chore(deps): update valkey/valkey docker tag to v9.1.1

[renovate]

This PR contains the following updates:

Package	Update	Change
valkey/valkey	patch	9.1.0 → 9.1.1

---

Release Notes

valkey-io/valkey (valkey/valkey)

v9.1.1

Compare Source

Valkey 9.1.1 - Released Tue 21 July 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes

• CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#​4234)
• CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @​z0v3r1n and @​lifip. (#​4073)

Bug Fixes

• Omit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and CONFIG REWRITE so older versions can parse the output by @​dvkashapov (#​3964)
• Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by @​roshkhatri (#​3938)
• Fix use-after-free crash when ACL LOAD removes a user whose authenticated client has its close deferred by @​ranshid (#​3800)
• Enforce db= ACL permissions on every DB clause of COPY, closing a bypass with REPLACE or repeated DB tokens by @​enjoy-binbin (#​3801)
• Enforce database-level ACLs for CLUSTER FLUSHSLOT, which removes keys from all databases by @​enjoy-binbin (#​3806)
• Fix use-after-free in the module API when unregistering the first registered cluster message receiver by @​eifrah-aws (#​3846)
• Fix HRANDFIELD with a positive count looping forever when non-expired fields are fewer than the requested count by @​cjx-zar (#​4047)
• Fix clients left on the wrong database after module keyspace notifications for MOVE and COPY by @​enjoy-binbin (#​4024)
• Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by @​lukepalmer (#​4068)
• Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by @​ranshid (#​3950)
• Fix assertion in HEXPIRE, HGETDEL and HPERSIST when a module blocks the client in a keyspace notification callback by @​enjoy-binbin (#​3743)
• Fix undefined behavior in the failover delay calculation when cluster-node-timeout is below 30 milliseconds by @​enjoy-binbin (#​3941)
• Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @​madolson (#​3920)
• Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by @​madolson (#​3921)
• Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by @​nanyan0312 (#​4060)
• Fix startup crash on 32-bit systems where time_t is 64-bit (such as Alpine 3.23) when generating INFO output by @​chenshi5012 (#​3787)
• HGETDEL now returns a syntax error when the FIELDS keyword is missing or misplaced by @​lcxn123 (#​4049)
• COMMAND INFO in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by @​rickrams (#​3939)
• Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by @​hpatro (#​4105)
• Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by @​chx9 (#​3723)
• Reject control characters in SENTINEL SET values to prevent config-file injection via Sentinel config rewrite by @​eifrah-aws (#​3847)
• Reject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf injection by @​eifrah-aws (#​3848)
• Redact key names and user data from more server log messages when hide-user-data-from-log is enabled by @​zackcam (#​3872)
• ACL LOG now reports the denied database ID for COPY instead of the command name when db= access is denied by @​enjoy-binbin (#​3888)
• Fix garbled shard IDs in the cluster UPDATE message log line by @​enjoy-binbin (#​3942)
• Fix negative master_sync_total_bytes in INFO replication during disk-based sync when the RDB exceeds 2GB by @​chx9 (#​3811)
• Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @​pkhartsk (#​3843)

Full Changelog: valkey-io/valkey@9.1.0...9.1.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

@@ spec.values.controllers.valkey.containers.app.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/tools/outline
! ± value change
- 9.1.0@sha256:8e8d64b405ce18f41b8e5ee20aa4687a8ed0022d1298f2ce31cdcf3a76e09411
+ 9.1.1@sha256:3acc0687f2a2e1091fae6450d7842dd658c941338cf0a873ddd9e14b9e4ea4dd

@@ spec.template.spec.containers.app.image @@
# apps/v1/Deployment/tools/outline-valkey
! ± value change
- valkey/valkey:9.1.0@sha256:8e8d64b405ce18f41b8e5ee20aa4687a8ed0022d1298f2ce31cdcf3a76e09411
+ valkey/valkey:9.1.1@sha256:3acc0687f2a2e1091fae6450d7842dd658c941338cf0a873ddd9e14b9e4ea4dd