v0.9.3

Quickwit 0.9.3 is a security patch release. Users running Quickwit 0.9.2 or earlier should upgrade to 0.9.3.

Security

• Reject TLS certificate chains through the compromised emSign intermediates (RUSTSEC-2026-0382, RUSTSEC-2026-0381, RUSTSEC-2026-0383).

The bundled root store no longer includes emSign ECC Root CA - G3. TLS connections to endpoints whose certificates chain to that root will now fail verification.

v0.9.2

Quickwit 0.9.2 is a security patch release.

Security

• Restrict Kafka client params that execute commands or load libraries (GHSA-g85h-2988-4cv8).
• Reject oversized columnar dictionaries during merges (Tantivy GHSA-7pph-m7rw-cqhv).

Users running Quickwit versions 0.4.0 through 0.9.1 should upgrade to 0.9.2.

Kafka sources that use Kerberos (sasl.mechanisms: GSSAPI) no longer run kinit automatically. If you relied on automatic ticket renewal, set the QW_KAFKA_KINIT_CMD environment variable or renew tickets outside Quickwit.

v0.9.1

Quickwit 0.9.1 is a security patch release.

Security

• Bound trace search resource usage (GHSA-55pj-w5q5-r3m6).

Users running Quickwit versions 0.5.0 through 0.9.0 should upgrade to 0.9.1.

v0.9.0

Quickwit 0.9.0 makes Ingest V2 the default and delivers a broad set of search, observability, and deployment improvements.

Highlights

• Ingest V2 now powers the existing /api/v1/{index}/ingest endpoint by default.
• Searchers can offload leaf-search work to AWS Lambda.
• New Jaeger v2 support, Trino-compatible Elasticsearch endpoints, composite aggregations, and an SQS source.
• Optional mTLS validation for the REST API and a dedicated health-check HTTP server.
• Numerous control-plane, storage, search scheduling, performance, and security fixes.

Note

The Parquet metrics and DataFusion work in the source tree is an early prototype. It is not built into the v0.9.0 binaries or Docker images and is not a supported 0.9.0 feature.

Important

Before upgrading from 0.8.x, back up the metastore. Quickwit 0.9 migrates it on first write; rollback requires restoring that backup.

See the upgrade guide and the full changelog.

def4e26e9

Add UnicodeSegmenter tokenizer (#6454)

The hidden goal of this is to unify the lambda binary for quickwit and Datadog BYOC logs.

lambda-11587c00

Update lambda binary

lambda-ff6fdfa5

Moving lambda execution to the leaf.

lambda-506751fb

blop

v0.8.2

Fixed

• Reduce dead node grace period in order to reduce gossip state size (00b22bf)

aws-lambda-beta-04

Fix the metastore refresh on searchers.