v1.9.3

1.9.3 (2026-10-14)

Bug Fixes

• answer an empty completion for a template variable named like an Object.prototype member, instead of -32603 (a700f9a)
• auth: write a DiskStore entry to a temporary file and rename it into place, so a concurrent read never sees it half-written (57bb2a4)
• let an optional prompt argument named like an Object.prototype member be left out (566373c)
• match resource templates in embedded() as resources/read does, so {id} no longer spans path segments (aed7b6e)
• openapi: compare a response's media type case-insensitively and without its parameters, so Application/JSON is read as JSON (067b17e)
• openapi: refuse a path argument that makes a . or .. segment, instead of requesting a different endpoint (b8fc43c)