vercel-ai-v3.0.2
mem0ai/mem0vercel-ai-v3.0.2Aug 24, 2026by kartik-mem0
AI Summary
Updated `js-yaml` dependency constraints to close a newer CVE range that the previous version floors did not cover.
Key Highlights
- Tightened `js-yaml` version ranges
- Closed newer CVE range
- Part of a wider dependency patch sweep
Full Release Notes
**Security:** - **Dependencies:** Tightened the `js-yaml` pnpm overrides from `<3.15.0 → >=3.15.0 <4.0.0` / `>=4.0.0 <4.3.0 → >=4.3.0 <5.0.0` to `<3.15.1 → >=3.15.1 <4.0.0` / `>=4.0.0 <4.3.1 → >=4.3.1 <5.0.0`, closing a newer CVE range the previous floors didn't cover, as part of a wider dependency patch sweep across the pnpm workspaces ([#7032](https://github.com/mem0ai/mem0/pull/7032))