Pull requests

• Bump Microsoft.Extensions.AI.Abstractions from 10.8.3 to 10.10.1

  #1910·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Bump the opentelemetry-testing group with 6 updates

  #1909·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Bump the testing-frameworks group with 5 updates

  #1908·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Bump becheran/mlc from 1.2.0 to 1.2.2

  #1907·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Demonstrate ClaimsPrincipal injection in ProtectedMcpServer sample

  #1906·utsavjain2809 opened Oct 4, 2026·6 of 9 tasks·

  ·
  1

• feat(aspnetcore): add OAuth proxy for non-DCR providers

  #1905·goutamadwant opened Oct 4, 2026·

  ·
  1

• fix(client): allow missing server info in discovery

  #1903·Coding-Professional opened Oct 2, 2026·

  ·
  1

  1

• Split comma-separated variables when matching resource URI templates

  #1900·Laurianti opened Oct 1, 2026·

  ·
  1

  3

• fix(client): wait for the whole server process tree to exit on stdio dispose

  #1895·iamAdarshh opened Sep 27, 2026·

  ·

• Fix cancellation being reported as missing OAuth metadata

  #1891·Empiree opened Sep 26, 2026·

  ·

• fix(auth): use the discovered issuer as the ID-JAG token-exchange audience

  #1890·mauri0686 opened Sep 24, 2026·

  ·
  1

  1

• Bump Microsoft.Extensions.Caching.Abstractions from 10.0.10 to 10.0.12

  #1889·dependabot[bot] opened Sep 21, 2026Bot·

  ·

• Bump Microsoft.Extensions.AI from 10.8.3 to 10.10.0

  #1887·dependabot[bot] opened Sep 21, 2026Bot·

  ·

• Retry OAuth token refresh without resource when the authorization server rejects it (Entra AADSTS9010010)

  #1883·1aifanatic opened Sep 18, 2026·

  ·
  1

• Add client-side call-tool filters for tool-call policy enforcement

  #1882·1aifanatic opened Sep 18, 2026·

  ·
  1

• Add stdio support for EverythingServer sample (continues #950)

  #1880·FengFafa97 opened Sep 16, 2026·

  ·
  1

• fix: update protocol version and rename properties in initialization request

  #1878·anuraj opened Sep 15, 2026·

  ·
  2

• fix(client): send POST bodies with Content-Length instead of chunked encoding

  #1877·ump45nose opened Sep 14, 2026·

  ·
  1

• fix(aspnetcore): explain why a stateful session lookup failed

  #1876·ump45nose opened Sep 14, 2026·

  ·

• fix(client): make the Streamable HTTP no-reply failure diagnosable and cover chunked application/json replies

  #1875·ump45nose opened Sep 14, 2026·

  ·

• feat(server): add MarshalResult to McpServerToolCreateOptions

  #1874·jstar0 opened Sep 13, 2026Contributor·

  ·
  1

• test(aspnetcore): cover RequireAuthorization() on the MCP endpoint across session modes

  #1870·ump45nose opened Sep 11, 2026·

  ·

• Document ClientOAuthOptions.ScopeSelector usage

  #1869·z0rimo opened Sep 11, 2026·6 of 9 tasks·

  ·
  1

  1

• Add the Skills extension (SEP-2640) as ModelContextProtocol.Extensions.Skills

  #1864·PederHP opened Sep 9, 2026Member·8 tasks done·

  ·
  1

  77

• fix(server): close register-after-sweep race on disposal

  #1860·jstar0 opened Sep 7, 2026Contributor·

  ·
  1