What's Changed

• fix: Add Accept header to auth metadata request by @SVLaursen in #901
• Allow empty string as valid URL in DCR workflow by @fredericbarthelet in #987
• docs: fix summary contents at readme by @starfish719 in #1025
• chore: bump version to 1.20.1 for release by @felixweinberger in #1032

New Contributors

• @SVLaursen made their first contribution in #901
• @starfish719 made their first contribution in #1025

Full Changelog: 1.20.0...1.20.1

What's Changed

• docs: improve main README with better quick start, include examples of stateless HTTP, explain tools v resources v prompts by @domdomegg in #980
• chore: add lint:fix script by @mattzcarey in #1013
• Default to S256 code challenge if not specified in authorization server metadata by @LucaButBoring in #992

New Contributors 🙏

• @mattzcarey made their first contribution in #1013

Full Changelog: 1.19.0...1.20.0

What's Changed

• fix: prevent infinite recursion when server throws 401 after successful authentication by @arjunkmrm in #945
• fix: change Icon.sizes from string to string[] by @domdomegg in #981
• MCP: Icons type as per SEP-973, spec types test improvements, ImplementationSchema use IconsSchema by @KKonstantinov in #947
• MCP SDK: Add Prettier to Typescript SDK by @KKonstantinov in #976
• run prettier by @ihrpr in #995

New Contributors 🙏

• @domdomegg made their first contribution in #981

Full Changelog: 1.18.2...1.19.0

What's Changed

• Updates the sampling code example in the README by @viniciuscsouza in #958
• Use redirect Uri passed in in demoInMemoryOAuthProvider by @TylerLeonhardt in #931
• fix(auth-router): correct Protected Resource Metadata for pathful RS and add explicit resourceServerUrl (RFC 9728) by @blustAI in #858
• chore: update version to 1.18.2 for weekly release by @felixweinberger in #970

New Contributors

• @viniciuscsouza made their first contribution in #958
• @TylerLeonhardt made their first contribution in #931
• @blustAI made their first contribution in #858

Full Changelog: 1.18.1...1.18.2

What's Changed

• fix: prevent streamable http wite after end from crashing the node process by @MQ37 in #933
• chore: update version to 1.18.1 for weekly release by @felixweinberger in #950

New Contributors

• @MQ37 made their first contribution in #933

Full Changelog: 1.18.0...1.18.1

What's Changed

• mcp: update SDK for SEP 973 + add to example server by @jesselumarie in #904
• feat: add _meta field support to tool definitions by @knguyen-figma in #922
• Fix automatic log level handling for sessionless connections by @cliffhall in #917
• 1.17.6 by @ihrpr in #936
• 1.18.0 by @ihrpr in #937
• ignore icons for now by @ihrpr in #938

New Contributors

• @jesselumarie made their first contribution in #904
• @knguyen-figma made their first contribution in #922

Full Changelog: 1.17.5...1.18.0

What's Changed

• Automatic handling of logging level by @cliffhall in #882
• Fix the SDK vs Spec types test that is breaking CI by @cliffhall in #908

Full Changelog: 1.17.4...1.17.5

What's Changed

• feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns by @m-paternostro in #485
• restrict url schemes allowed in oauth metadata by @pcarleton in #877
• [auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 by @pcarleton in #879
• chore: bump version to 1.17.4 by @felixweinberger in #894

Full Changelog: 1.17.3...1.17.4

What's Changed

• Fix quit command in Example client with OAuth by @DaleSeo in #864
• fix: client import & server imports by @jatinsandilya in #851
• fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… by @arjunkmrm in #850
• docs: correct parameter schema key in Dynamic Servers documentation by @bianbianzhu in #789
• version: patch to 0.17.3 by @felixweinberger in #878

New Contributors

• @DaleSeo made their first contribution in #864
• @jatinsandilya made their first contribution in #851
• @arjunkmrm made their first contribution in #850
• @bianbianzhu made their first contribution in #789

Full Changelog: 1.17.2...1.17.3

What's Changed

• fix: retry next endpoint on CORS error during auth server discovery by @xiaoyijun in #827

Full Changelog: 1.17.1...1.17.2