Memos - Package Updates

[Package Updates]

[2.0.0]

• Update memos to 0.28.0
• Full Changelog
• Breaking change: Existing SSO users must link their identity again - If you previously signed in through SSO, sign in once with your username and password after upgrading, then go to Account Settings to link your SSO identity. After the identity is linked, future SSO sign-ins will resolve to your existing Memos account.
• feat: auth: add SSO user identity linkage (#5883) (d688914)
• feat: memos: choose created or updated time for memos (#5894) (c268551)
• feat: redesign account and SSO management (#5886) (ee17998)
• fix: auth: harden authorization and username validation (#5890) (0fb83a7)
• fix: disable modal prop on DropdownMenu to prevent scroll disappearing (#5861) (d98f665)
• fix: fix legacy username auth flows (#5885) (30c0611)
• fix: markdown: split mixed task and bullet lists (e2c6084)
• fix: reduce list memo query overhead (#5880) (5063804)
• fix: web: preserve task checkbox state (#5867) (b5863d7)

[Package Updates]

[2.1.0]

• Update memos to 0.29.0
• Full Changelog
• about: add about page with bird sprites (411ba7b)
• add configurable --log-level flag (#5934) (f1e2a06)
• add dedicated shortcuts page (#5942) (1df6479)
• memo: add task list quick actions (#5983) (648b3bd)
• notification: add smtp email settings (cd4f28a)
• transcription: explicit STT settings with provider, model, prompt (#5926) (238f27d)
• editor: wrap selected text when pasting URL (e0bb3a2)
• httpgetter: prevent DNS rebinding in link metadata fetch (078488c)
• security: enforce attachment ownership on memo updates (35bf761)
• web: sync avatar changes immediately after profile update (#5903) (328396a)

[Package Updates]

[2.1.1]

• Update memos to 0.29.1
• Full Changelog
• markdown: keep task item content in one grid column (7c3bff4)
• support <meta name=description> in link previews (#6000) (e8d32e8)
• web: render video attachment posters on mobile (0e2a9a9)

[Package Updates]

[2.2.0]

• Update memos to 0.30.0
• Full Changelog
• Access control: Instances without --instance-url (or MEMOS_INSTANCE_URL) now run in private mode. Anonymous visitors are sent to sign-in, anonymous API access is limited to setup, authentication, and shared-memo routes, and RSS feeds are unavailable. Set the instance URL to retain the previous public behavior. (d1cef7a) (415a3ec)
• Shared memo API: GetMemoByShare and GET /api/v1/shares/{share_id} have been replaced by GetSharedMemo and GET /api/v1/shares/{share_token}/memo. API clients must update the RPC, request type, field name, and REST path. Share-token responses are limited to the shared memo and its attachments and no longer expose the surrounding parent, comments, or relation graph. (0d2cbd4) (415a3ec)
• Filters: now() has been replaced by the now timestamp variable, and time fields now use CEL timestamps. Update saved shortcuts to use expressions such as created_ts >= now - duration("24h") or timestamp(<epoch>) instead of comparing time fields with bare epoch values. (26f4b73)
• MCP: The MCP server is now a stateless, tools-only endpoint generated from the OpenAPI schema. The previous prompts, resources, tool-filtering headers and route aliases, and unprefixed tool names have been removed. Clients must switch to /mcp and the new service-prefixed tool names. Tool errors now use isError and text content rather than a non-standard structuredContent.error payload. (#6026) (03e34bd)
• Webhooks: Added Standard Webhooks HMAC-SHA256 signing secrets, webhook editing, and a signing-status indicator. Secrets are generated server-side, shown after creation, and can be revealed later from the edit dialog; malformed secrets now fail validation. (#6013) (#6027)
• Markdown and storage: Added GFM footnote rendering and navigation, plus an insecure_skip_tls_verify option for S3-compatible storage with self-signed certificates. (1020060) (#6039)
• Tags: Tags inside links are no longer parsed as memo tags, literal tags can be escaped with a backslash, and tag names support Unicode combining marks. (a50ce09) (#6051)
• API and security: Cross-origin API requests now work with bearer tokens while cookie authentication remains same-origin, and ListUsers returns consistent paginated results. (385fa22) (4bc3928)
• Container: Prevented the entrypoint from restarting indefinitely when MEMOS_UID=0. (#6061)
• Filters and tag settings: Expanded CEL shortcuts with string matching, regular expressions, collection predicates, timestamp accessors, set operations, and an untagged-memos example. Tag colors and content-blur rules are now per-user, with existing instance tag settings copied during migration. (f0e4a56) (b787bfa) (#6017)