weaviate

v1.36.18 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Vector Databases

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

approximate-nearest-neighbor-search generative-search grpc hnsw hybrid-search image-search

+13 more

information-retrieval mlops nearest-neighbor-search neural-search recommender-system search-engine semantic-search semantic-search-engine similarity-search vector-db vector-search-engine vectors weaviate

Affected surfaces

deps

Summary

AI summary

Broad release touches New Features none, fix, test, and Breaking Changes none.

Full changelog

Breaking Changes

none

New Features

none

Fixes

use the same update time for batch references everywhere by @dirkkul in https://github.com/weaviate/weaviate/pull/11553
fix(inverted): index references provided as untyped JSON beacons by @moogacs in https://github.com/weaviate/weaviate/pull/11551
Fix race in dynamic users with concurrent pointer access by @dirkkul in https://github.com/weaviate/weaviate/pull/11573
fix(resource): don't auto-recover shards read-only for a non-resource reason by @amourao in https://github.com/weaviate/weaviate/pull/11581
test: deflake TestReplicationDigestObjectsInRange/TruncatedBinaryRecord (backport #11511 to v1.36) by @jeroiraz in https://github.com/weaviate/weaviate/pull/11595
fix: docker login and dowload retry by @amourao in https://github.com/weaviate/weaviate/pull/11599
test: deflake replication client tests via generous default timeoutUnit by @jeroiraz in https://github.com/weaviate/weaviate/pull/11601
Fix flaky HNSW search test by @dirkkul in https://github.com/weaviate/weaviate/pull/11579
Add more unit tests for backups by @dirkkul in https://github.com/weaviate/weaviate/pull/10769
Use flat index to assert brute force search by @dirkkul in https://github.com/weaviate/weaviate/pull/11608
fix: increase retry wait time and reduce timeout for Docker Hub login by @amourao in https://github.com/weaviate/weaviate/pull/11610
Speed up rbac authz tests by @dirkkul in https://github.com/weaviate/weaviate/pull/11607
Reuse testcontainers in tests for fast group 3 by @dirkkul in https://github.com/weaviate/weaviate/pull/11612
Remove deprecation notice for weaviate.json config file by @dirkkul in https://github.com/weaviate/weaviate/pull/11615
feat(modules): introduce rate limiter logic in batch simple logic by @antas-marcin in https://github.com/weaviate/weaviate/pull/11637
ci(docker): switch docker pipelines to use Ubicloud's premium runners by @antas-marcin in https://github.com/weaviate/weaviate/pull/11641
ci: switch back multi-arch docker image build pipeline to ubuntu-latest by @antas-marcin in https://github.com/weaviate/weaviate/pull/11646
backport: chore: add slack notifier for release notes (#11576) by @moogacs in https://github.com/weaviate/weaviate/pull/11674
fix: disable debug endpoints by default by @amourao in https://github.com/weaviate/weaviate/pull/11173
chore(gh-workflow): adjust the slack notify workflow msg by @moogacs in https://github.com/weaviate/weaviate/pull/11697
security(Dockerfile): update Alpine image version to 3.24 by @antas-marcin in https://github.com/weaviate/weaviate/pull/11698
Fix goroutine leak in listing all s3 backups by @dirkkul in https://github.com/weaviate/weaviate/pull/11702
fix: shebang in tools/dev/run_dev_server.sh script by @antas-marcin in https://github.com/weaviate/weaviate/pull/11722
Reduce goroutines spawned by cyclemanager by @dirkkul in https://github.com/weaviate/weaviate/pull/11701
Gut the replicated indices queue feature due to lack of use by @tsmith023 in https://github.com/weaviate/weaviate/pull/11654
Switch cycle manager to backoff on idle by @dirkkul in https://github.com/weaviate/weaviate/pull/11703

Full Changelog: https://github.com/weaviate/weaviate/compare/v1.36.17...v1.36.18

Security Fixes

Update Alpine image version to 3.24 for Dockerfile security hardening

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track weaviate

Get notified when new releases ship.

About weaviate

Weaviate is an open-source vector database that stores both objects and vectors, allowing for the combination of vector search with structured filtering with the fault tolerance and scalability of a cloud-native database.

All releases →