All pull requests

Pull requests

• chore: release v3.4.1

  #1294·github-actions[bot] opened Sep 23, 2026·

  ·

• chore: reduce dependency update noise with monthly grouping

  T-CIT-config
  #1293·DaleSeo opened Sep 23, 2026·

  ·

• chore(deps): update sse-stream requirement from 0.2.4 to 0.3.0

  T-configT-dependencies
  #1289·dependabot[bot] opened Sep 22, 2026·

  ·

• fix(model): reject malformed JSON-RPC messages with conflicting result and error fields (#1283)

  T-core
  #1287·ump45nose opened Sep 20, 2026·

  ·
  1

• feat(rmcp): implement SEP-2640 MCP Skills Extension

  T-configT-coreT-dependenciesT-documentationT-handlerT-macrosT-modelT-serviceT-test
  #1286·branben opened Sep 18, 2026·

  ·

• [rmcp] Notify credential stores when a refresh token is rejected

  T-coreT-transport
  #1285·mzeng-openai opened Sep 18, 2026·

  ·
  1

• fix(streamable-http): match Origin's omitted default port against explicit allowlist entries

  T-coreT-testT-transport
  #1282·yinnho opened Sep 17, 2026·

  ·
  1

• fix(rmcp): tolerate empty cacheScope instead of silently dropping the whole result

  T-coreT-test
  #1281·WAHIB-EL-KHADIRI opened Sep 16, 2026·

  ·
  1

• fix(auth): structure metadata discovery errors

  T-coreT-transport
  #1280·ASTion24 opened Sep 16, 2026·

  ·
  1

• Fix: streamable-http server: a supplied Mcp-Method contradicting an initialize body is silently accepted

  T-coreT-transport
  #1275·SIDDARTHAREDDY8 opened Sep 15, 2026·

  ·
  1

  3

• fix(rmcp): reject duplicate SEP-2243 headers

  T-coreT-transport
  #1274·DaleSeo opened Sep 14, 2026·

  ·
  1

  

• fix(transport): match explicit default ports in Origin allowlist

  T-coreT-testT-transport
  #1270·DaleSeo opened Sep 14, 2026·

  ·
  1

  1

  

• fix: preserve legacy fallback after rejected discovery

  T-coreT-handlerT-serviceT-test
  #1269·JulienCote opened Sep 14, 2026·

  ·

• fix(http): cancel session work when the transport closes

  T-coreT-testT-transport
  #1267·charliemarsh-oai opened Sep 13, 2026·

  ·

• ci: combine AI issue triage with a maintainer rotation as the responsible reviewer

  T-CIT-configT-documentation
  #1260·alexhancock opened Sep 11, 2026·

  ·
  8

• ci: triage new issues with Codex

  T-CIT-config
  #1257·DaleSeo opened Sep 10, 2026·

  ·

• fix(transport): stop keeping a session and GET stream at 2026-07-28

  T-configT-coreT-dependenciesT-testT-transport
  #1256·LizunovSergey opened Sep 10, 2026·

  ·
  1

  12

• fix(auth): retain client secrets across credential restoration

  T-coreT-testT-transport
  #1255·LSGoCards7 opened Sep 10, 2026·

  ·
  1

  2

• fix(server): keep discover lifecycle bootstrap-neutral

  T-coreT-serviceT-test
  #1248·faisal-shah opened Sep 7, 2026·

  ·
  3

• fix(transport): bound buffered Streamable HTTP responses

  T-coreT-testT-transport
  #1246·GTanger opened Sep 5, 2026·

  ·
  6

• fix: treat empty cacheScope as omitted

  T-coreT-test
  #1241·ismail-rt opened Sep 2, 2026·

  ·
  1

  3

• Dr qedwards patch 1

  T-configT-dependenciesT-documentation
  #1207·drQedwards opened Aug 23, 2026·

  ·

• fix: reject replies from retired streamable http sessions

  T-coreT-testT-transport
  #1206·nickcoai opened Aug 23, 2026·

  ·
  7

• Add HeaderName constants for MCP HTTP headers

  T-coreT-transport
  #1202·gandhipratik203 opened Aug 22, 2026·

  ·
  2

• fix: preserve custom results with generic metadata

  T-core
  #1197·jmagar opened Aug 20, 2026·

  ·