fix: use correct python command name in test_stdio.py (modelcontextpr…

…otocol#1782)

Signed-off-by: Ondrej Mosnáček <[email protected]>

chore: remove release-comment workflow (modelcontextprotocol#1758)

fix: skip priming events and close_sse_stream for old protocol versio…

…ns (modelcontextprotocol#1719)

chore: update LATEST_PROTOCOL_VERSION to 2025-11-25 (modelcontextprot…

…ocol#1715)

Merge commit from fork

* Auto-enable DNS rebinding protection for localhost servers

When a FastMCP server is created with host="127.0.0.1" or "localhost"
and no explicit transport_security is provided, automatically enable
DNS rebinding protection. Both 127.0.0.1 and localhost are allowed
as valid hosts/origins since clients may use either to connect.

* Add tests for auto DNS rebinding protection on localhost

Tests verify that:
- Protection auto-enables for host=127.0.0.1
- Protection auto-enables for host=localhost
- Both 127.0.0.1 and localhost are in allowed hosts/origins
- Protection does NOT auto-enable for other hosts (e.g., 0.0.0.0)
- Explicit transport_security settings are not overridden

* Add IPv6 localhost (::1) support for DNS rebinding protection

Extend auto-enable DNS rebinding protection to also cover IPv6
localhost. When host="::1", protection is now auto-enabled with
appropriate allowed hosts ([::1]:*) and origins (http://[::1]:*).

* Fix import ordering in test file

docs: Update examples to use stateless HTTP with JSON responses (mode…

…lcontextprotocol#1499)

fix get_client_metadata_scopes on 401 (modelcontextprotocol#1631)

Co-authored-by: Max Isbey <[email protected]>

Fix CI highest resolution test to actually test highest versions (mod…

…elcontextprotocol#1609)

Add get_server_capabilities() to ClientSession (modelcontextprotocol#…

…1588)

Fix auth client example URL handling for oauth provider (modelcontext…

…protocol#1549)