Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade meilisearch from 0.22.1 to 0.41.0 #21

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade meilisearch from 0.22.1 to 0.41.0 #21

wants to merge 1 commit into from

Conversation

ferdi05
Copy link
Owner

@ferdi05 ferdi05 commented Sep 1, 2024

snyk-top-banner

Snyk has created this PR to upgrade meilisearch from 0.22.1 to 0.41.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 52 versions ahead of your current version.

  • The recommended version was released on 2 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Information Exposure
SNYK-JS-NODEFETCH-2342118		 325 No Known Exploit
Release notes
Package name: meilisearch
  • 0.41.0 - 2024-07-01

    This version introduces features released on Meilisearch v1.9.0 🎉
    Check out the changelog of Meilisearch v1.9.0 for more information on the changes.

    🚀 Enhancements

    client.index('movies').search('interstellar', { matchingStrategy: MatchingStrategies.FREQUENCY });
    client.index('movies').search('badman', { rankingScoreThreshold: 0.2 });
client.index('movies').searchGet('badman', { rankingScoreThreshold: 0.2 });
    client.index('movies').search('', { distinct: 'genre' });
    client.index('movies').searchSimilarDocuments({ id: 'target-document-id' });
    client.index('movies').getDocuments({ retrieveVectors: true });

    🔒 Security

    • build(deps): bump ws from 5.2.3 to 5.2.4 in /playgrounds/javascript (#1672)

    ⚙️ Maintenance/misc

    Thanks again to @ brunoocasali, @ curquiza, @ flevi29, @ mdubus, and @ the-sinner! 🎉

  • 0.40.0 - 2024-05-15

    💥 Breaking Changes

    • Fix the issue introduced in the v0.39 that affected vite apps #1652 @ brunoocasali
    • Now to use the generateTenantToken you should use it with await:
      before: 
      const token = client.generateTenantToken(apiKeyUid, searchRules, {
    apiKey: apiKey,
    expiresAt: expiresAt,
  })
      after: 
      const token = await client.generateTenantToken(apiKeyUid, searchRules, {
    apiKey: apiKey,
    expiresAt: expiresAt,
  })

    ⚙️ Maintenance/misc

    Thanks again to @ brunoocasali, @ mdubus! 🎉

  • 0.39.0 - 2024-05-06

    🚀 Enhancements

    • feat: hybrid search improvements for v1.8.x (#1647) @ mdubus
    • Add null to Embedder type (#1646) @ amit-ksh
    • Add searchCutoffMs index setting (#1643, #1645) @ amit-ksh 
      client.index('movies').getSearchCutoffMs()
client.index('movies').updateSearchCutoffMs(150)
client.index('movies').resetSearchCutoffMs()

    ⚠️ if you're using vite to build your front-end app, you must add this to your configuration (see more info here #1649)

    export default defineConfig({
  plugins: [vue()],
  build: {
    rollupOptions: {
      external: ['crypto'], // this is the important part
    },
  },
})

    Otherwise, you'll face errors like Module "crypto" has been externalized for browser compatibility.

    ⚙️ Maintenance/misc

    Thanks again to @ amit-ksh, @ brunoocasali, @ curquiza, @ flevi29, @ mdubus! 🎉

  • 0.38.0 - 2024-03-11

    This version introduces features released on Meilisearch v1.7.0 🎉
    Check out the changelog of Meilisearch v1.7.0 for more information on the changes.

    ⚠️ If you want to adopt new features of this release, update the Meilisearch server to the appropriate version.

    ⚠️ Breaking changes

    • Update Node.js versions that are used in tests (#1620) @ flevi29
    • scoreDetails feature is not experimental anymore. You can directly use showRankingScoreDetails during a search without activating the experimental feature 🎉

    🚀 Enhancements

  • 0.38.0-v1.7.0-pre-release.0 - 2024-02-19

    🧪 This is a beta version, preparing for Meilisearch v1.7.0, based on v1.7.0-rc.1

    This version introduces features released on Meilisearch v1.7.0-rc.1 🎉
    Check out the changelog of Meilisearch v1.7.0-rc.1 for more information on the changes.

    ⚠️ If you want to adopt new features of this release, update the Meilisearch server to the appropriate version.

    ⚠️ Breaking changes

    🚀 Enhancements

    Thanks again to @ curquiza, @ flevi29, @ reijovosu and @ nicolasvienot! 🎉

  • 0.37.0 - 2024-01-15

    This version introduces features released on Meilisearch v1.6.0 🎉
    Check out the changelog of Meilisearch v1.6.0 for more information on the changes.

    ⚠️ If you want to adopt new features of this release, update the Meilisearch server to the according version.

    🚀 Enhancements

    • Add support for the new setting: proximityPrecision (#1619) mdubus
    client.index('books').getProximityPrecision()
client.index('books').updateProximityPrecision('byAttribute')
client.index('books').resetProximityPrecision()
    • Update error inheritance to extend MeiliSearchError (#1607) amit-ksh

    🧪 Experimental enhancement - Hybrid and vector search

    ⚠️ This is about an experimental feature of Meilisearch. Activate the vectorStore experimental feature to use it

    • Add support for the embedders settings (#1623) mdubus
    client.index('books').getEmbedders()
client.index('books').updateEmbedders({ default: { source: 'userProvided', dimensions: 1 }})
client.index('books').resetEmbedders()
    • Add support for the hybrid parameter during search (#1623) mdubus

    ⚙️ Maintenance/misc

    • Fix test name in error.test.ts (#1609) amit-ksh
    • Update Jest (#1622) flevi29

    Thanks again to @ amit-ksh, @ curquiza, @ flevi29, @ mdubus, @ meili-bors[bot] ! 🎉

  • 0.36.0 - 2023-11-20

    This version introduces features released on Meilisearch v1.5.0 🎉
    Check out the changelog of Meilisearch v1.5.0 for more information on the changes.

    ⚠️ If you want to adopt new features of this release, update the Meilisearch server to the appropriate version.

    🚀 Enhancements

    • Needs Meilisearch v1.5.0 -> Add new method createSnapshot() to trigger snapshot creation. Similar to the already existing createDump() for dumps (#1603) @ brunoocasali
  • 0.35.1 - 2023-11-20

    🚀 Enhancements

    Thanks again to @ Dhoni77, @ amit-ksh, @ curquiza, @ jonespen, @ meili-bors[bot] ! 🎉

  • 0.35.0 - 2023-09-25

    This version introduces features released on Meilisearch v1.4.0 🎉
    Check out the changelog of Meilisearch v1.4.0 for more information on the changes.

    ⚠️ If you want to adopt new features of this release, update the Meilisearch server to the according version.

    🚀 Enhancements

    client.index('books').getDictionary()
client.index('books').updateDictionary(['W.E.B'])
client.index('books').resetDictionary()
    client.index('books').getSeparatorTokens()
client.index('books').updateSeparatorTokens(['@'])
client.index('books').resetSeparatorTokens()
    client.index('books').getNonSeparatorTokens()
client.index('books').updateNonSeparatorTokens(['.', ','])
client.index('books').resetNonSeparatorTokens()

    ⚠️ Warning usage with v1.4.0

    A bug fix in Meilisearch v1.4.0 introduces a breaking change in the filter usage. It only concerns users using the filter search parameter with \.
    Explanation and change to apply are detailed in the Meilisearch v1.4.0

    Thanks to @ atoulmet and @ bidoubiwa! 🎉

  • 0.35.0-v1.3.0-pre-release.1 - 2023-07-18
  • 0.35.0-v1.3.0-pre-release.0 - 2023-07-13
  • 0.34.2 - 2023-09-06
  • 0.34.2-tokenizer-customization.0 - 2023-08-16
  • 0.34.1 - 2023-08-07
  • 0.34.0 - 2023-07-31
  • 0.33.0 - 2023-06-05
  • 0.33.0-prototype-search-for-facet-values.1 - 2023-06-08
  • 0.33.0-prototype-search-for-facet-values.0 - 2023-06-06
  • 0.32.5 - 2023-05-29
  • 0.32.4 - 2023-05-23
  • 0.32.3 - 2023-04-08
  • 0.32.2 - 2023-04-04
  • 0.32.1 - 2023-04-03
  • 0.32.0 - 2023-03-27
  • 0.32.0-v1.1.0-pre-release.2 - 2023-03-27
  • 0.32.0-v1.1.0-pre-release.1 - 2023-03-27
  • 0.32.0-v1.1.0-pre-release.0 - 2023-03-15
  • 0.31.1 - 2023-02-06
  • 0.31.0 - 2023-02-06
  • 0.30.0 - 2022-11-28
  • 0.30.0-beta.0 - 2022-11-14
  • 0.29.1 - 2022-11-03
  • 0.29.0 - 2022-10-27
  • 0.28.0 - 2022-10-03
  • 0.28.0-pagination-beta.0 - 2022-07-26
  • 0.28.0-beta.0 - 2022-09-01
  • 0.27.0 - 2022-07-11
  • 0.27.0-optional-words-beta.1 - 2022-08-02
  • 0.27.0-optional-words-beta.0 - 2022-08-01
  • 0.27.0-beta.1 - 2022-06-29
  • 0.27.0-beta.0 - 2022-06-29
  • 0.26.0 - 2022-06-27
  • 0.26.0-beta.0 - 2022-04-19
  • 0.25.1 - 2022-05-09
  • 0.25.0 - 2022-03-14
  • 0.24.0 - 2022-01-12
  • 0.24.0-beta.1 - 2022-01-10
  • 0.24.0-beta.0 - 2022-01-05
  • 0.23.0 - 2021-11-22
  • 0.23.0-beta.0 - 2021-11-15
  • 0.22.3 - 2021-11-02
  • 0.22.2 - 2021-10-28
  • 0.22.1 - 2021-10-12
from meilisearch GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ferdi05 @snyk-bot