chore: back-merge main into v2/main so the first milestone merge is clean - #1868

Closed

cliffhall wants to merge 224 commits into

v2/docs/backmerge-main-into-v2main

Commits on Oct 13, 2025

Add a toast on connection error
howardjohn
committed
2bfbdca
Move under else
howardjohn
committed
0b569f2

Commits on Oct 18, 2025

Merge branch 'main' into inspector/error-popup
cliffhall
authored
68788fc

Commits on Oct 19, 2025

mcp: add icons
jesselumarie
committed
9dc3b74

Commits on Oct 20, 2025

Merge branch 'main' into jesselumarie/test-SEP-974
cliffhall
authored
a45a291

Commits on Nov 2, 2025

fix: enhance resolution and enum handling in anyOf schemas
Edison-A-N
committed
dd0985c

Commits on Nov 19, 2025

Merge branch 'main' into jesselumarie/test-SEP-974
cliffhall
authored
35286a2

Commits on Nov 20, 2025

fix: allow empty elicitation form data when all fields are optional
bolinfest
committed
92e01dc

Commits on Nov 24, 2025

mcp: update resources + icon alignment
jesselumarie
committed
a114db8

Commits on Nov 27, 2025

zod4 compatibility fixed for CI
evalstate
committed
635a9a1
bump sdk to 1.23.0
evalstate
committed
85a4f63
npm audit fix
evalstate
committed
87f14dc
prettier
evalstate
committed
927098f
bump prettier. 3.7 was raising issues in CI (using 3.7.1) that 3.6.2 was not.
evalstate
committed
6a86c19
Fix ReadableStream controller double-close crash
felixweinberger
committed
d995ce3
Merge pull request #939 from modelcontextprotocol/fix/zod4-compat
cliffhall
authored
436e77e

Commits on Dec 3, 2025

Commits on Dec 4, 2025

Bump version to 0.17.5
cliffhall
committed
124e733
Merge pull request #954 from cliffhall/bump-to-0.17.5
olaservo
authored
e9e38b0
Merge branch 'main' into sep-1330-enums
cliffhall
authored
2c94a00

Commits on Dec 5, 2025

Update V2 messaging to clarify V1 focus on bug fixes and spec compliance

olaservo
and
claude
committed
de5b23b
Merge branch 'main' into update-pr-template
olaservo
authored
06f4b25

Commits on Dec 6, 2025

Merge pull request #958 from olaservo/update-pr-template
cliffhall
authored
976d77f

Commits on Dec 7, 2025

fix issue link in CONTRIBUTING.md
DaleSeo
authored
2561817
Merge pull request #963 from DaleSeo/patch-1
olaservo
authored
2b79e36

Commits on Dec 8, 2025

[Docs] Fix broken CONTRIBUTING.md links in GitHub templates
koic
committed
171d6b4
fix: detect 401 errors from StreamableHTTP transport for OAuth flow

olaservo
and
claude
committed
d1fcbd2

Commits on Dec 9, 2025

Merge pull request #964 from koic/fix_broken_links_to_contributing_md
olaservo
authored
3d15778

Commits on Dec 10, 2025

Merge pull request #952 from cliffhall/sep-1330-enums
olaservo
authored
2056622

Commits on Dec 11, 2025

feat: add theme property to Icon and Prompt types
Vijaydaswani
committed
1e1b9e3

Commits on Dec 12, 2025

Merge pull request #968 from Vijaydaswani/fix/icon-theme-property
olaservo
authored
bce61b2
Merge pull request #926 from bolinfest/sapling-pr-archive-bolinfest
olaservo
authored
5778a3a
chore: bump version to 0.18.0

olaservo
and
claude
committed
b3a2729

Commits on Dec 13, 2025

Commits on Dec 18, 2025

Commits on Dec 22, 2025

Merge pull request #974 from DaleSeo/anyof-description
olaservo
authored
fe393e5

Commits on Jan 6, 2026

Commits on Jan 7, 2026

Commits on Jan 8, 2026

Fix high severity security vulnerabilities

olaservo
and
claude
committed
3c892b2
Update minimum SDK version to ^1.25.2 in package.json files

olaservo
and
claude
committed
66b84b0
Merge pull request #1004 from olaservo/update-typescript-sdk
cliffhall
authored
4a4968f

Commits on Jan 9, 2026

Commits on Jan 18, 2026

fix: omit scope field in OAuth DCR when undefined and improve error handling (#1003)
asoorm
authored
2bf0dd1

Commits on Jan 19, 2026

* In useConnection.ts (#924)
cliffhall
authored
94ba4c3
Add MCP docs server to Claude Code GitHub Action

olaservo
and
claude
committed
232f244
Fix allowedTools config to include mcp-docs MCP server tools

olaservo
and
claude
committed
4835b73
Merge branch 'main' into add-mcp-docs-server-to-claude
olaservo
authored
ea82eff
Converted CLI tests to use vitest (#1012)
BobDickinson
authored
44d0e58
Update LICENSE and package.json for Linux Foundation transition (#1018)

Copilot
and
olaservo
authored
da684d0
Merge branch 'main' into add-mcp-docs-server-to-claude
olaservo
authored
6247e67

Commits on Jan 20, 2026

Merge pull request #937 from olaservo/add-mcp-docs-server-to-claude
cliffhall
authored
6dc5d1a

Commits on Jan 21, 2026

Bump version to 0.19.0 across all packages

github-actions[bot]
and
olaservo
committed
7f6e579

Commits on Jan 23, 2026

Commits on Jan 25, 2026

feat(client): display tool annotation badges in Tools tab

olaservo
and
claude
committed
3549220
feat(client): show all tool annotations with explicit/implied states

olaservo
and
claude
committed
dad17c6
feat(client): add MCP spec descriptions to annotation tooltips

olaservo
and
claude
committed
1cadda0

Commits on Jan 31, 2026

Added proxy fetch for use by auth (to avoid CORS and other issues when using browser fetch)
BobDickinson
committed
3b2dec0

Commits on Feb 3, 2026

fix(client): fix dev mode hanging on Windows (#1051)

olaservo
and
claude
authored
fc7897f
fix(client): circular function calls leads to memory leak (#1049)
dzhulk
authored
885c8bc

Commits on Feb 4, 2026

fix: display tool title field in Inspector UI

github-actions[bot]
and
olaservo
committed
d73fb1c
fix: include LICENSE file in published npm packages

github-actions[bot]
and
olaservo
committed
919590e
Merge branch 'main' into web-client-oauth-proxy-fetch
olaservo
authored
ddef72f
Merge branch 'main' into fix/enum-anyof-ref-resolution
olaservo
authored
442638f
Enable Dependabot for GitHub Actions (#1048)
koic
authored
dd02737
Bump actions/setup-node from 4 to 6
dependabot[bot]
authored
613c650
Bump actions/upload-artifact from 4 to 6
dependabot[bot]
authored
bde1d59
Bump actions/attest-build-provenance from 2 to 3
dependabot[bot]
authored
742f27d
Bump actions/cache from 4 to 5
dependabot[bot]
authored
a68211b
Bump actions/github-script from 7 to 8
dependabot[bot]
authored
0f25392

Commits on Feb 5, 2026

Commits on Feb 6, 2026

Commits on Feb 7, 2026

Commits on Feb 8, 2026

fix: add missing tool result to AppsRenderer
infoxicator
committed
0079144

Commits on Feb 9, 2026

Commits on Feb 11, 2026

Commits on Feb 13, 2026

Merge branch 'main' into feature/tool-annotations-display
olaservo
authored
7928a33

Commits on Feb 14, 2026

Commits on Feb 16, 2026

Commits on Feb 19, 2026

Update SECURITY.md to use GitHub Security Advisories (#1097)
localden
authored
f2ed4ef
Remove misleading structured content compatibility warning

olaservo
and
claude
committed
841c42e
oauth: add tenant suffix to oauth flow (#1096)
howardjohn
authored
695972a

Commits on Feb 23, 2026

Commits on Feb 24, 2026

Commits on Feb 25, 2026

fix: include server/static in published package files (#1113)
jwoods02
authored
bb791cd
Merge branch 'main' into main
olaservo
authored
e853652
Merge pull request #1098 from olaservo/main
cliffhall
authored
8c7017a

Commits on Feb 27, 2026

chore: bump version to 0.21.1 (#1116)

Copilot
and
olaservo
authored
db0827b
chore(deps): bump hono in the npm_and_yarn group across 1 directory
dependabot[bot]
authored
bbf0284

Commits on Mar 2, 2026

Commits on Mar 6, 2026

Fix decimal input handling in DynamicJsonForm number fields
MumuTW
committed
fdbf896

Commits on Mar 8, 2026

Merge pull request #1127 from MumuTW/fix-tools-tab-decimal-input-1080
cliffhall
authored
7c8b031

Commits on Mar 18, 2026

Merge branch 'main' into web-client-oauth-proxy-fetch
cliffhall
authored
26c9f60

Commits on Apr 2, 2026

Commits on Apr 4, 2026

Commits on Apr 6, 2026

Commits on Apr 7, 2026

Commits on Apr 9, 2026

Commits on Apr 11, 2026

Commits on Apr 12, 2026

fix: validate serverInfo.websiteUrl before rendering as link (#1186)

cliffhall
and
claude
authored
0d7757e
chore: bump version to 0.21.2

olaservo
and
claude
committed
8f60747
fix(server): sanitize error responses to prevent stack trace exposure (#1187)

authored
4df1191
Merge branch 'main' into chore/bump-version-0.21.2
olaservo
authored
509f4ab

Commits on Apr 13, 2026

Merge pull request #1194 from olaservo/chore/bump-version-0.21.2
cliffhall
authored
996f02c

Commits on Apr 14, 2026

Commits on May 1, 2026

ci: gate claude.yml on author_association to skip unauthorized invokes

cliffhall
and
claude
committed
c044b5d
ci: collapse author_association OR chains into contains(fromJSON(...))

cliffhall
and
claude
committed
1bbf53c
Merge pull request #1270 from modelcontextprotocol/tighten-claude-workflow
BobDickinson
authored
f18775a

Commits on May 31, 2026

chore(deps): npm audit fix for transitive security advisories (#1380)

olaservo
and
claude
authored
10f4297

Commits on Jun 4, 2026

feat: add URL-mode elicitation support (#1423)

authored
5c782ad
chore: bump version to 0.22.0 (#1428)
Copilot
authored
0ba1b8d

Commits on Jun 7, 2026

fix: call tasks/result when task status is input_required (#1174)
galagaevdc
authored
a523a0f

Commits on Jun 12, 2026

Fix resource refresh button not triggering re-fetch (#1148)

olaservo
and
claude
authored
638f2bf

Commits on Jul 17, 2026

chore: pin prettier to 3.9.5 and run format check after install (#1716)

cliffhall
and
claude
authored
fd2def6
chore(deps): bump vitest to ^4.1.0 (CVE fix) (#1707)

cliffhall
and
claude
authored
ab447dd
chore(deps): bump vite to ^7.3.5 (CVE fixes) (#1709)

cliffhall
and
claude
authored
b2025cd

Commits on Jul 18, 2026

chore(deps): bump shell-quote to ^1.8.4 (CVE fix) (#1711)

cliffhall
and
claude
authored
3119422
chore(deps): override hono to ^4.12.25 (CVE fixes) (#1708)

cliffhall
and
claude
authored
47dc2df
chore(deps): override form-data to ^4.0.6 (CVE fix) (#1710)

cliffhall
and
claude
authored
3ad1b8a
chore(deps): override @babel/core to ^7.29.6 (CVE fix) (#1712)

cliffhall
and
claude
authored
ebd0550
chore(deps): finalize security overrides and regenerate lockfile (#1718)

cliffhall
and
claude
authored
c146313
fix(server): guard the /fetch proxy against SSRF to link-local/metadata (#53) (#1717)

cliffhall
and
claude
authored
d40c1c9
Bump to version 1.0.0 (#1720)
cliffhall
authored
ac3c1a1

Commits on Jul 28, 2026

chore: replace main's tree with v2

cliffhall
and
claude
committed
ec5d8e1
Merge pull request #1830 from modelcontextprotocol/chore/v2-golive
cliffhall
authored
25106dc
ci: set a least-privilege default GITHUB_TOKEN scope (#1831)

cliffhall
and
claude
authored
809b9fd
chore(deps): upgrade @hono/node-server to 2.0.12 (#1832)

cliffhall
and
claude
authored
8445675
ci: derive the npm dist-tag from the version instead of defaulting to latest (#1834)

cliffhall
and
claude
authored
1450029
chore: 2.0.0-rc.1 (#1835)

cliffhall
and
claude
authored
75e3116
fix(ci): publish via OIDC trusted publishing, not a non-existent NPM_TOKEN (#1836)

cliffhall
and
claude
authored
954f9e8
chore: clear all runtime dependency vulnerabilities; 2.0.0-rc.2 (#1837)

cliffhall
and
claude
authored
d5e35b5
fix(deps): raise vite to 8.1.5 to close three dev-server file-read advisories; 2.0.0-rc.3 (#1841)

cliffhall
and
claude
authored
73fe059
chore: 2.0.0 (#1842)

cliffhall
and
claude
authored
7aebf16
docs: restore SECURITY.md, lost in the v2 tree swap (#1843)

cliffhall
and
claude
authored
fb1b0cb

Commits on Jul 31, 2026

chore: back-merge main into v2/main (release commits + README restructure)

cliffhall
and
claude
committed
ca05d75