This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixed silent credential-load failures by requiring Node.js >=20.12.0.
Full changelog
Cleanup + reliability release. No new user-facing features.
Fixed
- Node version floor corrected.
engines.nodenow requires>=20.12.0to match the stdlibutil.parseEnvadopted during the audit. It previously advertised>=20.0.0, whereutil.parseEnvisundefined— causing silent credential-load failures (and a hard throw insaveClaudeMemEnv) on Node 20.0–20.11. Fixed in both the npm package and the generated plugin manifest. (#3021)
Changed (internal)
- Ponytail audit — −10.4k lines of dead/redundant code removed across 8 slices (worker HTTP routes, agents, session/rate-limit, search pipeline, providers, storage/shared).
- Provider refactor. New
OpenAICompatibleProviderbase class unifies the Gemini and OpenRouter session lifecycle; per-provider behavior preserved via abstract flags (requireNonEmptyToTruncate,forwardEmptyMessageResponse). - Infra deduplication. Consolidated
parseRetryAfterMs(3→1),waitForExit(2→1), request-auth helpers (2→1), andresolveQueue(2→1); aCREDENTIAL_KEYSloop replaces three duplicated copy blocks. - Worker-restart hardening via a single-spawn gate.
- Deterministic dependency closure for the bundled plugin runtime.
Full Changelog: https://github.com/thedotmack/claude-mem/compare/v13.7.0...v13.7.1
Breaking Changes
- engines.node minimum requirement raised to >=20.12.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-mem
A Claude Code plugin that automatically captures everything Claude does during your coding sessions, compresses it with AI (using Claude's agent-sdk), and injects relevant context back into future sessions.
Related context
Related tools
Earlier breaking changes
- v13.11.0 Retires the standalone `cloud-sync.mjs` daemon.
Beta — feedback welcome: [email protected]