chore(deps)(deps): bump @modelcontextprotocol/hono from 2.0.0-alpha.2 to 2.0.0

[dependabot]

Bumps @modelcontextprotocol/hono from 2.0.0-alpha.2 to 2.0.0.

Release notes

Sourced from @​modelcontextprotocol/hono's releases.

@​modelcontextprotocol/hono@​2.0.0

Patch Changes

• #2402 a400259 Thanks @​felixweinberger! - First beta release of SDK v2 with support for the MCP 2026-07-28 specification revision. See the migration guides for upgrading from v1 (docs/migration/upgrade-to-v2.md) and adopting the 2026-07-28 revision (docs/migration/support-2026-07-28.md).

• #2405 f172626 Thanks @​mattzcarey! - Ship CommonJS builds alongside ESM. Each package now emits both .mjs/.d.mts and .cjs/.d.cts (via tsdown format: ['esm', 'cjs']), and its exports map adds a require condition so require('@modelcontextprotocol/…') works from CommonJS consumers. Output extensions are normalized across all packages (@modelcontextprotocol/core moves from .js/.d.ts to .mjs/.d.mts); the public import paths are unchanged.

• #2441 561c6d8 Thanks @​felixweinberger! - POSTs whose Content-Type media type is not application/json are now rejected with 415 Unsupported Media Type; the header is parsed instead of substring-matched. Previously any value merely containing the substring passed the check (for example text/plain; a=application/json), case variants were wrongly rejected, and the 2026-07-28 entry did not inspect Content-Type at all — requests with a missing or non-JSON header that used to be served on that path now also answer 415. Values with parameters (application/json; charset=utf-8, including malformed parameter sections like application/json;) continue to work. SDK clients always send the correct header and are unaffected.

  The new isJsonContentType(header) helper is exported for transport and framework-adapter authors — custom entries composing the exported building blocks (classifyInboundRequest, PerRequestHTTPServerTransport) must apply it themselves. The hono adapter's JSON body pre-parse and the client's response dispatch now use the same parsed-media-type comparison.

• Updated dependencies [a400259, 44797d7, 1b90c96, f172626, 561c6d8, ce2f65d, 1480241, 7c49b47, e0a0ab7, 7e69735, 3c7ddaf, 8e1d2e9, e8de519, f413763, 0ab5d14, 24be404, 470678d, f130e1a, 7635115, 61866d7, 3f07a32]:

  • @​modelcontextprotocol/server@​2.0.0

@​modelcontextprotocol/hono@​2.0.0-beta.5

Patch Changes

• Updated dependencies [1480241, f413763]:
  • @​modelcontextprotocol/server@​2.0.0-beta.5

@​modelcontextprotocol/hono@​2.0.0-beta.4

Patch Changes

• Updated dependencies [7c49b47, e0a0ab7, 8e1d2e9, 3f07a32]:
  • @​modelcontextprotocol/server@​2.0.0-beta.4

@​modelcontextprotocol/hono@​2.0.0-beta.3

Patch Changes

... (truncated)

Commits

• cc4b416 Version Packages (#2555)
• faa7e2b fix(client): treat HTTP 401/403 on the negotiation probe as auth failures, no...
• a9835b4 docs: comprehensive GA pass — stable-release wording, released-spec links, in...
• f6fbd48 chore: exit changesets prerelease mode (#2565)
• f130e1a fix(validators): honor declared draft-07/06 JSON Schema dialects instead of r...
• 6dac272 test: bump conformance referee to 0.2.0-alpha.10, unbaseline server-stateless...
• 470678d fix: send SSE keep-alive comment frames from WebStandardStreamableHTTPServerT...
• 1e1392e Version Packages (beta) (#2512)
• 6fe1963 fix(client): probe stdio servers on a disposable sibling process (#2514)
• f413763 Align 2026-07-28 wire with spec PR #3002: serverInfo in result _meta, clientI...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Docker image ready

docker pull ghcr.io/archmax-ai/semantics:pr-102

[dependabot]

Superseded by #107.