Memos - Package Updates

[Package Updates]

[2.0.0]

• Update memos to 0.28.0
• Full Changelog
• Breaking change: Existing SSO users must link their identity again - If you previously signed in through SSO, sign in once with your username and password after upgrading, then go to Account Settings to link your SSO identity. After the identity is linked, future SSO sign-ins will resolve to your existing Memos account.
• feat: auth: add SSO user identity linkage (#5883) (d688914)
• feat: memos: choose created or updated time for memos (#5894) (c268551)
• feat: redesign account and SSO management (#5886) (ee17998)
• fix: auth: harden authorization and username validation (#5890) (0fb83a7)
• fix: disable modal prop on DropdownMenu to prevent scroll disappearing (#5861) (d98f665)
• fix: fix legacy username auth flows (#5885) (30c0611)
• fix: markdown: split mixed task and bullet lists (e2c6084)
• fix: reduce list memo query overhead (#5880) (5063804)
• fix: web: preserve task checkbox state (#5867) (b5863d7)

[Package Updates]

[2.1.0]

• Update memos to 0.29.0
• Full Changelog
• about: add about page with bird sprites (411ba7b)
• add configurable --log-level flag (#5934) (f1e2a06)
• add dedicated shortcuts page (#5942) (1df6479)
• memo: add task list quick actions (#5983) (648b3bd)
• notification: add smtp email settings (cd4f28a)
• transcription: explicit STT settings with provider, model, prompt (#5926) (238f27d)
• editor: wrap selected text when pasting URL (e0bb3a2)
• httpgetter: prevent DNS rebinding in link metadata fetch (078488c)
• security: enforce attachment ownership on memo updates (35bf761)
• web: sync avatar changes immediately after profile update (#5903) (328396a)

[Package Updates]

[2.1.1]

• Update memos to 0.29.1
• Full Changelog
• markdown: keep task item content in one grid column (7c3bff4)
• support <meta name=description> in link previews (#6000) (e8d32e8)
• web: render video attachment posters on mobile (0e2a9a9)

[Package Updates]

[2.2.0]

• Update memos to 0.30.0
• Full Changelog
• Access control: Instances without --instance-url (or MEMOS_INSTANCE_URL) now run in private mode. Anonymous visitors are sent to sign-in, anonymous API access is limited to setup, authentication, and shared-memo routes, and RSS feeds are unavailable. Set the instance URL to retain the previous public behavior. (d1cef7a) (415a3ec)
• Shared memo API: GetMemoByShare and GET /api/v1/shares/{share_id} have been replaced by GetSharedMemo and GET /api/v1/shares/{share_token}/memo. API clients must update the RPC, request type, field name, and REST path. Share-token responses are limited to the shared memo and its attachments and no longer expose the surrounding parent, comments, or relation graph. (0d2cbd4) (415a3ec)
• Filters: now() has been replaced by the now timestamp variable, and time fields now use CEL timestamps. Update saved shortcuts to use expressions such as created_ts >= now - duration("24h") or timestamp(<epoch>) instead of comparing time fields with bare epoch values. (26f4b73)
• MCP: The MCP server is now a stateless, tools-only endpoint generated from the OpenAPI schema. The previous prompts, resources, tool-filtering headers and route aliases, and unprefixed tool names have been removed. Clients must switch to /mcp and the new service-prefixed tool names. Tool errors now use isError and text content rather than a non-standard structuredContent.error payload. (#6026) (03e34bd)
• Webhooks: Added Standard Webhooks HMAC-SHA256 signing secrets, webhook editing, and a signing-status indicator. Secrets are generated server-side, shown after creation, and can be revealed later from the edit dialog; malformed secrets now fail validation. (#6013) (#6027)
• Markdown and storage: Added GFM footnote rendering and navigation, plus an insecure_skip_tls_verify option for S3-compatible storage with self-signed certificates. (1020060) (#6039)
• Tags: Tags inside links are no longer parsed as memo tags, literal tags can be escaped with a backslash, and tag names support Unicode combining marks. (a50ce09) (#6051)
• API and security: Cross-origin API requests now work with bearer tokens while cookie authentication remains same-origin, and ListUsers returns consistent paginated results. (385fa22) (4bc3928)
• Container: Prevented the entrypoint from restarting indefinitely when MEMOS_UID=0. (#6061)
• Filters and tag settings: Expanded CEL shortcuts with string matching, regular expressions, collection predicates, timestamp accessors, set operations, and an untagged-memos example. Tag colors and content-blur rules are now per-user, with existing instance tag settings copied during migration. (f0e4a56) (b787bfa) (#6017)

[Package Updates]

[2.3.0]

• Update memos to 0.31.0
• Full Changelog
• Spaces: Organize memos in shared Spaces, invite people through their inbox, move memos between Spaces, and choose custom icons or emoji. Space-only visibility limits a memo's audience to active Space members, with the administrator access described below. (#6228, #6266, #6285, #6287)
• Calendar and Map: Browse memos by month, open a day to read or add notes for that date, and explore memos with location data on a dedicated map. (#6277, #6280, map page)
• Views and search: Save reusable filters as Views with custom icons. Filter by Space or location, find memos outside any Space, use expressions in Quick Find, and see search matches highlighted in memo content. (#6167, #6181, #6267, #6276, #6305, #6335)
• Export and import: Move your memos between instances from Settings Export & Import using Memos Export Format (ZIP). Exports include archived memos, comments you wrote, and attachment files. Older export files remain importable. This is a personal export; instance settings and other users' data are not included. (#6334, export format)
• Attachments: Configure multiple named storage backends, insert attachment images into memo content, upload files in smaller chunks, and see your attachment storage usage in account settings. (#6184, #6172, chunked uploads, #6326)
• Editor: Improved IME and Windows emoji input, restored native mobile text assistance, attached pasted files correctly, preserved timestamp edits, and expanded tag autocomplete to more editing contexts. (IME input, emoji input, #6248, pasted files, timestamp edits, #6327)
• Markdown: Improved tag recognition, stopped currency amounts from being interpreted as inline math, fixed numbered task-list toggles, and enabled telephone and SMS links. (#6132, #6216, #6346, #6341)
• Views and API clients: Existing Shortcuts are migrated to Views. Integrations using the old Shortcut API must move to the UserService View operations under /api/v1/users/{user}/views. The reaction API also removes contentId; reactions remain scoped to their memo. (#6167, View operations, #6221)
• Account email: Email remains optional. Addresses are trimmed, lowercased, and unique per instance. Upgrades clear invalid addresses and keep a duplicate address only on the oldest account; affected usernames are logged. (#6314)
• RSS: RSS feed support has been removed. Existing feed URLs no longer provide feeds. (#6243)

[Package Updates]

[2.3.1]

• Update base | final to 6.0.1
• security: fix eMudhra cert compromise

[Package Updates]

[2.3.2]

• Update memos | stage to 26.11.0
• Full Changelog