Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

Update urgency: SECURITY: There is a security fix in the release.

• Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode

• Introduce sampledCount to compute the facet distribution by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6649 It is a new sorting option when retrieving the facet distribution. It is less precise than by count but provides a rough estimate of the facet distribution. Note that the count of documents for each facet is exhaustive but the list of facets is not and some facets that would have been listed by using the by count method have been ignored/skipped.
• Give up indexing when the embedder can't handle the load by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6681
  • An adaptive strategy for rate limiting: For small usage with few documents, we accept a slow embedder service, and for big usage with updates containing thousands of documents, Meilisearch will give up early
  • A better outage handling, where Meilisearch will give up early if the embedder server is unavailable for too long
  • Support the Retry-After header when the value is in seconds, avoiding useless retries in a short timespan
• Optimization of general search performance by @itsamine27 in https://github.com/meilisearch/meilisearch/pull/6571

• Fix wrong binary quantization state after deleting embedders by @dureuill in https://github.com/meilisearch/meilisearch/pull/6679

• Improve code correctness by using the latest version of heed by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6687
• Update README by @mayasssh in https://github.com/meilisearch/meilisearch/pull/6692
• Disallow AI Contributions by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6684
• Fix empty request body section in the settings API reference by @curquiza in https://github.com/meilisearch/meilisearch/pull/6678
• Bump rustls from 0.23.43 to 0.23.45 by @dependabot[bot] in https://github.com/meilisearch/meilisearch/pull/6672

Cherry-picked changes

• s3api: stop echoing stored tags and internal attributes on GET/HEAD by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12053
• admin: keep read-only sessions out of the filer /etc tree by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12057
• s3tables: scope the anonymous identity's grant on the table catalogs by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12056
• master: shorten the first-write hold after a fresh topology id by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12059
• filer, volume: ignore Range when If-Range no longer matches by @jayhemnani9910 in https://github.com/seaweedfs/seaweedfs/pull/12052
• feat: send EC shards in parallel per destination disk by @CHEPURNOV-S-S in https://github.com/seaweedfs/seaweedfs/pull/12050
• command: no extra localhost listener when -ip.bind is specified by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12055
• mini: lift the post-mint allocation hold on first inventory report by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12061
• filer: auto-enable per-path commit records when a peer has its own store by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12062
• s3: answer GET and HEAD of a delete marker as S3 does by @jayhemnani9910 in https://github.com/seaweedfs/seaweedfs/pull/12051
• iam/oidc: drop single-use web-identity tokens and the jti replay cache by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12065

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.50...4.51