chore(deps): bump the pip group across 1 directory with 2 updates

[dependabot]

Bumps the pip group with 2 updates in the /refs/nexent directory: mem0ai and pypdf.

Updates mem0ai from 1.0.11 to 2.0.0b2

Release notes

Sourced from mem0ai's releases.

Mem0 OpenClaw Plugin (v1.0.15)

Improvements:

• Onboarding suggestions: The example commands shown by openclaw mem0 config show now suggest gpt-5-mini instead of gpt-4o (#6704)

Security:

• Dependencies: Patched high and medium severity dependency vulnerabilities via pnpm.overrides (protobufjs, axios, postcss, mongoose) (#6639)

Mem0 OpenClaw Plugin (v1.0.14)

Improvements:

• Sharper tool descriptions: Every memory tool (memory_search, memory_get, memory_list, memory_add, memory_update, memory_delete) now states what it does and when to use it. memory_search nudges proactive, multi-hop retrieval; memory_add nudges proactive saves; and the delete tools carry explicit irreversible-action warnings.

Mem0 OpenClaw Plugin (v1.0.13)

Fixes:

• Custom categories payload: customCategories (a Record<string, string> map) is now converted via the new customCategoryMapToList() helper into the Array<Record<string, string>> shape the Mem0 SDK expects on add calls — previously the raw object was passed as custom_categories and silently ignored (#5345)
• Skip runtime setup during metadata registration: register() now detects registrationMode === "cli-metadata", registers only the CLI commands, and returns early — avoiding backend initialization, service/tool registration, and hook installation during OpenClaw's metadata-only registration pass (#5383)

Security:

• Bumped mem0ai from 3.0.3 to 3.0.7 (latest Node SDK) — includes the transitive axios CVE remediation shipped in 3.0.6 (#5460)
• Added pnpm override uuid@<11.1.1 → >=11.1.1 to resolve an open MEDIUM Dependabot alert (#5489)

Improvements:

• Repo consolidation: Plugin moved from repo-root openclaw/ to integrations/openclaw/; package.json repository.directory updated to match so npm provenance links to the correct subdirectory (#5491)

Tests:

• Added customCategoryMapToList unit tests and a PlatformProvider test asserting custom_categories is passed to the Mem0 SDK as a list (#5345)
• Added a regression test asserting cli-metadata registration registers only CLI commands and triggers no runtime side effects (#5383)

Mem0 OpenClaw Plugin (v1.0.12)

Security:

• Dependencies: Pinned transitive dependencies via pnpm overrides to remediate high-severity CVEs: protobufjs → ^7.5.5, vite → ^8.0.5, langsmith → ^0.6.0 (CVE-2026-45134), picomatch → ^2.3.2 (CVE-2026-33671), @qdrant/js-client-rest → ^1.18.0

Commits

• 50db9e4 chore(release): bump SDK versions to next beta (#4859)
• fb87349 fix(oss): v3 entity cleanup, filter fixes, and QA hardening (TS + Python) (#4...
• 8827553 fix: adopt new v3 memory endpoints in Python + TS clients (#4856)
• c8e20a9 fix(docs): resolve duplicate operationIds and expiration_date type in openapi...
• 93a51f4 test: update integration tests for v1.1 output_format (#4847)
• 86fe275 fix(ts): entity store isolation, backward compat, pgvector + redis init fixes...
• e6d6276 refactor: add entity ID and search param validation, rename textLemmatized fi...
• 9692726 fix(ts-oss): isolate entity store from memory store by default (#4829)
• d8d7766 fix(v3): migration crashes + entity linking on OSS (#4836)
• a5a6882 fix: prevent arbitrary code execution via pickle in FAISS vector store (#4833)
• Additional commits viewable in compare view

Updates pypdf from 6.14.2 to 6.15.0

Release notes

Sourced from pypdf's releases.

Version 6.15.0, 2026-08-06

What's new

Security (SEC)

• Improve performance of read_until_whitespace (#3947) by @​stefan6419846
• Limit CID width range and width count when loading fonts (#3946) by @​stefan6419846
• Limit token length for ToUnicode entries (#3944) by @​stefan6419846

Deprecations (DEP)

• Deprecate previously missed inline_images setter as well (#3897) by @​stefan6419846

New Features (ENH)

• Add ActualText tag when we produce RTL appearance stream (#3901) by @​PJBrs
• Allow keeping original PDF header in non-incremental clone mode (#3918) by @​pctablet505
• AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @​PJBrs
• Add actions base class (#3552) by @​j-t-1

Bug Fixes (BUG)

• Expand low-bit samples for images without a filter (#3938) by @​RavSinghChandan
• Decode low-bit DeviceRGB images as RGB instead of palette (#3929) by @​RavSinghChandan
• Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937) by @​stefan6419846

Documentation (DOC)

• Image and attachment filenames are unsanitized (#3942) by @​stefan6419846

Maintenance (MAINT)

• Update charset mappings (#3935) by @​stefan6419846

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.15.0, 2026-08-06

Security (SEC)

• Improve performance of read_until_whitespace (#3947)
• Limit CID width range and width count when loading fonts (#3946)
• Limit token length for ToUnicode entries (#3944)

Deprecations (DEP)

• Deprecate previously missed inline_images setter as well (#3897)

New Features (ENH)

• Add ActualText tag when we produce RTL appearance stream (#3901)
• Allow keeping original PDF header in non-incremental clone mode (#3918)
• AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831)
• Add actions base class (#3552)

Bug Fixes (BUG)

• Expand low-bit samples for images without a filter (#3938)
• Decode low-bit DeviceRGB images as RGB instead of palette (#3929)
• Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937)

Documentation (DOC)

• Image and attachment filenames are unsanitized (#3942)

Maintenance (MAINT)

• Update charset mappings (#3935)

Full Changelog

Commits

• 7f226a2 REL: 6.15.0
• 4959848 SEC: Improve performance of read_until_whitespace (#3947)
• 51cb6ac SEC: Limit CID width range and width count when loading fonts (#3946)
• afba808 SEC: Limit token length for ToUnicode entries (#3944)
• aa2f37d DOC: Image and attachment filenames are unsanitized (#3942)
• 760ba28 DOC: Further clarify security policy
• 55bd85c BUG: Expand low-bit samples for images without a filter (#3938)
• 4807cb4 ROB: Tolerate malformed /FontBBox when building font descriptors (#3895)
• ce9320b DEV: Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#3941)
• 8b6f6fd ENH: Add ActualText tag when we produce RTL appearance stream (#3901)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.