[cdbartholomew]

Routine dependency maintenance for hindsight-integrations/coding-agents/package-lock.json. It follows up on #5313 for an advisory published after that PR was opened.

Closes Dependabot alert #1850

• @modelcontextprotocol/sdk 1.29.0 → 1.32.1. This is an in-range update of the ^1.29.0 devDependency, so the manifest is unchanged. The lockfile diff is 4 lines.

Verification (npm 10.9.2, reproducing test-coding-agents)

• npm ci: OK
• npx tsc --noEmit: clean (the SDK is used by src/mcp-server.ts and src/core/knowledge-tools.ts)
• npm test: 81 files / 1323 tests passed
• npm run build: OK

[cdbartholomew]

Merging over a known, pre-existing build-docs failure. It is unrelated to this lockfile-only change.

build-docs fails at its first step, node hindsight-docs/scripts/check-integrations.mjs, before any dependency is installed:

[integrations] ❌ Changelog pages not linked from their doc page:
  agno — add [View Changelog →](/changelog/integrations/agno)

Why this is pre-existing:

• It reproduces on a clean checkout of main at 8830bbb (node hindsight-docs/scripts/check-integrations.mjs prints the same two lines). It was introduced when the agno changelog page landed on main without a link from the integration doc page. docs(agno): link the changelog from the integration page #5303 is the fix.
• The same job fails with the identical message on unrelated PRs that touch none of these files: fix(transfer): run the bank-write validator on document import into an existing bank (#5137) #5308 (job 112321153492), fix(consolidation): pin source_fact_ids to the batch and report actions that cite none (#5273) #5307 (job 112323143459), fix(llm): route OpenRouter structured-output calls only to upstreams that support response_format #5304 (job 112318987646) and fix(recall): don't decay the post-rerank temporal boost by rank (#4939) #5295 (run 37471346110).
• The job was re-run once on this PR and failed again with the same message.

Every other check that ran on this PR passed, including the job(s) that cover the changed lockfile.