search

SpamExperts / pyzor

Pyzor is a Python implementation of a spam-blocking networked system that use spam signatures to identify them.
GNU General Public License v2.0
139 stars 31 forks source link

Bump redis from 4.0.2 to 4.4.2 #149

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps redis from 4.0.2 to 4.4.2.

Release notes

Sourced from redis's releases.

4.4.2

Changes

Note: this release include #2548 and it is suggested that users upgrade immediately.

🧪 Experimental Features

  • Add support for BF.CARD (#2545)

🚀 New Features

  • Add support for BF.CARD (#2545)
  • Add support for custom connection pool class in NodesManager (#2547)

🐛 Bug Fixes

  • Allow replica to master promotion in nodes_cache (#2549)
  • Security Fix: Updating graph parser for potential injection cases (#2548)

Contributors

We'd like to thank all the contributors who worked on this release!

@​Threated, @​dvora-h, @​shacharPash and @​zakaf

4.4.1

Changes

🚀 New Features

  • Add dialect to FT.AGGREGATE (#2537)
  • Add support for resetchannels in ACL SETUSER (#2514)
  • Allow EVAL_RO and EVALSHA_RO to be routed to read replica (#2494)
  • Add timeout parameter for SentinelManagedConnection (#2495)
  • Add TIMEOUT to query class (#2519)
  • Add support for certain LATENCY commands (#2503)

🐛 Bug Fixes

  • Add type checking to __eq__ in graph classes (#2531)
  • Accept str for ex parameter in set command (#2529)
  • Fix for Unhandled exception related to self.host with unix socket (#2520)
  • Make PythonParser resumable (#2510)

🧰 Maintenance

  • Fix incorrect _disconnect_raise docstring (#2534)
  • Remove DeprecationWarning by replace get_event_loop with get_running_loop (#2530)
  • Fix AttributeError when trying to split library version (#2539)
  • Including startup instructions via redis-stack docker (#2535)
  • Fix JSON.ARRINDEX test (#2527)

... (truncated)

Changelog

Sourced from redis's changelog.

* Fix string cleanse in Redis Graph
* Make PythonParser resumable in case of error ([#2510](https://github.com/redis/redis-py/issues/2510))
* Add `timeout=None` in `SentinelConnectionManager.read_response`
* Documentation fix: password protected socket connection ([#2374](https://github.com/redis/redis-py/issues/2374))
* Allow `timeout=None` in `PubSub.get_message()` to wait forever
* add `nowait` flag to `asyncio.Connection.disconnect()`
* Update README.md links
* Fix timezone handling for datetime to unixtime conversions
* Fix start_id type for XAUTOCLAIM
* Remove verbose logging from cluster.py
* Add retry mechanism to async version of Connection
* Compare commands case-insensitively in the asyncio command parser
* Allow negative `retries` for `Retry` class to retry forever
* Add `items` parameter to `hset` signature
* Create codeql-analysis.yml ([#1988](https://github.com/redis/redis-py/issues/1988)). Thanks @chayim
* Add limited support for Lua scripting with RedisCluster
* Implement `.lock()` method on RedisCluster
* Fix cursor returned by SCAN for RedisCluster & change default target to PRIMARIES
* Fix scan_iter for RedisCluster
* Remove verbose logging when initializing ClusterPubSub, ClusterPipeline or RedisCluster
* Fix broken connection writer lock-up for asyncio ([#2065](https://github.com/redis/redis-py/issues/2065))
* Fix auth bug when provided with no username ([#2086](https://github.com/redis/redis-py/issues/2086))
* Fix missing ClusterPipeline._lock ([#2189](https://github.com/redis/redis-py/issues/2189))
* Added dynaminc_startup_nodes configuration to RedisCluster
* Fix reusing the old nodes' connections when cluster topology refresh is being done
* Fix RedisCluster to immediately raise AuthenticationError without a retry
* ClusterPipeline Doesn't Handle ConnectionError for Dead Hosts ([#2225](https://github.com/redis/redis-py/issues/2225))
* Remove compatibility code for old versions of Hiredis, drop Packaging dependency
* The `deprecated` library is no longer a dependency
* Failover handling improvements for RedisCluster and Async RedisCluster ([#2377](https://github.com/redis/redis-py/issues/2377))
* Fixed "cannot pickle '_thread.lock' object" bug ([#2354](https://github.com/redis/redis-py/issues/2354), [#2297](https://github.com/redis/redis-py/issues/2297))
* Added CredentialsProvider class to support password rotation
* Enable Lock for asyncio cluster mode
* Fix Sentinel.execute_command doesn't execute across the entire sentinel cluster bug ([#2458](https://github.com/redis/redis-py/issues/2458))
* Added a replacement for the default cluster node in the event of failure ([#2463](https://github.com/redis/redis-py/issues/2463))
* Fix for Unhandled exception related to self.host with unix socket ([#2496](https://github.com/redis/redis-py/issues/2496))
  • 4.1.3 (Feb 8, 2022)
    • Fix flushdb and flushall (#1926)
    • Add redis5 and redis4 dockers (#1871)
    • Change json.clear test multi to be up to date with redisjson (#1922)
    • Fixing volume for unstable_cluster docker (#1914)
    • Update changes file with changes since 4.0.0-beta2 (#1915)
  • 4.1.2 (Jan 27, 2022)
    • Invalid OCSP certificates should raise ConnectionError on failed validation (#1907)
    • Added retry mechanism on socket timeouts when connecting to the server (#1895)
    • LMOVE, BLMOVE return incorrect responses (#1906)
    • Fixing AttributeError in UnixDomainSocketConnection (#1903)
    • Fixing TypeError in GraphCommands.explain (#1901)
    • For tests, increasing wait time for the cluster (#1908)

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
jbnable commented 1 year ago

Logo Checkmarx One – Scan Summary & Details – 4d4f0564-ebcc-492c-9600-97343d0e610e

No New Or Fixed Issues Found

dependabot[bot] commented 1 year ago

Superseded by #152.