Added

• (transport) add constructors for non_exhaustive error types (#806)
• add 2025-11-25 protocol version support (#802)

Fixed

• treat resource metadata JSON parse failure as soft error (#810)
• include http_request_id in request-wise priming event IDs (#799)
• (http) drain SSE stream for connection reuse (#790)

Other

• (deps) update which requirement from 7 to 8 (#807)

Fixed

• (macros) respect local feature in #[prompt] macro — omit + Send bound (#803)

Added

• add Default and constructors to ServerSseMessage (#794)
• add meta to elicitation results (#792)
• (macros) auto-generate get_info and default router (#785)
• (transport) add which_command for cross-platform executable resolution (#774)
• (auth) add StoredCredentials::new() constructor (#778)

Fixed

• (server) remove initialized notification gate to support Streamable HTTP (#788)
• default session keep_alive to 5 minutes (#780)
• (http) add host check (#764)
• exclude local feature from docs.rs build (#782)

Other

• update Rust toolchain to 1.92 (#797)
• unify IntoCallToolResult Result impls (#787)

Added

• (macros) auto-generate get_info and default router (#785)

Added

• (transport) add Unix domain socket client for streamable HTTP (#749)
• (auth) implement SEP-2207 OIDC-flavored refresh token guidance (#676)
• add configuration for transparent session re-init (#760)
• add local feature for !Send tool handler support (#740)

Fixed

• prevent CallToolResult and GetTaskPayloadResult from shadowing CustomResult in untagged enums (#771)
• drain in-flight responses on stdin EOF (#759)
• remove default type param from StreamableHttpService (#758)
• use cfg-gated Send+Sync supertraits to avoid semver break (#757)
• (rmcp) surface JSON-RPC error bodies on HTTP 4xx responses (#748)
• default CallToolResult content to empty vec on missing field (#752)
• (auth) redact secrets in Debug output for StoredCredentials and StoredAuthorizationState (#744)

Other

• fix all clippy warnings across workspace (#746)

Added

• add local feature for !Send tool handler support (#740)

Other

• fix all clippy warnings across workspace (#746)

Added

• add missing constructors for non-exhaustive model types (#739)
• include granted scopes in OAuth refresh token request (#731)

Fixed

• handle ping requests sent before initialize handshake (#745)
• allow deserializing notifications without params field (#729)

Other

• (deps) update jsonwebtoken requirement from 9 to 10 (#737)

Fixed

• (rmcp-macros) use re-exported serde_json path in task_handler (#735)

Fixed

• accept logging/setLevel and ping before initialized notification (#730)

Fixed

• (rmcp-macros) replace deprecated *Param type aliases with *Params (#727)