All pull requests

Pull requests

• fix(client): validate protected resource metadata identity

  v2
  #3169·bbdu3 opened Nov 10, 2026·

  ·
  1

  4

• fix(client/auth): sign private_key_jwt with an Ed25519 PEM key

  v2
  #3165·rodrigogaraujo opened Nov 9, 2026·3 of 9 tasks·

  ·
  2

• fix(server): stop a completed listen stream from keeping its abort listener

  v2
  #3164·kun654 opened Nov 9, 2026·

  ·
  2

• docs(hono): type the README route callback as Context

  v2
  #3162·ZainnQureshii opened Nov 8, 2026·3 of 9 tasks·

  ·
  2

• fix(server): validate non-object outputSchema roots instead of crashing

  v1
  #3161·Devt7 opened Nov 8, 2026·

  ·
  3

• fix(server): route pre-2026 _meta protocol-version claims to legacy serving

  v2
  #3160·tomwangcn opened Nov 7, 2026·

  ·
  1

  4

• docs: point CONTRIBUTING at the current release workflow

  v2
  #3158·SoulmatelynchVFX opened Nov 7, 2026·

  ·
  2

• feat(server): per-session subscription cap with trusted resolver on createMcpHandler

  v2
  #3157·JayDS22 opened Nov 6, 2026·

  ·
  1

  7

• fix(node): remove Hono from Node HTTP adapter

  v2
  #3156·LaoChouPro opened Nov 6, 2026·

  ·
  1

  6

• fix(core): enforce maxTotalTimeout as a hard cap

  v2
  #3155·Sanath91009 opened Nov 6, 2026·

  ·
  1

  2

• feat(server): send structuredContent as JSON text when a tool omits content

  v2
  #3153·mattzcarey opened Nov 5, 2026Member·2/2·

  ·
  7

• fix(node): cancel the response stream when the client disconnects

  v2
  #3151·SwapnilSkr opened Nov 5, 2026·1 task done·

  ·
  1

  2

• fix: resolve stream ID from event store metadata in InMemoryEventStore

  v2
  #3149·zhouyunding opened Nov 4, 2026·

  ·
  1

  2

• fix(core-internal): match query variables that expand omitted

  v2
  #3147·lhy-dcf opened Nov 4, 2026·

  ·
  2

• fix(client): deliver a modern-era 404 Method not found as a ProtocolError

  v2
  #3146·jaeminbird opened Nov 4, 2026·

  ·
  2

• [v1.x] fix(auth): reject non-loopback http and fragment redirect URIs at registration

  v1
  #3143·samuelmbabhazi opened Nov 1, 2026·

  ·
  4

• fix(server): sync resource and template title on metadata updates (#3103)

  v2
  #3141·SameRainbows opened Nov 1, 2026·

  ·
  1

  2

• fix(client): close the SSE transport when its stream ends for good

  v2
  #3140·arjunprabhulal opened Oct 31, 2026·5 of 9 tasks·

  ·
  5

• fix(server): omit invalid_token when a bearer challenge has no credentials

  v2
  #3139·Anandumv opened Oct 31, 2026·

  ·
  1

  2

• fix(core-internal): use an already-converted JSON Schema document directly

  v2
  #3138·BlueX888 opened Oct 31, 2026·

  ·
  1

  4

• fix(server): answer 499 to a legacy request aborted before subscribing

  v2
  #3137·mariano-aguero opened Oct 30, 2026·4 of 9 tasks·

  ·
  1

  2

• chore(changeset): release skipOfflineAccessConsentPrompt as a minor

  v2
  #3135·felixweinberger opened Oct 30, 2026Contributor·

  ·
  2

  

• fix(client): honor the connect signal during the server/discover probe

  v2
  #3134·JosephDoUrden opened Oct 30, 2026Contributor·2 tasks done·

  ·
  1

  2

• test(e2e): wait for the call to reach the server in protocol:timeout:max-total

  v2
  #3130·JQ100 opened Oct 29, 2026·

  ·
  1

  4

• fix: use RequestInit['headers'] in normalizeHeaders

  v1
  #3129·theOguz16 opened Oct 29, 2026·

  ·
  13