• Return 201 from OAuth client registration per RFC 7591 by @danniehansen in #207
• Fix TypeError when JSON-RPC request id is not a string or int by @pushpak1300 in #208
• Add ResourceLink content type (MCP spec 2025-06-18) by @rupeshstha in #200
• Extract JSON-RPC primitives to shared namespace for client reuse by @pushpak1300 in #211
• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #213
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in #214
• Extract protocol versions to shared enum for client reuse by @pushpak1300 in #215
• Add Icon and Implementation (MCP spec 2025-11-25) by @pushpak1300 in #219

• docs(readme): point test badge to workflow file URL by @Gujiassh in #201
• Add MCP UI App support by @pushpak1300 in #196

What's Changed

• Fix route:cache memory exhaustion caused by circular reference by @radumetes in #197

New Contributors

• @radumetes made their first contribution in #197

Full Changelog: v0.6.6...v0.6.7

• fix: preserve unicode characters in JSON-RPC responses by @indigoram89 in #191
• Add MCP UI App support with interactive HTML resources by @pushpak1300 in #182
• Revert "Add MCP UI App support with interactive HTML resources" by @pushpak1300 in #195
• Preserve existing OAuth discovery routes by @Gujiassh in #192

What's Changed

• fix: support custom URI schemes in OAuth client registration by @alexis-riot in #181
• fix: return tool errors for auth failures by @Gujiassh in #186
• fix: authorization_servers and issuer should be the root URL, not the resource path by @pktharindu in #185

New Contributors

• @alexis-riot made their first contribution in #181
• @pktharindu made their first contribution in #185

Full Changelog: v0.6.4...v0.6.5

• Remove redundant "When to Apply" section from skill body by @pushpak1300 in #175
• Validate OAuth registration client names by @Gujiassh in #177
• Add nested OAuth resource metadata regression coverage by @Gujiassh in #178

• Add assertStructuredContent($closure) support by @gdebrauwer in #172

• Makes imports consistent by @nunomaduro in #171

• Add missing @throws annotation to toJsonRpcResponse method by @mohammadRezaei1380 in #166
• Update boost skill description and remove core guideline by @pushpak1300 in #170

• Allow localhost redirect with dynamic ports by @dylanbr in #156
• Add Image and Audio content types with Storage integration by @pushpak1300 in #155
• Remove incorrect Response::structured docblock throw by @nathanheffley in #160
• Add Boost Guidelines & Skills by @pushpak1300 in #153
• Add facade documenter workflow and sync Mcp facade docblocks by @pushpak1300 in #161
• Add Allow header to 405 responses for unsupported HTTP methods by @pushpak1300 in #162
• Fix CI failures in facade documenter and static analysis by @pushpak1300 in #163
• Add example of registering MCP Tool in a Server by @mohammadRezaei1380 in #164