Commit graph

698 commits

Author SHA1 Message Date
Jeff Handley
2b7fd35fbe
Release v1.4.1 (#1694) v1.4.1 2026-07-08 20:30:43 -04:00
Jeff Handley
b088dd3850 Prepare release v1.4.1
- Bump version from 1.4.0 to 1.4.1
- Add release-notes link to src/PACKAGE.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-07-08 01:55:54 -04:00
Jeff Handley
0021d8875d
[release/1.x] Release SSE response stream reference when GET request ends (#1628) 2026-07-07 15:36:02 -04:00
Copilot
25f080115d Apply review feedback: replace _getHttpResponseCompleted with _disposed; rewrite test
- Remove _getHttpResponseCompleted and rely on _httpSseWriter being null as the signal that the GET response stream has been released. Null out _httpSseWriter in DisposeAsync so SendMessageAsync correctly skips writing post-dispose.
- Replace the dispose-idempotency role of the old flag with a dedicated _disposed bool.
- Move the explanatory comment in SendMessageAsync onto the event store branch (which intentionally still runs when the response stream is gone, to support Last-Event-ID replay).
- Rewrite the unit test to assert observable behavior via a recording Stream instead of reflecting on private fields.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-05 16:52:49 -07:00
Joel Forsyth
4d011995d1 Release SSE response stream reference when GET request ends
StreamableHttpServerTransport held a reference to the Kestrel SSE
response stream via _httpSseWriter for the entire session lifetime.
Since the transport is only disposed when the session itself is disposed
(via explicit DELETE or idle timeout), clients that disconnect without
sending DELETE — which is typical for long-lived SSE connections — left
the response stream pinned for the remainder of the idle timeout window.

Because the Kestrel HTTP connection (and its associated memory pool
buffers, Pipe readers/writers, socket send/receive buffers) is only
collectible once all references to the response stream are released,
this pinned ~20MiB of unmanaged memory per disconnected session until
cleanup. Under steady connect/disconnect churn (e.g., IDE availability
probes) this accumulated into sustained memory growth that eventually
OOMKilled the container.

Fix: release _httpSseWriter from within HandleGetRequestAsync's finally
block so the reference is dropped as soon as the GET request exits, not
just when the session is disposed. SendMessageAsync handles the
now-nullable field via the existing _getHttpResponseCompleted gate, and
any server-to-client messages sent after disconnect are still captured
by the event store writer for replay via Last-Event-ID.

Add a unit test that verifies _httpSseWriter is null once
HandleGetRequestAsync returns.

Relates to #766.
2026-06-05 16:52:49 -07:00
Jeff Handley
06e3604dd1
[release/1.x]: Add Enterprise Managed Authorization (SEP-990) support (#1305) (#1625) v1.4.0 2026-06-04 08:52:00 -07:00
Aniket Anil Kumar
96a3ddff69 feat: Add Enterprise Managed Authorization (SEP-990) support (#1305) 2026-06-03 16:34:59 -07:00
Jeff Handley
d7faa6b064
Release v1.4.0 (#1622) 2026-06-03 16:01:36 -07:00
Jeff Handley
3286450528 Bump version to 1.4.0 2026-06-03 02:31:25 -07:00
Stephen Halter
453132009a Validate user on Streamable HTTP session DELETE (#1604) 2026-06-03 02:00:35 -07:00
Tarek Mahmoud Sayed
55646c3ad7 Fix broken links to MCP Tasks specification (#1594)
Co-authored-by: Tarek Mahmoud Sayed <tarekms@ntdev.microsoft.com>
2026-06-03 01:59:06 -07:00
Copilot
8fdfe581b6 Stop logging stdio transport environment variables (#1538) 2026-06-03 01:58:52 -07:00
Stephen Halter
d34fac48d5 Add InheritEnvironmentVariables to StdioClientTransportOptions (#1563) 2026-06-03 01:58:35 -07:00
Jeff Handley
4498146a83 Update release processes to support release servicing branches (#1620)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-03 01:50:51 -07:00
Jeff Handley
2ce15f4c8a
Release v1.3.0 (#1566) v1.3.0
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-07 18:32:13 -07:00
dependabot[bot]
4e751e65a1
Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 (#1561)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff Handley <jeffhandley@users.noreply.github.com>
2026-05-07 16:11:27 -07:00
dependabot[bot]
3751de32a3
Bump the npm_and_yarn group across 1 directory with 3 updates (#1565)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-07 16:09:47 -07:00
dependabot[bot]
31499f7e2b
Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 (#1543)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-07 04:44:18 -07:00
Mike Kistler
0f80bb6f68
Fix dev container configuration to work in codespaces (#1555) 2026-05-07 04:43:44 -07:00
dependabot[bot]
50e58681ad
Bump Anthropic from 12.11.0 to 12.17.0 (#1544)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-07 04:42:58 -07:00
Jeff Handley
2c5d1ed2be
Document and demonstrate allowed hosts and CORS policy guidance (#1554)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Stephen Halter <halter73@gmail.com>
2026-05-01 19:03:30 -07:00
Mike Kistler
0781beafa0
Remove extraneous labels from dependabot.yml (#1535) 2026-04-30 08:32:26 -07:00
dependabot[bot]
a98fc361cd
Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 (#1525)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 11:12:40 -05:00
dependabot[bot]
4d3bf93de2
Bump the other-testing group with 2 updates (#1534)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 10:21:52 -05:00
dependabot[bot]
736fb42afd
Bump the testing-frameworks group with 2 updates (#1523)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 08:59:09 -05:00
dependabot[bot]
4b170cd8da
Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 (#1521)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 08:58:10 -05:00
dependabot[bot]
3c0abaf5e0
Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1512)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 08:57:21 -05:00
dependabot[bot]
50e1c5f932
Bump Anthropic from 12.9.0 to 12.11.0 (#1506)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eric StJohn <ericstj@microsoft.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 07:28:29 -05:00
dependabot[bot]
289c0ea05d
Bump the npm_and_yarn group across 1 directory with 5 updates (#1500)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 07:27:40 -05:00
dependabot[bot]
5857e46ad2
Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#1511)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Kistler <mikekistler@microsoft.com>
2026-04-27 06:57:54 -05:00
dependabot[bot]
637969f634
Bump actions/setup-node from 6.3.0 to 6.4.0 (#1522)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 06:42:18 -05:00
dependabot[bot]
12cf82cc3b
Bump the opentelemetry-testing group with 6 updates (#1533)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 06:40:51 -05:00
dependabot[bot]
a693ce2d8c
Bump OpenTelemetry and 3 others (#1514)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-26 16:38:22 -05:00
Copilot
69a7fd39fc
Document recommended pattern for role/identity propagation in MCP tool execution (#1497)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jeffhandley <1031940+jeffhandley@users.noreply.github.com>
2026-04-16 12:00:10 -07:00
Jayaraman Venkatesan
07435dcb16
Fix stateless HTTP transport advertising listChanged capability (#1509) 2026-04-09 14:30:12 -07:00
Eric StJohn
6a02c5a1b0
Add testing guidelines, update copilot instructions for tests (#1507) 2026-04-07 09:05:28 -07:00
Eric StJohn
2e7209c35a
Fix process crash when testing Stderr (#1449)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-06 11:29:00 -07:00
dependabot[bot]
70442e9351
Bump actions/checkout from 4 to 6 (#1504)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 14:53:12 +03:00
Jeff Handley
54087e7276
Block Release Publishing workflow from automatically running on forks (#1450)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-03 01:23:03 -07:00
Copilot
dfa9342f92
docs: align docs IA with MCP specification structure (#1481)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jeffhandley <1031940+jeffhandley@users.noreply.github.com>
2026-04-02 16:42:05 -07:00
Eric StJohn
d4c588b2f5
Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test (#1488)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-02 09:27:37 -07:00
Jeff Handley
1492a5d000
Switch to custom CodeQL workflow (#1489) 2026-04-01 12:13:36 -07:00
dependabot[bot]
54caccced6
Bump the npm_and_yarn group across 1 directory with 2 updates (#1410)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 09:27:37 -04:00
dependabot[bot]
33d2a9a181
Bump the testing-frameworks group with 1 update (#1459)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eirik Tsarpalis <eirik.tsarpalis@gmail.com>
2026-03-31 09:27:12 -04:00
dependabot[bot]
b314b4d6b1
Bump actions/setup-node from 6.2.0 to 6.3.0 (#1419)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 09:26:31 -04:00
dependabot[bot]
8bdda16bb0
Bump actions/setup-dotnet from 5.1.0 to 5.2.0 (#1418)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 09:26:13 -04:00
dependabot[bot]
9d5ac2a922
Bump actions/download-artifact from 8.0.0 to 8.0.1 (#1437)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stephen Toub <stoub@microsoft.com>
Co-authored-by: Eirik Tsarpalis <eirik.tsarpalis@gmail.com>
2026-03-31 09:25:26 -04:00
dependabot[bot]
1ad11bf84e
Bump actions/deploy-pages from 4.0.5 to 5.0.0 (#1477)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 08:53:35 -04:00
dependabot[bot]
a374964b42
Bump the opentelemetry-testing group with 5 updates (#1478)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 08:53:18 -04:00
Copilot
7662ce6b70
Make ClientTransportClosedException public and unify transport exception handling (#1467)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stephentoub <2642209+stephentoub@users.noreply.github.com>
Co-authored-by: halter73 <54385+halter73@users.noreply.github.com>
Co-authored-by: Stephen Toub <stoub@microsoft.com>
2026-03-29 20:21:03 -04:00