Skip to content
This repository has been archived by the owner on Sep 22, 2023. It is now read-only.

Bump redis from 4.4.0 to 4.5.5 #1014

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 8, 2023

Bumps redis from 4.4.0 to 4.5.5.

Release notes

Sourced from redis's releases.

4.5.5

Changes

🚀 New Features

  • Add support for CLIENT NO-TOUCH (#2745)
  • Add support for CLUSTER MYSHARDID (#2704)
  • Add "address_remap" feature to RedisCluster (#2726)
  • Add WITHSCORES argument to ZREVRANK command (#2725)
  • Improve error output for master discovery (#2720)

🐛 Bug Fixes

  • Fix XADD: allow non negative maxlen (#2739)
  • Fix create single connection client from url (#2752)
  • Optionally disable disconnects in read_response (#2695)
  • Fix SLOWLOG GET return value (#2732)
  • Fix potential race condition during disconnection (#2719)
  • Return response in case of KeyError (#2628)
  • Fix incorrect usage of once flag in async Sentinel (#2718)
  • Fix memory leak caused by hiredis in asyncio case (#2694)
  • Really do not use asyncio's timeout lib before 3.11.2 (#2699)

🧰 Maintenance

  • Clean PytestUnraisableExceptionWarning from asycio client (#2731)
  • Add RedisCluster.remap_host_port, Update tests for CWE 404 (#2706)
  • Updated AWS Elasticache IAM connection example (#2702)
  • Update CONTRIBUTING guidelines (#2736)
  • Fix ClusterCommandProtocol type (#2729)
  • Fix TOPK list example. (#2724)
  • Improving vector similarity search example (#2661)
  • Update example of Redisearch creating index (#2703)

Contributors

We'd like to thank all the contributors who worked on this release!

@​AYMENJD, @​Anthchirp, @​Avasam, @​NickG123, @​SoulPancake, @​aciddust, @​chayim, @​cristianmatache, @​dvora-h, @​felipou, @​kristjanvalur, @​mirekdlugosz, @​mzdehbashi-github, @​oranav, @​scoopex, @​shacharPash and @​tylerhutcherson

4.5.4

Changes

Upgrade urgency: SECURITY, contains fixes to security issues.

  • (CVE-2023-28859) - Cancelling an async future does not, properly trigger, leading to a potential data leak in specific cases.
  • (CVE-2023-28858) - Cancelling an async future does not, properly trigger, leading to a potential data leak in specific cases.

🐛 Bug Fixes

  • Fixing cancelled async futures (#2666)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [redis](https://github.com/redis/redis-py) from 4.4.0 to 4.5.5.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v4.4.0...v4.5.5)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 8, 2023
@dependabot dependabot bot requested a review from izzy64 as a code owner May 8, 2023 15:57
@dependabot dependabot bot added the python Pull requests that update Python code label May 8, 2023
@dependabot dependabot bot requested review from jsf9k and mcdonnnj as code owners May 8, 2023 15:57
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants