harshgupta-mem0
d3d9cc9e26
fix(security): patch 8 HIGH + 18 MEDIUM Vanta vulnerabilities
...
Bumps three transitive packages across four pnpm workspaces via overrides.
Manifests and lockfiles only; no source changes.
undici 7.28.0 -> 7.29.0 mem0-ts, openclaw, pi-agent-plugin
8.5.0 -> 8.10.0 pi-agent-plugin (GHSA-4cwx-7wf7-3272 +4)
ip-address 10.2.0 -> 10.4.0 mem0-ts (GHSA-mwp4-54f8-5fhr +2)
brace-expansion 2.1.2 -> 2.1.4 mem0-ts (GHSA-rgw5-rvv9-x895,
GHSA-mh99-v99m-4gvg)
1.1.15 -> 1.1.18 zapier-mem0 (GHSA-3jxr-9vmj-r5cp)
Existing override keys were replaced in place rather than added alongside:
pnpm applies only the first override matching a bare package name, so a
stale broader key (e.g. undici@<6.27.0) would have shadowed a new narrower
one and silently held the vulnerable version.
Overrides are written to both package.json and pnpm-workspace.yaml because
openclaw, pi-agent-plugin and zapier-mem0 run pnpm 9 in CI, which reads
overrides only from package.json.
Verified: 26/41 open alerts clear against the regenerated lockfiles;
frozen-lockfile passes under each workspace's CI pnpm major; runtime API
smoke 7/7; mem0-ts 1505/1505, openclaw 446/446, pi-agent 100/100, zapier 17/17.
Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-critical?tab=results
Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-high?tab=results
2026-08-07 17:22:49 +05:30
Saket Aryan and GitHub
12c47f5249
feat(sdk, docs): expose agent_custom_instructions for agent-scoped extraction ( #6809 )
2026-08-05 22:12:10 +05:30
Kartik and GitHub
18021dd106
feat(ts-oss): add Oracle AI Vector Search vector store ( #6690 )
2026-08-05 10:55:33 +05:30
Kartik and GitHub
1112be3e5e
chore(release): bump SDK, CLI, and plugin versions ( #6800 )
2026-08-05 00:16:26 +05:30
Kartik and GitHub
50bdaaea0c
chore: bump versions and update changelog for Python 2.0.15, TypeScript 3.1.3, and plugin releases ( #6715 )
2026-08-01 20:26:31 +05:30
9c2d6222ce
fix(security): patch 32 HIGH + 57 MEDIUM Vanta vulnerabilities across 6 pnpm workspaces ( #6639 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-30 15:20:13 +05:30
Kartik and GitHub
b357a5a1b0
chore(release): Python SDK v2.0.14, TypeScript SDK v3.1.2 ( #6589 )
2026-07-25 17:51:48 +05:30
Kartik and GitHub
5e7adc4d12
chore: update changelog, bump versions to Python 2.0.13, TypeScript 3.1.1, OpenCode plugin 0.2.2 ( #6504 )
2026-07-22 23:27:47 +05:30
Kartik and GitHub
756b0b1b6d
fix(ts-sdk): lazy-load optional provider SDKs in mem0ai/oss ( #6389 )
2026-07-20 15:53:35 +05:30
Kartik and GitHub
42cf18c4e6
chore: update changelog, bump SDK versions to Python 2.0.12 and TypeScript 3.1.0 ( #6281 )
2026-07-13 22:11:51 +05:30
Kartik and GitHub
d89793b666
refactor(ts-sdk): lazy-load optional provider SDKs so importing mem0ai/oss never requires them ( #6280 )
2026-07-13 15:23:12 +05:30
17836748d7
feat(vector-stores): add Databricks provider to TypeScript OSS SDK ( #5824 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-11 16:35:47 +05:30
33a0ed7559
feat(ts-sdk): add AWS Neptune Analytics vector store ( #5797 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-10 19:51:05 +05:30
ba9054e0c8
feat(ts-sdk): add AWS Bedrock LLM provider ( closes #5765 ) ( #5890 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-10 19:14:15 +05:30
573b20cec8
feat(mem0-ts): add Baidu vector store provider ( #5790 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-09 23:52:53 +05:30
Kartik and GitHub
6a801bfe2f
feat(oss): add reranker + per-search rerank to the TypeScript OSS SDK ( #6055 )
2026-07-09 22:18:38 +05:30
b26469e006
feat(vector-stores): add Weaviate adapter to TypeScript OSS SDK ( #5800 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-08 21:12:01 +05:30
e72ae96ad4
feat(ts-sdk): add Milvus vector store provider ( closes #5774 ) ( #5889 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-08 20:25:06 +05:30
22f70d50e1
feat(ts-sdk): add Chroma vector store provider ( #6145 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-08 19:14:05 +05:30
Harsh Vardhan Gupta and GitHub
846f25bd39
fix(mem0-ts): patch fast-xml-parser and tar transitive CVEs ( #6160 )
2026-07-08 18:25:59 +05:30
803ff13bb8
feat(mem0-ts): add MongoDB vector store provider to OSS TypeScript SDK ( #5793 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-07 17:13:51 +05:30
94e46526bc
feat(ts-sdk): add Elasticsearch vector store provider ( #5866 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-07 17:10:25 +05:30
87276ef968
feat(ts-sdk): add OpenSearch vector store ( #5810 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-07 15:40:20 +05:30
9d36b2c94d
feat(ts-sdk): add Upstash Vector vector store ( #5811 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 23:41:05 +05:30
c944bed460
feat(ts-sdk): add Azure MySQL vector store ( #5827 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 23:17:43 +05:30
2cc060fd76
feat(vector-stores): add Turbopuffer provider to TypeScript OSS SDK ( #5801 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 22:57:00 +05:30
2bc2f763d9
feat: add Google Vertex AI Vector Search support to vector store factory ( #5791 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
Co-authored-by: divyansh-1009 <divyansh-1009@users.noreply.github.com >
2026-07-06 22:54:24 +05:30
7fb3feb5cd
feat(vector-stores): add Cassandra provider to TypeScript OSS SDK ( #5823 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 21:57:32 +05:30
fec7cdf118
feat(ts-sdk): add FastEmbed embedding provider ( #5862 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 21:56:11 +05:30
03b41ab00f
feat(vector-stores): add Pinecone provider to TypeScript SDK ( #5802 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 21:39:10 +05:30
a7ecf781cd
Feat/valkey vector store ( #5826 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 20:20:59 +05:30
6dc4606dcf
feat(vector-stores): add S3 Vectors provider to TypeScript OSS SDK ( #5822 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-07-06 20:08:13 +05:30
Kartik and GitHub
f2532f072f
chore: update changelog, bump SDK versions to Python 2.0.11 and TypeScript 3.0.13 ( #6031 )
2026-07-01 22:17:41 +05:30
Kartik and GitHub
8d6b7c1d67
chore: update changelog, bump SDK versions to Python 2.0.10 and TypeScript 3.0.12 ( #5927 )
2026-06-27 22:33:14 +05:30
Harsh Vardhan Gupta and GitHub
bbbfcfea07
fix(deps): bump undici to >=6.27.0 (CVE-2026-12151) ( #5861 )
2026-06-26 15:32:09 +05:30
b33fa5427c
fix(memory): align entity extraction precision ( #5829 )
...
Making the entity extraction function cleaner
Co-authored-by: Soumil Rathi <soumilrathi@gmail.com >
2026-06-24 15:48:37 -07:00
Kartik and GitHub
98dbf90864
chore: update changelog, bump SDK versions to Python 2.0.8 and TypeScript 3.0.10 ( #5825 )
2026-06-24 20:21:06 +05:30
96b31c4bc0
fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143) ( #5618 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-18 13:44:05 +05:30
Kartik and GitHub
158e9111cb
chore: update changelog, bump SDK versions to Python 2.0.7 and TypeScript 3.0.9 ( #5615 )
2026-06-17 21:45:28 +05:30
4492e75d04
fix(deps): bump esbuild >=0.28.1 across all npm packages ( #5563 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-15 17:04:11 +05:30
Kartik and GitHub
b3ede5b7c0
chore: update changelog, bump SDK and package versions to 3.0.8 and 2.0.6 ( #5522 )
2026-06-13 20:59:53 +05:30
168ad358d5
fix(deps): resolve all open MEDIUM Dependabot alerts (npm overrides + Python pins) ( #5489 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-12 15:15:26 +05:30
Kartik and GitHub
8399b088a5
chore: release Python SDK v2.0.5 and TypeScript SDK v3.0.7 ( #5470 )
2026-06-10 22:17:16 +05:30
Harsh Vardhan Gupta and GitHub
8e65ce915d
fix(deps): remediate high-severity vulnerabilities in npm packages ( #5294 )
2026-06-02 01:36:29 +05:30
75a37ec93d
feat(sdk): add delete_linked option to MemoryClient.delete (Python + TS) ( #5270 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 22:38:16 +05:30
Kartik and GitHub
ad736d9a06
fix(pgvector, server): add rich filter operators and fix /search 502 ( #5263 )
2026-05-26 22:47:41 +05:30
Harsh Vardhan Gupta and GitHub
8b11e0787a
fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash ( #5219 )
2026-05-22 01:18:41 +05:30
Harsh Vardhan Gupta and GitHub
09dc74d61a
fix(deps): bump vulnerable dependencies across Python and TypeScript. ( #5217 )
2026-05-21 23:28:35 +05:30
Mragank Shekhar and GitHub
9043fbf61e
chore(release): bump mem0ai to 2.0.2 (py) and 3.0.3 (ts) ( #5078 )
2026-05-08 01:27:23 +05:30
Kartik and GitHub
bd9d27ff50
docs: changelog updates, version bump in mem0-ts and pyproject ( #4976 )
2026-04-25 23:06:57 +05:30
harshgupta-mem0