This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed crash in onclose handler by background tree‑kill on unexpected subprocess exit.
Full changelog
Bug fixes
MCP server
- #2371 — drop
${_R%/}parameter-expansion trim in.mcp.jsonthat tripped Claude Code's MCP validator
Environment isolation
- #2357 — block
ANTHROPIC_BASE_URLleak; use a three-branch OAuth-skip predicate - Add
CLAUDE_MEM_ENV_FILElazy resolver so tests (and multi-profile users) can redirect the env-file path without module-load-order constraints
Worker lifecycle
- Classify Claude SDK HTTP 400 as unrecoverable so the worker stops retrying a doomed request
- Stop hook crash hardened:
onclosehandler now performs background tree-kill on unexpected subprocess exit
Chroma
- #2313 — enforce a single
chroma-mcpsubprocess per worker (singleton viadisposeCurrentSubprocess()on every code path; tree-kill of orphans on dispose) - Pin
onnxruntime>=1.20andprotobuf<7to fixINVALID_PROTOBUFon macOS arm64
Build
- Polyfill
import.meta.urltopathToFileURL(__filename)in the CJS worker bundle so ESM-style code resolves correctly (CodeRabbit-driven follow-up)
Tests / review
tests/env-isolation.test.tsno longer mutates the real~/.claude-mem/.env; OAuth spy wrapped in try/finally to avoid leaks across runs- 3 new chroma-mcp regression tests for #2313 (singleton enforcement)
Misc
- Daily dependency bump per CLAUDE.md maintenance policy
Full diff: https://github.com/thedotmack/claude-mem/pull/2394
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-mem
A Claude Code plugin that automatically captures everything Claude does during your coding sessions, compresses it with AI (using Claude's agent-sdk), and injects relevant context back into future sessions.
Related context
Beta — feedback welcome: [email protected]