---
summary: "MCP SDK v2 support and request-aware NWIS retries"
breaking: false
security: false
---

# 0.2.3 — 2026-08-22

## Added

- **MCP protocol support** now serves revision 2026-07-28 alongside 2025-era clients over HTTP.

## Changed

- **Tool contracts** reject undeclared root input keys and advertise the standard error envelope in output schemas.
- **NWIS requests** now carry the request context through framework timeout and retry helpers, preserving cancellation and request correlation across attempts.
- **HTTP deployment** explicitly uses stateless sessions in `.env.example` and Docker. Choosing `auto` still resolves to stateful sessions.
- **Project tooling** now uses Bun 1.4, TypeScript 7, split source/test typechecking, portable MCPB cleanup, and the current framework skills and checks.
- **Security reports** now use `security@caseyjhand.com`.

## Dependencies

- `@cyanheads/mcp-ts-core` `^0.10.14` → `^0.12.3`
- `@duckdb/node-api` `^1.5.4-r.1` → `^1.5.5-r.4`
- `@biomejs/biome` `^2.5.4` → `^2.5.9`
- `@types/node` `^26.1.1` → `^26.2.0`
- `tsc-alias` `^1.8.17` → `^1.9.2`
- `typescript` `^6.0.3` → `^7.0.2`
- `vitest` `^4.1.10` → `^4.1.11`