Pull requests

• Update 1.x SourceLink to unblock documentation publishing

  #1944·jeffhandley opened Oct 21, 2026Contributor·

  ·
  

• Bump the opentelemetry-testing group with 6 updates

  dependencies
  #1937·dependabot[bot] opened Oct 19, 2026Bot·

  ·

• Bump the testing-frameworks group with 5 updates

  dependencies
  #1936·dependabot[bot] opened Oct 19, 2026Bot·

  ·

• [WIP] Fix failing GitHub Actions job for Build and Test

  #1935·halter73 with CopilotAI opened Oct 17, 2026·

  ·
  

• Match protocol property names case-sensitively

  #1934·FenjuFu opened Oct 15, 2026·

  ·
  1

  10

• Cancel open subscriptions/listen requests when the transport stops delivering messages

  #1933·pournasserian opened Oct 14, 2026·

  ·
  1

  1

• Return JSON-RPC error for non-string routing name in Streamable HTTP body

  #1932·pournasserian opened Oct 14, 2026·

  ·
  1

• Encode supplementary characters in reserved URI template expansion

  #1931·pournasserian opened Oct 14, 2026·

  ·
  1

• Preserve nulls required by structured output schemas

  #1929·mikemikimike opened Oct 13, 2026·

  ·
  1

  24

• Fix legacy output schemas for delegating server tools

  #1928·Oxygen56 opened Oct 12, 2026·

  ·
  1

  3

  

• Bump actions/setup-node from 7.0.0 to 7.1.0

  dependencies
  #1927·dependabot[bot] opened Oct 12, 2026Bot·

  ·

• Bump actions/download-artifact from 8.0.1 to 8.0.2

  dependencies
  #1926·dependabot[bot] opened Oct 12, 2026Bot·

  ·

• Bump actions/upload-artifact from 7.0.1 to 7.0.2

  dependencies
  #1925·dependabot[bot] opened Oct 12, 2026Bot·

  ·

• Return Parse error (-32700) for malformed JSON in Streamable HTTP POST

  #1922·burrows99 opened Oct 12, 2026·

  ·
  1

• Preserve per-request client capability extensions when the session declares its own

  #1921·nathangobinet opened Oct 12, 2026·

  ·
  1

• Fix dropped notifications/cancelled when a request is canceled

  #1917·zerotohero3 opened Oct 11, 2026·6 tasks done·

  ·
  3

• Bump becheran/mlc from 1.2.0 to 1.2.2

  dependencies
  #1907·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Demonstrate ClaimsPrincipal injection in ProtectedMcpServer sample

  #1906·utsavjain2809 opened Oct 4, 2026·6 of 9 tasks·

  ·
  1

• feat(aspnetcore): add OAuth proxy for non-DCR providers

  #1905·goutamadwant opened Oct 4, 2026·

  ·
  1

• Split comma-separated variables when matching resource URI templates

  #1900·Laurianti opened Oct 1, 2026·

  ·
  1

  3

• fix(client): wait for the whole server process tree to exit on stdio dispose

  #1895·iamAdarshh opened Sep 27, 2026·

  ·
  1

• Fix cancellation being reported as missing OAuth metadata

  #1891·Empiree opened Sep 26, 2026·

  ·
  2

• fix(auth): use the discovered issuer as the ID-JAG token-exchange audience

  #1890·mauri0686 opened Sep 24, 2026·

  ·
  1

  2

• Retry OAuth token refresh without resource when the authorization server rejects it (Entra AADSTS9010010)

  #1883·1aifanatic opened Sep 18, 2026·

  ·
  1

• Add client-side call-tool filters for tool-call policy enforcement

  #1882·1aifanatic opened Sep 18, 2026·

  ·
  1