What's Changed

• Fix /.well-known/oauth-authorization-server dropping path by @calclavia in #687
• Fallback for /.well-known/oauth-authorization-server dropping path by @ihrpr in #692
• [auth] refactor resource selection to not include resource if PRM is not present by @pcarleton in #693
• fix: skip validation if tool reports error by @Areo-Joe in #655
• feat(shared/auth): support software_statement in OAuthClientMetadata by @chrisdickinson in #696
• Show session id per request in simpleStreamableHttp example server by @cliffhall in #640
• Raw request propagation in tools - passed to callbacks via RequestHandlerExtra<ServerRequest, ServerNotification> by @KKonstantinov in #627
• Update readme file to include a tip to allow mcp-session-id in CORS when using StreamableHTTP by @Achintha444 in #633
• Pr/protocol overwriting transport hooks by @nichtsam in #477
• docs: Add clarifying comments for stateless streamable HTTP endpoints by @dhodun in #542
• Bump formidable from 3.5.2 to 3.5.4 in the npm_and_yarn group across 1 directory by @dependabot in #428
• test(server): add more tests for SSEServerTransport class by @christian-bromann in #391
• Update version of the package to 1.13.2 by @ihrpr in #701

New Contributors 🙏

• @calclavia made their first contribution in #687
• @Areo-Joe made their first contribution in #655
• @KKonstantinov made their first contribution in #627
• @Achintha444 made their first contribution in #633
• @nichtsam made their first contribution in #477
• @dhodun made their first contribution in #542
• @christian-bromann made their first contribution in #391

Full Changelog: 1.13.1...1.13.2