8 Commits

Include renames

Author	SHA1	Message	Date
harshgupta-mem0andClaude Opus 4.8	ff5b0e778b	fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143) ... Adds a pnpm override forcing form-data >=4.0.6 in all five workspaces that resolved the vulnerable transitive form-data@4.0.5 (CVE-2026-12143, GHSA-hmw2-7cc7-3qxx — CRLF injection via unescaped multipart field names/filenames). Override added to pnpm-workspace.yaml everywhere, and also to package.json pnpm.overrides for the workspaces whose CI pnpm version reads it (mem0-ts, openmemory/ui, pi-agent-plugin, openclaw). Lockfiles regenerated with each workspace's CI pnpm version; only form-data changes. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-18 00:21:34 +05:30
3 people	168ad358d5	fix(deps): resolve all open MEDIUM Dependabot alerts (npm overrides + Python pins) (#5489) ... Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-12 15:15:26 +05:30
3 people	c676c2c458	fix(dashboard): pin pnpm to 10.34.2 so docker build works on node:20-alpine (#5483) ... Co-authored-by: Kartik <kartik.labhshetwar@mem0.ai>	2026-06-11 22:45:52 +05:30
Sense_wangandGitHub	7a5df64746	fix: allow dashboard refresh cookie on http deployments (#5026)	2026-06-11 21:29:54 +05:30
Harsh Vardhan GuptaandGitHub	8e65ce915d	fix(deps): remediate high-severity vulnerabilities in npm packages (#5294)	2026-06-02 01:36:29 +05:30
Harsh Vardhan GuptaandGitHub	8b11e0787a	fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash (#5219)	2026-05-22 01:18:41 +05:30
Harsh Vardhan GuptaandGitHub	09dc74d61a	fix(deps): bump vulnerable dependencies across Python and TypeScript. (#5217)	2026-05-21 23:28:35 +05:30
3 people	db8ac61713	Self-hosted dashboard and admin auth (#4837) ... Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai>	2026-04-23 19:06:36 +05:30