kontakt/shiftregister
Watch
3
0
Fork
You've already forked shiftregister
 0
Code Issues Pull requests 6 Projects Wiki Activity

chore(deps): update valkey/valkey docker tag to v9.1.2 #81

Open
renovate wants to merge 1 commit from renovate/valkey-valkey-9-x into main
pull from: renovate/valkey-valkey-9-x
merge into: kontakt:main
Conversation 0 Commits 1 Files changed 2 +2 -2
renovate commented 2026-07-22 05:00:56 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
valkey/valkey patch 9.1.0-alpine → 9.1.2-alpine

Release Notes

valkey-io/valkey (valkey/valkey)

v9.1.2

Compare Source

Valkey 9.1.2 - Released Mon 31 August 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes
  • GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#​4534)
  • GHSA-fq2f-crmw-q97r: Fix an unauthenticated use-after-free of the Lua interpreter state, caused by a process-global script debugger command table that cached a raw pointer to a freed interpreter and was never invalidated (#​4574)
Bug Fixes
  • Fix a double-free crash when a module timer callback stops its own timer with ValkeyModule_StopTimer by @​quanyeyang (#​4211)
  • Fix torn RESP3 push frames when a client publishes to a channel it is also subscribed to, which could desync client libraries by @​quanyeyang (#​4253)
  • Listpacks are now always validated on RDB load and RESTORE, preventing deferred assertion crashes; sanitize-dump-payload and its ACL flags become no-ops by @​jjuleslasarte (#​3721)
  • Fix crashes, hangs, and CPU spinning when the RDMA transport is used together with I/O threads by @​quanyeyang (#​3611)
  • RESET now clears the CLIENT IMPORT-SOURCE flag, so reused pooled connections return to normal expiration semantics by @​tjade273 (#​3973)
  • Truncate a partially written MULTI block from the AOF on short read, preventing loss of newer writes after a later restart by @​chzhoo (#​4342)
  • Fix an ACL bypass where duplicate STORE/STOREDIST options let GEORADIUS write or delete keys outside the user's permitted patterns by @​tjade273 (#​3971)
  • Fix command log redaction leaking between commands in a MULTI transaction and missing for commands executed from scripts by @​madolson (#​4323)
  • Fix a use-after-free crash when a module's cluster message type is received after the module is unloaded by @​enjoy-binbin (#​4360)
  • Fix out-of-bounds access for cluster module message type 255, which is now a valid, dispatchable message type by @​enjoy-binbin (#​4410)
  • AOF loading no longer performs ACL checks on replayed commands, preventing silent data loss when the default user is disabled by @​lukepalmer (#​3984)
  • Fix a client memory accounting leak on replicas that inflated the mem_clients_normal INFO field after primary disconnections by @​enjoy-binbin (#​4395)
  • Fix a permanent client deadlock when a blocking command like BLPOP is followed by a partially delivered pipelined command by @​foobar (#​4531)
  • HGETEX now requires write permission on the key, closing an ACL gap that let read-only users change field TTLs or delete fields by @​ranshid (#​4576)
  • Compare the whole TLS certificate CN during authentication, so an embedded NUL can no longer impersonate another ACL user by @​madolson (#​4577)
  • Fix atomic slot migration failures with I/O threads by not offloading the export job's writes while snapshotting by @​satheeshaGowda (#​4104)
  • Reject invalid slot import ranges when loading an RDB, so corrupted files can no longer create bad migration jobs by @​enjoy-binbin (#​4229)
  • Reject RDB slot import records with an invalid job name length, preventing an out-of-bounds read at startup by @​quanyeyang (#​4210)
  • MOVE and COPY now check ACL access to the current database, so users can no longer exfiltrate keys from an unauthorized DB by @​cjx-zar (#​4155)
  • Fix a crash on COPY with a trailing DB option during slot migration, and block cross-DB COPY regardless of option order by @​madolson (#​4301)
  • Fix a server panic when pipelined commands with invalid arity reach the key prefetcher with I/O threads enabled by @​madolson (#​4302)
  • HPERSIST, HTTL, HPTTL, HEXPIRETIME, and HPEXPIRETIME now return a syntax error when the FIELDS keyword is missing by @​cjx-zar (#​4300)
  • Fix a race between TLS I/O-thread writes and reads that could leave slot migration export jobs stuck until timeout by @​jjuleslasarte (#​4320)
  • Fix a signed overflow that let very large hash field expiration times (e.g. via HPEXPIREAT) crash the server by @​ranshid (#​4312)
  • Fix a frozen monotonic clock on hosts with unsynchronized TSC that stopped background tasks and key expiration by @​quanyeyang (#​4346)
  • Fix a stack overflow crash when retrying a failed TLS write with a large reply by @​murphyjacob4 (#​4307)
  • Fix the --check-system clocksource check to skip hosts using a hardware clock and suggest only actually available clocksources by @​quanyeyang (#​4272)
  • Fix an assertion failure with I/O threads when a blocked client's pending command was processed again before unblocking by @​quanyeyang (#​4376)
  • Sentinel no longer loads the built-in Lua scripting engine, removing a spurious warning at startup by @​enjoy-binbin (#​4327)
  • Validate channel, message, and module payload lengths in cluster bus packets, preventing forged packets from crashing nodes by @​tjade273 (#​3972)
  • Harden stream validation on RDB load and RESTORE so crafted payloads can no longer crash the server on later commands by @​madolson (#​3922)
  • Reject stream payloads with mismatched live/deleted record counts, preventing XDEL from destroying unaccounted entries by @​roshkhatri (#​4381)
  • Skip unnecessary post-read processing with I/O threads on socket and TLS connections, restoring small-payload throughput by @​quanyeyang (#​4401)
  • Fix a use-after-free crash when serving clients blocked on the same key if one client is freed during processing by @​quanyeyang (#​4212)
  • Avoid an unneeded client lookup per write completion with I/O threads on socket and TLS connections, improving pipelined throughput by @​dgershko (#​4440)
  • Fix CLUSTER SLOT-STATS ORDERBY returning wrong ordering when slot counters differ by more than 2^31 by @​jzy1688 (#​4459)
  • Fix slot migration failures with I/O threads and TLS by keeping the export job's ACK reads on the main thread while snapshotting by @​satheeshaGowda (#​4559)

Full Changelog: https://github.com/valkey-io/valkey/compare/9.1.1...9.1.2

v9.1.1

Compare Source

Valkey 9.1.1 - Released Tue 21 July 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes
  • CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#​4234)
  • CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @​z0v3r1n and @​lifip. (#​4073)
Bug Fixes
  • Omit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and CONFIG REWRITE so older versions can parse the output by @​dvkashapov (#​3964)
  • Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by @​roshkhatri (#​3938)
  • Fix use-after-free crash when ACL LOAD removes a user whose authenticated client has its close deferred by @​ranshid (#​3800)
  • Enforce db= ACL permissions on every DB clause of COPY, closing a bypass with REPLACE or repeated DB tokens by @​enjoy-binbin (#​3801)
  • Enforce database-level ACLs for CLUSTER FLUSHSLOT, which removes keys from all databases by @​enjoy-binbin (#​3806)
  • Fix use-after-free in the module API when unregistering the first registered cluster message receiver by @​eifrah-aws (#​3846)
  • Fix HRANDFIELD with a positive count looping forever when non-expired fields are fewer than the requested count by @​cjx-zar (#​4047)
  • Fix clients left on the wrong database after module keyspace notifications for MOVE and COPY by @​enjoy-binbin (#​4024)
  • Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by @​lukepalmer (#​4068)
  • Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by @​ranshid (#​3950)
  • Fix assertion in HEXPIRE, HGETDEL and HPERSIST when a module blocks the client in a keyspace notification callback by @​enjoy-binbin (#​3743)
  • Fix undefined behavior in the failover delay calculation when cluster-node-timeout is below 30 milliseconds by @​enjoy-binbin (#​3941)
  • Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @​madolson (#​3920)
  • Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by @​madolson (#​3921)
  • Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by @​nanyan0312 (#​4060)
  • Fix startup crash on 32-bit systems where time_t is 64-bit (such as Alpine 3.23) when generating INFO output by @​chenshi5012 (#​3787)
  • HGETDEL now returns a syntax error when the FIELDS keyword is missing or misplaced by @​lcxn123 (#​4049)
  • COMMAND INFO in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by @​rickrams (#​3939)
  • Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by @​hpatro (#​4105)
  • Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by @​chx9 (#​3723)
  • Reject control characters in SENTINEL SET values to prevent config-file injection via Sentinel config rewrite by @​eifrah-aws (#​3847)
  • Reject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf injection by @​eifrah-aws (#​3848)
  • Redact key names and user data from more server log messages when hide-user-data-from-log is enabled by @​zackcam (#​3872)
  • ACL LOG now reports the denied database ID for COPY instead of the command name when db= access is denied by @​enjoy-binbin (#​3888)
  • Fix garbled shard IDs in the cluster UPDATE message log line by @​enjoy-binbin (#​3942)
  • Fix negative master_sync_total_bytes in INFO replication during disk-based sync when the RDB exceeds 2GB by @​chx9 (#​3811)
  • Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @​pkhartsk (#​3843)

Full Changelog: https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [valkey/valkey](https://github.com/valkey-io/valkey) | patch | `9.1.0-alpine` → `9.1.2-alpine` | --- ### Release Notes <details> <summary>valkey-io/valkey (valkey/valkey)</summary> ### [`v9.1.2`](https://github.com/valkey-io/valkey/releases/tag/9.1.2) [Compare Source](https://github.com/valkey-io/valkey/compare/9.1.1...9.1.2) ## Valkey 9.1.2 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. ##### Security Fixes - GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE\_RDMA and configured with an RDMA listener ([#&#8203;4534](https://github.com/valkey-io/valkey/issues/4534)) - GHSA-fq2f-crmw-q97r: Fix an unauthenticated use-after-free of the Lua interpreter state, caused by a process-global script debugger command table that cached a raw pointer to a freed interpreter and was never invalidated ([#&#8203;4574](https://github.com/valkey-io/valkey/issues/4574)) ##### Bug Fixes - Fix a double-free crash when a module timer callback stops its own timer with `ValkeyModule_StopTimer` by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4211](https://github.com/valkey-io/valkey/issues/4211)) - Fix torn RESP3 push frames when a client publishes to a channel it is also subscribed to, which could desync client libraries by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4253](https://github.com/valkey-io/valkey/issues/4253)) - Listpacks are now always validated on RDB load and RESTORE, preventing deferred assertion crashes; `sanitize-dump-payload` and its ACL flags become no-ops by [@&#8203;jjuleslasarte](https://github.com/jjuleslasarte) ([#&#8203;3721](https://github.com/valkey-io/valkey/issues/3721)) - Fix crashes, hangs, and CPU spinning when the RDMA transport is used together with I/O threads by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;3611](https://github.com/valkey-io/valkey/issues/3611)) - RESET now clears the `CLIENT IMPORT-SOURCE` flag, so reused pooled connections return to normal expiration semantics by [@&#8203;tjade273](https://github.com/tjade273) ([#&#8203;3973](https://github.com/valkey-io/valkey/issues/3973)) - Truncate a partially written MULTI block from the AOF on short read, preventing loss of newer writes after a later restart by [@&#8203;chzhoo](https://github.com/chzhoo) ([#&#8203;4342](https://github.com/valkey-io/valkey/issues/4342)) - Fix an ACL bypass where duplicate STORE/STOREDIST options let GEORADIUS write or delete keys outside the user's permitted patterns by [@&#8203;tjade273](https://github.com/tjade273) ([#&#8203;3971](https://github.com/valkey-io/valkey/issues/3971)) - Fix command log redaction leaking between commands in a MULTI transaction and missing for commands executed from scripts by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;4323](https://github.com/valkey-io/valkey/issues/4323)) - Fix a use-after-free crash when a module's cluster message type is received after the module is unloaded by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4360](https://github.com/valkey-io/valkey/issues/4360)) - Fix out-of-bounds access for cluster module message type 255, which is now a valid, dispatchable message type by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4410](https://github.com/valkey-io/valkey/issues/4410)) - AOF loading no longer performs ACL checks on replayed commands, preventing silent data loss when the default user is disabled by [@&#8203;lukepalmer](https://github.com/lukepalmer) ([#&#8203;3984](https://github.com/valkey-io/valkey/issues/3984)) - Fix a client memory accounting leak on replicas that inflated the `mem_clients_normal` INFO field after primary disconnections by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4395](https://github.com/valkey-io/valkey/issues/4395)) - Fix a permanent client deadlock when a blocking command like BLPOP is followed by a partially delivered pipelined command by [@&#8203;foobar](https://github.com/foobar) ([#&#8203;4531](https://github.com/valkey-io/valkey/issues/4531)) - HGETEX now requires write permission on the key, closing an ACL gap that let read-only users change field TTLs or delete fields by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;4576](https://github.com/valkey-io/valkey/issues/4576)) - Compare the whole TLS certificate CN during authentication, so an embedded NUL can no longer impersonate another ACL user by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;4577](https://github.com/valkey-io/valkey/issues/4577)) - Fix atomic slot migration failures with I/O threads by not offloading the export job's writes while snapshotting by [@&#8203;satheeshaGowda](https://github.com/satheeshaGowda) ([#&#8203;4104](https://github.com/valkey-io/valkey/issues/4104)) - Reject invalid slot import ranges when loading an RDB, so corrupted files can no longer create bad migration jobs by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4229](https://github.com/valkey-io/valkey/issues/4229)) - Reject RDB slot import records with an invalid job name length, preventing an out-of-bounds read at startup by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4210](https://github.com/valkey-io/valkey/issues/4210)) - MOVE and COPY now check ACL access to the current database, so users can no longer exfiltrate keys from an unauthorized DB by [@&#8203;cjx-zar](https://github.com/cjx-zar) ([#&#8203;4155](https://github.com/valkey-io/valkey/issues/4155)) - Fix a crash on COPY with a trailing DB option during slot migration, and block cross-DB COPY regardless of option order by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;4301](https://github.com/valkey-io/valkey/issues/4301)) - Fix a server panic when pipelined commands with invalid arity reach the key prefetcher with I/O threads enabled by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;4302](https://github.com/valkey-io/valkey/issues/4302)) - HPERSIST, HTTL, HPTTL, HEXPIRETIME, and HPEXPIRETIME now return a syntax error when the FIELDS keyword is missing by [@&#8203;cjx-zar](https://github.com/cjx-zar) ([#&#8203;4300](https://github.com/valkey-io/valkey/issues/4300)) - Fix a race between TLS I/O-thread writes and reads that could leave slot migration export jobs stuck until timeout by [@&#8203;jjuleslasarte](https://github.com/jjuleslasarte) ([#&#8203;4320](https://github.com/valkey-io/valkey/issues/4320)) - Fix a signed overflow that let very large hash field expiration times (e.g. via HPEXPIREAT) crash the server by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;4312](https://github.com/valkey-io/valkey/issues/4312)) - Fix a frozen monotonic clock on hosts with unsynchronized TSC that stopped background tasks and key expiration by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4346](https://github.com/valkey-io/valkey/issues/4346)) - Fix a stack overflow crash when retrying a failed TLS write with a large reply by [@&#8203;murphyjacob4](https://github.com/murphyjacob4) ([#&#8203;4307](https://github.com/valkey-io/valkey/issues/4307)) - Fix the `--check-system` clocksource check to skip hosts using a hardware clock and suggest only actually available clocksources by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4272](https://github.com/valkey-io/valkey/issues/4272)) - Fix an assertion failure with I/O threads when a blocked client's pending command was processed again before unblocking by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4376](https://github.com/valkey-io/valkey/issues/4376)) - Sentinel no longer loads the built-in Lua scripting engine, removing a spurious warning at startup by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4327](https://github.com/valkey-io/valkey/issues/4327)) - Validate channel, message, and module payload lengths in cluster bus packets, preventing forged packets from crashing nodes by [@&#8203;tjade273](https://github.com/tjade273) ([#&#8203;3972](https://github.com/valkey-io/valkey/issues/3972)) - Harden stream validation on RDB load and RESTORE so crafted payloads can no longer crash the server on later commands by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;3922](https://github.com/valkey-io/valkey/issues/3922)) - Reject stream payloads with mismatched live/deleted record counts, preventing XDEL from destroying unaccounted entries by [@&#8203;roshkhatri](https://github.com/roshkhatri) ([#&#8203;4381](https://github.com/valkey-io/valkey/issues/4381)) - Skip unnecessary post-read processing with I/O threads on socket and TLS connections, restoring small-payload throughput by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4401](https://github.com/valkey-io/valkey/issues/4401)) - Fix a use-after-free crash when serving clients blocked on the same key if one client is freed during processing by [@&#8203;quanyeyang](https://github.com/quanyeyang) ([#&#8203;4212](https://github.com/valkey-io/valkey/issues/4212)) - Avoid an unneeded client lookup per write completion with I/O threads on socket and TLS connections, improving pipelined throughput by [@&#8203;dgershko](https://github.com/dgershko) ([#&#8203;4440](https://github.com/valkey-io/valkey/issues/4440)) - Fix CLUSTER SLOT-STATS ORDERBY returning wrong ordering when slot counters differ by more than 2^31 by [@&#8203;jzy1688](https://github.com/jzy1688) ([#&#8203;4459](https://github.com/valkey-io/valkey/issues/4459)) - Fix slot migration failures with I/O threads and TLS by keeping the export job's ACK reads on the main thread while snapshotting by [@&#8203;satheeshaGowda](https://github.com/satheeshaGowda) ([#&#8203;4559](https://github.com/valkey-io/valkey/issues/4559)) **Full Changelog**: <https://github.com/valkey-io/valkey/compare/9.1.1...9.1.2> ### [`v9.1.1`](https://github.com/valkey-io/valkey/releases/tag/9.1.1) [Compare Source](https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1) ## Valkey 9.1.1 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. ##### Security Fixes - CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL ([#&#8203;4234](https://github.com/valkey-io/valkey/issues/4234)) - CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by [@&#8203;z0v3r1n](https://github.com/z0v3r1n) and [@&#8203;lifip](https://github.com/lifip). ([#&#8203;4073](https://github.com/valkey-io/valkey/issues/4073)) ##### Bug Fixes - Omit the implicit `alldbs` ACL rule from `ACL LIST`, `ACL SAVE` and `CONFIG REWRITE` so older versions can parse the output by [@&#8203;dvkashapov](https://github.com/dvkashapov) ([#&#8203;3964](https://github.com/valkey-io/valkey/issues/3964)) - Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by [@&#8203;roshkhatri](https://github.com/roshkhatri) ([#&#8203;3938](https://github.com/valkey-io/valkey/issues/3938)) - Fix use-after-free crash when `ACL LOAD` removes a user whose authenticated client has its close deferred by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;3800](https://github.com/valkey-io/valkey/issues/3800)) - Enforce `db=` ACL permissions on every DB clause of `COPY`, closing a bypass with `REPLACE` or repeated DB tokens by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3801](https://github.com/valkey-io/valkey/issues/3801)) - Enforce database-level ACLs for `CLUSTER FLUSHSLOT`, which removes keys from all databases by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3806](https://github.com/valkey-io/valkey/issues/3806)) - Fix use-after-free in the module API when unregistering the first registered cluster message receiver by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3846](https://github.com/valkey-io/valkey/issues/3846)) - Fix `HRANDFIELD` with a positive count looping forever when non-expired fields are fewer than the requested count by [@&#8203;cjx-zar](https://github.com/cjx-zar) ([#&#8203;4047](https://github.com/valkey-io/valkey/issues/4047)) - Fix clients left on the wrong database after module keyspace notifications for `MOVE` and `COPY` by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;4024](https://github.com/valkey-io/valkey/issues/4024)) - Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by [@&#8203;lukepalmer](https://github.com/lukepalmer) ([#&#8203;4068](https://github.com/valkey-io/valkey/issues/4068)) - Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by [@&#8203;ranshid](https://github.com/ranshid) ([#&#8203;3950](https://github.com/valkey-io/valkey/issues/3950)) - Fix assertion in `HEXPIRE`, `HGETDEL` and `HPERSIST` when a module blocks the client in a keyspace notification callback by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3743](https://github.com/valkey-io/valkey/issues/3743)) - Fix undefined behavior in the failover delay calculation when `cluster-node-timeout` is below 30 milliseconds by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3941](https://github.com/valkey-io/valkey/issues/3941)) - Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;3920](https://github.com/valkey-io/valkey/issues/3920)) - Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by [@&#8203;madolson](https://github.com/madolson) ([#&#8203;3921](https://github.com/valkey-io/valkey/issues/3921)) - Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by [@&#8203;nanyan0312](https://github.com/nanyan0312) ([#&#8203;4060](https://github.com/valkey-io/valkey/issues/4060)) - Fix startup crash on 32-bit systems where time\_t is 64-bit (such as Alpine 3.23) when generating `INFO` output by [@&#8203;chenshi5012](https://github.com/chenshi5012) ([#&#8203;3787](https://github.com/valkey-io/valkey/issues/3787)) - `HGETDEL` now returns a syntax error when the `FIELDS` keyword is missing or misplaced by [@&#8203;lcxn123](https://github.com/lcxn123) ([#&#8203;4049](https://github.com/valkey-io/valkey/issues/4049)) - `COMMAND INFO` in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by [@&#8203;rickrams](https://github.com/rickrams) ([#&#8203;3939](https://github.com/valkey-io/valkey/issues/3939)) - Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by [@&#8203;hpatro](https://github.com/hpatro) ([#&#8203;4105](https://github.com/valkey-io/valkey/issues/4105)) - Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by [@&#8203;chx9](https://github.com/chx9) ([#&#8203;3723](https://github.com/valkey-io/valkey/issues/3723)) - Reject control characters in `SENTINEL SET` values to prevent config-file injection via Sentinel config rewrite by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3847](https://github.com/valkey-io/valkey/issues/3847)) - Reject control characters and delimiters in cluster AUX fields and validate `cluster-announce-ip` to prevent nodes.conf injection by [@&#8203;eifrah-aws](https://github.com/eifrah-aws) ([#&#8203;3848](https://github.com/valkey-io/valkey/issues/3848)) - Redact key names and user data from more server log messages when `hide-user-data-from-log` is enabled by [@&#8203;zackcam](https://github.com/zackcam) ([#&#8203;3872](https://github.com/valkey-io/valkey/issues/3872)) - `ACL LOG` now reports the denied database ID for `COPY` instead of the command name when `db=` access is denied by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3888](https://github.com/valkey-io/valkey/issues/3888)) - Fix garbled shard IDs in the cluster UPDATE message log line by [@&#8203;enjoy-binbin](https://github.com/enjoy-binbin) ([#&#8203;3942](https://github.com/valkey-io/valkey/issues/3942)) - Fix negative `master_sync_total_bytes` in `INFO replication` during disk-based sync when the RDB exceeds 2GB by [@&#8203;chx9](https://github.com/chx9) ([#&#8203;3811](https://github.com/valkey-io/valkey/issues/3811)) - Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by [@&#8203;pkhartsk](https://github.com/pkhartsk) ([#&#8203;3843](https://github.com/valkey-io/valkey/issues/3843)) **Full Changelog**: <https://github.com/valkey-io/valkey/compare/9.1.0...9.1.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuNCIsInVwZGF0ZWRJblZlciI6IjQ0Ljc1LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->
chore(deps): update valkey/valkey docker tag to v9.1.1
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2b6c960631
renovate force-pushed renovate/valkey-valkey-9-x from 2b6c960631
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
to e4c06dccca
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2026-08-20 01:00:44 +02:00 Compare
renovate force-pushed renovate/valkey-valkey-9-x from e4c06dccca
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
to 9b312873fc
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2026-08-31 13:00:47 +02:00 Compare
renovate changed title from chore(deps): update valkey/valkey docker tag to v9.1.1 to chore(deps): update valkey/valkey docker tag to v9.1.2 2026-09-01 04:00:46 +02:00
renovate force-pushed renovate/valkey-valkey-9-x from 9b312873fc
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
to 805f262f79
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2026-09-01 04:00:46 +02:00 Compare
renovate force-pushed renovate/valkey-valkey-9-x from 805f262f79
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
to 0134c10c90
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2026-09-04 00:00:45 +02:00 Compare
renovate force-pushed renovate/valkey-valkey-9-x from 0134c10c90
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
to 0edca4e661
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
2026-09-07 12:00:40 +02:00 Compare
Some checks failed
ci/woodpecker/pr/qa Pipeline failed
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/valkey-valkey-9-x:renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x
git rebase main
git switch main
git merge --ff-only renovate/valkey-valkey-9-x
git switch renovate/valkey-valkey-9-x
git rebase main
git switch main
git merge --no-ff renovate/valkey-valkey-9-x
git switch main
git merge --squash renovate/valkey-valkey-9-x
git switch main
git merge --ff-only renovate/valkey-valkey-9-x
git switch main
git merge renovate/valkey-valkey-9-x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
dependencies

   
renovate
No labels
dependencies
renovate
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kontakt/shiftregister!81
No description provided.