🔼 Update dependency laravel/mcp to ^0.9.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
laravel/mcp	^0.5.9 → ^0.9.0

---

Release Notes

laravel/mcp (laravel/mcp)

v0.9.1

Compare Source

• Reject malformed JSON-RPC parameters by @​pushpak1300 in #​273

v0.9.0

Compare Source

What's Changed

• Use negotiated MCP protocol version for HTTP client requests by @​andrew-downey in #​257
• Improve test error when unexpected errors are found in response by @​axlon in #​259
• Fix schema return type in tool stub by @​axlon in #​261
• Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @​dependabot[bot] in #​263
• Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @​dependabot[bot] in #​264
• Fix nested OAuth resource path with preceding route parameters by @​lazerg in #​262
• Add #[SensitiveParameter] to parameters carrying secrets by @​axlon in #​265
• Fix CursorPaginator returning trailing items for a negative cursor offset by @​dfinchenko in #​267
• Update phpdoc for assertStructuredContent by @​chrisvanlier2005 in #​268
• Fix DCR scope persistence for Passport clients by @​Gujiassh in #​270
• Serialize structured content before asserting by @​chrisvanlier2005 in #​269

New Contributors

• @​andrew-downey made their first contribution in #​257
• @​axlon made their first contribution in #​259
• @​dfinchenko made their first contribution in #​267
• @​chrisvanlier2005 made their first contribution in #​268

Full Changelog: laravel/mcp@v0.8.2...v0.9.0

Upgrading To v0.9.0 From v0.8.0

Custom Client Transports

Likelihood Of Impact: low

The Laravel\Mcp\Client\Contracts\Transport contract now requires a setProtocolVersion method. The client calls this method after the initialize handshake so the transport can send the negotiated protocol version on subsequent requests.

If your application implements this contract, add the method to your transport:

public function setProtocolVersion(string $version): void
{
    $this->protocolVersion = $version;
}

Transports that do not send per-request headers may implement the method as a no-op, as the first-party StdioTransport does.

Client Protocol Version Negotiation

Likelihood Of Impact: Medium

The MCP client now validates the negotiated protocol version against the new ProtocolVersion::clientSupported() method rather than ProtocolVersion::supported(). The client supports 2025-11-25 and 2025-06-18.

Connecting to a server that negotiates 2025-03-26 or 2024-11-05 previously succeeded and will now throw a Laravel\Mcp\Exceptions\ClientException.
The ProtocolVersion::supported() method is unchanged and still reports every version the server accepts.

v0.8.2

Compare Source

What's Changed

• Use negotiated MCP protocol version for HTTP client requests by @​andrew-downey in #​257
• Improve test error when unexpected errors are found in response by @​axlon in #​259
• Fix schema return type in tool stub by @​axlon in #​261
• Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @​dependabot[bot] in #​263
• Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @​dependabot[bot] in #​264
• Fix nested OAuth resource path with preceding route parameters by @​lazerg in #​262
• Add #[SensitiveParameter] to parameters carrying secrets by @​axlon in #​265
• Fix CursorPaginator returning trailing items for a negative cursor offset by @​dfinchenko in #​267
• Update phpdoc for assertStructuredContent by @​chrisvanlier2005 in #​268
• Fix DCR scope persistence for Passport clients by @​Gujiassh in #​270
• Serialize structured content before asserting by @​chrisvanlier2005 in #​269

New Contributors

• @​andrew-downey made their first contribution in #​257
• @​axlon made their first contribution in #​259
• @​dfinchenko made their first contribution in #​267
• @​chrisvanlier2005 made their first contribution in #​268

Full Changelog: laravel/mcp@v0.8.2...v0.9.0

Upgrading To v0.9.0 From v0.8.0

Custom Client Transports

Likelihood Of Impact: low

The Laravel\Mcp\Client\Contracts\Transport contract now requires a setProtocolVersion method. The client calls this method after the initialize handshake so the transport can send the negotiated protocol version on subsequent requests.

If your application implements this contract, add the method to your transport:

public function setProtocolVersion(string $version): void
{
    $this->protocolVersion = $version;
}

Transports that do not send per-request headers may implement the method as a no-op, as the first-party StdioTransport does.

Client Protocol Version Negotiation

Likelihood Of Impact: Medium

The MCP client now validates the negotiated protocol version against the new ProtocolVersion::clientSupported() method rather than ProtocolVersion::supported(). The client supports 2025-11-25 and 2025-06-18.

Connecting to a server that negotiates 2025-03-26 or 2024-11-05 previously succeeded and will now throw a Laravel\Mcp\Exceptions\ClientException.
The ProtocolVersion::supported() method is unchanged and still reports every version the server accepts.

v0.8.1

Compare Source

What's Changed

• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in #​252
• feat: compute default AppResource ui.domain from current URL for Claude compatibility by @​cirolosapio in #​231
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in #​255
• Allow OAuth client registration without a client name by @​lazerg in #​254

New Contributors

• @​cirolosapio made their first contribution in #​231
• @​lazerg made their first contribution in #​254

Full Changelog: laravel/mcp@v0.8.1...v0.8.2

v0.8.0

Compare Source

What's Changed

• Add resources support to the MCP client by @​pushpak1300 in #​243
• feat: automatically convert model not found exceptions to proper error messages by @​calebdw in #​244
• Add withHeaders() to the MCP web client by @​pushpak1300 in #​250
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in #​251
• Centralize exception handling in method handlers with debug-aware errors by @​pushpak1300 in #​249

New Contributors

• @​calebdw made their first contribution in #​244

Full Changelog: laravel/mcp@v0.8.0...v0.8.1

v0.7.2

Compare Source

What's Changed

• Add MCP client tool listing and calling by @​pushpak1300 in #​226
• Add MCP client Streamable HTTP transport by @​pushpak1300 in #​227
• Add named MCP clients with tool list caching by @​pushpak1300 in #​228
• Extract caching into RegisteredClient by @​pushpak1300 in #​230
• GitHub Actions hardening by @​nunomaduro in #​234
• Remove MCP client tool-list caching layer by @​pushpak1300 in #​235
• Add Dependabot cooldown of 5 days by @​nunomaduro in #​237
• Enable Dependabot auto-merge by @​nunomaduro in #​238
• Make MCP client tools cacheable via recipe serialization by @​pushpak1300 in #​239
• Add OAuth layer for MCP web client by @​pushpak1300 in #​233
• Fix Mcp alias: correct facade class name by @​adelf in #​241
• Add prompts support to the MCP client by @​pushpak1300 in #​242

New Contributors

• @​adelf made their first contribution in #​241

Full Changelog: laravel/mcp@v0.7.2...v0.8.0

v0.7.1

Compare Source

What's Changed

• return $this from ->dump() by @​Gummibeer in #​223
• Resolve URI template variables when testing resources by @​pushpak1300 in #​225
• Add MCP client foundation with stdio transport and ping by @​pushpak1300 in #​216

New Contributors

• @​Gummibeer made their first contribution in #​223

Full Changelog: laravel/mcp@v0.7.1...v0.7.2

v0.7.0

Compare Source

• docs(readme): point test badge to workflow file URL by @​Gujiassh in #​201
• Add MCP UI App support by @​pushpak1300 in #​196

v0.6.7

Compare Source

What's Changed

• Fix route:cache memory exhaustion caused by circular reference by @​radumetes in #​197

New Contributors

• @​radumetes made their first contribution in #​197

Full Changelog: laravel/mcp@v0.6.6...v0.6.7

v0.6.6

Compare Source

What's Changed

• Fix route:cache memory exhaustion caused by circular reference by @​radumetes in #​197

New Contributors

• @​radumetes made their first contribution in #​197

Full Changelog: laravel/mcp@v0.6.6...v0.6.7

v0.6.5

Compare Source

What's Changed

• fix: support custom URI schemes in OAuth client registration by @​alexis-riot in #​181
• fix: return tool errors for auth failures by @​Gujiassh in #​186
• fix: authorization_servers and issuer should be the root URL, not the resource path by @​pktharindu in #​185

New Contributors

• @​alexis-riot made their first contribution in #​181
• @​pktharindu made their first contribution in #​185

Full Changelog: laravel/mcp@v0.6.4...v0.6.5

v0.6.4

Compare Source

What's Changed

• fix: support custom URI schemes in OAuth client registration by @​alexis-riot in #​181
• fix: return tool errors for auth failures by @​Gujiassh in #​186
• fix: authorization_servers and issuer should be the root URL, not the resource path by @​pktharindu in #​185

New Contributors

• @​alexis-riot made their first contribution in #​181
• @​pktharindu made their first contribution in #​185

Full Changelog: laravel/mcp@v0.6.4...v0.6.5

v0.6.3

Compare Source

• Add assertStructuredContent($closure) support by @​gdebrauwer in #​172

v0.6.2

Compare Source

• Makes imports consistent by @​nunomaduro in #​171

v0.6.1

Compare Source

• Add missing @​throws annotation to toJsonRpcResponse method by @​mohammadRezaei1380 in #​166
• Update boost skill description and remove core guideline by @​pushpak1300 in #​170

v0.6.0

Compare Source

• Allow localhost redirect with dynamic ports by @​dylanbr in #​156
• Add Image and Audio content types with Storage integration by @​pushpak1300 in #​155
• Remove incorrect Response::structured docblock throw by @​nathanheffley in #​160
• Add Boost Guidelines & Skills by @​pushpak1300 in #​153
• Add facade documenter workflow and sync Mcp facade docblocks by @​pushpak1300 in #​161
• Add Allow header to 405 responses for unsupported HTTP methods by @​pushpak1300 in #​162
• Fix CI failures in facade documenter and static analysis by @​pushpak1300 in #​163
• Add example of registering MCP Tool in a Server by @​mohammadRezaei1380 in #​164

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update laravel/mcp:0.9.1 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency laravel/framework is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires laravel/mcp ^0.9.0, found laravel/mcp[v0.9.0, v0.9.1] but these were not loaded, likely because it conflicts with another require.
  Problem 2
    - laravel/boost is locked to version v1.8.13 and an update of this package was not requested.
    - laravel/boost v1.8.13 requires laravel/mcp ^0.5.1 -> found laravel/mcp[v0.5.1, ..., v0.5.9] but it conflicts with your root composer.json require (^0.9.0).

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.