Add governance documentation required for SEP-1730 tier compliance: - DEPENDENCY_POLICY.md: Conservative update policy for Maven dependencies - VERSIONING.md: SemVer policy with breaking/non-breaking definitions - ROADMAP.md: 2025-11-25 spec implementation focus and v1.x development - .github/dependabot.yml: Monthly updates with frozen production dependencies This mirrors the TypeScript SDK PR structure while being adapted for the Java context. Signed-off-by: Dariusz Jędrzejczyk <dariusz.jedrzejczyk@broadcom.com>
2.3 KiB
2.3 KiB
Versioning Policy
The MCP Java SDK (io.modelcontextprotocol.sdk) follows Semantic Versioning 2.0.0.
Version Format
MAJOR.MINOR.PATCH
- MAJOR: Incremented for breaking changes (see below).
- MINOR: Incremented for new features that are backward-compatible.
- PATCH: Incremented for backward-compatible bug fixes.
What Constitutes a Breaking Change
The following changes are considered breaking and require a major version bump:
- Removing or renaming a public API (class, interface, method, or constant).
- Changing the signature of a public method in a way that breaks existing callers (removing parameters, changing required/optional status, changing types).
- Removing or renaming a public interface method or field.
- Changing the behavior of an existing API in a way that breaks documented contracts.
- Dropping support for a Java LTS version.
- Removing support for a transport type.
- Changes to the MCP protocol version that require client/server code changes.
- Removing a module from the SDK.
The following are not considered breaking:
- Adding new methods with default implementations to interfaces.
- Adding new public APIs, classes, interfaces, or methods.
- Adding new optional parameters to existing methods (through method overloading).
- Bug fixes that correct behavior to match documented intent.
- Internal refactoring that does not affect the public API.
- Adding support for new MCP spec features.
- Changes to test dependencies or build tooling.
- Adding new modules to the SDK.
How Breaking Changes Are Communicated
- Changelog: All breaking changes are documented in the GitHub release notes with migration instructions.
- Deprecation: When feasible, APIs are deprecated for at least one minor release before removal using
@Deprecatedannotations, which surface warnings through Java tooling and IDEs. - Migration guide: Major version releases include a migration guide describing what changed and how to update.
- PR labels: Pull requests containing breaking changes are labeled with
breaking change.
Maven Coordinates
All SDK modules share the same version number and are released together. The BOM (mcp-bom) provides dependency management for all SDK modules to ensure version consistency.