Skip to content

chore(deps-dev): update predis/predis requirement from ^2.2 to ^2.2 || ^3.0 - #6

Merged
muhammetsafak merged 1 commit into
mainfrom
dependabot/composer/predis/predis-tw-2.2or-tw-3.0
Oct 3, 2026
Merged

muhammetsafak merged 1 commit into
mainfrom
dependabot/composer/predis/predis-tw-2.2or-tw-3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on predis/predis to permit the latest version.

Release notes

Sourced from predis/predis's releases.

v3.6.1

Fixed

  • Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
  • Fixed client_info connection parameter being ignored (#1722)
  • Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

  • Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
  • Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
Changelog

Sourced from predis/predis's changelog.

v3.6.1 (2026-09-17)

Fixed

  • Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
  • Fixed client_info connection parameter being ignored (#1722)
  • Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

  • Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
  • Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)

v3.6.0 (2026-08-14)

Added

  • Added support for new TS commands + Indonesian language support integration test (#1695)
  • Added support for new COLLECT reducer for FT.AGGREGATE (#1699)
  • Added support for SDIFFCARD and SUNIONCARD command
  • Added support for MAXCOUNT and MAXSIZE arguments for XREAD and XREADGROUP
  • Added support for TS.READ command
  • Added support for EXCLUDEEMPTY argument for TS.MRANGE and TS.MREVRANGE commands
  • Added explicit testing for FT.SEARCH timeout policies
  • Added support for TS.QUERYLABELS command
  • Added support for LMOVEM and BLMOVEM commands
  • Added support for FT.ALIASLIST command
  • Added stream commands to ClusterStrategy
  • Added vector sets commands to ClusterStrategy
  • Added experimental support for HIMPORT bulk hash import feature (API may change in a future release)

Changed

  • Added OBJECT and hash field expiration commands to ClusterStrategy
  • Make ZMSCORE command prefixable and add to ClusterStrategy (#1692)

Fixed

  • Fixed Sentinel does not wipe servers on exception caused (#1694)
  • Fixed @method cmsincrby() annotation

v3.5.1 (2026-06-11)

Added

  • Expose pipeline() API via ClientInterface (#1686)

Fixed

  • Allow UNLINK to accept an array of keys (#1687)
  • Fixed Client::(un)pack() return types

v3.5.0 (2026-06-02)

Added

  • Added support for XNACK command (#1666)
  • Added support for INCREX command (#1674)
  • Added support for UNLINK command (#1680)
  • Added support for AR* array commands (#1672)
  • Handle Redis Cluster -READONLY responses failover events (#1656)
  • Added FPHA argument for JSON.SET command (#1661)

... (truncated)

Commits
  • e2db963 tag v3.6.1
  • 3edc442 Fixed CRLF command smuggling and node misrouting in `AbstractAggregateConnect...
  • 3749086 Fixed Stream::write()/read() leaving a dead connection when a host error hand...
  • 3a5b55e Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786) (...
  • 401abc4 fix changelog typo
  • e7b89c1 Fixed client_info connection parameter being ignored (#1722)
  • 3a8c350 Bump the github-actions group with 2 updates (#1720)
  • 6759513 Fix RESP3 double parsing returning positive INF for -inf (#1716)
  • 0795d69 bump dev version
  • 2ff20c0 tag v3.6.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 2, 2026
@muhammetsafak

Copy link
Copy Markdown
Member

@dependabot rebase

Updates the requirements on [predis/predis](https://github.com/predis/predis) to permit the latest version.
- [Release notes](https://github.com/predis/predis/releases)
- [Changelog](https://github.com/predis/predis/blob/main/CHANGELOG.md)
- [Commits](predis/predis@v2.2.0...v3.6.1)

---
updated-dependencies:
- dependency-name: predis/predis
  dependency-version: 3.6.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/predis/predis-tw-2.2or-tw-3.0 branch from 03d7e1c to 80644b6 Compare October 3, 2026 15:17
@muhammetsafak
muhammetsafak merged commit 0046156 into main Oct 3, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/predis/predis-tw-2.2or-tw-3.0 branch October 3, 2026 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant