meilisearch version history

- Improved synonyms storage for better performance - Fixed workflow after broken ranking scores - Made OpenAPI rule less strict for routes returning 202

# 🪲 Bug fixes - Fix a rare S3 snapshots bug by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6472 We fixed a rare bug that could appear when using the S3 snapshot system. The bug is a race condition that occurs when we try to recycle internal buffers to reduce memory usage, which can cause an internal error and abort the snapshot upload. - Avoid remote search to return the same document twice by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6473 When using the remote federated search, Meilisearch was returning the same document twice from different machines. This was due to an internal filter that was not forwarded properly to the remote instances. # **🔩 Miscellaneous** - Add missing searchFilterParam to GET chat workspace settings response by @CaroFG in https://github.com/meilisearch/meilisearch/pull/6475 - Split unit tests into separate files (one commit per file) by @0xfandom in https://github.com/meilisearch/meilisearch/pull/6468 - Add missing information from pre-openAPI-migration by @curquiza in https://github.com/meilisearch/meilisearch/pull/6467 ## New Contributors Thanks to @0xfandom, who made h

Meilisearch v1.48.2 and Meilisearch v1.47.1 address CVE-2026-57823 and CVE-2026-57824. We recommend updating if you are in one of the following situations: 1. You have API keys where `indexes` is *not* `["*"]` and where `actions` contains more permissions than: `["search", "documents.*", "indexes.*", "tasks.cancel", "tasks.delete", "tasks.get", "settings.*", "stats.*", "fields.post"]` 2. You have [search tenant tokens](https://www.meilisearch.com/docs/capabilities/security/overview) and either an [embedder](https://www.meilisearch.com/docs/getting_started/glossary#embedder) or a [chat workspace](https://www.meilisearch.com/docs/capabilities/conversational_search/how_to/configure_chat_workspace) * We recommend that users of Meilisearch v1.48 update to Meilisearch v1.48.2 * We recommend that users of Meilisearch v1.47 or lower update to Meilisearch v1.47.1 These versions both fix the following: 1. CVE-2026-57824: Improper authentication leads to privilege escalation: an authenticated user with an index-scoped API and the appropriate set of actions could use global actions to read and write the global state of the Meilisearch instance. Possibly impacted users of Meilise

Meilisearch v1.48.2 and Meilisearch v1.47.1 address CVE-2026-57823 and CVE-2026-57824. We recommend updating if you are in one of the following situations: 1. You have API keys where `indexes` is *not* `["*"]` and where `actions` contains more permissions than: `["search", "documents.*", "indexes.*", "tasks.cancel", "tasks.delete", "tasks.get", "settings.*", "stats.*", "fields.post"]` 2. You have [search tenant tokens](https://www.meilisearch.com/docs/capabilities/security/overview) and either an [embedder](https://www.meilisearch.com/docs/getting_started/glossary#embedder) or a [chat workspace](https://www.meilisearch.com/docs/capabilities/conversational_search/how_to/configure_chat_workspace) * We recommend that users of Meilisearch v1.48 update to Meilisearch v1.48.2 * We recommend that users of Meilisearch v1.47 or lower update to Meilisearch v1.47.1 These versions both fix the following: 1. CVE-2026-57824: Improper authentication leads to privilege escalation: an authenticated user with an index-scoped API and the appropriate set of actions could use global actions to read and write the global state of the Meilisearch instance. Possibly impacted users of Meilise

Revert #6432 due to a dumpless upgrade bug report. **Full Changelog**: https://github.com/meilisearch/meilisearch/compare/v1.48.0...v1.48.1

# **✨ Enhancement** ## [Experimental] Render 🫎​ template route > by @Mubelotix in https://github.com/meilisearch/meilisearch/pull/5765 Introduces a new `POST /render-template` route that can be used to render any template or fragment on any input and associated [`renderRoute` experimental feature](https://github.com/orgs/meilisearch/discussions/888) that gates access to the route. This route can be used to test document templates and fragments before and after having configured an embedder. A body payload for the route is of the form: ```jsonc { "template": /* templateTarget object */, "input": /* inputTarget object or null */ } ``` where `template` describes the template or fragment to render, and `input` describes what to use to render the template. Upon calling this route, Meilisearch responds with: ```jsonc { "template": "{{doc.text}}", "rendered": "template text after rendering using the input" } ``` where `template` contains the **un**rendered base text of the document template, or the **un**rendered base JSON object of a fragment, and `rendered` contains the result of rendering the template of the chosen input. If `input` i

# 🌈 Enhancements ## Search personalization on federated search We now support using the [search personalization feature](https://www.meilisearch.com/docs/capabilities/personalization/overview) on federated search requests. Like `page`/`hitPerPage` or `limit`/`offset`, the personalization option must be specified in the federation attribute to work properly. Otherwise, an error will be returned reminding you to move the attribute in federation. By @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6414 ## The new settings indexer is feature complete 🎉 - We now better support the tokenizer-related settings - We improved the quality of the new settings indexer to enhance the engine's performance when changing the locales, the dictionary, synonyms, stop words, separator, and non-separator tokens. - This makes the new settings indexer feature-complete, meaning that, unless you set the `MEILI_EXPERIMENTAL_NO_EDITION_2024_FOR_SETTINGS` environment variable to `true`, all settings tasks can now be handled by the new settings indexer, bringing a better scaling behavior, much faster cancellation, and a more precise progress view. By @Kerollmops in ht

## Queue documents fetch routes Add an experimental feature, `queueDocumentsFetch`, forcing the routes `GET indexes/:uid/documents` and `POST indexes/:uid/documents/fetch` to wait in the search queue if there is no available thread to process them.

This release introduces fixes for a regression in v1.45.0, where we were batching deletions by filter with other deletions or additions. It also enables the new settings indexer to support more parameters, making the engine faster to index documents when those settings are specified. ### ✨ Enhancement - Support exact and disable on numbers in the new settings indexer by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6398 Introduce support for exact words and disable-on-words parameters in the new settings indexer, making the engine more efficient when changing these settings. - Support computing prefixes in the new settings indexer by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6391 Support for the prefix search settings in the new settings indexer, so that changing this parameter makes the engine more efficient. ### 🪲 Bug fixes - Better limit read bytes when creating the S3 multipart part by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6405 This fixes an issue we had with the multipart part size by ensuring we never construct a part larger than the defined multipart part size. With this fix, we

### 🪲 Bug Fixes * Fix internal vector stores quantization config desync by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6411 We noticed issues when dumpless upgrading databases containing embedders from versions older than v1.33.1. This version fixes those databases by removing the corrupted embeddings from the impacted indexes. **Full Changelog**: https://github.com/meilisearch/meilisearch/compare/v1.45.1...v1.45.2

### 🪲 Bug Fixes * Revert autobatch deletions by filter with additions by @kerollmops in https://github.com/meilisearch/meilisearch/pull/6412 **Full Changelog**: https://github.com/meilisearch/meilisearch/compare/v1.45.0...v1.45.1