v5.3

Note: Triggers full index rebuild

This release contains the usual round of upgrades to our whole stack, as well as the following changes and improvements:

• we've removed the matcher and features fields from /match API responses. Information equivalent to the matcher field is available via the /algorithms route. To replace features, the explanations field has been added a while ago that is a strict superset of features. In addition to the partial scores produced by each component of the matching system, it includes textual descriptions of the matching decisions from each of these subsystems.
• a bunch of improvements around failures in clone_index, which is used when yente updates its index to a new version using delta files. A failed clone would previously leave the system in a stuck state which would have to be fixed manually. Thanks @dimoschi for finding this bug, investigating and collaborating on the resolution!

Just as a heads-up: Elasticsearch 8 is nearing its end of life in January 2027. We will release the last version of yente that is compatible with Elasticsearch 8 servers in May 2026. We've added a section on that transition in the documentation. TL;DR: upgrade your Elastic server to 8.19.13 first, restart Elastic, then upgrade to 9.x, restart Elastic, and all should go smoothly - please let us know if not! Consequently, we've set the version of the Elastic server in the docker-compose.yml to 8.19.13 for now.

As usual, this release contains updates to our whole stack, including an upgrade of the cryptography package to 46.0.6.

What's Changed

• build(deps): bump orjson from 3.11.5 to 3.11.6 by @dependabot[bot] in #1010
• provider: get rid of YENTE_QUERY_CONCURRENCY env variable and sempahore by @leonhandreke in #1014
• build(deps): bump rigour from 1.6.2 to 1.7.0 by @dependabot[bot] in #1017
• build(deps): bump fastapi from 0.128.0 to 0.128.2 by @dependabot[bot] in #1018
• build(deps): bump orjson from 3.11.6 to 3.11.7 by @dependabot[bot] in #1013
• build(deps): bump nomenklatura from 4.6.0 to 4.6.2 by @dependabot[bot] in #1016
• build(deps): bump followthemoney from 4.5.0 to 4.5.2 by @dependabot[bot] in #1012
• build(deps): bump fastapi from 0.128.2 to 0.129.0 by @dependabot[bot] in #1030
• build(deps): bump rigour from 1.7.0 to 1.7.2 by @dependabot[bot] in #1026
• build(deps): bump cryptography from 46.0.4 to 46.0.5 by @dependabot[bot] in #1024
• build(deps): bump pyicu from 2.16 to 2.16.1 by @dependabot[bot] in #1019
• build(deps): bump nomenklatura from 4.6.2 to 4.6.5 by @dependabot[bot] in #1031
• build(deps): bump followthemoney from 4.5.2 to 4.5.3 by @dependabot[bot] in #1035
• Log ES score vs. algo score data by @pudo in #1027
• Fix opensearch timeout: use timeout= not request_timeout= by @leonhandreke in #1040
• build(deps): bump fastapi from 0.129.0 to 0.133.1 by @dependabot[bot] in #1045
• build(deps): bump uvicorn[standard] from 0.40.0 to 0.41.0 by @dependabot[bot] in #1037
• [2026-03-02] Remove features and matcher from responses by @pudo in #1047
• build(deps): bump fastapi from 0.133.1 to 0.135.1 by @dependabot[bot] in #1050
• Delivery token docs by @goose-life in #1049
• fix: restore base index write access even when clone fails by @leonhandreke in #1041
• build(deps): bump uvicorn[standard] from 0.41.0 to 0.42.0 by @dependabot[bot] in #1067
• build(deps): bump rigour from 1.7.2 to 1.7.5 by @dependabot[bot] in #1061
• build(deps): bump normality from 3.0.2 to 3.1.0 by @dependabot[bot] in #1062
• build(deps): bump nomenklatura from 4.7.0 to 4.7.3 by @dependabot[bot] in #1075
• build(deps): bump pyicu from 2.16.1 to 2.16.2 by @dependabot[bot] in #1072
• build(deps): bump fastapi from 0.135.1 to 0.135.2 by @dependabot[bot] in #1074
• build(deps): bump asyncstdlib from 3.13.1 to 3.14.0 by @dependabot[bot] in #1071
• docs: add Elasticsearch 8 to 9 upgrade guide by @leonhandreke in #1076
• build(deps): bump followthemoney from 4.5.3 to 4.7.0 by @dependabot[bot] in #1069
• build(deps): bump anyio from 4.12.1 to 4.13.0 by @dependabot[bot] in #1077
• build(deps): bump aiohttp from 3.13.3 to 3.13.5 by @dependabot[bot] in #1084
• build(deps): bump orjson from 3.11.7 to 3.11.8 by @dependabot[bot] in #1083
• build(deps): bump cryptography from 46.0.5 to 46.0.6 by @dependabot[bot] in #1078
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1059
• build(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #1057
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1054
• build(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1058
• build(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #1053

New Contributors

• @goose-life made their first contribution in #1049
• @dimoschi

Full Changelog: v5.2.0...v5.3.0