LoginSign Up
← Back to all sparks
M

Meilisearch

DEVOPS
Velocity5.0

Open-source, fast, typo-tolerant search engine API.

www.meilisearch.com ↗

Meilisearch's third patch in a week pulls a debug line that slowed the security fix

searchrelevance-tuningembeddingsenterprise-editionsecurity-patches
◆Current state
Meilisearch shipped two stable minors in October: v1.55 added inline dynamic search rules on the Enterprise Edition, and v1.56 added sampled facet counts and early give-up when an embedder can't keep up. On 2 November it cut v1.56.1 and v1.55.1 as security releases that bound long filter expressions. v1.56.2 on 9 November removes a leftover debug statement from v1.56.1 that could hurt performance, refreshes CA certificates in the Docker images and bumps dependencies.
◆Where it's heading
Feature work is landing roughly every two weeks as minors, with security fixes backported to the previous line. The v1.56.2 regression fix shows the cost of that pace: patch releases are now cleaning up after patch releases.
◆Prediction
A v1.57 minor is likely within the next two weeks, continuing the search-rules and facet work, with any further security fix again backported to 1.56.

◆Recent moves

  1. 4d ago

    v1.56.2 removes a debug statement that slowed v1.56.1

    A regression fix for the v1.56.1 security patch, which left a debug statement in that could slow searches, plus refreshed CA certificates in the Docker images. Anyone who took the security patch should take this one too.

    View source ↗
  2. 12d ago

    v1.55.1: security fix backported to the 1.55 line

    A backport of the v1.56.1 security fix for users still on 1.55, with no notes of its own. Its significance is the policy it shows: security fixes now reach the previous minor too.

    View source ↗
  3. 12d ago

    v1.56.1: long-filter DoS fix and nested-field panic fix

    A security patch that caps the memory and runtime of very long filters, which an exposed search endpoint could otherwise be made to choke on. It also fixes ranking scores above 1 and a panic after new nested fields are added, cleaning up after the v1.56 feature release.

    View source ↗
  4. 15d ago

    Prototype build reverts a ranking-score fix

    A prototype build that reverts a merged ranking-score fix (PR #6661). It is an internal test branch, and the revert says nothing yet about whether the fix will return in a stable release.

    View source ↗
  5. 17d ago

    v1.56: sampled facet counts and early give-up on slow embedders

    v1.56 adds sampledCount, a cheaper facet distribution that keeps exact per-facet counts but may skip facets, and makes indexing give up early when an embedder is overloaded or down, honouring Retry-After. It is the scale side of the October work: handling large embedding jobs against external services without endless retries.

    View source ↗
  6. 1mo ago

    v1.55: inline search rules for per-query relevance previews

    v1.55 lets a search or multi-search query carry an inline dynamic search rule and, with a metadata header, report whether the rule's conditions matched. It requires the Enterprise Edition and an experimental flag, and the notes say Meilisearch Cloud will build a rule-preview UI on it.

    View source ↗