MCP Python SDK 2.2.0 tightens redirects, idles sessions at 30 min, and checks OAuth issuer.
v2.2.0 (pip install -U mcp): HTTP clients follow redirects only inside the endpoint origin; cross-origin hops fail with MCPError. Stateful Streamable HTTP sessions idle-close after 30 minutes (next request 404); servers cap at 10 000 sessions (503 beyond). Legacy-path OAuth rejects authorization-server metadata whose issuer is not the server origin. Opt out: session_idle_timeout=None, max_sessions=None. Same three defaults on 1.x as v1.30.0.12
pydantic-ai 2.41.0 adds openai-codex and ImageGenerator; renames fallback_model → fallback_subagent_model on image/X tools — useful, not the pin of the day.3 npm Claude Code still latest/next 2.1.263, stable 2.1.236.4
Read 2.2.0 before upgrading MCP Python 2.x — redirects, idle sessions, and OAuth issuer checks change defaults. 1.x operators: ≥1.30.0. MAI-Code-1-Flash leaves Copilot 10 Sep.