Bump mem0ai from 2.0.2 to 2.0.14

[dependabot]

Bumps mem0ai from 2.0.2 to 2.0.14.

Release notes

Sourced from mem0ai's releases.

Mem0 Python SDK (v2.0.14)

New Features:

• Vector Stores: Add an Oracle AI Vector Search provider (oracledb) with connection pooling, HNSW/IVF indexes, JSON metadata filtering, and six selectable distance metrics (#5358)

Bug Fixes:

• Vector Stores: Translate a "*" filter value in OpenSearch into an exists query for every key, not just identity keys. It was previously ignored or matched literally against the string "*", so a wildcard filter returned nothing (#6522)
• Vector Stores: Re-raise errors from OpenSearch search() instead of returning [], so a transport, auth, or index misconfiguration surfaces instead of looking like zero matches. keyword_search() still degrades on failure, since it is a best-effort BM25 signal (#6519)
• Vector Stores: Guard the text field in Milvus update() behind the _has_bm25_schema check, matching insert(), so updating a memory in a collection without the BM25 text/sparse schema no longer fails (#5705)

Mem0 Python SDK (v2.0.13)

Bug Fixes:

• Vector Stores: Fix reset() silently leaving stale vectors behind on local (on-disk) Qdrant when the old collection directory could not be removed, for example an open file handle on Windows or NFS (#6412)
• Core: Stop update() metadata from overwriting or injecting user_id, agent_id, run_id, or actor_id. These identity fields are immutable after creation, so passing them in metadata can no longer move a memory into a different tenant's scope (#6278)
• Vector Stores: Scope Pinecone delete_col()/reset() to the configured namespace instead of deleting the whole index, so resetting a namespaced Pinecone store no longer wipes out the other namespaces sharing that index (#6287)
• Vector Stores: Convert Baidu Mochow's raw L2 distance into a similarity score in search() (1 / (1 + distance)), so closer matches rank higher instead of lower, matching the Milvus provider and the rest of the VectorStoreBase contract (#6435)
• LLMs: Read OPENAI_BASE_URL (was OPENAI_API_BASE) in OpenAIStructuredLLM, matching the official OpenAI SDK's environment variable and the rest of the OpenAI-compatible providers (#6322)

Improvements:

• LLMs: Remove a dead, no-op api_key attribute check from LLMBase.__init__ (#6460)

Changes:

• Client: Remove the retrieval_criteria parameter from MemoryClient.update_project()/AsyncMemoryClient.update_project() and Project.update()/AsyncProject.update(). It was accepted and forwarded but never affected retrieval, so removing it is not a behavior change (#6313)

Mem0 Python SDK (v2.0.12)

New Features:

• Memory (OSS): Accept text in Memory.update() and AsyncMemory.update(). data still works but is now deprecated, so prefer text in new code (#6044)

Bug Fixes:

• Core: Coerce non-string entity IDs (user_id, agent_id, run_id) instead of crashing on .strip(), so passing an integer ID no longer raises AttributeError (#6206)
• Core: Stop requiring langchain-core for the default async procedural memory path. The optional dependency is now only imported when you pass a custom LangChain LLM, matching the sync behavior (#6209)
• Client: Encode dynamic URL path segments so IDs containing special characters no longer produce malformed requests (#5963)
• LLMs: Skip temperature and top_p for newer Anthropic models that reject sampling parameters. Detection is automatic per model family and version, and the new enable_sampling_parameters config flag overrides it (#6211)
• Vector Stores: Stop writing internal OutputData model fields as properties on Weaviate update() (#6149)
• Vector Stores: Improve wildcard search handling in Milvus (#6187)
• Vector Stores: Keep env-resolved Upstash Vector credentials after config validation. An env-var-only config previously passed validation and then failed to build (#5811)
• Vector Stores: Restore the previous payload when a Neptune Analytics vector upsert fails inside update(), so a partial write can no longer leave the payload and embedding out of sync (#5824)

Changes:

• LLMs: The Together default model is now MiniMaxAI/MiniMax-M3 (was mistralai/Mixtral-8x7B-Instruct-v0.1) (#6049)
• LLMs: The xAI default model is now grok-4.3 (was grok-2-latest) (#6115)
• Embeddings: The Together default embedding model is now intfloat/multilingual-e5-large-instruct at 1024 dimensions (was togethercomputer/m2-bert-80M-8k-retrieval at 768). If you use the Together embedder without pinning model, existing vectors were written at the old dimension: either re-embed them, or pin model and embedding_dims to the old values (#5989)
• Rerankers: The Cohere default rerank model is now rerank-v3.5 (was rerank-english-v3.0) (#6055)

Security:

• Vector Stores: Fix SQL and Cypher injection vulnerabilities in the PGVector, Azure MySQL, and Neptune providers (#4878)
• Vector Stores: Validate Elasticsearch filter keys and values to prevent term query injection (#5980)
• Dependencies: Require transformers>=5.3.0 to remediate GHSA-29pf-2h5f-8g72 (CVE-2026-4372) (#6110)

Mem0 Python SDK (v2.0.11)

... (truncated)

Commits

• b357a5a chore(release): Python SDK v2.0.14, TypeScript SDK v3.1.2 (#6589)
• d653b63 fix(milvus): guard text field in update() with _has_bm25_schema check (#5705)
• cc46715 fix(ts-oss/cassandra): apply every operator in a compound field filter (#6511)
• 01afdde salvage: fix(opensearch) re-raise search errors (credit @​yashwanth123 #6477) ...
• d6d89c9 Add Oracle Vector Store Integration (#5358)
• c2150e8 docs: SEO and AEO updates for the memory expiration page (#6535)
• 19c7bb8 fix(ts-oss/chroma): stop dropping filter conditions in where-clause translati...
• e6281ab fix(ts-oss): forward responseFormat to Gemini in generateResponse (#6468)
• a71d7bd fix(dashboard): clear the LLM API key on provider change (#6475)
• 56ec7d2 fix(vector_stores/opensearch): translate the '*' wildcard to an exists query ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #18.