Skip to content

meilisearch

v1.46.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Search Engines
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai api app-search database enterprise-search faceting
+13 more
full-text-search fuzzy-search geosearch hybrid-search instantsearch search search-as-you-type search-engine semantic-search site-search typo-tolerance vector-db vectors

Affected surfaces

deps

Summary

AI summary

Updates 🔩 Miscellaneous, 🪲 Bug fixes, and ✨ Enhancement across a mixed release.

Changes in this release

Feature Low

Adds support for exact and disable‑on parameters on numbers in the new settings indexer.

Adds support for exact and disable‑on parameters on numbers in the new settings indexer.

Source: llm_adapter@2026-06-08

Confidence: high

 —
Feature Low

Adds support for computing prefixes in the new settings indexer.

Adds support for computing prefixes in the new settings indexer.

Source: llm_adapter@2026-06-08

Confidence: high

 —
Dependency Low

Bumps tar dependency from 0.4.45 to 0.4.46.

Bumps tar dependency from 0.4.45 to 0.4.46.

Source: llm_adapter@2026-06-08

Confidence: high

 —
Bugfix Medium

Prevents panic when encountering incomplete filters, now returning an error instead.

Prevents panic when encountering incomplete filters, now returning an error instead.

Source: llm_adapter@2026-06-08

Confidence: high

 —
Bugfix Medium

Fixes regression where `documentDeletionByFilter` was incorrectly batched with other deletions or additions.

Fixes regression where `documentDeletionByFilter` was incorrectly batched with other deletions or additions.

Source: llm_adapter@2026-06-08

Confidence: low

 —
Bugfix Low

Limits read bytes when creating S3 multipart parts to never exceed defined part size.

Limits read bytes when creating S3 multipart parts to never exceed defined part size.

Source: llm_adapter@2026-06-08

Confidence: high

 —
Bugfix Low

Corrects batching of `documentDeletionByFilter` with other document operations, fixing a regression from v1.45.0.

Corrects batching of `documentDeletionByFilter` with other document operations, fixing a regression from v1.45.0.

Source: granite4.1:30b@2026-06-08-audit

Confidence: low

 —
Full changelog

This release introduces fixes for a regression in v1.45.0, where we were batching deletions by filter with other deletions or additions. It also enables the new settings indexer to support more parameters, making the engine faster to index documents when those settings are specified.

✨ Enhancement

  • Support exact and disable on numbers in the new settings indexer by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6398
    Introduce support for exact words and disable-on-words parameters in the new settings indexer, making the engine more efficient when changing these settings.

  • Support computing prefixes in the new settings indexer by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6391
    Support for the prefix search settings in the new settings indexer, so that changing this parameter makes the engine more efficient.

🪲 Bug fixes

  • Better limit read bytes when creating the S3 multipart part by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6405
    This fixes an issue we had with the multipart part size by ensuring we never construct a part larger than the defined multipart part size. With this fix, we always create a multipart with the provided multipart part size, except for the last part. Thanks, @vidit-virmani, for the help investigating the issue.

  • Batch of documentDeletionByFilter with documentAdditionOrUpdate by @Kerollmops and @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6415
    Correctly implement the support for auto-batching deletion by filter with document replacement and updates. This fixes a regression introduced in v1.45.0.

  • Fix a panic with incomplete filters by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6421
    Fixes an internal panic when a filter is incomplete by returning an error instead.

🔒 Security

  • Bump tar from 0.4.45 to 0.4.46 by @dependabot[bot] in https://github.com/meilisearch/meilisearch/pull/6418

🔩 Miscellaneous

  • OpenAPI CI: disable rule to avoid crash (workaround) by @curquiza in https://github.com/meilisearch/meilisearch/pull/6417
  • Remove milli benchmarks by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6419
  • Add precision in the index swap documentation by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6408
  • Fix broken links in the documentation by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6406

Security Fixes

  • dep: tar upgraded from 0.4.45 to 0.4.46 (CVE not specified)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track meilisearch

Get notified when new releases ship.

Sign up free

About meilisearch

A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

All releases →

Related context

Earlier breaking changes

  • v1.50.0 `selector` of an `Action` now requires mandatory `id` field in dynamic search rules.
  • v1.50.0 `filter.attributePatterns` replaced with `filter.query` in listing dynamic search rules endpoint.
  • v1.50.0 `conditions.query.words` replaces `contains` in QueryCondition of dynamic search rules.
  • v1.50.0 `conditions` changed from array to object with `query` and `time` fields in dynamic search rules.
  • v1.50.0 `priority` replaced with `precedence` in dynamic search rules.

Beta — feedback welcome: [email protected]