# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 73 → 47 (-25.2)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 81 → 61 (-19.7)
- Architecture 92 → 92 (+0.0)
- Maturity 67 → 43 (-24.6)
- Readiness 73 → 76 (+3.3)
- Security 75 → 34 (-40.6)
- Performance 100 → 100 (+0.0)

## Resolved (25)

- Critical CVE: [GHSA redacted] (mcp_server/uv.lock)
- Critical CVE: [GHSA redacted] (mcp_server/uv.lock)
- Documentation: no contributor guidance (README.md)
- Documentation: no project overview (README.md)
- Duplicated block (13 lines × 3) (graphiti_core/search/search_utils.py)
- Duplicated block (15–17 lines × 2) (graphiti_core/utils/maintenance/combined_extraction.py)
- Duplicated block (18 lines × 3) (graphiti_core/driver/neptune/operations/search_ops.py)
- Duplicated block (20–22 lines × 2) (graphiti_core/utils/maintenance/combined_extraction.py)
- Duplicated block (24–26 lines × 2) (graphiti_core/utils/maintenance/edge_operations.py)
- Duplicated block (34–36 lines × 2) (graphiti_core/search/search_utils.py)
- Duplicated block (5 lines × 3) (graphiti_core/search/search_utils.py)
- Duplicated block (9–10 lines × 2) (graphiti_core/search/search_utils.py)
- Further sole-owners (lower concentration)
- High CVE: [GHSA redacted] (uv.lock)
- High CVE: [GHSA redacted] (mcp_server/uv.lock)
- High CVE: [GHSA redacted] (uv.lock)
- Leaked secret: high-entropy-secret (graphiti_core/telemetry/telemetry.py)
- Medium CVE: PYSEC-2026-2132 (mcp_server/uv.lock)
- Medium CVE: PYSEC-2026-2132 (uv.lock)
- Medium: security finding (details withheld)
- …and 5 more

## New (47)

- Duplicated block (10 lines × 3) (graphiti_core/driver/neptune/operations/search_ops.py)
- Duplicated block (12 lines × 3) (graphiti_core/search/search_utils.py)
- Duplicated block (12–13 lines × 2) (graphiti_core/utils/maintenance/combined_extraction.py)
- Duplicated block (14 lines × 2) (graphiti_core/llm_client/jev_client.py)
- Duplicated block (14–15 lines × 3) (graphiti_core/search/search_utils.py)
- Duplicated block (16–17 lines × 2) (graphiti_core/search/search_utils.py)
- Duplicated block (18–20 lines × 2) (graphiti_core/llm_client/jev_client.py)
- Duplicated block (20–28 lines × 3) (graphiti_core/search/search_utils.py)
- Duplicated block (22–23 lines × 2) (examples/jev/jev_dedupe_falkordb.py)
- Duplicated block (27–28 lines × 2) (graphiti_core/utils/maintenance/edge_operations.py)
- Duplicated block (32 lines × 2) (graphiti_core/llm_client/jev_client.py)
- Duplicated block (5 lines × 3) (examples/gliner2/gliner2_neo4j.py)
- Duplicated block (59 lines × 2) (examples/jev/jev_dedupe_falkordb.py)
- Duplicated block (7 lines × 2) (graphiti_core/llm_client/gemini_client.py)
- Graphiti.__init__ (cognitive 23) (graphiti_core/graphiti.py)
- Graphiti.add_triplet (cognitive 17) (graphiti_core/graphiti.py)
- Graphiti.remove_episode (cognitive 18) (graphiti_core/graphiti.py)
- Graphiti.summarize_saga (cognitive 30) (graphiti_core/graphiti.py)
- Graphiti.summarize_saga (cyclomatic 21) (graphiti_core/graphiti.py)
- High vulnerability: [GHSA redacted] (mcp_server/uv.lock)
- …and 27 more

## Changes since last survey

- 38 commits — 31 feature/other, 7 fixes

## By area

- signatures/version1 — 17 commits
- (root) — 8 commits
- .github/workflows — 2 commits
- graphiti_core/driver — 2 commits
- graphiti_core/graphiti.py — 1 commit
- graphiti_core/llm_client — 1 commit
- graphiti_core/prompts — 1 commit
- graphiti_core/utils — 1 commit
- mcp_server/config — 1 commit
- mcp_server/docker — 1 commit
- mcp_server/pyproject.toml — 1 commit
- mcp_server/uv.lock — 1 commit
- tests/utils — 1 commit

## Notable commits

- fix: Upstream extraction, dedup, and temporal fixes from the Zep fork (#1964)
- fix: fix(core): keep restated facts and rebuild summaries in remove_episode (#2025)
- fix: fix(core): record supported edges on episodes in add_episode_bulk (#2030)
- fix: fix(falkordb): create node fulltext indices with DDL form for FalkorDB 6.x (#1963)
- fix: fix(neptune): apply group filters in fulltext search and bind list parameters (#2031)
- fix: fix(servers): listen only on localhost by default (#2032)
- fix: fix: replace deprecated gpt-4.1-nano defaults and default OpenAI calls to gpt-6-luna with prompt caching off (#1999)
- change: @4ktLuffy has signed the CLA in getzep/graphiti#1957
- change: @Ayoubhm07 has signed the CLA in getzep/graphiti#1955
- change: @CRYPTONIKAV has signed the CLA in getzep/graphiti#2018
- change: @CahreeMyrick has signed the CLA in getzep/graphiti#2017
- change: @DeepanshuPal has signed the CLA in getzep/graphiti#1952
- change: @DevChiniwala has signed the CLA in getzep/graphiti#1973
- change: @IlyaKhalafi has signed the CLA in getzep/graphiti#1994
- change: @SiyuanChenToDo has signed the CLA in getzep/graphiti#2040
- change: @ajinb has signed the CLA in getzep/graphiti#2005
- change: @akushonkamen has signed the CLA in getzep/graphiti#1987
- change: @basnijholt has signed the CLA in getzep/graphiti#2022
- change: @davenicoll has signed the CLA in getzep/graphiti#1992
- change: @ktz03 has signed the CLA in getzep/graphiti#1983
- …and 18 more