Merge pull request modelcontextprotocol#766 from modelcontextprotocol/davidsp/update-changelog

Add note about RFC 8707 to changelog

Author: ihrpr

docs/specification/draft/changelog.mdx

@@ -16,12 +16,15 @@ the previous revision, [2025-03-26](/specification/2025-03-26).
 3. Classified MCP servers as [OAuth Resource Servers](/specification/draft/basic/authorization#authorization-server-discovery),
    adding protected resource metadata to discover the corresponding Authorization server.
    (PR [#338](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/338))
-4. Clarified [security considerations](/specification/draft/basic/authorization#security-considerations) and best practices
+4. Require MCP clients to implement Resource Indicators as described in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to prevent
+   malicious servers from obtaining access tokens.
+   (PR [#734](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/734))
+5. Clarified [security considerations](/specification/draft/basic/authorization#security-considerations) and best practices
    in the authorization spec and in a new [security best practices page](/specification/draft/basic/security_best_practices).
-5. Added support for **[elicitation](/specification/draft/client/elicitation)**, enabling servers to request additional
+6. Added support for **[elicitation](/specification/draft/client/elicitation)**, enabling servers to request additional
    information from users during interactions.
    (PR [#382](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/382))
-6. Added support for **[resource links](/specification/draft/server/tools#resource-links)** in
+7. Added support for **[resource links](/specification/draft/server/tools#resource-links)** in
    tool call results. (PR [#603](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/603))
 
 ## Other schema changes