Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: github/github-mcp-server
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 569a48d
Choose a base ref
...
head repository: github/github-mcp-server
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: f363fd0
Choose a head ref
  • 11 commits
  • 13 files changed
  • 9 contributors

Commits on Apr 21, 2026

  1. Fix Content-Type rejection for application/json; charset=utf-8 

    Add NormalizeContentType middleware that strips optional parameters
(e.g. charset=utf-8) from application/json Content-Type headers before
the request reaches the Go SDK's StreamableHTTP handler, which performs
strict string matching.

Per RFC 8259, the charset parameter is redundant for JSON but must be
accepted per HTTP semantics.

Fixes #2333

Co-authored-by: Copilot <[email protected]>
    @IrynaKulakova @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    88de5b7 View commit details
    Browse the repository at this point in the history

  2. Bump go-sdk to 27f29c1 (Content-Type media type parsing fix) 

    Upgrades github.com/modelcontextprotocol/go-sdk from v1.5.0 to
v1.5.1-0.20260403154220-27f29c1cef3b which includes proper media type
parsing for Content-Type headers, fixing the strict string matching
that rejected application/json; charset=utf-8.

Co-authored-by: Copilot <[email protected]>
    @IrynaKulakova @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    6190a6f View commit details
    Browse the repository at this point in the history

  3. Remove NormalizeContentType middleware workaround 

    The go-sdk bump (27f29c1) includes the proper fix upstream, making
the middleware unnecessary.

Co-authored-by: Copilot <[email protected]>
    @IrynaKulakova @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    91d6465 View commit details
    Browse the repository at this point in the history

  4. chore: regenerate license files 

    Auto-generated by license-check workflow
    @github-actions @SamMorrowDrums
    github-actions[bot] authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    48d50cd View commit details
    Browse the repository at this point in the history

  5. Apply suggestion from @Copilot 

    Co-authored-by: Copilot <[email protected]>
    @omgitsads @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    28171ab View commit details
    Browse the repository at this point in the history

  6. chore: run go mod tidy 

    Agent-Logs-Url: https://github.com/github/github-mcp-server/sessions/49811f97-33b0-476c-8811-419dee2a5318

Co-authored-by: omgitsads <[email protected]>
    @omgitsads @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    ebeefe0 View commit details
    Browse the repository at this point in the history

  7. chore: revert unintended handler test formatting 

    Agent-Logs-Url: https://github.com/github/github-mcp-server/sessions/49811f97-33b0-476c-8811-419dee2a5318

Co-authored-by: omgitsads <[email protected]>
    @omgitsads @SamMorrowDrums
    2 people authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    7fd6a92 View commit details
    Browse the repository at this point in the history

  8. Allow browser-based MCP clients via CORS and cross-origin bypass

    @RossTarrant @SamMorrowDrums
    RossTarrant authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    d0320b8 View commit details
    Browse the repository at this point in the history

  9. build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 

    Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@d08e5c3...bcafcac)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot @SamMorrowDrums
    dependabot[bot] authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    ffe4e6b View commit details
    Browse the repository at this point in the history

  10. build(deps): bump actions/github-script from 8 to 9 

    Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v8...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot @SamMorrowDrums
    dependabot[bot] authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    b1318ab View commit details
    Browse the repository at this point in the history

  11. build(deps): bump golang from 04d017a to 5caaf1c 

    Bumps golang from `04d017a` to `5caaf1c`.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.9-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot @SamMorrowDrums
    dependabot[bot] authored and SamMorrowDrums committed Apr 21, 2026
    Configuration menu
    Copy the full SHA
    f363fd0 View commit details
    Browse the repository at this point in the history
Loading