Release v1.9.5

Release type: stable
Release line: 1.9.x
Branch: release/1.9.x

npm install @frontmcp/sdk@1.9.5

CHANGELOG

Tasks: tasks.maxConcurrentPerSession is enforced (16 by default). A tool error in a 2026-07-28 task goes through the same error mapping as an inline call and ends the task as completed with an isError result, and a 2026-07-28 cancel runs the tasks:cancel flow.
Jobs and workflows: a step's timeout aborts the attempt that has started, and the workflow's hooks see the timeout error; a job hook's respond({ result }) is checked against the job's outputSchema.
Servers: dispose() stops timers and releases what the server created; create() uses one scope; createFetchHandler() serves custom routes and webhooks.
Logging: a server in a web page, and create() without logging, log at warn by default; storage warnings no longer repeat.
WebMCP: agents get each structured result once (result: "structured" by default), and listWebMcpTools() with registerWebMcpTools() offer a page's tools before its server loads.
Skills and CodeCall: skills-only mode works with createFetchHandler() and 2026-07-28; skill resources appear in resources/list; CodeCall's search waits for indexing and falls back to TF-IDF, and invalid script input fails with VALIDATION.
CLI: Codex installs write a table per server; an MCPB bundle's userConfig answers reach the server's environment; cli and node build options apply; MCPB bundles ship native addons; skills install --dir.

OpenAPI path parameters: a . or .. path parameter is refused, in the OpenAPI adapter and Skilled OpenAPI.
Task errors: internal error details no longer reach clients through task results in production.
Task concurrency: the per-caller task limit is enforced.
Skill audit: the default subject hash key is derived from the signer's secret, not the public key id.

chore(docs): move FrontMCP's docs to frontmcp.dev by @frontegg-david in #820
fix(sdk,adapters): task concurrency cap and error results, OpenAPI path parameters, skill audit (1.9.4 follow-ups 1/4) by @frontegg-david in #828
fix(sdk): workflow timeouts, job hook output, dispose(), quiet logging, one create() scope, fetch-handler routes (1.9.4 follow-ups 2/4) by @frontegg-david in #829
fix(cli): Codex config tables, mcpb userConfig env, cli deployment options, plugin install entry (1.9.4 follow-ups 3/4) by @frontegg-david in #830
fix(plugins,sdk): WebMCP results and lazy registration, skills-only mode, skill resources, CodeCall errors (1.9.4 follow-ups 4/4) by @frontegg-david in #831
chore(release): notify frontmcp.dev after a release by @frontegg-david in #837
fix(cli): build options for cli/node, mcpb native addons, skills install --dir, regenerated config schema by @frontegg-david in #845

Full Changelog: v1.9.4...v1.9.5