elastic · charlotte-hoblik · Oct 6, 2025 · Oct 3, 2025
diff --git a/docs/release-notes/breaking-changes.md b/docs/release-notes/breaking-changes.md
@@ -19,6 +19,13 @@ stack: ga 9.0.8
 
 There are no breaking changes associated with this release.
 
+## 9.1.5 [elasticsearch-9.1.5-breaking-changes]
+```{applies_to}
+stack: ga 9.1.5
+```
+
+There are no breaking changes associated with this release.
+
 ## 9.1.4 [elasticsearch-9.1.4-breaking-changes]
 
 There are no breaking changes associated with this release.

diff --git a/docs/release-notes/changelog-bundles/9.1.5.yml b/docs/release-notes/changelog-bundles/9.1.5.yml
@@ -0,0 +1,142 @@
+version: 9.1.5
+released: false
+generated: 2025-10-03T13:40:06.241618847Z
+changelogs:
+  - pr: 134461
+    summary: Propagates filter() to aggregation functions' surrogates
+    area: Aggregations
+    type: bug
+    issues:
+      - 134380
+  - pr: 134582
+    summary: Fixed match only text block loader not working when a keyword multi field is present
+    area: Mapping
+    type: bug
+    issues: []
+  - pr: 134636
+    summary: "[Island Browser] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third party agent indices `kibana_system`"
+    area: Authorization
+    type: enhancement
+    issues:
+      - 134136
+  - pr: 134656
+    summary: Fix deadlock in `ThreadPoolMergeScheduler` when a failing merge closes the `IndexWriter`
+    area: Engine
+    type: bug
+    issues: []
+  - pr: 134673
+    summary: Gracefully shutdown model deployment when node is removed from assignment routing
+    area: Machine Learning
+    type: bug
+    issues: []
+  - pr: 134790
+    summary: "Bug fix: Facilitate second retrieval of the same value"
+    area: Infra/Core
+    type: bug
+    issues:
+      - 134770
+  - pr: 134887
+    summary: Avoid holding references to `SearchExecutionContext` in `SourceConfirmedTextQuery`
+    area: Mapping
+    type: bug
+    issues: []
+  - pr: 134955
+    summary: Prevent Transform from queuing too many PIT close requests by waiting for PIT to close before finishing the checkpoint
+    area: Transform
+    type: bug
+    issues:
+      - 134925
+  - pr: 134963
+    summary: Fix a bug in the GET _transform API that incorrectly claims some Transform configurations are missing
+    area: Transform
+    type: bug
+    issues:
+      - 134263
+  - pr: 135012
+    summary: Bypass MMap arena grouping as this has caused issues with too many regions being mapped
+    area: Engine
+    type: bug
+    issues: []
+  - pr: 135051
+    summary: Ban Limit + `MvExpand` before remote Enrich
+    area: ES|QL
+    type: bug
+    issues: []
+    highlight:
+      notable: false
+      title: Prevent LIMIT + MV_EXPAND before remote ENRICH
+      body: |-
+        Queries using LIMIT followed by MV_EXPAND before a remote ENRICH can produce incorrect results due to distributed execution semantics.
+        These queries are now unsupported and produce an error. Example:
+        [source,yaml]
+        ----------------------------
+        FROM *:events | SORT @timestamp | LIMIT 2 | MV_EXPAND ip | ENRICH _remote:clientip_policy ON ip
+        ----------------------------
+        To avoid this error, reorder your query, for example by moving ENRICH earlier in the pipeline.
+      pr: 135051
+  - pr: 135078
+    summary: Fix async get results with inconsistent headers
+    area: ES|QL
+    type: bug
+    issues:
+      - 135042
+  - pr: 135096
+    summary: Tolerate mixed types in datafeed stats sort
+    area: Machine Learning
+    type: bug
+    issues: []
+  - pr: 135176
+    summary: '`CentroidCalculator` does not return negative summation weights'
+    area: Geo
+    type: bug
+    issues:
+      - 131861
+  - pr: 135209
+    summary: Fix expiration time in ES|QL async
+    area: ES|QL
+    type: bug
+    issues:
+      - 135169
+  - pr: 135235
+    summary: Fix systemd notify to use a shared arena
+    area: Infra/Node Lifecycle
+    type: bug
+    issues: []
+  - pr: 135270
+    summary: Add .reindexed-v7-ml-anomalies-* to anomaly results template index pattern
+    area: Machine Learning
+    type: bug
+    issues: []
+  - pr: 135414
+    summary: "Change reindex to use ::es-redacted:: filtering"
+    area: Audit
+    type: enhancement
+    issues: []
+  - pr: 135479
+    summary: Correctly apply field path to JSON processor when adding contents to document root
+    area: Ingest Node
+    type: bug
+    issues: []
+  - pr: 135505
+    summary: Address es819 tsdb doc values format performance bug
+    area: Codec
+    type: bug
+    issues:
+      - 135340
+  - pr: 135653
+    summary: Reset health status on successful empty checkpoint
+    area: Machine Learning
+    type: bug
+    issues:
+      - 135650
+  - pr: 135776
+    summary: Fix KQL case-sensitivity for keyword fields in ES|QL
+    area: Search
+    type: bug
+    issues:
+      - 135772
+  - pr: 135845
+    summary: Fix for creating semantic_text fields on pre-8.11 indices crashing Elasticsearch
+    area: Mapping
+    type: bug
+    issues: []
diff --git a/docs/release-notes/deprecations.md b/docs/release-notes/deprecations.md
@@ -23,6 +23,13 @@ stack: ga 9.0.8
 
 There are no deprecations associated with this release.
 
+## 9.1.5 [elasticsearch-9.1.5-deprecations]
+```{applies_to}
+stack: ga 9.1.5
+```
+
+There are no deprecations associated with this release.
+
 ## 9.1.4 [elasticsearch-9.1.4-deprecations]
 
 There are no deprecations associated with this release.

diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md
@@ -20,6 +20,80 @@ To check for security updates, go to [Security announcements for the Elastic sta
 % ### Fixes [elasticsearch-next-fixes]
 % *
 
+## 9.1.5 [elasticsearch-9.1.5-release-notes]
+```{applies_to}
+stack: ga 9.1.5
+```
+
+### Highlights [elasticsearch-9.1.5-highlights]
+
+::::{dropdown} Prevent LIMIT + MV_EXPAND before remote ENRICH
+Queries using LIMIT followed by MV_EXPAND before a remote ENRICH can produce incorrect results due to distributed execution semantics.
+These queries are now unsupported and produce an error. Example:
+
+```yaml
+FROM *:events | SORT @timestamp | LIMIT 2 | MV_EXPAND ip | ENRICH _remote:clientip_policy ON ip
+```
+
+To avoid this error, reorder your query, for example by moving ENRICH earlier in the pipeline.
+::::
+
+### Features and enhancements [elasticsearch-9.1.5-features-enhancements]
+
+Audit:
+* Change reindex to use ::es-redacted:: filtering [#135414](https://github.com/elastic/elasticsearch/pull/135414)
+
+Authorization:
+* [Island Browser] Add `manage`, `create_index`, `read`, `index`, `write`, `delete`, permission for third party agent indices `kibana_system` [#134636](https://github.com/elastic/elasticsearch/pull/134636) (issue: [#134136](https://github.com/elastic/elasticsearch/issues/134136))
+
+
+### Fixes [elasticsearch-9.1.5-fixes]
+
+Aggregations:
+* Propagates filter() to aggregation functions' surrogates [#134461](https://github.com/elastic/elasticsearch/pull/134461) (issue: [#134380](https://github.com/elastic/elasticsearch/issues/134380))
+
+Codec:
+* Address es819 tsdb doc values format performance bug [#135505](https://github.com/elastic/elasticsearch/pull/135505) (issue: [#135340](https://github.com/elastic/elasticsearch/issues/135340))
+
+ES|QL:
+* Ban Limit + `MvExpand` before remote Enrich [#135051](https://github.com/elastic/elasticsearch/pull/135051)
+* Fix async get results with inconsistent headers [#135078](https://github.com/elastic/elasticsearch/pull/135078) (issue: [#135042](https://github.com/elastic/elasticsearch/issues/135042))
+* Fix expiration time in ES|QL async [#135209](https://github.com/elastic/elasticsearch/pull/135209) (issue: [#135169](https://github.com/elastic/elasticsearch/issues/135169))
+
+Engine:
+* Bypass MMap arena grouping as this has caused issues with too many regions being mapped [#135012](https://github.com/elastic/elasticsearch/pull/135012)
+* Fix deadlock in `ThreadPoolMergeScheduler` when a failing merge closes the `IndexWriter` [#134656](https://github.com/elastic/elasticsearch/pull/134656)
+
+Geo:
+* `CentroidCalculator` does not return negative summation weights [#135176](https://github.com/elastic/elasticsearch/pull/135176) (issue: [#131861](https://github.com/elastic/elasticsearch/issues/131861))
+
+Infra/Core:
+* Bug fix: Facilitate second retrieval of the same value [#134790](https://github.com/elastic/elasticsearch/pull/134790) (issue: [#134770](https://github.com/elastic/elasticsearch/issues/134770))
+
+Infra/Node Lifecycle:
+* Fix systemd notify to use a shared arena [#135235](https://github.com/elastic/elasticsearch/pull/135235)
+
+Ingest Node:
+* Correctly apply field path to JSON processor when adding contents to document root [#135479](https://github.com/elastic/elasticsearch/pull/135479)
+
+Machine Learning:
+* Add .reindexed-v7-ml-anomalies-* to anomaly results template index pattern [#135270](https://github.com/elastic/elasticsearch/pull/135270)
+* Gracefully shutdown model deployment when node is removed from assignment routing [#134673](https://github.com/elastic/elasticsearch/pull/134673)
+* Reset health status on successful empty checkpoint [#135653](https://github.com/elastic/elasticsearch/pull/135653) (issue: [#135650](https://github.com/elastic/elasticsearch/issues/135650))
+* Tolerate mixed types in datafeed stats sort [#135096](https://github.com/elastic/elasticsearch/pull/135096)
+
+Mapping:
+* Avoid holding references to `SearchExecutionContext` in `SourceConfirmedTextQuery` [#134887](https://github.com/elastic/elasticsearch/pull/134887)
+* Fix for creating semantic_text fields on pre-8.11 indices crashing Elasticsearch [#135845](https://github.com/elastic/elasticsearch/pull/135845)
+* Fixed match only text block loader not working when a keyword multi field is present [#134582](https://github.com/elastic/elasticsearch/pull/134582)
+
+Search:
+* Fix KQL case-sensitivity for keyword fields in ES|QL [#135776](https://github.com/elastic/elasticsearch/pull/135776) (issue: [#135772](https://github.com/elastic/elasticsearch/issues/135772))
+
+Transform:
+* Fix a bug in the GET _transform API that incorrectly claims some Transform configurations are missing [#134963](https://github.com/elastic/elasticsearch/pull/134963) (issue: [#134263](https://github.com/elastic/elasticsearch/issues/134263))
+* Prevent Transform from queuing too many PIT close requests by waiting for PIT to close before finishing the checkpoint [#134955](https://github.com/elastic/elasticsearch/pull/134955) (issue: [#134925](https://github.com/elastic/elasticsearch/issues/134925))
+
 ## 9.0.8 [elasticsearch-9.0.8-release-notes]
 ```{applies_to}
 stack: ga 9.0.8
@@ -1935,6 +2009,4 @@ Vector Search:
 * Return appropriate error on null dims update instead of npe [#125716](https://github.com/elastic/elasticsearch/pull/125716)
 
 Watcher:
-* Watcher history index has too many indexed fields - [#117701](https://github.com/elastic/elasticsearch/pull/117701) (issue: [#71479](https://github.com/elastic/elasticsearch/issues/71479))
-
-
+* Watcher history index has too many indexed fields - [#117701](https://github.com/elastic/elasticsearch/pull/117701) (issue: [#71479](https://github.com/elastic/elasticsearch/issues/71479))