@mastra/longmemeval 1.1.13-alpha.4 → 1.1.13-alpha.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/CHANGELOG.md +18 -0
  2. package/package.json +6 -6
  3. package/src/commands/find-prohibited.ts +1 -0
  4. package/src/commands/test-cleaned.ts +1 -0
  5. package/src/commands/test-incremental.ts +1 -0
  6. package/src/commands/test-messages.ts +1 -0
  7. package/src/commands/test-prohibited.ts +1 -0
  8. package/src/commands/test-thread.ts +1 -0
package/CHANGELOG.md CHANGED
@@ -1,5 +1,23 @@
1
1
  # @mastra/longmemeval
2
2
 
3
+ ## 1.1.13-alpha.6
4
+
5
+ ### Patch Changes
6
+
7
+ - Fixed a prompt-injection risk by rejecting system-role messages embedded in `prompt` or `messages` for AI SDK v5 calls. ([#20558](https://github.com/mastra-ai/mastra/pull/20558))
8
+
9
+ - Updated dependencies [[`82201f7`](https://github.com/mastra-ai/mastra/commit/82201f75fae8e050a8de2df08b74875ee74c6b83), [`19ccefa`](https://github.com/mastra-ai/mastra/commit/19ccefa628dc971b4bfa2058a324a6ac9b846358), [`fb18da5`](https://github.com/mastra-ai/mastra/commit/fb18da56fc35689ae370621a8f10b5b0d8606e20), [`fb18da5`](https://github.com/mastra-ai/mastra/commit/fb18da56fc35689ae370621a8f10b5b0d8606e20), [`0a6598b`](https://github.com/mastra-ai/mastra/commit/0a6598bde80bde008986ad6616bed9632b9294cb), [`9e1dad8`](https://github.com/mastra-ai/mastra/commit/9e1dad8f7b1cab2bb7ade90e5b7561f24577b88a), [`2f43145`](https://github.com/mastra-ai/mastra/commit/2f4314504c03cbba280414ac81ba3197448ee6b0), [`34d34d8`](https://github.com/mastra-ai/mastra/commit/34d34d8c811df512fef4dd5459f79b7821be1866), [`34d34d8`](https://github.com/mastra-ai/mastra/commit/34d34d8c811df512fef4dd5459f79b7821be1866)]:
10
+ - @mastra/core@1.56.0-alpha.6
11
+ - @mastra/libsql@1.19.0-alpha.2
12
+ - @mastra/memory@1.25.0-alpha.2
13
+
14
+ ## 1.1.13-alpha.5
15
+
16
+ ### Patch Changes
17
+
18
+ - Updated dependencies [[`db4e6ff`](https://github.com/mastra-ai/mastra/commit/db4e6ff744503112eb64deeaf6c2b54bf26a54c7), [`6d19a65`](https://github.com/mastra-ai/mastra/commit/6d19a6517f5da3911023d446b7e2d5dad8adb1cb)]:
19
+ - @mastra/core@1.56.0-alpha.5
20
+
3
21
  ## 1.1.13-alpha.4
4
22
 
5
23
  ### Patch Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mastra/longmemeval",
3
- "version": "1.1.13-alpha.4",
3
+ "version": "1.1.13-alpha.6",
4
4
  "description": "LongMemEval benchmark implementation for Mastra Memory",
5
5
  "dependencies": {
6
6
  "@ai-sdk/google": "^2.0.62",
@@ -20,11 +20,11 @@
20
20
  "ora": "^8.2.0",
21
21
  "xxhash-wasm": "^1.1.0",
22
22
  "zod": "^3.25.76",
23
- "@mastra/core": "1.56.0-alpha.4",
24
- "@mastra/libsql": "1.19.0-alpha.1",
25
- "@mastra/fastembed": "1.2.0",
26
- "@mastra/memory": "1.25.0-alpha.1",
27
- "@mastra/rag": "2.4.2"
23
+ "@mastra/core": "1.56.0-alpha.6",
24
+ "@mastra/libsql": "1.19.0-alpha.2",
25
+ "@mastra/memory": "1.25.0-alpha.2",
26
+ "@mastra/rag": "2.4.2",
27
+ "@mastra/fastembed": "1.2.0"
28
28
  },
29
29
  "devDependencies": {
30
30
  "@types/node": "22.19.13",
package/src/commands/find-prohibited.ts CHANGED
@@ -27,6 +27,7 @@ async function testContent(content: string): Promise<{ blocked: boolean; error?:
27
27
  try {
28
28
  await generateText({
29
29
  model: google('gemini-2.5-flash'),
30
+ allowSystemInMessages: false,
30
31
  messages: [
31
32
  { role: 'user', content },
32
33
  { role: 'assistant', content: 'I understand.' },
package/src/commands/test-cleaned.ts CHANGED
@@ -19,6 +19,7 @@ async function testContent(content: string, label: string): Promise<boolean> {
19
19
  const model = google('gemini-2.5-flash');
20
20
  await generateText({
21
21
  model,
22
+ allowSystemInMessages: false,
22
23
  prompt: content.slice(0, 50000),
23
24
  providerOptions: {
24
25
  google: { safetySettings },
package/src/commands/test-incremental.ts CHANGED
@@ -19,6 +19,7 @@ async function testContent(content: string): Promise<boolean> {
19
19
  const model = google('gemini-2.5-flash');
20
20
  await generateText({
21
21
  model,
22
+ allowSystemInMessages: false,
22
23
  prompt: content,
23
24
  providerOptions: { google: { safetySettings } },
24
25
  maxOutputTokens: 10,
package/src/commands/test-messages.ts CHANGED
@@ -19,6 +19,7 @@ async function testContent(content: string): Promise<boolean> {
19
19
  const model = google('gemini-2.5-flash');
20
20
  await generateText({
21
21
  model,
22
+ allowSystemInMessages: false,
22
23
  prompt: content,
23
24
  providerOptions: { google: { safetySettings } },
24
25
  maxOutputTokens: 10,
package/src/commands/test-prohibited.ts CHANGED
@@ -32,6 +32,7 @@ async function testContent(content: string): Promise<{ blocked: boolean; error?:
32
32
  const model = google('gemini-2.5-flash');
33
33
  await generateText({
34
34
  model,
35
+ allowSystemInMessages: false,
35
36
  prompt: content.slice(0, 50000), // Limit to avoid token limits
36
37
  providerOptions: {
37
38
  google: { safetySettings },
package/src/commands/test-thread.ts CHANGED
@@ -21,6 +21,7 @@ async function testContent(content: string, label: string): Promise<boolean> {
21
21
  const model = google('gemini-2.5-flash');
22
22
  await generateText({
23
23
  model,
24
+ allowSystemInMessages: false,
24
25
  prompt: content,
25
26
  providerOptions: {
26
27
  google: { safetySettings },