Repository Issue Activity (beta)

#2548 Widen @hono/node-server range to ^1.19.9 || ^2 so GHSA-frvp-7c67-39w9 is reachable (npm suggests a breaking downgrade)

#2545 [v2] Server: print warning if `sendResourceUpdated` is used but `subscribe` is not set

#2532 Default JSON Schema validators reject declared draft-07, which the spec permits

#2542 [v2] MRTR wipe-cache example reads unvalidated elicitation content and defaults malformed scope to all

#2536 stdio.ts/ReadBuffer retains consumed input and copies the next stdio chunk

#2537 [v2] Spec mismatch: error when io.modelcontextprotocol/clientInfo is missing

#1211 SSE stream disconnected: TypeError: terminated

#2528 [v2] Allow extensions to participate in subscriptions/listen

#2526 Bug/Feature Request: Node 26 fetch HTTP/2 SSE stream buffering hangs MCP connections

#759 OAuth token exchange fails with URL-encoded responses - assumes JSON format only

#2531 Widen `@hono/node-server` range: `^1.19.9` cannot resolve past GHSA-frvp-7c67-39w9 (no patched 1.x)

#2530 [v2] structuredContent with string wrapped in result: mismatch with specification

#1149 output schema has unnecessary restriction type=object

#1308 Tool output validation fails when outputSchema is a Zod schema other than ZodObject

#2510 Mid-session re-auth after refresh-token expiry dead-ends: send() gets "REDIRECT" and throws UnauthorizedError without ever exchanging the new code

#2525 Bug/Feature Request: Node 26 fetch HTTP/2 SSE stream buffering hangs MCP connections

#2255 Step-up authorization (403 insufficient_scope) dead-ends with SdkHttpError when a refresh_token is present

#2408 OAuth token exchange crashes on gzip-compressed token response (JSON.parse on undecompressed bytes)

#2273 Root package export points to missing dist index files

#2232 sendToolListChanged drops notifications on stateless Streamable HTTP transports (missing relatedRequestId)

#1512 [TRACKING] non compliance with SEP-986 / tool name validation

#2034 auth() silently swallows non-OAuthError exceptions from refreshAuthorization / saveTokens, preventing token persistence

#2112 docs(README): `@modelcontextprotocol/fastify` missing from middleware listing

#2515 [v2] Multiple connect per server

#658 update server examples to cover external authentication servers