search

patterns-ai-core / langchainrb

Build LLM-powered applications in Ruby
https://rubydoc.info/gems/langchainrb
MIT License
1.44k stars 195 forks source link

[SECURITY] Update elasticsearch requirement from ~> 8.2.0 to ~> 8.16.0 #877

Open dependabot[bot] opened 1 week ago

dependabot[bot] commented 1 week ago

Updates the requirements on elasticsearch to permit the latest version.

Release notes

Sourced from elasticsearch's releases.

v8.16.0

Client

  • Tested versions of Ruby for 8.16.0: Ruby (MRI) 3.1, 3.2 and 3.3. JRuby 9.3 and JRuby 9.4.

API

API changes

  • capabilities - Adds local_only boolean parameter: True if only the node being called should be considered.
  • cluster.stats- Removes flat_settings parameter, adds include_remotes boolean parameter: Include remote cluster data into the response (default: false)
  • indices.get_data_stream - Adds verbose boolean parameter: Whether the maximum timestamp for each data stream should be calculated and returned (default: false). Adds master_timeout (see below).
  • query_rules.delete_ruleset - Accepts ignore: 404 common parameter.
Timeout parameters:

These parameters have been added to several APIs:

  • master_timeout timeout for processing on master node.
  • timeout timeout for acknowledgement of update from all nodes in cluster parameters.

Added in:

  • indices.create_data_stream - both.
  • indices.delete_data_stream - master_timeout.
  • indices.get_data_lifecycle - master_timeout.
  • indices.get_data_stream - master_timeout.
  • indices.migrate_to_data_stream - both.
  • indices.promote_data_stream - master_timeout.
  • search_shards - master_timeout.

APIs Promoted from Experimental to Stable:

  • indices.delete_data_lifecycle
  • indices.explain_data_lifecycle
  • indices.get_data_lifecycle
  • indices.put_data_lifecycle
  • security.create_cross_cluster_api_key
  • security.update_cross_cluster_api_key

New APIs

  • ingest.delete_ip_location_database - Deletes an ip location database configuration.
  • ingest.get_ip_location_database - Returns the specified ip location database configuration.
  • ingest.put_ip_location_database - Puts the configuration for a ip location database to be downloaded.

New Experimental APIs

  • inference.stream_inference - Perform streaming inference.

... (truncated)

Changelog

Sourced from elasticsearch's changelog.

See the full release notes on the official documentation website: https://www.elastic.co/guide/en/elasticsearch/client/ruby-api/current/release_notes.html

8.15.0 Release notes

Client

  • Tested versions of Ruby for 8.15.0: Ruby (MRI) 3.0, 3.1, 3.2 and 3.3. JRuby 9.3 and JRuby 9.4.

API changes

  • snapshot.delete - Adds wait_for_completion Boolean parameter, should this request wait until the operation has completed before returning.
  • cluster.allocation_explain - body is no longer a required parameter.
  • connector.put - (experimental API) body and connector_id no longer required parameters.
  • machine_learning.update_trained_model_deployment has been promoted to stable from Beta. Adds Integer parameter number_of_allocations, updates the model deployment to this number of allocations.
master_timeout and timeout parameters

These parameters have been added to several APIs:

  • master_timeout timeout for processing on master node.
  • timeout timeout for acknowledgement of update from all nodes in cluster parameters.

The APIs:

  • autoscaling.delete_autoscaling_policy - both.
  • autoscaling.get_autoscaling_capacity- master_timeout.
  • get_autoscaling_policy - master_timeout.
  • put_autoscaling_policy - both.
  • enrich.delete_policy - master_timeout.
  • enrich.execute_policy - master_timeout.
  • enrich.get_policy - master_timeout.
  • enrich.put_policy - master_timeout.
  • enrich.stats - master_timeout.
  • features.reset_features - master_timeout.
  • license.delete - both.
  • license.post - both.
  • license.post_start_basic - both.
  • license.post_start_trial - both.
  • security.get_settings - master_timeout.
  • security.update_settings - both.
  • shutdown.get_node - master_timeout.
  • snapshot_lifecycle_management.start - both.
  • snapshot_lifecycle_management.stop - both.
  • watcher.get_settings - master_timeout.
  • watcher.start - master_timeout.
  • watcher.stop - master_timeout.
  • watcher.update_settings - both.
Inference APIs have been renamed:
  • inference.delete_model => inference.delete. Also adds two new parameters:

... (truncated)

Commits
  • 2acbce7 [DOCS] Adds release notes for 8.16
  • f22947f Test Runner: Updates skipped tests
  • c12ed9c [CI] Updates GitHub Actions, drops Ruby 3.0 for testing
  • 6d2a252 [API] Promotes data lifecycle APIs from experimental to stable
  • 0074671 Tests: suppress printing out every skipped test in report
  • eaadd15 Raise exception in test runner
  • c6709b9 [API] Adds ignore 404 parameter to query_rules.delete_ruleset
  • 04b8450 [API] Adds query_rules.test API
  • 1cf25c0 Updates elasticsearch path in api Gemfile
  • cdec425 Test Runner: Skips geoip tests
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)