memory-journal-mcp 3.1.3 → 3.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/DOCKER_README.md +3 -3
  2. package/Dockerfile +4 -2
  3. package/README.md +2 -2
  4. package/VERSION +1 -1
  5. package/dist/cli.js +1 -1
  6. package/dist/server/McpServer.js +1 -1
  7. package/package.json +1 -1
  8. package/releases/v3.1.4.md +29 -0
  9. package/server.json +3 -3
  10. package/src/cli.ts +1 -1
  11. package/src/server/McpServer.ts +1 -1
package/DOCKER_README.md CHANGED
@@ -1,11 +1,11 @@
1
1
  # Memory Journal MCP Server
2
2
 
3
- Last Updated January 11, 2026 - v3.1.3
3
+ Last Updated January 11, 2026 - v3.1.4
4
4
 
5
5
  [![GitHub](https://img.shields.io/badge/GitHub-neverinfamous/memory--journal--mcp-blue?logo=github)](https://github.com/neverinfamous/memory-journal-mcp)
6
6
  [![Docker Pulls](https://img.shields.io/docker/pulls/writenotenow/memory-journal-mcp)](https://hub.docker.com/r/writenotenow/memory-journal-mcp)
7
7
  [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
8
- ![Version](https://img.shields.io/badge/version-v3.1.3-green)
8
+ ![Version](https://img.shields.io/badge/version-v3.1.4-green)
9
9
  ![Status](https://img.shields.io/badge/status-Production%2FStable-brightgreen)
10
10
  [![npm](https://img.shields.io/npm/v/memory-journal-mcp)](https://www.npmjs.com/package/memory-journal-mcp)
11
11
  [![Security](https://img.shields.io/badge/Security-Enhanced-green.svg)](https://github.com/neverinfamous/memory-journal-mcp/blob/main/SECURITY.md)
@@ -342,7 +342,7 @@ docker run -i --rm \
342
342
  - 📋 **SBOM Available** - Complete software bill of materials
343
343
 
344
344
  **Available Tags:**
345
- - `3.1.3` - Specific version (recommended for production)
345
+ - `3.1.4` - Specific version (recommended for production)
346
346
  - `3.0` - Latest patch in 3.0.x series
347
347
  - `3` - Latest minor in 3.x series
348
348
  - `latest` - Always the newest version
package/Dockerfile CHANGED
@@ -41,9 +41,11 @@ WORKDIR /app
41
41
 
42
42
  # Install runtime dependencies with security fixes
43
43
  # Use Alpine edge for curl with CVE fixes
44
+ # Upgrade npm globally to fix CVE-2025-64756 (glob) and CVE-2025-64118 (tar)
44
45
  RUN apk add --no-cache git ca-certificates && \
45
46
  apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main curl && \
46
- apk upgrade --no-cache
47
+ apk upgrade --no-cache && \
48
+ npm install -g npm@latest
47
49
 
48
50
  # Copy built artifacts and production dependencies
49
51
  COPY --from=builder /app/dist ./dist
@@ -76,6 +78,6 @@ CMD ["node", "dist/cli.js"]
76
78
  # Labels for Docker Hub
77
79
  LABEL maintainer="Adamic.tech"
78
80
  LABEL description="Memory Journal MCP Server - Project context management for AI-assisted development"
79
- LABEL version="3.1.3"
81
+ LABEL version="3.1.4"
80
82
  LABEL org.opencontainers.image.source="https://github.com/neverinfamous/memory-journal-mcp"
81
83
  LABEL io.modelcontextprotocol.server.name="io.github.neverinfamous/memory-journal-mcp"
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Memory Journal MCP Server
2
2
 
3
- Last Updated January 11, 2026 - v3.1.3
3
+ Last Updated January 11, 2026 - v3.1.4
4
4
 
5
5
  <!-- mcp-name: io.github.neverinfamous/memory-journal-mcp -->
6
6
 
@@ -8,7 +8,7 @@ Last Updated January 11, 2026 - v3.1.3
8
8
  [![npm](https://img.shields.io/npm/v/memory-journal-mcp)](https://www.npmjs.com/package/memory-journal-mcp)
9
9
  [![Docker Pulls](https://img.shields.io/docker/pulls/writenotenow/memory-journal-mcp)](https://hub.docker.com/r/writenotenow/memory-journal-mcp)
10
10
  [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
11
- ![Version](https://img.shields.io/badge/version-v3.1.3-green)
11
+ ![Version](https://img.shields.io/badge/version-v3.1.4-green)
12
12
  ![Status](https://img.shields.io/badge/status-Production%2FStable-brightgreen)
13
13
  [![MCP Registry](https://img.shields.io/badge/MCP_Registry-Published-green)](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.neverinfamous/memory-journal-mcp)
14
14
  [![Security](https://img.shields.io/badge/Security-Enhanced-green.svg)](SECURITY.md)
package/VERSION CHANGED
@@ -1 +1 @@
1
- 3.1.3
1
+ 3.1.4
package/dist/cli.js CHANGED
@@ -8,7 +8,7 @@ const program = new Command();
8
8
  program
9
9
  .name('memory-journal-mcp')
10
10
  .description('Project context management for AI-assisted development')
11
- .version('3.1.3')
11
+ .version('3.1.4')
12
12
  .option('--transport <type>', 'Transport type: stdio or http', 'stdio')
13
13
  .option('--port <number>', 'HTTP port (for http transport)', '3000')
14
14
  .option('--db <path>', 'Database path', './memory_journal.db')
package/dist/server/McpServer.js CHANGED
@@ -62,7 +62,7 @@ export async function createServer(options) {
62
62
  // Create MCP server with capabilities and instructions
63
63
  const server = new McpServer({
64
64
  name: 'memory-journal-mcp',
65
- version: '3.1.3',
65
+ version: '3.1.4',
66
66
  }, {
67
67
  capabilities: {
68
68
  logging: {}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "memory-journal-mcp",
3
- "version": "3.1.3",
3
+ "version": "3.1.4",
4
4
  "description": "Project context management for AI-assisted development - Persistent knowledge graphs and intelligent context recall across fragmented AI threads",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
package/releases/v3.1.4.md ADDED
@@ -0,0 +1,29 @@
1
+ # v3.1.4 - npm Global Upgrade in Production Stage
2
+
3
+ **Release Date:** January 11, 2026
4
+
5
+ ## Fixed
6
+
7
+ ### Docker Scout CVE-2025-64756 and CVE-2025-64118
8
+
9
+ The v3.1.3 release added `npm install -g npm@latest` to the **builder stage** only, but the production stage uses a fresh `node:24-alpine` base image with its own bundled npm.
10
+
11
+ **Fix:** Added `npm install -g npm@latest` to the **production stage** as well.
12
+
13
+ This ensures the final Docker image has the latest npm with fixed versions of:
14
+ - **glob** (fixes CVE-2025-64756, HIGH)
15
+ - **tar** (fixes CVE-2025-64118, MEDIUM)
16
+
17
+ ---
18
+
19
+ ## Installation
20
+
21
+ **npm:**
22
+ ```bash
23
+ npm install -g memory-journal-mcp@3.1.4
24
+ ```
25
+
26
+ **Docker:**
27
+ ```bash
28
+ docker pull writenotenow/memory-journal-mcp:3.1.4
29
+ ```
package/server.json CHANGED
@@ -3,12 +3,12 @@
3
3
  "name": "io.github.neverinfamous/memory-journal-mcp",
4
4
  "title": "Memory Journal MCP",
5
5
  "description": "MCP server– Project memory system with GitHub-aware context, knowledge graphs, and CI/PR timelines",
6
- "version": "3.1.3",
6
+ "version": "3.1.4",
7
7
  "packages": [
8
8
  {
9
9
  "registryType": "oci",
10
- "identifier": "docker.io/writenotenow/memory-journal-mcp:v3.1.3",
11
- "version": "3.1.3",
10
+ "identifier": "docker.io/writenotenow/memory-journal-mcp:v3.1.4",
11
+ "version": "3.1.4",
12
12
  "transport": {
13
13
  "type": "stdio"
14
14
  }
package/src/cli.ts CHANGED
@@ -11,7 +11,7 @@ const program = new Command();
11
11
  program
12
12
  .name('memory-journal-mcp')
13
13
  .description('Project context management for AI-assisted development')
14
- .version('3.1.3')
14
+ .version('3.1.4')
15
15
  .option('--transport <type>', 'Transport type: stdio or http', 'stdio')
16
16
  .option('--port <number>', 'HTTP port (for http transport)', '3000')
17
17
  .option('--db <path>', 'Database path', './memory_journal.db')
package/src/server/McpServer.ts CHANGED
@@ -89,7 +89,7 @@ export async function createServer(options: ServerOptions): Promise<void> {
89
89
  const server = new McpServer(
90
90
  {
91
91
  name: 'memory-journal-mcp',
92
- version: '3.1.3',
92
+ version: '3.1.4',
93
93
  },
94
94
  {
95
95
  capabilities: {