JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,569 Commits 152 Branches 420 Tags
d3d9cc9e262098a2012a19e170e3f8ca2508a79d
Commit Graph
45 Commits
Author SHA1 Message Date
harshgupta-mem0 d3d9cc9e26 fix(security): patch 8 HIGH + 18 MEDIUM Vanta vulnerabilities 
Bumps three transitive packages across four pnpm workspaces via overrides.
Manifests and lockfiles only; no source changes.

  undici           7.28.0 -> 7.29.0   mem0-ts, openclaw, pi-agent-plugin
                   8.5.0  -> 8.10.0   pi-agent-plugin      (GHSA-4cwx-7wf7-3272 +4)
  ip-address       10.2.0 -> 10.4.0   mem0-ts              (GHSA-mwp4-54f8-5fhr +2)
  brace-expansion  2.1.2  -> 2.1.4    mem0-ts              (GHSA-rgw5-rvv9-x895,
                                                            GHSA-mh99-v99m-4gvg)
                   1.1.15 -> 1.1.18   zapier-mem0          (GHSA-3jxr-9vmj-r5cp)

Existing override keys were replaced in place rather than added alongside:
pnpm applies only the first override matching a bare package name, so a
stale broader key (e.g. undici@<6.27.0) would have shadowed a new narrower
one and silently held the vulnerable version.

Overrides are written to both package.json and pnpm-workspace.yaml because
openclaw, pi-agent-plugin and zapier-mem0 run pnpm 9 in CI, which reads
overrides only from package.json.

Verified: 26/41 open alerts clear against the regenerated lockfiles;
frozen-lockfile passes under each workspace's CI pnpm major; runtime API
smoke 7/7; mem0-ts 1505/1505, openclaw 446/446, pi-agent 100/100, zapier 17/17.

Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-critical?tab=results
Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-high?tab=results
 2026-08-07 17:22:49 +05:30
KartikandGitHub 18021dd106 feat(ts-oss): add Oracle AI Vector Search vector store (#6690) 2026-08-05 10:55:33 +05:30
Harsh Vardhan GuptaGitHubkartik-mem0
 		9c2d6222ce fix(security): patch 32 HIGH + 57 MEDIUM Vanta vulnerabilities across 6 pnpm workspaces (#6639) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-30 15:20:13 +05:30
Rod BoevGitHubkartik-mem0
 		17836748d7 feat(vector-stores): add Databricks provider to TypeScript OSS SDK (#5824) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-11 16:35:47 +05:30
Rod BoevGitHubkartik-mem0
 		33a0ed7559 feat(ts-sdk): add AWS Neptune Analytics vector store (#5797) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-10 19:51:05 +05:30
BartokGitHubkartik-mem0
 		ba9054e0c8 feat(ts-sdk): add AWS Bedrock LLM provider (closes #5765) (#5890) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-10 19:14:15 +05:30
AdityaGitHubkartik-mem0
 		573b20cec8 feat(mem0-ts): add Baidu vector store provider (#5790) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-09 23:52:53 +05:30
KartikandGitHub 6a801bfe2f feat(oss): add reranker + per-search rerank to the TypeScript OSS SDK (#6055) 2026-07-09 22:18:38 +05:30
Rod BoevGitHubkartik-mem0
 		b26469e006 feat(vector-stores): add Weaviate adapter to TypeScript OSS SDK (#5800) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-08 21:12:01 +05:30
BartokGitHubkartik-mem0
 		e72ae96ad4 feat(ts-sdk): add Milvus vector store provider (closes #5774) (#5889) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-08 20:25:06 +05:30
sahithreddy05GitHubkartik-mem0
 		22f70d50e1 feat(ts-sdk): add Chroma vector store provider (#6145) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-08 19:14:05 +05:30
Harsh Vardhan GuptaandGitHub 846f25bd39 fix(mem0-ts): patch fast-xml-parser and tar transitive CVEs (#6160) 2026-07-08 18:25:59 +05:30
Diveyam MishraGitHubkartik-mem0
 		803ff13bb8 feat(mem0-ts): add MongoDB vector store provider to OSS TypeScript SDK (#5793) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-07 17:13:51 +05:30
404 AmeyyGitHubkartik-mem0
 		94e46526bc feat(ts-sdk): add Elasticsearch vector store provider (#5866) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-07 17:10:25 +05:30
AxelRayGitHubkartik-mem0
 		87276ef968 feat(ts-sdk): add OpenSearch vector store (#5810) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-07 15:40:20 +05:30
AxelRayGitHubkartik-mem0
 		9d36b2c94d feat(ts-sdk): add Upstash Vector vector store (#5811) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 23:41:05 +05:30
Rod BoevGitHubkartik-mem0
 		c944bed460 feat(ts-sdk): add Azure MySQL vector store (#5827) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 23:17:43 +05:30
Rod BoevGitHubkartik-mem0
 		2cc060fd76 feat(vector-stores): add Turbopuffer provider to TypeScript OSS SDK (#5801) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 22:57:00 +05:30
DivGitHubkartik-mem0divyansh-1009
 		2bc2f763d9 feat: add Google Vertex AI Vector Search support to vector store factory (#5791) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
Co-authored-by: divyansh-1009 <divyansh-1009@users.noreply.github.com>
 2026-07-06 22:54:24 +05:30
Rod BoevGitHubkartik-mem0
 		7fb3feb5cd feat(vector-stores): add Cassandra provider to TypeScript OSS SDK (#5823) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 21:57:32 +05:30
Rod BoevGitHubkartik-mem0
 		fec7cdf118 feat(ts-sdk): add FastEmbed embedding provider (#5862) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 21:56:11 +05:30
Rod BoevGitHubkartik-mem0
 		03b41ab00f feat(vector-stores): add Pinecone provider to TypeScript SDK (#5802) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 21:39:10 +05:30
YashGitHubkartik-mem0
 		a7ecf781cd Feat/valkey vector store (#5826) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 20:20:59 +05:30
Rod BoevGitHubkartik-mem0
 		6dc4606dcf feat(vector-stores): add S3 Vectors provider to TypeScript OSS SDK (#5822) 
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-07-06 20:08:13 +05:30
Harsh Vardhan GuptaandGitHub bbbfcfea07 fix(deps): bump undici to >=6.27.0 (CVE-2026-12151) (#5861) 2026-06-26 15:32:09 +05:30
Harsh Vardhan GuptaGitHubClaude Opus 4.8
 		96b31c4bc0 fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143) (#5618) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-18 13:44:05 +05:30
Harsh Vardhan GuptaGitHubClaude Sonnet 4.6
 		4492e75d04 fix(deps): bump esbuild >=0.28.1 across all npm packages (#5563) 
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-15 17:04:11 +05:30
Harsh Vardhan GuptaGitHubClaude Sonnet 4.6
 		168ad358d5 fix(deps): resolve all open MEDIUM Dependabot alerts (npm overrides + Python pins) (#5489) 
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 15:15:26 +05:30
Harsh Vardhan GuptaandGitHub 8e65ce915d fix(deps): remediate high-severity vulnerabilities in npm packages (#5294) 2026-06-02 01:36:29 +05:30
Harsh Vardhan GuptaandGitHub 8b11e0787a fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash (#5219) 2026-05-22 01:18:41 +05:30
Harsh Vardhan GuptaandGitHub 09dc74d61a fix(deps): bump vulnerable dependencies across Python and TypeScript. (#5217) 2026-05-21 23:28:35 +05:30
soumil-rathiGitHubSoumil RathiSaket Aryanchaithanyak42kartik-mem0
 		a488e19044 feat(oss): port v3 pipeline with hybrid search, entity extraction, and additive scoring (#4805) 
Co-authored-by: Soumil Rathi <soumilrathi@gmail.com>
Co-authored-by: Saket Aryan <saketaryan2002@gmail.com>
Co-authored-by: chaithanyak42 <chaithanya.kumar42a@gmail.com>
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>
 2026-04-14 18:00:58 +05:30
KartikGitHubSaket Aryan
 		15218d4a7f chore: bump mem0-ts to 2.4.1, pyproject to 1.0.6, update changelog with bug fixes (#4361) 
Co-authored-by: Saket Aryan <saketaryan2002@gmail.com>
 2026-03-16 22:49:31 +05:30
UtkarshandGitHub 36537c8326 fix(ts-sdk): replace sqlite3 with better-sqlite3 to fix native binding resolution (#4270) 2026-03-09 11:00:36 -07:00
Saket AryanandGitHub a0d8a02b94 chore(ts-sdk): bump axios to 1.13.6 (#4177) 2026-03-02 13:24:35 +05:30
Saket AryanandGitHub 417ebffadd (ts-sdk-update): Update for TypeScript SDK v2.2. (#3865) 2025-12-29 15:01:18 +05:30
Saket AryanandGitHub 9a12ea7b3c Version Bump/Formatting (#2923) 2025-06-06 21:49:03 +05:30
Saket AryanandGitHub 855c322da6 deps(ts-sdk): Updates Google SDK Peer Dependency Version (#2878) 2025-05-30 09:51:01 +05:30
Saket AryanandGitHub 42c98e5717 Bumped Anthropic SDK Version (#2598) 2025-04-30 14:02:59 -07:00
Saket AryanandGitHub c3c9205ffa TypeScript OSS: Langchain Integration (#2556) 2025-04-15 20:08:41 +05:30
Saket AryanandGitHub ca1ee2d2d7 Patch to fix Azure OpenAI (#2538) 2025-04-11 21:28:38 +05:30
Achraf DevGitHubSaket Aryan
 		d9236de4ed feat: add mistral AI as LLM provider (#2496) 
Co-authored-by: Saket Aryan <94069182+whysosaket@users.noreply.github.com>
 2025-04-11 20:02:44 +05:30
Saket AryanandGitHub 309c8c18a6 Add user_id in TS OSS SDK (#2514) 2025-04-09 10:24:56 -07:00
Saket AryanandGitHub bc4ab3db77 Add Infer Property (#2452) 2025-03-27 21:18:42 +05:30
Saket AryanandGitHub 2b49c9eedd Supabase Vector Store (#2427) 2025-03-25 00:15:50 +05:30