Skip to content

hindsight

v0.6.1 Security

This release patches 2 CVEs for security teams tracking exposure across their dependency inventory.

2 patched CVEs
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs CVE-2023-4863 EPSS 93% CVE-2026-42208 EPSS 57%
2 CVEs patched

Topics

agentic-ai agents ai-memory memory

Summary

AI summary

Add AlloyDB ScaNN vector index support and optional read-only backend for recall queries.

Full changelog

What's Changed

  • docs: add 0.6.0 changelog and release blog post by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1458
  • chore: remove self-driving-agents CLI — moved to own repo by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1461
  • fix(retain): reduce memory pressure by clearing content references after use by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1455
  • fix(openclaw): mission semantics + retainQueue config whitelist by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1473
  • feat(claude-code): create-agent skill understands SDA layout by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1475
  • chore(deps): bump pg0-embedded to >=0.14.0 by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1476
  • feat(openclaw): drop redundant before_agent_start + add debugPerfTiming by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1477
  • feat(control-plane): enrich bank dropdown with memory stats by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1479
  • feat(engine): optional read-only backend for recall queries by @cdbartholomew in https://github.com/vectorize-io/hindsight/pull/1460
  • fix(claude-code): bootstrap 'mcp' Python package on first run by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1485
  • feat(perf): publish perf-test results to external dashboard by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1474
  • fix(packaging): hard-pin meta packages to matching hindsight-api-slim by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1486
  • docs(claude-code): document knowledge tools and subagent skill by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1487
  • ci(release): add --provenance to npm publish (required for n8n Verified) by @benfrank241 in https://github.com/vectorize-io/hindsight/pull/1491
  • chore: stabilize CI — docs-skill pre-commit hook + retain dict-mutation fix by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1490
  • fix(docker): chmod 755 /home/hindsight for --user UID:GID support by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1493
  • feat(cli): add --strategy flag to memory retain-files by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1494
  • blog: Your Claude Code Subagents Don't Share What They Learn by @benfrank241 in https://github.com/vectorize-io/hindsight/pull/1456
  • docs(cli): document --strategy flag for memory retain-files by @r266-tech in https://github.com/vectorize-io/hindsight/pull/1499
  • docs(env): document HINDSIGHT_API_READ_DATABASE_URL in .env.example by @r266-tech in https://github.com/vectorize-io/hindsight/pull/1496
  • ci: cosign-sign published GHCR images (manual workflow) by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1495
  • ci: cosign-sign release images + document verification by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1502
  • Add AlloyDB ScaNN vector index support by @can1357 in https://github.com/vectorize-io/hindsight/pull/1459
  • fix(worker): probe pg_proc before calling optional schemas_with_pending_work() by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1503
  • docs(installation): bake custom models into image instead of PVC by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1504
  • follow-up to #1459: AlloyDB ScaNN docs + review-nit cleanups by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1506
  • feat: add map-type entity labels for structured entity extraction by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1505
  • fix(openclaw): pass enableKnowledgeTools through getPluginConfig by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1507
  • docs(entity-labels): document type="map" structured entity groups by @r266-tech in https://github.com/vectorize-io/hindsight/pull/1508
  • perf(worker): scope progress-stats fanout via existing routine by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1509
  • fix(n8n): drop hindsight-client runtime dep, inline HTTP calls by @benfrank241 in https://github.com/vectorize-io/hindsight/pull/1513
  • fix(openclaw): write hooks.allowConversationAccess in setup wizard by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1514
  • fix(openclaw): reuse existing token + URL when re-running setup wizard by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1518
  • feat(claude-code): resolve git worktrees + explicit directory-bank mapping by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1520
  • fix(openclaw): backfill plugins.allow with hindsight-openclaw in setup wizard by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1521
  • fix(engine): remove multiplicative retry layers in fact extraction by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1516
  • docs: surface stable worker_id guidance and zombie-operation recovery by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1522
  • fix(daemon): replace os.fork() with subprocess.Popen to fix MPS on macOS by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1519
  • blog: n8n Workflows Are Stateless. Hindsight Makes Them Compound. by @benfrank241 in https://github.com/vectorize-io/hindsight/pull/1511
  • fix(reflect): read document metadata from retain params by @nepenth in https://github.com/vectorize-io/hindsight/pull/1523
  • fix(worker): propagate child error_message to failed batch_retain parent by @cdbartholomew in https://github.com/vectorize-io/hindsight/pull/1527
  • fix(claude-code): use detail=metadata for agent_knowledge_list_pages by @cdbartholomew in https://github.com/vectorize-io/hindsight/pull/1528
  • feat(cp): add optional access-key login for Control Plane by @ariel-ai-bot in https://github.com/vectorize-io/hindsight/pull/1530
  • feat: add z.ai as LLM provider by @Burgunthy in https://github.com/vectorize-io/hindsight/pull/1529
  • feat(openclaw): prepend session-context block to retained transcripts by @kryptt in https://github.com/vectorize-io/hindsight/pull/1439
  • fix(cp): improve access-key auth UX and harden middleware by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1533
  • docs(zai): document z.ai provider and add default model by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1532
  • chore: fix formatting in llm_wrapper.py to pass verify-generated-files by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1534
  • perf(locomo): scope CI to a 3-conversation curated subset by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1536
  • fix(typescript-client): derive CLIENT_VERSION via tsup define by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1540
  • feat(api): add litellmrouter provider for LLM fallback chains by @nicoloboschi in https://github.com/vectorize-io/hindsight/pull/1537

New Contributors

  • @can1357 made their first contribution in https://github.com/vectorize-io/hindsight/pull/1459
  • @nepenth made their first contribution in https://github.com/vectorize-io/hindsight/pull/1523
  • @ariel-ai-bot made their first contribution in https://github.com/vectorize-io/hindsight/pull/1530
  • @Burgunthy made their first contribution in https://github.com/vectorize-io/hindsight/pull/1529
  • @kryptt made their first contribution in https://github.com/vectorize-io/hindsight/pull/1439

Full Changelog: https://github.com/vectorize-io/hindsight/compare/v0.6.0...v0.6.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track hindsight

Get notified when new releases ship.

Sign up free

About hindsight

Hindsight: Agent Memory That Learns

All releases →

Beta — feedback welcome: [email protected]