This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+8 more
Affected surfaces
Summary
AI summaryFix potential SQL injection in vector table creation.
Full changelog
v1.9.0 (2026-03-20)
This release is published under the MIT License.
Bug Fixes
-
Add coverage for json decode error in sync auth extraction] (#226,
743a8e3) -
Chore: Rename
# Fixturesto# Test Setupin test_db_coverage.py (#220,1c48ce1) -
Correct ruff formatting error in test_graph.py (#226,
743a8e3) -
Fix DoS risk via parameter clamping in handler functions (#213,
11ee352) -
Fix false positive action task by replacing comment keyword (#219,
f227714) -
Fix missing test coverage for OSError in token_store] (#229,
c2f362c) -
Fix potential SQL injection in vector table creation (#224,
d720304) -
Format tests/test_graph.py to pass ruff formatting check (#223,
8533ca1) -
Improve test coverage from 94% to 97% and remove dead code (
a6df5c1) -
Remove 27 duplicate
assert mem is not Nonelines in test_db.py (#233,f0a4493) -
Testing improvement] Add error test for config GPU detection (#223,
8533ca1) -
Testing improvement] Add tests for config GGUF support ImportError branch (#228,
70a7c2c) -
ci: Remove job-level continue-on-error from dependency-review (
bb6907a) -
deps: Update dependency qwen3-embed to >=1.5.0 (#214,
aa8142a)
Chores
-
Align CI/CD action versions (
9f564ec) -
Rename
# Fixturesto# Test Setupin test_db_coverage.py (#220,1c48ce1) -
deps: Update codecov/codecov-action digest to 1af5884 (#216,
212b072) -
deps: Update dawidd6/action-send-mail action to v16 (#215,
73e73b2)
Documentation
- Update README for v1.8.0 features and Jina AI priority (
dcaac15)
Features
-
Optimize archive_old_memories using executemany (#222,
aba7352) -
Optimize struct.pack serialization for vectors (#212,
789c6cc) -
Testing] Add missing coverage for local embedding init failure (#221,
547c38f)
Refactoring
- Remove custom endpoint support (EMBEDDING_API_BASE, RERANK_API_BASE) (
8364d50)
Testing
Detailed Changes: v1.8.1...v1.9.0
Security Fixes
- Fix potential SQL injection in vector table creation (addressed by #224)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About n24q02m/mnemo-mcp
Persistent AI memory with SQLite hybrid search (FTS5 + semantic). Built-in Qwen3 embedding, rclone sync across machines. Zero config, no cloud, no limits.
Related context
Beta — feedback welcome: [email protected]