Skip to content

chore(deps): bump valkey-glide from 2.3.1 to 2.4.1#8281

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/valkey-glide-2.4.1
Open

chore(deps): bump valkey-glide from 2.3.1 to 2.4.1#8281
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/valkey-glide-2.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps valkey-glide from 2.3.1 to 2.4.1.

Release notes

Sourced from valkey-glide's releases.

v2.4.1

What's Changed

Full Changelog: valkey-io/valkey-glide@v2.4.0...v2.4.1

v2.4.0

Key Features

Client-Side Caching Support: Full client-side caching support enabling local caching of frequently accessed data to reduce round-trips to the server

Transparent Compression: Client-side transparent compression feature enabled. This feature is experimental

Valkey Search 1.2 Support: Comprehensive FT.* command support for the Valkey Search module

NodeDiscoveryMode for Standalone Clients: New configuration option to allow for better integration with proxies

JSON module support: Full support for Valkey JSON module

URI-Based Client Creation API: New FFI create_client_from_uri function accepting Redis/Valkey URI strings with optional JSON configuration

Performance Enhancements: Multiple performance enhancements in the Valkey Glide Core

What's Changed

... (truncated)

Changelog

Sourced from valkey-glide's changelog.

Changelog

Pending 2.5

Fixes

  • Core/FFI: Fix heap corruption in convert_vec_to_pointer where shrink_to_fit() (a non-binding hint) was followed by Vec::from_raw_parts with capacity = len. When the allocator kept extra capacity, deallocation passed the wrong size, corrupting heap metadata and causing delayed SIGABRT crashes after many pubsub messages or response frees. (#5637)
  • Core: Honor AWS_ENDPOINT_URL_STS in the IAM credentials-provider loader so ElastiCache/MemoryDB IAM auth works in AWS partitions that do not publish a separate FIPS STS hostname (e.g. us-gov-west-1). Previously, setting AWS_USE_FIPS_ENDPOINT=true made the SDK construct a non-existent sts-fips.<region>.amazonaws.com, causing credential acquisition to hang. Matches boto3 behavior. (#5967)
  • Core: Make the pipeline send-timeout liveness-aware so sustained backpressure on a live-but-slow connection waits for channel capacity instead of failing commands with FatalSendError, while a genuinely dead connection still fails fast (#5446)

Changes

  • Python Async: Replace UDS+protobuf transport with FFI+pipe architecture. Commands go directly through CFFI to Rust; responses return via anonymous pipe with Rust-native parsing. Adds trio/anyio support, address resolver, cache metrics. +19-21% throughput for simple commands, +11-16% for collections vs v2.4.1. (#5637)
  • CORE: Extend timeout watchdog with structured diagnostics. Timeouts now report classified root cause (ServerUnresponsive, ClientBackpressure, SystemOverload), command phase (Queued vs Sent), inflight trend, per-client p99 latency, and suggested timeout. (#6044)
  • Core, Python, Java, Node, Go: Add SAVE, BGSAVE and BGREWRITEAOF command support (#6095)
  • Java: Add FAILOVER and REPLICAOF command support (#6170)
  • Core, Java, Python, Node, Go: Add client-wide circuit breaker that detects sustained error rates and rejects requests at the FFI boundary before threads park. Opt-in via ClientCircuitBreakerConfiguration. Tracks error rate in a sliding window, trips when threshold is exceeded, and recovers automatically via optimistic HalfOpen with consecutive success validation. Java additionally performs a synchronous pre-check to prevent thread explosion under managedBlock(). (#5996)
  • Core, Python, Java, Node, Go: Add CLIENT PAUSE and CLIENT UNPAUSE command support (#6035)
  • Go: Add RESET command support (#5946)
  • Java: Add RESET command support (#5947)
  • Core/FFI: Add MonitorClient for the MONITOR command (#5977)
  • Node: Add RESET command support (#5945)
  • Python: Add RESET command support (#5944)
  • Python: Add MIGRATE command support (#5933)
  • Core: Phase 2 client-side caching (#5962)
  • Core: Add RESET command support (#5959)
  • Node: Support custom socket address resolution when connecting to valkey (#5873)
  • Node: Add MIGRATE command support (#5934)
  • Go: Support custom socket address resolution when connecting to valkey (#5873)
  • Go: Add MIGRATE command support (#5935)
  • Core: Avoid panic on cluster SCAN when a read-from-replica AZ affinity strategy is configured. The slot map carries no AZ metadata, so these strategies now fall back to their documented round-robin behavior (replicas for AZAffinity, replicas plus primary for AZAffinityReplicasAndPrimary) instead of hitting todo!() (#5909)
  • FFI: Add client_side_cache configuration to the URI-based client creation API (create_client_from_uri) — supports max_cache_kb, entry_ttl_ms, eviction_policy (LRU/LFU), and enable_metrics via JSON options; cache_id is auto-generated internally (#5860)
  • Go: Add MEMORY server management commands (MEMORY DOCTOR, MEMORY MALLOC-STATS, MEMORY PURGE, MEMORY STATS) with full cluster routing support (#5957)

2.4

Fixes

  • Core: Add dedicated timeout watchdog thread independent of the Tokio runtime. Under memory pressure or Tokio starvation, tokio::time::sleep may not fire on time. The watchdog uses a separate OS thread to guarantee timeout delivery, preventing commands from hanging indefinitely when the async runtime is overloaded. (#5752)
  • Core: Propagate per-command response timeout to the multiplexed connection layer. The configured request_timeout (including blocking command timeouts) is now enforced at the connection level, ensuring commands time out reliably instead of waiting indefinitely with Duration::MAX. (#5581)
  • Core: Fall back to existing cluster connections when initial nodes are unavailable during topology refresh. When refreshTopologyFromInitialNodes=true and the initial/seed node is unreachable (e.g., dead primary during failover), the topology refresh now queries healthy existing connections instead of failing silently. This complements #5812 to enable failover recovery when the seed node itself is the failed node. (#5814)
  • Node: Fix SIGSEGV in pubsub under pnpm strict hoisting — replace value_from_split_pointer(high_u32, low_u32) with value_from_pointer(i64) in the Node.js Rust client to accept response pointers as a single integer, eliminating the high/low split that caused upper 32-bit truncation when protobufjs.util.Long was null (#5851)

Changes

  • Go: Expose client interfaces (BaseClientCommands, GlideClientCommands, GlideClusterClientCommands, etc.) as a public package for testing and abstraction (#4900)
  • Core, Python, Java, Node, Go: Add NodeDiscoveryMode configuration for standalone clients — STATIC mode skips role detection for proxy compatibility (e.g., Envoy), DISCOVER_ALL mode discovers full topology (primary + all replicas) from any starting node (#5724)
  • Go: Add Valkey Search (FT) command support — FT.CREATE, FT.SEARCH, FT.AGGREGATE, FT.DROPINDEX, FT.LIST, FT.INFO, FT.EXPLAIN, FT.EXPLAINCLI, FT.ALIASADD, FT.ALIASDEL, FT.ALIASUPDATE, FT.ALIASLIST with full Valkey Search 1.2 options for both standalone and cluster clients (#5590)
  • FFI: Add URI-based client creation API with full ConnectionRequest support (#5620)
    • New create_client_from_uri FFI function accepts Redis/Valkey URI strings and optional JSON configuration

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump valkey-glide from 2.3.1 to 2.4.1
8621c40 
Bumps [valkey-glide](https://github.com/valkey-io/valkey-glide) from 2.3.1 to 2.4.1.
- [Release notes](https://github.com/valkey-io/valkey-glide/releases)
- [Changelog](https://github.com/valkey-io/valkey-glide/blob/main/CHANGELOG.md)
- [Commits](valkey-io/valkey-glide@v2.3.1...v2.4.1)

---
updated-dependencies:
- dependency-name: valkey-glide
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 15, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 15, 2026 20:26
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 15, 2026
@dependabot dependabot Bot requested a review from hjgraca June 15, 2026 20:26
@dependabot dependabot Bot added the python Pull requests that update Python code label Jun 15, 2026
@sonarqubecloud

sonarqubecloud Bot commented Jun 15, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hjgraca hjgraca Awaiting requested review from hjgraca hjgraca is a code owner automatically assigned from aws-powertools/lambda-python-core

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants