Skip to content

chore(deps): Bump predis/predis from 3.4.2 to 3.7.1 in /laravel-backend - #309

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/laravel-backend/predis/predis-3.7.1
Open

chore(deps): Bump predis/predis from 3.4.2 to 3.7.1 in /laravel-backend#309
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/laravel-backend/predis/predis-3.7.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps predis/predis from 3.4.2 to 3.7.1.

Release notes

Sourced from predis/predis's releases.

v3.7.1

Added

  • Added support for numbered databases in Valkey clusters (#1696)

Changed

  • Use SENTINEL REPLICAS for Sentinel replica discovery when available (#776)

Fixed

  • Fixed interrupted pipelines leaving unread replies on reused connections (#1309)
  • Fixed INFO parsing warnings with Valkey 9 (#1748)
  • Fixed Relay Pub/Sub subscriptions rejecting message callbacks when prefix is set (#1292)
  • Fixed Relay returning server errors as error responses and raw error messages without stack traces (#1292)
  • Fixed Relay reconnecting after an explicit disconnect (#1292)
  • Fixed Relay ACL authentication accepting username and password (#1292)
  • Fixed Relay throwing a TypeError when selecting a non-integer database (#1751)

Security

v3.7.0

Added

  • Added BLESS * command family (#1733)
  • Added optional CELL_SIZE argument for CMS.INITBY(DIM|PROB) (#1729)

Fixed

  • Fixed Redis Cluster not retrying slot map discovery on StreamInitException (#1717)
  • Fixed client iteration when using replication (#1730)
  • Fixed *StreamConnection looping forever when closed in the middle of a bulk reply (#1731)
  • Fixed cluster CAS transactions returning transaction objects for reads and sending MULTI twice (#1735)
  • Fixed cleanup of empty transactions and transaction callbacks that throw PHP errors (#1735)
  • Fixed MultiExec::multi() being ignored as the first call of a CAS transaction (#1735)
  • Fixed spl_object_hash() deprecation on PHP 8.6 in ConnectionErrorProof pipeline (#1738)
  • Fixed ConnectionErrorProof pipeline returning too few responses or throwing ValueError (#1739)

Security

  • Fixed aborted cluster transactions leaving node connections in MULTI (#1735)

v3.6.1

Fixed

  • Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
  • Fixed client_info connection parameter being ignored (#1722)
  • Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

  • Deprecated CommandInterface::deserializeCommand() (GHSA-v32q-pmmw-cf38)
  • Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (GHSA-v32q-pmmw-cf38)

v3.6.0

Added

  • Added support for new TS commands + Indonesian language support integration test (#1695)

... (truncated)

Changelog

Sourced from predis/predis's changelog.

v3.7.1 (2026-11-03)

Added

  • Added support for numbered databases in Valkey clusters (#1696)
  • Added support for Set Expiration commands (#1749)

Changed

  • Use SENTINEL REPLICAS for Sentinel replica discovery when available (#776)

Fixed

  • Fixed interrupted pipelines leaving unread replies on reused connections (#1309)
  • Fixed INFO parsing warnings with Valkey 9 (#1748)
  • Fixed Relay Pub/Sub subscriptions rejecting message callbacks when prefix is set (#1292)
  • Fixed Relay returning server errors as error responses and raw error messages without stack traces (#1292)
  • Fixed Relay reconnecting after an explicit disconnect (#1292)
  • Fixed Relay ACL authentication accepting username and password (#1292)
  • Fixed Relay throwing a TypeError when selecting a non-integer database (#1751)

Security

v3.7.0 (2026-10-08)

Added

  • Added BLESS * command family (#1733)
  • Added optional CELL_SIZE argument for CMS.INITBY(DIM|PROB) (#1729)

Fixed

  • Fixed Redis Cluster not retrying slot map discovery on StreamInitException (#1717)
  • Fixed client iteration when using replication (#1730)
  • Fixed *StreamConnection looping forever when closed in the middle of a bulk reply (#1731)
  • Fixed cluster CAS transactions returning transaction objects for reads and sending MULTI twice (#1735)
  • Fixed cleanup of empty transactions and transaction callbacks that throw PHP errors (#1735)
  • Fixed MultiExec::multi() being ignored as the first call of a CAS transaction (#1735)
  • Fixed spl_object_hash() deprecation on PHP 8.6 in ConnectionErrorProof pipeline (#1738)
  • Fixed ConnectionErrorProof pipeline returning too few responses or throwing ValueError (#1739)

Security

  • Fixed aborted cluster transactions leaving node connections in MULTI (#1735)

v3.6.1 (2026-09-17)

Fixed

  • Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
  • Fixed client_info connection parameter being ignored (#1722)
  • Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

  • Deprecated CommandInterface::deserializeCommand() (GHSA-v32q-pmmw-cf38)
  • Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (GHSA-v32q-pmmw-cf38)

v3.6.0 (2026-08-14)

Added

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): Bump predis/predis from 3.4.2 to 3.7.1 in /laravel-backend
84fcee0 
Bumps [predis/predis](https://github.com/predis/predis) from 3.4.2 to 3.7.1.
- [Release notes](https://github.com/predis/predis/releases)
- [Changelog](https://github.com/predis/predis/blob/main/CHANGELOG.md)
- [Commits](predis/predis@v3.4.2...v3.7.1)

---
updated-dependencies:
- dependency-name: predis/predis
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from xjanova as a code owner November 9, 2026 02:07
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, php. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot mentioned this pull request Nov 9, 2026
Closed
@github-actions github-actions Bot added documentation Improvements or additions to documentation laravel size/S labels Nov 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@xjanova xjanova Awaiting requested review from xjanova xjanova is a code owner

Assignees

No one assigned

Labels

documentation Improvements or additions to documentation laravel size/S

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants