Skip to content

chore(deps): bump redis from 4.7.1 to 6.3.0 - #1

Closed
dependabot[bot] wants to merge 81 commits into
masterfrom
dependabot/npm_and_yarn/redis-6.3.0
Closed

dependabot[bot] wants to merge 81 commits into
masterfrom
dependabot/npm_and_yarn/redis-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown

Bumps redis from 4.7.1 to 6.3.0.

Release notes

Sourced from redis's releases.

redis@6.2.1

What's Changed

New Contributors

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.2.0...redis@6.2.1

redis@6.2.0

6.2.0

✨ Highlights

Cluster commands now follow the server's request/response policies. node-redis reads each command's routing policy from the server's COMMAND metadata and routes and aggregates accordingly, so the cluster client behaves much more like a single server. Multi-key commands that span hash slots — MGET, MSET, DEL, EXISTS, TOUCH, UNLINK — are transparently split per slot and their replies reassembled in caller order, so cross-slot calls that previously failed with CROSSSLOT now just work. Fan-out commands such as KEYS, DBSIZE, FLUSHALL, PING, WAIT, SCRIPT EXISTS and CONFIG SET run across every shard (or every node) and their replies are aggregated per the server's policy, SCAN walks the whole cluster behind a per-client virtual cursor, and RANDOMKEY / FT.CURSOR get correct cluster-aware routing. Replica read-scaling was also aligned with the server flags, so read-only keyless commands (DBSIZE, KEYS, SCAN, RANDOMKEY, and the RediSearch / time-series reads) can be served from replicas again.

⚠️ Behavior change for the raw sendCommand path: a table-recognized command sent raw — e.g. cluster.sendCommand(['DBSIZE']) — now follows its policy (fan-out and aggregate) instead of hitting a single node. Callers who relied on raw commands for per-node operations should target a specific node with cluster.nodeClient(node).sendCommand(...).

This release also brings a broad wave of new command coverage across the client and modules. The time-series package gains the most: new TS.NRANGE/TS.NREVRANGE multi-key pivot commands, a TS.READ cursor reader, TS.QUERYLABELS, EXCLUDEEMPTY on MRANGE/MREVRANGE, and multi-aggregator support. RediSearch adds FT.ALIASLIST, a COLLECT reducer for FT.AGGREGATE, HNSW RERANK, timeout warnings on the FT.SEARCH family, and the full set of stemmer languages. The core client adds SUNIONCARD/SDIFFCARD, LMOVEM/BLMOVEM, ZREVRANK WITHSCORE, COMMAND DOCS, and XREAD MAXCOUNT/MAXSIZE. A large batch of correctness fixes lands for zero-valued optional arguments (LIMIT 0, DB 0, SAMPLES 0, ENTRIESREAD 0, IDLETIME/FREQ 0, ENTRIESADDED 0) that were previously dropped from the wire, alongside several cluster and sentinel connection-lifecycle fixes.

The new HIMPORT command family (managed fieldset lifecycle) ships as experimental — see the warning below.

🚀 New Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for redis since your current version.


Consolidate RPC client implementation with improved error handling,
retry logic, and TypeScript support. Clean up legacy app scaffolding.

Key changes:
- Implement typed JSON-RPC client in TypeScript (src/index.ts)
- Add comprehensive error handling for JSON-RPC responses
- Add retry logic with configurable delays and attempts
- Add HTTP timeout and status code range validation
- Support environment-based configuration via .env
- Support Basic Auth and custom headers for RPC endpoints
- Add type definitions (src/types.ts) for Config, Logger, RpcParams
- Implement configurable logging with multiple levels
- Support both default and custom logger implementations
- Remove legacy app scaffolding (apps/app/ files)
  - Delete auth pages (login, register, verify)
  - Delete account settings pages and layouts
  - Delete explorer API routes

Package:
- Modernize to ESM (type: "module")
- Add proper exports map (ESM/CJS/types)
- Add comprehensive package metadata
- Maintain backward compatibility at v0.3.1

Features:
```typescript
import { createClient, createClientFromEnv } from '@hyperbitjs/rpc';

// Configure via env vars: RPC_URL, RPC_USERNAME, RPC_PASSWORD
const client = createClientFromEnv();

// Make typed RPC calls
const result = await client.requestOrThrow('getblockchaininfo');

// Custom config
const client = createClient({
  url: 'http://localhost:8332',
  username: 'user',
  password: 'pass',
  timeout: 30000,
  retries: 3
});
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
michaelmcshinsky and others added 7 commits October 20, 2026 15:13
- cipher-base 1.0.4 → 1.0.7
- sha.js 2.4.11 → 2.4.12
- pbkdf2 3.0.8 → 3.1.7
- handlebars 4.7.8 → 4.7.10
- axios 1.7.7 → 1.20.0
- node-forge dropped in fresh resolution
- .npmrc: legacy-peer-deps for pre-existing my-react-app peer conflict
Bumps [redis](https://github.com/redis/node-redis) from 4.7.1 to 6.3.0.
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@4.7.1...redis@6.3.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump redis from 4.7.0 to 6.3.0 chore(deps): bump redis from 4.7.1 to 6.3.0 Oct 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/redis-6.3.0 branch from 9047477 to 94a3074 Compare October 22, 2026 18:57
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/redis-6.3.0 branch October 22, 2026 21:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant