chore: bump ext-apps to 1.5.0 (modelcontextprotocol#588)

* chore: bump ext-apps to 1.5.0

* style: auto-fix prettier formatting

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

chore: bump ext-apps to 1.4.0 (modelcontextprotocol#582)

* chore: bump ext-apps to 1.4.0

Changes since 1.3.2:

SDK
- feat: add addEventListener/removeEventListener with DOM-model on* semantics (modelcontextprotocol#573)

pdf-server
- feat: add save_as interact action (modelcontextprotocol#580)
- feat: fit-to-page on fullscreen + pinch-to-zoom (modelcontextprotocol#583)
- fix: npx DOMMatrix crash + broken MCPB bundle (modelcontextprotocol#584)
- fix: viewer liveness, 1:1 batch results, fullscreen jitter (modelcontextprotocol#579)
- fix: render page before O(numPages) annotation scans (modelcontextprotocol#581)
- fix: radio + dropdown in fill_form/save (modelcontextprotocol#577)

Dependencies
- chore: npm audit fix — sdk 1.29.0, systeminformation 5.31.5, +13 transitives (modelcontextprotocol#585, modelcontextprotocol#586)
- fix: bump path-to-regexp 8.3.0 → 8.4.1 to patch ReDoS CVEs (modelcontextprotocol#576)

* chore: update e2e snapshots [skip ci]

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

chore: bump ext-apps to 1.3.2 (modelcontextprotocol#569)

Changes since 1.3.1:
- Revert fullscreen size-changed skip (modelcontextprotocol#570)
- Fix auto-resize destroying horizontal scroll positions (modelcontextprotocol#567)
- Remove examples/pdf-server/plugin/ — canonical copy is upcoming in knowledge-work-plugins (modelcontextprotocol#565)

chore: bump ext-apps to 1.3.1 (modelcontextprotocol#562)

Changes since 1.3.0:
- fix(pdf-server): detached-buffer on range re-request + stale e2e assertion (modelcontextprotocol#561)

chore: bump ext-apps to 1.3.0 (modelcontextprotocol#560)

Changes since 1.2.2:
- feat: add ui/notifications/request-teardown for view-initiated termination (modelcontextprotocol#215)
- feat(pdf-server): annotations, interact tool, page extraction & prompt engineering (modelcontextprotocol#506)
- fix(examples): improve mobile support for map, pdf, and threejs examples (modelcontextprotocol#555)

chore: bump ext-apps to 1.2.2 (modelcontextprotocol#549)

Changes since 1.2.1:
- fix(schemas): import from zod/v4 to match SDK's zod API (modelcontextprotocol#548)
- test(e2e): fix no-op security injection test via frames[] traversal (modelcontextprotocol#540)

Merge pull request modelcontextprotocol#547 from modelcontextprotocol…

…/ochafik/bump-1.2.1

chore: bump ext-apps to 1.2.1

chore: bump ext-apps to 1.2.0 (modelcontextprotocol#527)

* chore: bump ext-apps to 1.1.3

Changes since 1.1.2:
- fix: autoResize reporting viewport height when content is taller (modelcontextprotocol#525)
- fix: remove duplicate --color-text-ghost from McpUiStyleVariableKey (modelcontextprotocol#523)
- fix: examples servers' npm run start:stdio (modelcontextprotocol#507)
- pdf-server: ignore client roots by default (modelcontextprotocol#510)
- docs: add Security documentation section and SEO improvements (modelcontextprotocol#524)
- docs: add MCP client configuration examples to CONTRIBUTING.md (modelcontextprotocol#508, modelcontextprotocol#526)
- docs: use apps.extensions.modelcontextprotocol.io domain for docs URLs (modelcontextprotocol#499)
- docs: add SECURITY.md with GitHub Security Advisories guidance (modelcontextprotocol#472)

* chore: switch to minor bump 1.2.0 (new APIs in modelcontextprotocol#470)

chore: bump ext-apps to 1.1.2 (modelcontextprotocol#503)

* chore: bump ext-apps to 1.1.2

Changes since 1.1.1:
- feat: add ui/download-file method for host-mediated file downloads (modelcontextprotocol#475)
- pdf-server: robust path validation + folder/file root support (modelcontextprotocol#497)
- ci: auto-fix prettier formatting in pre-commit hook and CI (modelcontextprotocol#498)

* fix: sync local SDK build into node_modules for examples

npm workspaces hoists example dependencies to the root node_modules,
but installs the published registry copy of @modelcontextprotocol/ext-apps
instead of linking to the local source. This causes type-check failures
when examples use features not yet published to npm.

Add scripts/link-self.mjs which copies the freshly-built dist/ and
package.json into the hoisted node_modules copy after each SDK build,
ensuring examples always type-check against the latest local types.

See: npm/feedback#774

* Revert "fix: sync local SDK build into node_modules for examples"

This reverts commit e3387e8.

chore: bump ext-apps to 1.1.1 (modelcontextprotocol#496)

Bug fixes / improvements since 1.1.0:
- fix: add audio/video support for basic-host (modelcontextprotocol#460)
- fix(pdf-server): remove page-loading overlay (modelcontextprotocol#493)
- pdf-server: remove domain allowlist, require HTTPS only (modelcontextprotocol#487)
- Set audioSession.type to playback in sheet music app (modelcontextprotocol#489)
- Add MCPB packaging and Claude Code plugin for pdf-server (modelcontextprotocol#491)