feat(container): update image docker.io/getmeili/meilisearch ( v1.31.0 → v1.33.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/getmeili/meilisearch	minor	v1.31.0 → v1.33.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

meilisearch/meilisearch (docker.io/getmeili/meilisearch)

v1.33.1: 🐞

Compare Source

In Meilisearch v1.33.1, we released a security fix that affected the dump import, improvements to vector store relevance in massive databases, and a fix related to ranking scores.

🔐 Security Fix

• Cloud users: you don't need to do anything. We found no evidence of exploitation of this vulnerability on Meilisearch Cloud.
• Open-source users: if you allow importing dumps from an untrusted source, we recommend you update to v1.33.1

All versions of Meilisearch before v1.33.0 are vulnerable to a path traversal vulnerability involving the dump import functionality.

Importing a specially crafted dump could result in giving access to the Meilisearch instance to arbitrary, specifically formatted files, present on the file system of the Meilisearch instance.

✨ Enhancements

• We updated the vector store to trigger linear scanning even on bigger databases, leading to improved performance and so better result quality when the search cutoff is reached. This applies in particular when the number of filtered candidates is small relative to the number of documents in the index by @​Kerollmops in #​6113.

🐛 Bug Fixes

• We fixed a bug where only the first non-blocking buckets were taken for the non-final ranking rules. This improves the quality of search results when the search cutoff triggers, especially when vector search and a sort are involved by @​Kerollmops in #​6113.

Full Changelog: meilisearch/meilisearch@v1.33.0...v1.33.1

v1.33.0: 🐞

Compare Source

✨ Enhancement

• Add /fields route to get all the fields of an index by @​YoEight in #​6082
  Adds a new POST /indexes/{indexUid}/fields endpoint that returns detailed metadata about all fields in an index. This endpoint provides comprehensive information about each field's configuration, including display, search, filtering, and localization settings.

• Implement parallel cleanup of old field IDs by @​Kerollmops in #​6100
  We reduce the time required to perform the dumpless upgrade for instances before v1.32.0 by multi-threading database fetches. By doing that, we noticed improvements from 2 hours and 50 minutes to a bit less than 7 minutes.

• Bump hannoy to 0.1.4-nested-rtxns by @​Kerollmops in #​6103
  We updated our internal vector store to speed up the dumpless upgrade by improving the graph rebuilding and improving the speed and relevance of the search by using the explore factor as a limit to stop document searches rather than the query limit.

🪲 Bug fixes

• Meilisearch can now rescale when the index reaches 2 TB by @​Vipul-045 in #​6095

🔒 Security

• Upgrade mini-dashboard to benefit security vulnerability fixes by @​curquiza in #​6091

🔩 Miscellaneous

• Fix tests by @​dureuill in #​6090
• Add verbose OpenAPI schema descriptions for documentation by @​qdequele in #​6071
• Add code samples to the generated openAPI file by @​curquiza in #​6028

Thank you @​Vipul-045 for your first contribution ❤️

v1.32.2: 🐟

Compare Source

🐛 Bug fixes

• Do not panic when doing a dumpless upgrade on empty indexes with configured embeddings by @​Kerollmops in #​6102

Full Changelog: meilisearch/meilisearch@v1.32.1...v1.32.2

v1.32.1: 🐟

Compare Source

🌈 Improvements

Skip cleaning up the field-ID-based databases

Introduce a MEILI_EXPERIMENTAL_DISABLE_FID_BASED_DATABASES_CLEANUP env var to opt out of the field ID-based database cleanup when upgrading a Meilisearch from versions inferior to 1.32.0.

by @​ManyTheFish in #​6096

Full Changelog: meilisearch/meilisearch@v1.32.0...v1.32.1

v1.32.0: 🐟

Compare Source

🌈 Improvements

Log Search performance trace

Introduces comprehensive progress tracking and logging for search operations in Meilisearch. It adds detailed timing information for each step of the search process, enabling better observability and performance analysis.

by @​ManyTheFish in #​6072

Extract document operations from payloads in parallel

We accelerate document indexing by processing a large number of tasks in batches or a large number of records in parallel. We expedited the preparation of the payloads by extracting the various changes and assigning internal IDs in parallel. We achieved a 7x speedup on a four-million-document insertion using four CPUs, and the performance scales with the number of CPUs.

The indexedDocuments field in tasks using skipCreation no longer precisely reflects the number of document operations performed, specifically for POST and PUT operations. This count may be higher than the actual number of operations, but it doesn't affect the computation; only the reported count is impacted. We prioritize speed over perfect accuracy here, and the documents are still correctly indexed as before.

by @​Kerollmops in #​6080

🐛 Bug fixes

Vector sort: Bucket documents with same similarity

Fixed vector sort bucketing so documents with identical similarity scores are grouped together, ensuring subsequent ranking rules are applied correctly.

by @​dureuill in #​6081

Properly Delete Documents from FID-Based Databases

Fixes a bug where changing searchableAttributes from ["*"] to a subset of fields left orphaned data in fid-based databases, causing corruption and warnings during search.

by @​ManyTheFish in #​6076

Rebuild the graph links when dumpless-upgrading

Bumps hannoy to v0.1.3-nested-rtxns, which fixes graph-related recall issues and adds a method to rebuild graph links to recover previously malformed graphs. Also fixes a minor issue in the dumpless upgrade flow where the upgrade description was not displayed correctly and related operations were not properly associated with the upgrade.

by @​Kerollmops in #​6055

🛠️ Maintenance and Misc.

Update JS SDKs tests to use pnpm instead of yarn

Updated the JavaScript SDK tests to use pnpm instead of yarn in CI workflows, switching the package manager across test configurations to ensure the SDK test suite runs correctly and consistently with the current tooling.

by @​Strift in #​6075

Adapt JS tests in SDK tests CI

Updated the SDK tests CI workflow for the JavaScript SDKs

by @​curquiza in #​6050

Bump lru from 0.16.2 to 0.16.3

Fix Stacked Borrows violation in IterMut.

by @​dependabot[bot] in #​6087

Full Changelog: meilisearch/meilisearch@v1.31.0...v1.32.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mglants-bot]

--- kubernetes/subterra/apps/apps/karakeep/app Kustomization: flux-system/karakeep HelmRelease: apps/karakeep

+++ kubernetes/subterra/apps/apps/karakeep/app Kustomization: flux-system/karakeep HelmRelease: apps/karakeep

@@ -110,13 +110,13 @@

                   secretKeyRef:
                     key: meilisearch_master_key
                     name: karakeep-secret
               MEILI_NO_ANALYTICS: true
             image:
               repository: docker.io/getmeili/meilisearch
-              tag: v1.31.0
+              tag: v1.33.1
             resources:
               limits:
                 memory: 4Gi
               requests:
                 cpu: 10m
                 memory: 1Gi

[mglants-bot]

--- HelmRelease: apps/karakeep Deployment: apps/karakeep-meilisearch

+++ HelmRelease: apps/karakeep Deployment: apps/karakeep-meilisearch

@@ -59,13 +59,13 @@

           valueFrom:
             secretKeyRef:
               key: meilisearch_master_key
               name: karakeep-secret
         - name: MEILI_NO_ANALYTICS
           value: 'true'
-        image: docker.io/getmeili/meilisearch:v1.31.0
+        image: docker.io/getmeili/meilisearch:v1.33.1
         name: app
         resources:
           limits:
             memory: 4Gi
           requests:
             cpu: 10m