Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
219 changes: 219 additions & 0 deletions release-notes/opensearch-release-notes-2.19.3.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,219 @@
# OpenSearch and OpenSearch Dashboards 2.19.3 Release Notes

## Release Details

[OpenSearch and OpenSearch Dashboards 2.19.3](https://opensearch.org/versions/opensearch-2-19-3.html) includes the following bug fixes, infrastructure, documentation and maintenance updates.

OpenSearch [Release Notes](https://github.com/opensearch-project/OpenSearch/blob/2.19/release-notes/opensearch.release-notes-2.19.3.md).

OpenSearch Dashboards [Release Notes](https://github.com/opensearch-project/OpenSearch-Dashboards/blob/2.19/release-notes/opensearch-dashboards.release-notes-2.19.3.md).


## ENHANCEMENTS


### Opensearch Flow Framework


* Fix ApiSpecFetcher Memory Issues and Exception Handling ([#1192](https://github.com/opensearch-project/flow-framework/pull/1192))


* Better handling of Workflow Steps with Bad Request status ([#1191](https://github.com/opensearch-project/flow-framework/pull/1191))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Patch releases should have an enhancements. Check with the owners for right category please.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Which category do you recommend, will change it for the consolidated ones, component can be tracked separately.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ohltyler @owaiskazi @dbwiddis Can you guys recommend? I believe bug fix and refactoring should be the okay. Please correct if I am wrong.
Thanks!

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug fix



## BUG FIXES


### Opensearch Alerting


* Backports #1850, #1854, #1856 to 2.19 ([#1858](https://github.com/opensearch-project/common-utils/pull/1858))


### Opensearch Query Insights


* Asynchronous search operations in reader ([#363](https://github.com/opensearch-project/query-insights/pull/363))


### Opensearch Query Insights Dashboards


* [BUG FIX] Enable Correct Sorting for Metrics in Query Insights Dashboard + dependent PRs ([#201](https://github.com/opensearch-project/query-insights-dashboards/pull/201))
* [Bug Fix] Window size changing unexpectedly ([#203](https://github.com/opensearch-project/query-insights-dashboards/pull/203))
* [Fix] Ensure accurate time filtering for Top Queries in OpenSearch 2.19+ ([#249](https://github.com/opensearch-project/query-insights-dashboards/pull/249))
* Ensure accurate time filtering for Top Queries in OpenSearch 2.19 + revert [#219] ([#274](https://github.com/opensearch-project/query-insights-dashboards/pull/274))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Ensure accurate time filtering for Top Queries in OpenSearch 2.19 + revert [#219] ([#274](https://github.com/opensearch-project/query-insights-dashboards/pull/274))
* Ensure accurate time filtering for Top Queries in OpenSearch 2.19 + revert [#219](https://github.com/opensearch-project/query-insights-dashboards/pull/219) ([#274](https://github.com/opensearch-project/query-insights-dashboards/pull/274))

* Search bar fix ([#277](https://github.com/opensearch-project/query-insights-dashboards/pull/277))
* [Fix] Explicitly match query by id and fix q scope in retrieveQueryById ([#269](https://github.com/opensearch-project/query-insights-dashboards/pull/269))


### Opensearch Remote Metadata Sdk


* Make generated responses robust to URL encoded id and index values ([#156](https://github.com/opensearch-project/opensearch-remote-metadata-sdk/pull/156))


* Validate request fields in DDB Put and Update implementations ([#157](https://github.com/opensearch-project/opensearch-remote-metadata-sdk/pull/157))
* Properly handle remote client search failures with status codes ([#158](https://github.com/opensearch-project/opensearch-remote-metadata-sdk/pull/158))


### SQL


* Fix: Date field format parsing for legacy query engine ([#3160](https://github.com/opensearch-project/sql/pull/3160))


## INFRASTRUCTURE


### SQL


* Increment version to 2.19.3-SNAPSHOT ([#3601](https://github.com/opensearch-project/sql/pull/3601))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this required? We might need to add for all components right?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Divyaasm Lets remove it form here

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not mandatory for patch right? We only include this if it's part of component release notes



## DOCUMENTATION


### Opensearch Alerting


* Added 2.19.3.0 release notes. ([#1897](https://github.com/opensearch-project/common-utils/pull/1897))


### Opensearch Alerting Dashboards Plugin


* Added 2.19.3 release notes. ([#1269](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1269))


### Opensearch Common Utils


* Added 2.19.3.0 release notes. ([#854](https://github.com/opensearch-project/common-utils/pull/854))


### Opensearch Query Insights


* 2.19.3 Release Notes ([#386](https://github.com/opensearch-project/query-insights/pull/386))


### Opensearch Query Insights Dashboards


* 2.19.3 Release Notes ([#280](https://github.com/opensearch-project/query-insights-dashboards/pull/280))


## MAINTENANCE


### Opensearch Alerting


* Pinned the commons-beanutils dependency to 1.11.0 version ([#1887](https://github.com/opensearch-project/common-utils/pull/1887))
* [2.19] Moved the commons-beanutils pinning to the core gradle file ([#1893](https://github.com/opensearch-project/common-utils/pull/1893))


### Opensearch Alerting Dashboards Plugin


* Fix CVE ([#1268](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1268))


### Opensearch Anomaly Detection
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### Opensearch Anomaly Detection
### OpenSearch Anomaly Detection



* Migrating from commons-lang2.6 to commons-lang3.18 ([#1526](https://github.com/opensearch-project/anomaly-detection/pull/1526))


### Opensearch Anomaly Detection Dashboards
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### Opensearch Anomaly Detection Dashboards
### OpenSearch Anomaly Detection Dashboards



* Bump elliptic to 6.6.1 ([#1062](https://github.com/opensearch-project/anomaly-detection-dashboards-plugin/pull/1062))


### Opensearch Common Utils
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### Opensearch Common Utils
### OpenSearch Common Utils



* Increment version to 2.19.3-SNAPSHOT ([#826](https://github.com/opensearch-project/common-utils/pull/826))
* Pinned the commons-beanutils dependency to fix CVE-2025-48734 ([#850](https://github.com/opensearch-project/common-utils/pull/850))


## Bug fix


* validate that index patterns are not allowed in create/update doc level monitor ([#829](https://github.com/opensearch-project/common-utils/pull/829))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* validate that index patterns are not allowed in create/update doc level monitor ([#829](https://github.com/opensearch-project/common-utils/pull/829))
* Validate that index patterns are not allowed in create/update doc level monitor ([#829](https://github.com/opensearch-project/common-utils/pull/829))

* Fix isDocLevelMonitor check to account for threat intel monitor ([#835](https://github.com/opensearch-project/common-utils/pull/835))
* updating PublishFindingsRequest to use a list of findings rather than... ([#832](https://github.com/opensearch-project/common-utils/pull/832))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* updating PublishFindingsRequest to use a list of findings rather than... ([#832](https://github.com/opensearch-project/common-utils/pull/832))
* Updating PublishFindingsRequest to use a list of findings rather than... ([#832](https://github.com/opensearch-project/common-utils/pull/832))

* Revert "updating PublishFindingsRequest to use a list of findings" ([#842](https://github.com/opensearch-project/common-utils/pull/842))


### Opensearch Index Management


* Increment version to 2.19.3-SNAPSHOT ([#1420](https://github.com/opensearch-project/index-management/pull/1420))


### Opensearch Index Management Dashboards Plugin


* Increment version to 2.19.3.0 ([#1320](https://github.com/opensearch-project/index-management-dashboards-plugin/pull/1320))
* Fixed CVE: babel dependencies & elliptic dependency ([#1329](https://github.com/opensearch-project/index-management-dashboards-plugin/pull/1329))


### Opensearch ML Common


* Force commons-beanutils to 1.11.0 ([#4000](https://github.com/opensearch-project/ml-commons/pull/4000))
* Force runtime class path commons-beanutils:commons-beanutils:1.11.0 to avoid transitive dependency ([#3935](https://github.com/opensearch-project/ml-commons/pull/3935))
* Fix commons-beanutils ([#3996](https://github.com/opensearch-project/ml-commons/pull/3996))
* Exclude commons-beanutils ([#3991](https://github.com/opensearch-project/ml-commons/pull/3991))
* Fix CVE-2025-48734 ([#3986](https://github.com/opensearch-project/ml-commons/pull/3986))
* Fix CVE-2025-48924 ([#3985](https://github.com/opensearch-project/ml-commons/pull/3985))
* Fix CVE-2025-27820 ([#3984](https://github.com/opensearch-project/ml-commons/pull/3984))
* Update the maven snapshot publish endpoint and credential ([#3955](https://github.com/opensearch-project/ml-commons/pull/3955))
* Adds Json Parsing to nested object during update Query step in ML Inference Request processor ([#3868](https://github.com/opensearch-project/ml-commons/pull/3868))


### Opensearch Neural Search


* Use latest json-smart lib ([#1223](https://github.com/opensearch-project/neural-search/pull/1223))


### Opensearch Performance Analyzer


* Java version bump ([#828](https://github.com/opensearch-project/performance-analyzer/pull/828))
* Spotbug version bump ([#828](https://github.com/opensearch-project/performance-analyzer/pull/828))
* checkstyle version bump ([#828](https://github.com/opensearch-project/performance-analyzer/pull/828))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* checkstyle version bump ([#828](https://github.com/opensearch-project/performance-analyzer/pull/828))
* Checkstyle version bump ([#828](https://github.com/opensearch-project/performance-analyzer/pull/828))



### Opensearch Query Insights


* Fix CVE-2025-27820 and CVE-2025-48734 ([#383](https://github.com/opensearch-project/query-insights/pull/383))


### Opensearch Query Insights Dashboards


* Increment version to 2.19.3.0 ([#207](https://github.com/opensearch-project/query-insights-dashboards/pull/207))
* Fix CVE-2024-21538 & CVE-2025-27789 on 2.19 ([#260](https://github.com/opensearch-project/query-insights-dashboards/pull/260))
* CVE-2020-28469 updated package.json and yarn.lock ([#272](https://github.com/opensearch-project/query-insights-dashboards/pull/272))


### Opensearch Security


* Bump `com.nimbusds:nimbus-jose-jwt:9.48` from 9.48 to 10.0.2 ([#5480](https://github.com/opensearch-project/security/pull/5480))


* Bump `checkstyle` from 10.3.3 to 10.26.1 ([#5480](https://github.com/opensearch-project/security/pull/5480))
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Bump `com.nimbusds:nimbus-jose-jwt:9.48` from 9.48 to 10.0.2 ([#5480](https://github.com/opensearch-project/security/pull/5480))
* Bump `checkstyle` from 10.3.3 to 10.26.1 ([#5480](https://github.com/opensearch-project/security/pull/5480))
* Bump `com.nimbusds:nimbus-jose-jwt:9.48` from 9.48 to 10.0.2 ([#5480](https://github.com/opensearch-project/security/pull/5480))
* Bump `checkstyle` from 10.3.3 to 10.26.1 ([#5480](https://github.com/opensearch-project/security/pull/5480))



### SQL


* Remove unneeded dependency on commons-validator ([#3887](https://github.com/opensearch-project/sql/pull/3887))