Update @modelcontextprotocol/sdk to 1.26.0

[Copilot]

Updates @modelcontextprotocol/sdk from 1.25.2 to 1.26.0 in .github/workflows/package-lock.json per Dependabot bundled update.

Changes

• SDK version: 1.25.2 → 1.26.0 (transitive via @sentry/mcp-server@0.27.0)
• Transitive dependencies: @hono/node-server, express, express-rate-limit, and related Express ecosystem packages updated

Compatibility

The SDK is a transitive dependency with constraint ^1.21.0 from @sentry/mcp-server. Version 1.26.0 is compatible (minor bump, no breaking changes). Security audit shows 0 vulnerabilities post-update.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Dependabot Burner] Dependabot: NPM Dependencies - .github/workflows/ directory</issue_title>
<issue_description>## 📦 Dependency Update Bundle

This issue tracks Dependabot dependency updates for the .github/workflows/ directory (npm/yarn packages).

Pull Requests Included

• Bump the npm_and_yarn group across 1 directory with 2 updates #13785 - Bump the npm_and_yarn group across 1 directory with 2 updates

Summary

Runtime: npm/yarn
Manifest: /.github/workflows
PRs: 1

This PR includes updates to @modelcontextprotocol/sdk from 1.25.2 to 1.26.0.

Next Steps

1. Review the PR for compatibility
2. Test the changes locally
3. Merge the PR
4. Close this parent issue once complete

---

This issue was created by the Dependabot Burner workflow to bundle related dependency updates.

AI generated by Dependabot Burner

• expires on Feb 15, 2026, 12:29 PM UTC

Comments on the Issue (you are @copilot in this section)

• Fixes github/gh-aw#14509

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Copilot]

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

• .github/workflows/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.