chore: release v10.36.6

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: doobidoo

CHANGELOG.md

@@ -10,6 +10,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
+## [10.36.6] - 2026-04-14
+
+### Security
+
+- **[#690] Bumped cryptography to 46.0.7**: Resolves CVE-2026-39892 (buffer overflow in non-contiguous buffer handling). (PR #690)
+
 ## [10.36.5] - 2026-04-14
 
 ### Fixed

CLAUDE.md

@@ -45,7 +45,7 @@ Before merging or releasing:
 
 MCP Memory Service is a semantic memory layer for AI applications, accessible via REST API and MCP transport. It provides persistent storage for 14+ AI clients including Claude Desktop, OpenCode, LangGraph, CrewAI, and any HTTP client. It uses vector embeddings for semantic search, supports multiple storage backends (SQLite-vec, Cloudflare, Hybrid), and includes advanced features like memory consolidation, quality scoring, and OAuth 2.1 team collaboration.
 
-**Current Version:** v10.36.5 - fix: Cloudflare Vectorize API v1→v2 + test script fixes (PR #689, @mychaelgo) — 1,537 tests — see [CHANGELOG.md](CHANGELOG.md) for details
+**Current Version:** v10.36.6 - security: bump cryptography to 46.0.7 to fix CVE-2026-39892 (PR #690) — 1,537 tests — see [CHANGELOG.md](CHANGELOG.md) for details
 
 > **🎯 v10.0.0 Milestone**: This major release represents a complete API consolidation - 34 tools unified into 12 with enhanced capabilities. All deprecated tools continue working with warnings until v11.0. See `docs/MIGRATION.md` for migration guide.
 

README.md

@@ -434,18 +434,18 @@ Export memories from mcp-memory-service → Import to shodh-cloudflare → Sync
 ---
 
 
-## Latest Release: **v10.36.5** (April 14, 2026)
+## Latest Release: **v10.36.6** (April 14, 2026)
 
-**fix: Cloudflare Vectorize API v1 to v2 + test script fixes**
+**security: Bump cryptography to 46.0.7 (CVE-2026-39892)**
 
 **What's Fixed:**
-- **Cloudflare Vectorize API v1 to v2**: Fixed error 1010 "incorrect_api_version" during Cloudflare resource setup by updating `setup_cloudflare_resources.py` to use the v2 API endpoint. (PR #689, @mychaelgo)
-- **Test script fixes**: Added required `content_hash` arg to `Memory()` and corrected `sys.path` in `test_cloudflare_backend.py`. (PR #689, @mychaelgo)
+- **CVE-2026-39892**: Bumped `cryptography` to 46.0.7 to fix a buffer overflow in non-contiguous buffer handling. (PR #690)
 - **1,537 tests** passing.
 
 ---
 
 **Previous Releases**:
+- **v10.36.5** - fix: Cloudflare Vectorize API v1 to v2 + test script fixes — fixed error 1010 "incorrect_api_version", content_hash arg, sys.path correction (PR #689, @mychaelgo, 1,537 tests)
 - **v10.36.4** - fix(windows): hotfix for Get-McpApiKey returning first char instead of full API key — PowerShell array-enumeration trap fixed (PR #687, 1,537 tests)
 - **v10.36.3** - fix(dashboard): restore version badge after v10.21.0 security hardening — Settings modal version row fixed, `manage_service.ps1 status` shows real Version/Backend (PR #685, 1,537 tests)
 - **v10.36.2** - fix(windows): env-aware management scripts + reliable stdout logging — hardcoded URLs eliminated, Python stdout reliably captured, log rotation per restart (PR #682, 1,537 tests)

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "mcp-memory-service"
-version = "10.36.5"
+version = "10.36.6"
 description = "Semantic memory layer for AI applications. REST API + MCP transport + knowledge graph + autonomous consolidation. Works with 14+ AI clients. Self-host, zero cloud cost."
 readme = "README.md"
 requires-python = ">=3.10"

src/mcp_memory_service/_version.py

@@ -1,3 +1,3 @@
 """Version information for MCP Memory Service."""
 
-__version__ = "10.36.5"
+__version__ = "10.36.6"