harshgupta-mem0 ff5b0e778b fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143) ...

Adds a pnpm override forcing form-data >=4.0.6 in all five workspaces that resolved the vulnerable transitive
  form-data@4.0.5 (CVE-2026-12143, GHSA-hmw2-7cc7-3qxx — CRLF injection via unescaped multipart field names/filenames). Override added to pnpm-workspace.yaml everywhere, and also to package.json pnpm.overrides for the workspaces whose CI pnpm version reads it (mem0-ts,
  openmemory/ui, pi-agent-plugin, openclaw). Lockfiles regenerated with each workspace's CI pnpm version; only form-data changes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-18 00:21:34 +05:30

..

mem0-plugin

refactor(opencode): use existing mem0 SDK instead of delegating to MCP, load skills properly instead of dumping them in .opencode (#5323)

2026-06-17 21:18:39 +05:30

openclaw

fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143)

2026-06-18 00:21:34 +05:30

pi-agent-plugin

fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143)

2026-06-18 00:21:34 +05:30

vercel-ai-sdk

fix(deps): bump esbuild >=0.28.1 across all npm packages (#5563)

2026-06-15 17:04:11 +05:30