Skip to content

Agents Remember

vmcp-v2.9.2 scope: mcp Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent agent-memory ai-agent ai-memory coding-agents mcp-server

Summary

AI summary

Updates Highlights, Other, and defense-in-depth across a mixed release.

Full changelog

Agents Remember 2.9.2

Running the benchmark suite no longer reaches into your live workspace or worktree providers. Benchmarks now build their own isolated index from their pinned fixture, so a benchmark run can't trigger a re-index storm across your real provider stacks.

Highlights

  • Hermetic benchmark provider setup. prepare_configured_providers no longer wires a seed source — a benchmark indexes its own fixture cold instead of seeding from (and starting) the live workspace provider backends.
  • Seed guard (defense-in-depth). The GrepAI and CodeGraphContext seed resolvers now refuse a benchmark-scoped target, so a benchmark can never clone/seed from another stack even if a source is mis-wired.
  • Benchmarked agent uses its own MCP server. benchmark_mcp_config_overrides points the benchmarked Codex at the benchmark's own MCP configuration rather than inheriting the host workspace's.

Why it matters

Previously, starting the benchmark suite seeded its providers from the live workspace coordination root. Because every worktree shares the workspace's GrepAI workspace identity, that disturbance cascaded a full re-embed across main and every worktree at once — saturating CPU and making the machine unusable. Benchmarks are now isolated like a regular worktree.

Other

  • providers/status.py compacts the CodeGraphContext watcher lastRefresh summary.
  • Regression tests for the seed guard and hermetic prepare.

Changes: https://github.com/Foxfire1st/agents-remember/pull/89

Security Fixes

  • GrepAI and CodeGraphContext seed resolvers now refuse `benchmark`‑scoped targets (defense‑in‑depth).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Agents Remember

Get notified when new releases ship.

Sign up free

About Agents Remember

All releases →

Related context

Earlier breaking changes

  • vmcp-v2.9.0 Removed tools direct_closeout_preview and direct_closeout_apply.
  • vmcp-v2.0.0 `WorkflowKind` enum drops `heavy` and `heavy-task` values.
  • vmcp-v2.0.0 `skills_install` no longer accepts a `layout` input; installer performs flat copy.
  • vmcp-v2.0.0 Removed workflows W-01-heavy-task-workflow and W-03-chat-task-workflow.

Beta — feedback welcome: [email protected]