2026-01-21 Meeting Notes

Date

21 Jan 2026

Notification thread

TODO

Meeting Link

https://meet.google.com/mzq-iwcc-xvw

Attendees

• Jason Gerlowski (Organizer)
• Adam Quigley
• Andrey Ukhanov
• Anshum Gupta
• Bryan Jacobowitz
• Carlos Ugarte
• Chris Hostetter
• David Smiley
• Dewane Woodley
• Gus Heck
• Houston Putman
• Jude Muriithi
• Ken LaPorte
• Kevin Risden
• Luke Kot-Zaniewski
• Michael Gibney
• Michael Gibney
• Pierre Salagnac
• Rahul Goswami

Discussion Topics

• • Solr 9.10.1 Release and * ahem * security implications (Jason)
    • https://solr.apache.org/security.html#cve-2026-22022-unauthorized-bypass-of-certain-predefined-permission-rules-in-the-rulebasedauthorizationplugin
    • https://solr.apache.org/security.html#cve-2026-22444-insufficient-file-access-checking-in-standalone-core-creation-requests 
  • Solr 10.0 RC (Anshum)
    • New RC coming today (previous one will be deleted)
  • Vector use cases / adoption (Christopher)
  • Solr 9.11 (David)
    • 10.0 should not prevent 9.11 release
    • David might volunteer as RM
  • Read-only issues (Houston)
    • Restarting a node for collection in read-only
    • Replication issues in read-only
    • Should setting this specific cluster property invoke a commit?
  • "Stand-alone mode" terminology (David)
    • Preferred by some over "user-managed"
  • RequestFilters (Gus)
    • "Bookkeeping" filters such as tracing, rate-limiting, etc
  • AuthN/AuthZ plugins (Gus)
    • Do we need a new Auth scheme? Current one has challenges and security implications
    • Apache Shiro?
  • Community Over Code 2026 (Eric via Jason)
    • Oct 11-14, 2026
    • Glasgow, Scotland
    • https://communityovercode.org/
  • Berlin Buzzwords (Rahul)
    • June 7-9, 2026
    • Berlin, Germany
    • https://2026.berlinbuzzwords.de/

Post-Meeting Summary