[dependabot]

Bumps mem0ai from 1.0.3 to 2.0.0b2.

Release notes

Sourced from mem0ai's releases.

Mem0 OpenClaw Plugin (v1.2.1)

Improvements:

• Search: The memory_search tool description no longer asks the agent to search proactively or to run several searches for multi-part questions. It now asks for a search before repeating investigation or when earlier decisions, fixes, commands, or results may help. Recall strategies (smart, always, manual) are unchanged (#7420)

Mem0 OpenClaw Plugin (v1.2.0)

Changes:

• Config: Added keyFingerprint to the config schema for install-count deduplication; installs are now counted once per key rather than on every activation (#7325)
• Telemetry: Events are no longer delivered twice, and the plugin_version field now reflects the plugin that produced the event (#7323, #7324, #7358)

Mem0 OpenClaw Plugin (v1.1.0)

Changed:

• Reuses shared conversation preparation, redaction, and telemetry while retaining OpenClaw's native memory backend, tools, CLI, and Platform/OSS modes.
• Continues to publish a self-contained ESM package under @mem0/openclaw-mem0; the plugin manifest and package version now agree.

Removed:

• Removed Dream consolidation: automatic scheduling and locking, openclaw mem0 dream, Dream configuration, the memory-dream skill, and Dream-state public artifacts. Triage, recall, and memory/entity artifacts remain available. Update configurations or integrations that use the removed Dream surface.

Fixes:

• openclaw mem0 status handles an unconfigured installation without crashing and directs users to setup.
• Removed OpenClaw's separate 2,000-character extraction cutoff. Selected user and assistant messages retain their full redacted text; recent-message selection, earlier summary selection, and noise filtering still apply.
• Telemetry removes sensitive properties recursively and uses the shared failure-safe delivery implementation.

#7203

Mem0 Strands Integration (v0.1.1)

New Features:

• Usage telemetry: Anonymous usage events (strands.store.init, strands.store.search, strands.store.add, strands.store.add_messages) ride the Mem0 SDK's existing PostHog client, unsampled, with no new dependency. Events carry only counts, durations, booleans, and coarse failure kinds: never queries, memory text, message content, entity ids, metadata, or API keys. Opt out with MEM0_TELEMETRY=false (#7110)

Mem0 Strands Integration (v0.1.0)

Initial release of mem0-strands, a native MemoryStore that plugs Mem0 into the Strands Agents MemoryManager (#7021)

New Features:

• Automatic recall and injection: Mem0MemoryStore.search() runs every turn through the MemoryManager, so relevant memories are searched and prepended to the prompt with no explicit tool call required.

• Server-side extraction: add_messages() renders raw conversation turns to text and hands them to Mem0's own extraction pipeline (infer=True), so enabling extraction skips an extra client-side model call to distill facts first.

• Verbatim writes: add() stores a single fact exactly as given (infer=False), the sink used by the add_memory tool or a client-side extractor.

• Entity scoping: Accepts user_id, agent_id, run_id, and app_id; at least one is required, and mixing the platform-only app_id with a self-hosted config raises at construction instead of failing on the first write.

• Hosted or self-hosted: Defaults to the hosted Mem0 Platform via api_key (or $MEM0_API_KEY), or pass a config dict for a self-hosted Mem0 OSS backend.

• Non-blocking construction: The underlying Mem0 client is built lazily on first use inside asyncio.to_thread, so API-key validation and OSS embedder/vector-store setup never block the event loop.

  Mem0MemoryStore is the automatic-recall store for the MemoryManager. For a model-called tool instead, use the mem0_memory tool from strands-agents-tools; both share the same Mem0 backend and namespace. See Strands Agents for setup.

Mem0 n8n Integration (v0.1.4)

Security:

• Dependencies: Add js-yaml pnpm overrides (<3.15.1 → >=3.15.1 <4.0.0, >=4.0.0 <4.3.1 → >=4.3.1 <5.0.0) to close a HIGH/CRITICAL severity advisory, as part of a wider dependency patch sweep across the pnpm workspaces (#7032)

Mem0 OpenClaw Plugin (v1.0.16)

Security:

• Dependencies: Tightened the undici pnpm override from <6.27.0 → >=6.27.0 <8.0.0 to <7.29.0 → >=7.29.0 <8.0.0, closing a newer CVE range the previous floor didn't cover, as part of a wider dependency patch sweep across the pnpm workspaces (#6847)

Mem0 n8n Integration (v0.1.3)

... (truncated)

Commits

• 50db9e4 chore(release): bump SDK versions to next beta (#4859)
• fb87349 fix(oss): v3 entity cleanup, filter fixes, and QA hardening (TS + Python) (#4...
• 8827553 fix: adopt new v3 memory endpoints in Python + TS clients (#4856)
• c8e20a9 fix(docs): resolve duplicate operationIds and expiration_date type in openapi...
• 93a51f4 test: update integration tests for v1.1 output_format (#4847)
• 86fe275 fix(ts): entity store isolation, backward compat, pgvector + redis init fixes...
• e6d6276 refactor: add entity ID and search param validation, rename textLemmatized fi...
• 9692726 fix(ts-oss): isolate entity store from memory store by default (#4829)
• d8d7766 fix(v3): migration crashes + entity linking on OSS (#4836)
• a5a6882 fix: prevent arbitrary code execution via pickle in FAISS vector store (#4833)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.