Skip to content

Bump redis from 3.1.2 to 6.0.0#64

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/redis-6.0.0
Open

Bump redis from 3.1.2 to 6.0.0#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/redis-6.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Bumps redis from 3.1.2 to 6.0.0.

Release notes

Sourced from redis's releases.

redis@6.0.0

Changes

This is the first major release of node-redis since 5.x. The headline change is RESP3 by default, alongside broader Redis 8.8 command coverage, pubsub/cluster reliability fixes, and a bumped minimum Node.js version.

Key changes

  • RESP3 is the default protocol — opt back into RESP2 explicitly if you need the old wire format
  • Node.js 20 is the new minimum supported runtime
  • Redis 8.8 coverage — new array commands, INCREX / INCREXBYFLOAT, ZINTER/ZUNION COUNT aggregator, XNACK, CLIENT UNBLOCK
  • Sentinel & cluster pubsub fixes for failover-moved connections and sharded topology recovery
  • Stack modules exposed on pool type and the core client classes are now publicly re-exported

🔥 Breaking Changes

See the v5 → v6 migration guide for migration steps.

  • RESP3 is now the default protocol (#3215)
  • Node.js 20 is now the minimum supported version (#3293)
  • New default values for keepAliveInitialDelay (30s) and commandTimeout (5s) (#3292)

🔒 Security

  • entraid: bump @azure/msal-node to 5.x to drop vulnerable transitive uuid (CVE-2026-41907) (#3269)

🚀 New Features

  • Add CLIENT UNBLOCK command (#3266)
  • Add XNACK command with options (#3238)
  • Add Redis 8.8 array commands (#3285)
  • Add INCREX and INCREXBYFLOAT commands (#3288)
  • Add COUNT aggregator to ZINTER / ZINTERSTORE / ZUNION / ZUNIONSTORE (#3243)
  • Add FPHA option to JSON.SET (#3235)
  • time-series: add multi-aggregation range APIs (#3249)
  • Add duplicate() method to RedisSentinel (#3212)
  • Parse unix:// URLs in parseURL (#3271)
  • Expose RedisClient, RedisCluster, RedisSentinel and pool classes (#3251)
  • Expose stack modules on the pool type (#3267)

🐛 Bug Fixes

  • sentinel: use mapped address when failover moves pubsub connections (#3190)
  • cluster: recover sharded pubsub topology after node reconnects (#3223)
  • client: swallow synchronous EPIPE from writeAfterFIN (#3283)
  • search: allow LOAD * in FT.AGGREGATE (#3241)
  • otel: record client connection errors (#3259)
  • entraid: bump @azure/msal-node to 5.x to drop vulnerable uuid transitive (#3269)
  • Fix wrapper command options handling (#3295)
  • Non-functional typo fixes (#3244)

📚 Documentation

... (truncated)

Changelog

Sourced from redis's changelog.

Changelog

v4.0.2 - 13 Jan, 2022

Fixes

  • Fix v4 commands in legacy mode (#1820)
  • Fix EXISTS command reply (#1819)
  • Fix handler for "redis:invalidate" messages (#1798)
  • Fix "SEPARATOR" typo in RediSearch (#1823)

Enhancements

  • First release of @node-redis/bloom
  • Add support for Buffers
  • Enhance ASK and MOVED errors handler

v4.0.1 - 13 Dec, 2021

Fixes

  • Fix NOAUTH error when using authentication & database (#1681)
  • Allow to .quit() in PubSub mode (#1766)
  • Add an option to configure name on a client (#1758)
  • Lowercase commands (client.hset) in legacyMode
  • Fix PubSub resubscribe (#1764)
  • Fix RedisSocketOptions type (#1741)

Enhancements

  • Add support for numbers and Buffers in HSET (#1738 #1739)
  • Export RedisClientType, RedisClusterType and some more types (#1673)
  • First release of @node-redis/time-series

v4.0.0 - 24 Nov, 2021

This version is a major change and refactor, adding modern JavaScript capabilities and multiple breaking changes. See the migration guide for tips on how to upgrade.

Breaking Changes

  • All functions return Promises by default
  • Dropped support for Node.js 10.x, the minimum supported Node.js version is now 12.x
  • createClient takes new and different arguments
  • The prefix, rename_commands configuration options to createClient have been removed
  • The enable_offline_queue configuration option is removed, executing commands on a closed client (without calling .connect() or after calling .disconnect()) will reject immediately
  • Login credentials are no longer saved when using .auth() directly

Features

  • Added support for Promises

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by dmaier-redislabs, a new releaser for redis since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
redis [>= 4.6.a, < 4.7]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [redis](https://github.com/redis/node-redis) from 3.1.2 to 6.0.0.
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/v3.1.2...redis@6.0.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants