com/domdomegg) in
[#&#8203;1018](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1018)
- fix: Support `WWW-Authenticate` `scope` param for SEP-835 by
[@&#8203;chipgpt](https://redirect.github.com/chipgpt) in
[#&#8203;983](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/983)
- move CLI script to dedicated scripts directory by
[@&#8203;mattzcarey](https://redirect.github.com/mattzcarey) in
[#&#8203;1073](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1073)
- Check script which typechecks using Typescripts new Go port by
[@&#8203;mattzcarey](https://redirect.github.com/mattzcarey) in
[#&#8203;1075](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1075)
- FIX: use a nightly spec.types.ts by
[@&#8203;mattzcarey](https://redirect.github.com/mattzcarey) in
[#&#8203;1087](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1087)
- chore: bump version for release by
[@&#8203;felixweinberger](https://redirect.github.com/felixweinberger)
in
[#&#8203;1085](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1085)

#### New Contributors

- [@&#8203;roadmapper](https://redirect.github.com/roadmapper) made
their first contribution in
[#&#8203;1070](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1070)

**Full Changelog**:
<modelcontextprotocol/typescript-sdk@1.21.0...1.21.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00
PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only
on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/settlemint/sdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Update @modelcontextprotocol/sdk to 1.21.1 to pull in protocol fixes and
better auth metadata discovery. Improves SEP-835 scope handling; no
breaking changes.

- **Dependencies**
  - Updated sdk/mcp/package.json and bun.lock.
- Adds path-based discovery URLs and support for WWW-Authenticate scope
(SEP-835).
  - Marks legacy APIs as deprecated; no migration needed.

<sup>Written for commit 9e90c77.
Summary will update automatically on new commits.</sup>

<!-- End of auto-generated description by cubic. -->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

bun.lock

@@ -142,7 +142,7 @@
         "@commander-js/extra-typings": "14.0.0",
         "@graphql-tools/load": "8.1.4",
         "@graphql-tools/url-loader": "9.0.2",
-        "@modelcontextprotocol/sdk": "1.21.0",
+        "@modelcontextprotocol/sdk": "1.21.1",
         "@settlemint/sdk-js": "workspace:*",
         "@settlemint/sdk-utils": "workspace:*",
         "commander": "14.0.2",
@@ -531,7 +531,7 @@
 
     "@manypkg/tools": ["@manypkg/tools@2.1.0", "", { "dependencies": { "jju": "^1.4.0", "js-yaml": "^4.1.0", "tinyglobby": "^0.2.13" } }, "sha512-0FOIepYR4ugPYaHwK7hDeHDkfPOBVvayt9QpvRbi2LT/h2b0GaE/gM9Gag7fsnyYyNaTZ2IGyOuVg07IYepvYQ=="],
 
-    "@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.21.0", "", { "dependencies": { "ajv": "^8.17.1", "ajv-formats": "^3.0.1", "content-type": "^1.0.5", "cors": "^2.8.5", "cross-spawn": "^7.0.5", "eventsource": "^3.0.2", "eventsource-parser": "^3.0.0", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^5.0.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" }, "peerDependencies": { "@cfworker/json-schema": "^4.1.1" }, "optionalPeers": ["@cfworker/json-schema"] }, "sha512-YFBsXJMFCyI1zP98u7gezMFKX4lgu/XpoZJk7ufI6UlFKXLj2hAMUuRlQX/nrmIPOmhRrG6tw2OQ2ZA/ZlXYpQ=="],
+    "@modelcontextprotocol/sdk": ["@modelcontextprotocol/sdk@1.21.1", "", { "dependencies": { "ajv": "^8.17.1", "ajv-formats": "^3.0.1", "content-type": "^1.0.5", "cors": "^2.8.5", "cross-spawn": "^7.0.5", "eventsource": "^3.0.2", "eventsource-parser": "^3.0.0", "express": "^5.0.1", "express-rate-limit": "^7.5.0", "pkce-challenge": "^5.0.0", "raw-body": "^3.0.0", "zod": "^3.23.8", "zod-to-json-schema": "^3.24.1" }, "peerDependencies": { "@cfworker/json-schema": "^4.1.1" }, "optionalPeers": ["@cfworker/json-schema"] }, "sha512-UyLFcJLDvUuZbGnaQqXFT32CpPpGj7VS19roLut6gkQVhb439xUzYWbsUvdI3ZPL+2hnFosuugtYWE0Mcs1rmQ=="],
 
     "@multiformats/dns": ["@multiformats/dns@1.0.9", "", { "dependencies": { "buffer": "^6.0.3", "dns-packet": "^5.6.1", "hashlru": "^2.3.0", "p-queue": "^8.0.1", "progress-events": "^1.0.0", "uint8arrays": "^5.0.2" } }, "sha512-Ja4hevWI9p96ICx11K3suFvFirnMmXILzS7FpsR2KG3FoKF/XJijm8ylf3vY6kRFGr98yfZYM+zIn18KaINs3A=="],
 

sdk/mcp/package.json

@@ -43,7 +43,7 @@
     "@commander-js/extra-typings": "14.0.0",
     "@graphql-tools/load": "8.1.4",
     "@graphql-tools/url-loader": "9.0.2",
-    "@modelcontextprotocol/sdk": "1.21.0",
+    "@modelcontextprotocol/sdk": "1.21.1",
     "@settlemint/sdk-js": "workspace:*",
     "@settlemint/sdk-utils": "workspace:*",
     "commander": "14.0.2",