Skip to content

Conversation

@renovate-sh-app
Copy link
Contributor

@renovate-sh-app renovate-sh-app bot commented Dec 1, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/redis/go-redis/v9 v9.5.5 -> v9.6.3 age confidence

Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis

CVE-2025-29923 / GHSA-92cp-5422-2mw7 / GO-2025-3540

More information

Details

Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Release Notes

redis/go-redis (github.com/redis/go-redis/v9)

v9.6.3

Compare Source

What's Changed

Full Changelog: redis/go-redis@v9.6.2...v9.6.3

v9.6.2: 9.6.2

Compare Source

Changes

🐛 Bug Fixes

  • Fixed bug with broken TLS sessions (#​3145)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ofekshenawa @​vladvildanov @​rentziass

v9.6.1: 9.6.1

Compare Source

Changes

9.6

This release contains all new features from version 9.6.

🚀 New Features
  • Support Hash-field expiration commands (#​2991)
  • Support Hash-field expiration commands in Pipeline & Fix HExpire HExpireWithArgs expiration (#​3038)
  • Support NOVALUES parameter for HSCAN (#​2925)
  • Added test case for CLIENT KILL with MAXAGE option (#​2971)
  • Add support for XREAD last entry (#​3005)
  • Reduce the type assertion of CheckConn (#​3066)

9.6.1

In addition minor changes were performed to retract version 9.5.3 and 9.5.4 that were released accidentally.

🧰 Maintenance
🎁 Package Distribution
  • Retract versions 9.5.3 and 9.5.4 (#​3069)

Contributors

We'd like to thank all the contributors who worked on this release!

@​LINKIWI, @​b1ron, @​gerzse, @​haines, @​immersedin, @​naiqianz, @​ofekshenawa, @​srikar-jilugu, @​tzongw, @​vladvildanov, @​vmihailenco and @​monkey92t

v9.6.0: 9.6.0

Compare Source

Changes

🚀 New Features

  • Support Hash-field expiration commands (#​2991)
  • Support Hash-field expiration commands in Pipeline & Fix HExpire HExpireWithArgs expiration (#​3038)
  • Support NOVALUES parameter for HSCAN (#​2925)
  • Added test case for CLIENT KILL with MAXAGE option (#​2971)
  • Add support for XREAD last entry (#​3005)
  • Reduce the type assertion of CheckConn (#​3066)

🛠️ Improvements

This release includes support for Redis Community Edition (CE) 7.4.0, ensuring compatibility with the latest features and improvements introduced in Redis CE 7.4.0.

🧰 Maintenance

  • chore(deps): bump golangci/golangci-lint-action from 4 to 6 (#​2993)
  • Avoid unnecessary retry delay in cluster client following MOVED and ASK redirection (#​3048)
  • add test for tls connCheck #​3025 (#​3047)
  • fix node routing in slotClosestNode (#​3043)
  • Update pubsub.go (#​3042)
  • Change monitor test to run manually (#​3041)
  • chore(deps): bump rojopolis/spellcheck-github-actions from 0.36.0 to 0.38.0 (#​3028)
  • Add (*StatusCmd).Bytes() method (#​3030)
  • chore(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 in /example/otel (#​3000)

Contributors

We'd like to thank all the contributors who worked on this release!

@​LINKIWI, @​b1ron, @​dependabot, @​dependabot[bot], @​gerzse, @​haines, @​immersedin, @​naiqianz, @​ofekshenawa, @​srikar-jilugu, @​tzongw, @​vladvildanov and @​vmihailenco @​monkey92t


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

…curity]

| datasource | package                      | from   | to     |
| ---------- | ---------------------------- | ------ | ------ |
| go         | github.com/redis/go-redis/v9 | v9.5.5 | v9.6.3 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/go-github.com-redis-go-redis-v9-vulnerability branch from aaeb44f to bd825b3 Compare December 9, 2025 22:29
@yorugac yorugac merged commit 95bb2d6 into main Dec 9, 2025
22 of 23 checks passed
@renovate-sh-app renovate-sh-app bot deleted the renovate/go-github.com-redis-go-redis-v9-vulnerability branch December 10, 2025 01:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants