All pull requests

Pull requests

• fix(auth): allow cross-origin resource_metadata urls

  T-coreT-transport
  #1302·DaleSeo opened Sep 26, 2026Member·

  ·
  1

• fix(model): decode float fields through serde_json::Number

  T-configT-coreT-dependenciesT-modelT-test
  #1300·jmrplens opened Sep 26, 2026·

  ·
  1

  3

• chore: release v3.5.0

  #1296·github-actions[bot] opened Sep 24, 2026Bot·

  ·

• chore(deps): update sse-stream requirement from 0.2.4 to 0.3.0

  T-configT-dependencies
  #1289·dependabot[bot] opened Sep 22, 2026Bot·

  ·

• fix(model): reject malformed JSON-RPC messages with conflicting result and error fields (#1283)

  T-configT-coreT-dependencies
  #1287·ump45nose opened Sep 20, 2026Contributor·

  ·
  1

• feat(rmcp): implement SEP-2640 MCP Skills Extension

  T-configT-coreT-dependenciesT-documentationT-handlerT-macrosT-modelT-serviceT-test
  #1286·branben opened Sep 18, 2026Contributor·

  ·

• [rmcp] Notify credential stores when a refresh token is rejected

  T-coreT-transport
  #1285·mzeng-openai opened Sep 18, 2026Contributor·

  ·
  1

• fix(streamable-http): match Origin's omitted default port against explicit allowlist entries

  T-coreT-testT-transport
  #1282·yinnho opened Sep 17, 2026·

  ·
  1

• fix(auth): structure metadata discovery errors

  T-coreT-transport
  #1280·ASTion24 opened Sep 16, 2026·

  ·
  1

• fix: preserve legacy fallback after rejected discovery

  T-coreT-handlerT-serviceT-test
  #1269·JulienCote opened Sep 14, 2026·

  ·
  1

• fix(http): cancel session work when the transport closes

  T-coreT-testT-transport
  #1267·charliemarsh-oai opened Sep 13, 2026·

  ·

• ci: combine AI issue triage with a maintainer rotation as the responsible reviewer

  T-CIT-configT-documentation
  #1260·alexhancock opened Sep 11, 2026Contributor·

  ·
  8

• ci: triage new issues with Codex

  T-CIT-config
  #1257·DaleSeo opened Sep 10, 2026Member·

  ·

• fix(transport): stop keeping a session and GET stream at 2026-07-28

  T-configT-coreT-dependenciesT-testT-transport
  #1256·LizunovSergey opened Sep 10, 2026·

  ·
  1

  12

• fix(auth): retain client secrets across credential restoration

  T-coreT-testT-transport
  #1255·LSGoCards7 opened Sep 10, 2026·

  ·
  1

  2

• fix(server): keep discover lifecycle bootstrap-neutral

  T-coreT-serviceT-test
  #1248·faisal-shah opened Sep 7, 2026·

  ·
  3

• fix(transport): bound buffered Streamable HTTP responses

  T-coreT-testT-transport
  #1246·GTanger opened Sep 5, 2026·

  ·
  6

• fix: treat empty cacheScope as omitted

  T-coreT-test
  #1241·ismail-rt opened Sep 2, 2026·

  ·
  1

  3

• Dr qedwards patch 1

  T-configT-dependenciesT-documentation
  #1207·drQedwards opened Aug 23, 2026·

  ·

• fix: reject replies from retired streamable http sessions

  T-coreT-testT-transport
  #1206·nickcoai opened Aug 23, 2026Contributor·

  ·
  7

• Add HeaderName constants for MCP HTTP headers

  T-coreT-transport
  #1202·gandhipratik203 opened Aug 22, 2026·

  ·
  2

• fix: preserve custom results with generic metadata

  T-core
  #1197·jmagar opened Aug 20, 2026·

  ·

• fix(transport): propagate real clientInfo to peer_info in stateless mode

  T-configT-coreT-dependenciesT-testT-transport
  #1173·github-gregory-bougeard opened Aug 13, 2026·

  ·
  1

  2

• fix(server): negotiate initialize as legacy lifecycle

  T-coreT-handlerT-serviceT-testT-transport
  #1171·AprilNEA opened Aug 13, 2026·

  ·
  3

• fix: preserve open capability and subscription fields

  T-configT-coreT-dependenciesT-handlerT-modelT-serviceT-test
  #1170·muxammadreza opened Aug 13, 2026·

  ·
  3