Commits

Commits on Oct 2, 2026

Document when a caller-supplied request id can be minted again (#3619)
maxisbey
authored
c8fcfc8
Omit an unset experimental capability from the initialize result (#3614)
maxisbey
authored
449070c
docs: add a middleware tutorial that refuses tool calls (#3613)
maxisbey
authored
86ec15f

Commits on Oct 1, 2026

Bump the github-actions group with 5 updates (#3612)
dependabot[bot]
authored
17aaf25
Expose an SSE event size limit in Streamable HTTP clients (#3600)
Kludex
authored
7fdc944
Group Dependabot security updates for uv dependencies (#3611)
Kludex
authored
772ecf2
Fall back to an NTFS junction when the symlink escape test can't create a symlink (#3609)
maxisbey
authored
94e18d9
Make the deeply nested body test independent of stack size (#3610)
maxisbey
authored
7fcaad0
Bump anyio from 4.10.0 to 4.14.2 (#3547)

dependabot[bot]
and
Kludex
authored
6a0fe02

Commits on Sep 30, 2026

docs: remove v2 notice from top of README (#3604)

claude[bot]
and
claude
authored
d639cf7

Commits on Sep 29, 2026

Ask cubic for a review when the intake gate lets a PR back in (#3489)
maxisbey
authored
06d1d1e

Commits on Sep 23, 2026

Bump httpcore2 from 2.5.0 to 2.10.0 (#3482)

dependabot[bot]
and
Kludex
authored
f1b6589

Commits on Sep 16, 2026

Detect event-loop blocking in tests (#3510)
Kludex
authored
6affe5c

Commits on Sep 7, 2026

Commits on Sep 6, 2026

docs: ask for AI disclosure on comments too (#3459)
maxisbey
authored
08a3bc8

Commits on Sep 4, 2026

Commits on Sep 2, 2026

Validate the authorization server metadata issuer on every discovery path (#3398)
maxisbey
authored
d060b36

Commits on Aug 28, 2026

Expire idle Streamable HTTP sessions by default and cap concurrent sessions (#3395)
maxisbey
authored
d2290ca

Commits on Aug 26, 2026

Commits on Aug 25, 2026

Point imports of mcp.server.fastmcp at the migration guide (#3388)
maxisbey
authored
0921d94

Commits on Aug 24, 2026