kontakt/shiftregister
3
0
Fork 0
Code Issues Pull requests 6 Projects Wiki Activity

chore(deps): update valkey/valkey docker tag to v9.1.1 #81

Open
renovate wants to merge 1 commit from renovate/valkey-valkey-9-x into main
pull from: renovate/valkey-valkey-9-x
merge into: kontakt:main
Conversation 0 Commits 1 Files changed 2 +2 -2
renovate commented 2026-07-22 05:00:56 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
valkey/valkey patch 9.1.0-alpine → 9.1.1-alpine

Release Notes

valkey-io/valkey (valkey/valkey)

v9.1.1

Compare Source

Valkey 9.1.1 - Released Tue 21 July 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes
  • CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#​4234)
  • CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @​z0v3r1n and @​lifip. (#​4073)
Bug Fixes
  • Omit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and CONFIG REWRITE so older versions can parse the output by @​dvkashapov (#​3964)
  • Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by @​roshkhatri (#​3938)
  • Fix use-after-free crash when ACL LOAD removes a user whose authenticated client has its close deferred by @​ranshid (#​3800)
  • Enforce db= ACL permissions on every DB clause of COPY, closing a bypass with REPLACE or repeated DB tokens by @​enjoy-binbin (#​3801)
  • Enforce database-level ACLs for CLUSTER FLUSHSLOT, which removes keys from all databases by @​enjoy-binbin (#​3806)
  • Fix use-after-free in the module API when unregistering the first registered cluster message receiver by @​eifrah-aws (#​3846)
  • Fix HRANDFIELD with a positive count looping forever when non-expired fields are fewer than the requested count by @​cjx-zar (#​4047)
  • Fix clients left on the wrong database after module keyspace notifications for MOVE and COPY by @​enjoy-binbin (#​4024)
  • Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by @​lukepalmer (#​4068)
  • Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by @​ranshid (#​3950)
  • Fix assertion in HEXPIRE, HGETDEL and HPERSIST when a module blocks the client in a keyspace notification callback by @​enjoy-binbin (#​3743)
  • Fix undefined behavior in the failover delay calculation when cluster-node-timeout is below 30 milliseconds by @​enjoy-binbin (#​3941)
  • Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @​madolson (#​3920)
  • Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by @​madolson (#​3921)
  • Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by @​nanyan0312 (#​4060)
  • Fix startup crash on 32-bit systems where time_t is 64-bit (such as Alpine 3.23) when generating INFO output by @​chenshi5012 (#​3787)
  • HGETDEL now returns a syntax error when the FIELDS keyword is missing or misplaced by @​lcxn123 (#​4049)
  • COMMAND INFO in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by @​rickrams (#​3939)
  • Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by @​hpatro (#​4105)
  • Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by @​chx9 (#​3723)
  • Reject control characters in SENTINEL SET values to prevent config-file injection via Sentinel config rewrite by @​eifrah-aws (#​3847)
  • Reject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf injection by @​eifrah-aws (#​3848)
  • Redact key names and user data from more server log messages when hide-user-data-from-log is enabled by @​zackcam (#​3872)
  • ACL LOG now reports the denied database ID for COPY instead of the command name when db= access is denied by @​enjoy-binbin (#​3888)
  • Fix garbled shard IDs in the cluster UPDATE message log line by @​enjoy-binbin (#​3942)
  • Fix negative master_sync_total_bytes in INFO replication during disk-based sync when the RDB exceeds 2GB by @​chx9 (#​3811)
  • Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @​pkhartsk (#​3843)

Full Changelog: https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [valkey/valkey](https://github.com/valkey-io/valkey) | patch | `9.1.0-alpine` → `9.1.1-alpine` | --- ### Release Notes <details> <summary>valkey-io/valkey (valkey/valkey)</summary> ### [`v9.1.1`](https://github.com/valkey-io/valkey/releases/tag/9.1.1) [Compare Source](https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1) ## Valkey 9.1.1 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. ##### Security Fixes - CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL ([#&#8203;4234](https://github.com/valkey-io/valkey/issues/4234)) - CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by [@&#8203;z0v3r1n](https://github.com/z0v3r1n) and [@&#8203;lifip](https://github.com/lifip). ([#&#8203;4073](https://github.com/valkey-io/valkey/issues/4073)) ##### Bug Fixes - Omit the implicit `alldbs` ACL rule from `ACL LIST`, `ACL SAVE` and `CONFIG REWRITE` so older versions can parse the output by [@&#8203;dvkashapov](https://github.com/dvkashapov) ([#&#8203;3964](https://github.com/valkey-io/valkey/issues/3964)) - Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by [@&#8203;roshkhatri](https://github.com/roshkhatri) ([#&#8203;3938](https://github.com/valkey-io/valkey/issues/3938)) - Fix use-after-free crash when `ACL LOAD` removes a user whose authenticated client has its close deferred by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;3800](https://github.com/valkey-io/valkey/issues/3800)) - Enforce `db=` ACL permissions on every DB clause of `COPY`, closing a bypass with `REPLACE` or repeated DB tokens by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3801](https://github.com/valkey-io/valkey/issues/3801)) - Enforce database-level ACLs for `CLUSTER FLUSHSLOT`, which removes keys from all databases by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3806](https://github.com/valkey-io/valkey/issues/3806)) - Fix use-after-free in the module API when unregistering the first registered cluster message receiver by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3846](https://github.com/valkey-io/valkey/issues/3846)) - Fix `HRANDFIELD` with a positive count looping forever when non-expired fields are fewer than the requested count by [@&#8203;cjx-zar](https://github.com/cjx-zar) ([#&#8203;4047](https://github.com/valkey-io/valkey/issues/4047)) - Fix clients left on the wrong database after module keyspace notifications for `MOVE` and `COPY` by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4024](https://github.com/valkey-io/valkey/issues/4024)) - Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by [@&#8203;lukepalmer](https://github.com/lukepalmer) ([#&#8203;4068](https://github.com/valkey-io/valkey/issues/4068)) - Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;3950](https://github.com/valkey-io/valkey/issues/3950)) - Fix assertion in `HEXPIRE`, `HGETDEL` and `HPERSIST` when a module blocks the client in a keyspace notification callback by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3743](https://github.com/valkey-io/valkey/issues/3743)) - Fix undefined behavior in the failover delay calculation when `cluster-node-timeout` is below 30 milliseconds by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3941](https://github.com/valkey-io/valkey/issues/3941)) - Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;3920](https://github.com/valkey-io/valkey/issues/3920)) - Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;3921](https://github.com/valkey-io/valkey/issues/3921)) - Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by [@&#8203;nanyan0312](https://github.com/nanyan0312) ([#&#8203;4060](https://github.com/valkey-io/valkey/issues/4060)) - Fix startup crash on 32-bit systems where time\_t is 64-bit (such as Alpine 3.23) when generating `INFO` output by [@&#8203;chenshi5012](https://github.com/chenshi5012) ([#&#8203;3787](https://github.com/valkey-io/valkey/issues/3787)) - `HGETDEL` now returns a syntax error when the `FIELDS` keyword is missing or misplaced by [@&#8203;lcxn123](https://github.com/lcxn123) ([#&#8203;4049](https://github.com/valkey-io/valkey/issues/4049)) - `COMMAND INFO` in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by [@&#8203;rickrams](https://github.com/rickrams) ([#&#8203;3939](https://github.com/valkey-io/valkey/issues/3939)) - Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by [@&#8203;hpatro](https://github.com/hpatro) ([#&#8203;4105](https://github.com/valkey-io/valkey/issues/4105)) - Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by [@&#8203;chx9](https://github.com/chx9) ([#&#8203;3723](https://github.com/valkey-io/valkey/issues/3723)) - Reject control characters in `SENTINEL SET` values to prevent config-file injection via Sentinel config rewrite by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3847](https://github.com/valkey-io/valkey/issues/3847)) - Reject control characters and delimiters in cluster AUX fields and validate `cluster-announce-ip` to prevent nodes.conf injection by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3848](https://github.com/valkey-io/valkey/issues/3848)) - Redact key names and user data from more server log messages when `hide-user-data-from-log` is enabled by [@&#8203;zackcam](https://github.com/zackcam) ([#&#8203;3872](https://github.com/valkey-io/valkey/issues/3872)) - `ACL LOG` now reports the denied database ID for `COPY` instead of the command name when `db=` access is denied by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3888](https://github.com/valkey-io/valkey/issues/3888)) - Fix garbled shard IDs in the cluster UPDATE message log line by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3942](https://github.com/valkey-io/valkey/issues/3942)) - Fix negative `master_sync_total_bytes` in `INFO replication` during disk-based sync when the RDB exceeds 2GB by [@&#8203;chx9](https://github.com/chx9) ([#&#8203;3811](https://github.com/valkey-io/valkey/issues/3811)) - Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by [@&#8203;pkhartsk](https://github.com/pkhartsk) ([#&#8203;3843](https://github.com/valkey-io/valkey/issues/3843)) **Full Changelog**: <https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuNCIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
chore(deps): update valkey/valkey docker tag to v9.1.1
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2b6c960631
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/valkey-valkey-9-x:renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x
git rebase main
git switch main
git merge --ff-only renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x
git rebase main
git switch main
git merge --no-ff renovate/valkey-valkey-9-x
git switch main
git merge --squash renovate/valkey-valkey-9-x
git switch main
git merge --ff-only renovate/valkey-valkey-9-x
git switch main
git merge renovate/valkey-valkey-9-x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
dependencies

   
renovate
No labels
dependencies
renovate
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
kontakt/shiftregister!81
No description provided.