memos version history

- Fixed task list layout for multi-line items - Improved link preview descriptions support - Added mobile video poster thumbnails - First contribution from @goingforstudying-ctrl

> This release adds richer link previews, notification email settings, shortcut and memo workflow improvements, and a set of security, media, and editor fixes. It also adds new instance statistics APIs and performance improvements for the initial screen. ## New Features ### Link Previews and Metadata - **Link metadata APIs** - Memos now includes endpoints for fetching and batching metadata for links attached to memos. - **Rendered link cards** - The web app can render metadata cards for shared links, making memo references easier to scan. - **DNS rebinding protection** - Link metadata fetching now rejects DNS rebinding attempts. ### Notification and Transcription Settings - **SMTP email settings** - Instance notification settings now include SMTP email configuration. - **Email test endpoint** - Admins can test notification email settings through the instance API. - **Explicit speech-to-text settings** - Transcription settings now expose provider, model, and prompt configuration. ### Memo and Workspace Improvements - **Task list quick actions** - Memos with task lists now support faster task interactions. - **Calendar-aware memo creation** - Creating a me

## [0.28.0](https://github.com/usememos/memos/compare/v0.27.1...v0.28.0) (2026-04-27) > This release improves SSO account handling by linking external provider identities to local Memos users instead of treating provider identifiers as local usernames. It also refreshes account and SSO management, adds memo time display controls, and includes several authentication and editor fixes. ## Breaking Change - **Existing SSO users must link their identity again** - If you previously signed in through SSO, sign in once with your username and password after upgrading, then go to Account Settings to link your SSO identity. After the identity is linked, future SSO sign-ins will resolve to your existing Memos account. ### Features * **auth:** add SSO user identity linkage ([#5883](https://github.com/usememos/memos/issues/5883)) ([d688914](https://github.com/usememos/memos/commit/d688914b2864791eeadbf21c882608632875f17c)) * **memos:** choose created or updated time for memos ([#5894](https://github.com/usememos/memos/issues/5894)) ([c268551](https://github.com/usememos/memos/commit/c268551a16929a2cbea6891951feff91926bba59)) * redesign account and SSO management ([#5886](htt

## [0.27.1](https://github.com/usememos/memos/compare/v0.27.0...v0.27.1) (2026-04-19) ### Bug Fixes * mixed-case user resource names ([#5853](https://github.com/usememos/memos/issues/5853)) ([01be01f](https://github.com/usememos/memos/commit/01be01f4b7676af41bdd1758b1e9b096aa922546)) * **release:** inject build version into artifacts ([f8a304b](https://github.com/usememos/memos/commit/f8a304bae33086320b39095d631288156eec4249)) * user resource names can be uuidv4 from idp sub claim ([#5856](https://github.com/usememos/memos/issues/5856)) ([bbded58](https://github.com/usememos/memos/commit/bbded584ce85a856d863485768e08b53adec7244))

## [0.27.0](https://github.com/usememos/memos/compare/v0.26.2...v0.27.0) (2026-04-18) ### Features * add --allow-private-webhooks flag to bypass SSRF protection ([#5694](https://github.com/usememos/memos/issues/5694)) ([cd5816c](https://github.com/usememos/memos/commit/cd5816c428931f56561f7d48b649a33858812539)) * add blur_content attribute to tag metadata settings ([#5767](https://github.com/usememos/memos/issues/5767)) ([45b2153](https://github.com/usememos/memos/commit/45b21530d9ebbc730e77bcbcf407f4c295b52e93)) * add Gemini transcription provider ([#5830](https://github.com/usememos/memos/issues/5830)) ([d87539a](https://github.com/usememos/memos/commit/d87539a1e1261590ab355220e33fa0ae00bd9431)) * add GitHub release installer and release workflow ([1ed542c](https://github.com/usememos/memos/commit/1ed542c21db421e9aa0cc47417a92c6bd103e257)) * add live refresh via Server-Sent Events (SSE) with visual indicator ([#5638](https://github.com/usememos/memos/issues/5638)) ([ea0892a](https://github.com/usememos/memos/commit/ea0892a8b26d8806a093e3a942562dfc22794f68)) * add MCP server with PAT authentication ([47d9414](https://github.com/usememos/memos/commit/47d9414702dc18966a

> [!IMPORTANT] > This release candidate includes changes to the database and API. Please back up your data before upgrading. ## What's Changed * Memo mentions `@username` are now supported. * Voice recording is now supported. * Live Photo and Motion Photo attachments are supported. ## New Contributors * @onwp made their first contribution in https://github.com/usememos/memos/pull/5802 **Full Changelog**: https://github.com/usememos/memos/compare/v0.27.0-rc.1...v0.27.0-rc.2

> [!IMPORTANT] > This release candidate includes changes to the database and API. Please back up your data before upgrading. ## What's Changed - Embedded MCP server for AI clients. Memos now exposes an in-process MCP endpoint at `/mcp` using Streamable HTTP. It accepts PATs and exposes memo CRUD, comments, attachments, relations, reactions, tag listing, prompts, and memo resources for MCP-compatible clients. - Live updates via Server-Sent Events. The web app now connects to `/api/v1/sse`, shows connection status in the user menu, and refreshes active memo views when memo, comment, and reaction events arrive. Follow-up fixes ensure comment creation no longer double-broadcasts and that attachment and relation changes emit `memo.updated`. - Share links for memos, including protected and private use cases. Users can create and revoke memo share links from the memo detail sidebar, optionally with expiration. Shared memo access is handled through the memo detail route's share-token mode, and direct attachments on the shared memo can be fetched with that share token. Invalid, expired, or archived shares resolve as not found. - Tag metadata became substantially mor

## What's Changed - Fix spurious logout on page reload with expired access token - Fix explore page showing private tags and improve stats hook - Fix calendar navigation to use current page path (#5605) - Fix default memo visibility not being correctly applied (#5623) - Fix delete memo errors — only run post-delete actions on success - Fix infinite view transition loop by memoizing `useNavigateTo` - Fix task list item index scoping to memo content container - Fix cross-tab session loss by persisting auth token in localStorage - Fix spurious `GetCurrentUser` call on init when no token is stored - Fix SSRF vulnerability in webhook dispatcher (security) - Fix MemoEditor layout and timestamp popover styling - Fix attachment/memo deletion when local file is missing - Fix MonthNavigator month label not reacting to language changes - Fix truncation of memo batch attachments (#5654) - Fix comment reactions and deletion not invalidating comments query (#5641) - Fix calendar year picker to allow navigation back to 1970 - Fix redirect to auth page instead of explore on session expiry - Fix PAT handling in PostgreSQL — handle missing data gracefully, add tests (#5605) -

## Bug Fixes * Avoid inbox crashes by gracefully handling deleted memos in the activity service. ([984d9b46](https://github.com/usememos/memos/commit/984d9b46)) * Correctly parse environment variables that contain underscores. ([a69056a1](https://github.com/usememos/memos/commit/a69056a1)) * Return gRPC-style errors consistently instead of Echo HTTP errors. ([d9dc5be2](https://github.com/usememos/memos/commit/d9dc5be2)) * Fix video attachment handling. ([c4176b4e](https://github.com/usememos/memos/commit/c4176b4e)) * Prevent 401 errors on window focus when an access token expires. ([81ef53b3](https://github.com/usememos/memos/commit/81ef53b3)) * Ensure the shortcut edit button opens the edit dialog (not create). ([e7605d90](https://github.com/usememos/memos/commit/e7605d90)) * Block `Ctrl+Enter` from saving while the editor is still loading content (#5581). ([6bb383a4](https://github.com/usememos/memos/commit/6bb383a4)) * Fix nested task list rendering and checkbox interactions (#5575). ([b4fea8c6](https://github.com/usememos/memos/commit/b4fea8c6)) * Make OAuth PKCE optional during sign-in (#5570). ([cf0a285e](https://github.com/usememos/memos/commit/cf0a285e)) * Preve

## What's Changed ### 🚀 Major Features - **Refresh Token Rotation with Sliding Window Sessions** - Enhanced authentication security by implementing refresh token rotation and sliding window session expiration for better session management - **Streaming for Video/Audio Files** - Fixed memory exhaustion issues by implementing streaming for media files instead of loading them entirely into memory - **EXIF Metadata Stripping for Image Uploads** - Privacy enhancement that automatically strips EXIF metadata (location, camera info, etc.) from uploaded images - **Role Refactor: HOST → ADMIN** - Migrated the HOST role to ADMIN for clearer terminology and permission naming - **React Query Migration** ([#5379](https://github.com/usememos/memos/pull/5379)) - Major frontend state management refactor, replacing custom state management with React Query v5 for improved caching, data synchronization, and developer experience - **Memo Map in User Profile** - Implemented map view in user profiles to visualize memo locations geographically with Google Maps integration - **HDR Image and Video Support** - Added support for HDR (High Dynamic Range) images and videos - **Midnig