Skip to content

v2.14.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 May 11:51
· 582 commits to main since this release
v2.14.5
0093af3

v2.14.5 — 2026-05-06

Security

  • Hardened web server with optional API key authentication for non-localhost bindings
  • Fixed SIGINT/SIGTERM handlers to avoid killing the host process on shutdown
  • Added 0600 permissions to OAuth credential files after write
  • Removed backslash escape vulnerability in LLM prompt construction (memory-conflicts.ts)
  • Archived memories now correctly remove vectors from the backend search index

Fixed

  • Gracefully degrade when configuration is incomplete instead of blocking plugin load
  • Added missing google-gemini to memoryProvider type union
  • Clamped similarity percentages to 0-100 range in search results
  • Started periodic cleanup of expired AI provider sessions
  • Standardized timer types to NodeJS.Timeout across the codebase
  • Bounded execSync calls with timeout to prevent indefinite blocking
  • Improved stream chunk processing to handle fragmented regex replacements safely

Infrastructure

  • Restricted CI workflow GITHUB_TOKEN permissions to contents: read
  • Removed node from engines field (Bun-only runtime)

Full Changelog: v2.14.4...v2.14.5

Assets 2
Loading