Skip to content

Conversation

@ethanlaj
Copy link
Contributor

@ethanlaj ethanlaj commented Dec 6, 2025

Pull Request Template

Summary

This pull request updates the Meilisearch service configuration in both deploy-compose.yml and docker-compose.yml files to use a newer version and a new data volume. This change is intended to resolve the following:

  • curl 8.11.1-r0 8.12.0-r0 apk CVE-2025-0665 Critical 14.0% (94th) 13.2
  • libcurl 8.11.1-r0 8.12.0-r0 apk CVE-2025-0665 Critical 14.0% (94th) 13.2

(by severity: 2 critical, 11 high, 15 medium, 8 low, 0 negligible)

After upgrade - by severity: 0 critical, 0 high, 1 medium, 6 low, 0 negligible

Change Type

  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Note that by breaking change, LibreChat docs already include proper instructions for the fix: https://www.librechat.ai/docs/configuration/meilisearch#9-resetting-meilisearch-synchronization

Testing

Automated tests, ensured that searching still works on existing and new chats.

Checklist

  • I have performed a self-review of my own code
  • My changes do not introduce new warnings
  • Local unit tests pass with my changes

@ethanlaj ethanlaj changed the base branch from main to dev December 11, 2025 23:51
@ethanlaj ethanlaj force-pushed the upgrade-meilisearch branch from 94ecd9e to 9006a6e Compare December 11, 2025 23:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant