Added reject auth servers lacking S256 PKCE support (#955) Fixed pass client conformance suite (#960) don't respond to cancelled requests (#957) fail orphaned streamable HTTP responses on reinit (#914) address 2025-11-25 conformance audit findings (#951)