memory-journal-mcp 4.4.0 → 4.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/DOCKER_README.md +1 -1
- package/Dockerfile +1 -1
- package/package.json +2 -1
- package/releases/v4.4.1.md +33 -0
- package/server.json +3 -3
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [4.4.1] - 2026-02-27
|
|
11
|
+
|
|
12
|
+
### Security
|
|
13
|
+
|
|
14
|
+
- **CVE-2026-27903 + CVE-2026-27904 (minimatch)** — Added npm override `minimatch@^10.2.3` to fix HIGH severity ReDoS and algorithmic complexity vulnerabilities (CVSS 7.5) that blocked Docker deploy
|
|
15
|
+
|
|
10
16
|
## [4.4.0] - 2026-02-27
|
|
11
17
|
|
|
12
18
|
### Added
|
package/DOCKER_README.md
CHANGED
|
@@ -466,7 +466,7 @@ Memory Journal is designed for extremely low overhead during AI task execution.
|
|
|
466
466
|
|
|
467
467
|
**Available Tags:**
|
|
468
468
|
|
|
469
|
-
- `4.4.
|
|
469
|
+
- `4.4.1` - Specific version (recommended for production)
|
|
470
470
|
- `4.4` - Latest patch in 4.4.x series
|
|
471
471
|
- `4` - Latest minor in 4.x series
|
|
472
472
|
- `latest` - Always the newest version
|
package/Dockerfile
CHANGED
|
@@ -110,6 +110,6 @@ CMD ["node", "dist/cli.js"]
|
|
|
110
110
|
# Labels for Docker Hub
|
|
111
111
|
LABEL maintainer="Adamic.tech"
|
|
112
112
|
LABEL description="Memory Journal MCP Server - Project context management for AI-assisted development"
|
|
113
|
-
LABEL version="4.4.
|
|
113
|
+
LABEL version="4.4.1"
|
|
114
114
|
LABEL org.opencontainers.image.source="https://github.com/neverinfamous/memory-journal-mcp"
|
|
115
115
|
LABEL io.modelcontextprotocol.server.name="io.github.neverinfamous/memory-journal-mcp"
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "memory-journal-mcp",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.1",
|
|
4
4
|
"description": "Project context management for AI-assisted development - Persistent knowledge graphs and intelligent context recall across fragmented AI threads",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -78,6 +78,7 @@
|
|
|
78
78
|
"axios": "^1.13.5",
|
|
79
79
|
"brace-expansion": "^2.0.2",
|
|
80
80
|
"glob": "^11.1.0",
|
|
81
|
+
"minimatch": "^10.2.3",
|
|
81
82
|
"tar": "^7.5.8",
|
|
82
83
|
"tmp": "^0.2.4"
|
|
83
84
|
}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
# v4.4.1 - CVE Remediation (minimatch)
|
|
2
|
+
|
|
3
|
+
Released: February 27, 2026
|
|
4
|
+
|
|
5
|
+
## Highlights
|
|
6
|
+
|
|
7
|
+
- **Security Patch** — Fixed 2 HIGH severity CVEs in minimatch that blocked Docker deployment
|
|
8
|
+
|
|
9
|
+
---
|
|
10
|
+
|
|
11
|
+
## Security
|
|
12
|
+
|
|
13
|
+
### CVE-2026-27903 (minimatch) — HIGH
|
|
14
|
+
|
|
15
|
+
Inefficient algorithmic complexity vulnerability in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). Added npm override `minimatch@^10.2.3`.
|
|
16
|
+
|
|
17
|
+
### CVE-2026-27904 (minimatch) — HIGH
|
|
18
|
+
|
|
19
|
+
Inefficient regular expression complexity (ReDoS) in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). Same fix as CVE-2026-27903.
|
|
20
|
+
|
|
21
|
+
---
|
|
22
|
+
|
|
23
|
+
## Upgrade
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
# npm
|
|
27
|
+
npm update -g memory-journal-mcp
|
|
28
|
+
|
|
29
|
+
# Docker
|
|
30
|
+
docker pull writenotenow/memory-journal-mcp:v4.4.1
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
**Full Changelog**: https://github.com/neverinfamous/memory-journal-mcp/wiki/CHANGELOG
|
package/server.json
CHANGED
|
@@ -3,12 +3,12 @@
|
|
|
3
3
|
"name": "io.github.neverinfamous/memory-journal-mcp",
|
|
4
4
|
"title": "Memory Journal MCP",
|
|
5
5
|
"description": "MCP server– Project memory system with GitHub-aware context, knowledge graphs, and CI/PR timelines",
|
|
6
|
-
"version": "4.4.
|
|
6
|
+
"version": "4.4.1",
|
|
7
7
|
"packages": [
|
|
8
8
|
{
|
|
9
9
|
"registryType": "oci",
|
|
10
|
-
"identifier": "docker.io/writenotenow/memory-journal-mcp:v4.4.
|
|
11
|
-
"version": "4.4.
|
|
10
|
+
"identifier": "docker.io/writenotenow/memory-journal-mcp:v4.4.1",
|
|
11
|
+
"version": "4.4.1",
|
|
12
12
|
"transport": {
|
|
13
13
|
"type": "stdio"
|
|
14
14
|
}
|