[Snyk] Upgrade ioredis from 4.19.2 to 5.0.6 #17
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade ioredis from 4.19.2 to 5.0.6. See this package in npm: https://www.npmjs.com/package/ioredis See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/dc2ba92c-4a56-44fe-a85a-18e7573fdb72?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade ioredis from 4.19.2 to 5.0.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-IOREDIS-1567196
Why? Proof of Concept exploit, Has a fix available, CVSS 4.2
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: ioredis
-
5.0.6 - 2022-05-31
- Add back Pipeline#length (#1585) (63b2ee4), closes #1584
-
5.0.5 - 2022-05-17
- improve typing for redis.multi (#1580) (f9f875b)
- send correct command during auto-pipelining of .call() operations (#1579) (e41c3dc)
-
5.0.4 - 2022-04-09
- Expose ChainableCommander and other types (#1560) (df04dd8)
-
5.0.3 - 2022-03-31
- add named exports to keep compatible with @ types/ioredis (#1552) (a89a900)
- Fix failover detector with sentinel and tls streams (ac00a00)
- handle NOPERM error for monitor (93b873d), closes #1498
- Hook up the keepAlive after a successful connect (14f03a4), closes #1339
-
5.0.2 - 2022-03-30
- allow option maxRetriesPerRequest to be null (#1553) (d62a808), closes #1550
- support TypeScript interface as parameters of hmset and mset (#1545) (3444791), closes #1536
-
5.0.1 - 2022-03-26
- improve typing compatibility with @ types/ioredis (#1542) (3bf300a)
-
5.0.0 - 2022-03-26
- add @ ioredis/interface-generator to dev deps (aa3b3e9)
- add missing declaration for callBuffer (08c9072)
- add the missing typing for Redis#call() (747dd30)
- better support for CJS importing (687d3eb)
- disable slotsRefreshInterval by default (370fa62)
- Fix the NOSCRIPT behavior when using pipelines (bc1b168)
- improve typing for auto pipelining (4e8c567)
- improve typing for pipeline (d18f3fe)
- keyPrefix should work with Buffer (6942cec), closes #1486
- make fields private when possible (d5c2f20)
- parameter declaration of Redis#duplicate (a29d9c4)
- pipeline fails when cluster is not ready (af60bb0), closes #1460
- remove dropBufferSupport option (04e68ac)
- remove unused Command#isCustomCommand (46ade6b)
- rename interfaces by dropping prefix I (d1d9dba)
- Reset loaded script hashes to force a reload of scripts after reconnect of redis (60c2af9)
- support passing keyPrefix via redisOptions (6b0dc1e)
- add @ since to method comments (13eff8e)
- add declarations for methods (1e10c95)
- add tests for cluster (1eba58b)
- always parse username passed via URI (c6f41f6)
- drop support of Node.js 10 (f9a5071)
- drop support of third-party Promise libraries (2001ec6)
- expose official declarations (7a436b1)
- improve typings for cluster (06782e6)
- improve typings for pipeline (334242b)
- improve typings for smismember (487c3a0)
- improve typings for transformers (94c1e24)
- improve typings for xread (96cc335)
- Pipeline-based script loading (8df6ee2)
- prepare v5 stable release (#1538) (fe32ce7)
- Refactor code with modern settings (a8ffa80)
- skip ready check on NOPERM error (b530a0b), closes #1293
- support commands added in Redis v7 (53ca412)
- support defining custom commands via constructor options (f293b97)
- support Redis Functions introduced in Redis 7.0 (32eb381)
- Support for third-party Promise libraries is dropped. Related methods (
- We now require Node.js v12 or newer.
-
5.0.0-beta.4 - 2022-03-19
- add missing declaration for callBuffer (08c9072)
- keyPrefix should work with Buffer (6942cec), closes #1486
-
5.0.0-beta.3 - 2022-03-19
- pipeline fails when cluster is not ready (af60bb0), closes #1460
-
5.0.0-beta.2 - 2022-03-16
- improve typings for smismember (487c3a0)
- improve typings for xread (96cc335)
-
5.0.0-beta.1 - 2022-03-14
-
4.28.5 - 2022-02-06
-
4.28.4 - 2022-02-02
-
4.28.3 - 2022-01-11
-
4.28.2 - 2021-12-01
-
4.28.1 - 2021-11-23
-
4.28.0 - 2021-10-13
-
4.27.11 - 2021-10-11
-
4.27.10 - 2021-10-04
-
4.27.9 - 2021-08-30
-
4.27.8 - 2021-08-18
-
4.27.7 - 2021-08-01
-
4.27.6 - 2021-06-13
-
4.27.5 - 2021-06-05
-
4.27.4 - 2021-06-04
-
4.27.3 - 2021-05-22
-
4.27.2 - 2021-05-04
-
4.27.1 - 2021-04-24
-
4.27.0 - 2021-04-24
-
4.26.0 - 2021-04-08
-
4.25.0 - 2021-04-02
-
4.24.6 - 2021-03-31
-
4.24.5 - 2021-03-27
-
4.24.4 - 2021-03-24
-
4.24.3 - 2021-03-21
-
4.24.2 - 2021-03-14
-
4.24.1 - 2021-03-14
-
4.24.0 - 2021-03-14
-
4.23.1 - 2021-03-14
-
4.23.0 - 2021-02-25
-
4.22.0 - 2021-02-06
-
4.21.0 - 2021-02-06
-
4.20.0 - 2021-02-05
-
4.19.4 - 2020-12-13
-
4.19.3 - 2020-12-13
-
4.19.2 - 2020-10-31
from ioredis GitHub release notes5.0.6 (2022-05-31)
Bug Fixes
5.0.5 (2022-05-17)
Bug Fixes
5.0.4 (2022-04-09)
Bug Fixes
5.0.3 (2022-03-31)
Bug Fixes
5.0.2 (2022-03-30)
Bug Fixes
5.0.1 (2022-03-26)
Bug Fixes
5.0.0 (2022-03-26)
In the update of v5, we've made ioredis even more stable and developer-friendly while minimizing the number of breaking changes, so you can spend more time enjoying your life 😄.
Please refer to the guideline to upgrade your projects: 🚀 Upgrading from v4 to v5.
Bug Fixes
Features
BREAKING CHANGES
slotsRefreshIntervalis disabled by default,previously, the default value was 5000.
allowUsernameInURIis removed and ioredis will alwaysuse the username passed via URI.
Previously, the
usernamepart innew Redis("redis://username:authpassword@127.0.0.1:6380/4")was ignored unless
allowUsernameInURIis specified:new Redis("redis://username:authpassword@127.0.0.1:6380/4?allowUsernameInURI=true").Now, if you don't want to send username to Redis, just leave the username part empty:
new Redis("redis://:authpassword@127.0.0.1:6380/4")Redis#serverInfois removed. This field is never documented soyou very likely have never used it.
exports.Promise = require('bluebird')) are kept but they don't take any effects. The native Promise will always be used.Rediscan't be called as a function anymore as it's now a class.Please change
Redis()tonew Redis(). Note thatRedis()was already deprecatedin the previous version.
5.0.0-beta.4 (2022-03-19)
Bug Fixes
5.0.0-beta.3 (2022-03-19)
Bug Fixes
5.0.0-beta.2 (2022-03-16)
Features
Commit messages
Package name: ioredis
@octokit/webhooksto v9 (#1559) probot/probot#1560)baseUrlon Octokit constructor instead of Probot constructor probot/probot#1552)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs