Skip to content

chore(deps): bump the go_modules group across 2 directories with 4 updates#5

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-557b044c6f
Open

chore(deps): bump the go_modules group across 2 directories with 4 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-557b044c6f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 16, 2026

Bumps the go_modules group with 4 updates in the / directory: github.com/redis/go-redis/v9, github.com/moby/spdystream, golang.org/x/net and golang.org/x/oauth2.
Bumps the go_modules group with 1 update in the /tests/data-assert directory: github.com/redis/go-redis/v9.

Updates github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

v9.7.3

What's Changed

  • fix: handle network error on SETINFO (#3295) (CVE-2025-29923)
  • Deprecating misspelled DisableIndentity flag in the client options.
  • Introducing DisableIdentity flag in the client options.
  • Updating the documentation related to the new flag and the one that was deprecated.

Full Changelog: redis/go-redis@v9.7.1...v9.7.3

v9.7.1

Changes

  • Recognize byte slice for key argument in cluster client hash slot computation (#3049)
  • fix(search&aggregate):fix error overwrite and typo #3220 (#3224)
  • fix: linter configuration (#3279)
  • fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
  • Reinstate read-only lock on hooks access in dialHook to fix data race (#3225)
  • fix: flaky ClientKillByFilter test (#3268)
  • chore: fix some comments (#3226)
  • fix(aggregate, search): ft.aggregate bugfixes (#3263)
  • fix: add unstableresp3 to cluster client (#3266)
  • Fix race condition in clusterNodes.Addrs() (#3219)
  • SortByWithCount FTSearchOptions fix (#3201)
  • Eliminate redundant dial mutex causing unbounded connection queue contention (#3088)
  • Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🚀 New Features

  • Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🐛 Bug Fixes

  • fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
  • fix: add unstableresp3 to cluster client (#3266)
  • fix(aggregate, search): ft.aggregate bugfixes (#3263)
  • SortByWithCount FTSearchOptions fix (#3201)
  • Recognize byte slice for key argument in cluster client hash slot computation (#3049)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ofekshenawa, @​Cgol9, @​LINKIWI, @​shawnwgit, @​zhuhaicity, @​bitsark, @​vladvildanov, @​ndyakov

Full Changelog: redis/go-redis@v9.7.0...v9.7.1

Commits

Updates github.com/moby/spdystream from 0.2.0 to 0.5.1

Release notes

Sourced from github.com/moby/spdystream's releases.

v0.5.1

What's Changed

Full Changelog: moby/spdystream@v0.5.0...v0.5.1

[v0.5.0] Avoid leaking timeout timer channels and update github actions

What's Changed

Full Changelog: moby/spdystream@v0.4.0...v0.5.0

[v0.4.0] fix goroutine leak and remove unused code

What's Changed

New Contributors

Full Changelog: moby/spdystream@v0.3.0...v0.4.0

[v0.3.0] Release with fixes for a race condition

What's Changed

New Contributors

Full Changelog: moby/spdystream@v0.2.0...v0.3.0

Commits
  • c59e5d7 Merge pull request #109 from thaJeztah/use_ioutil
  • 2fd0155 use ioutil.Discard for go1.13 compatibility
  • ef6121f Merge commit from fork
  • 241cec9 compare with signed Int for 32-bit Arm
  • 21c3864 Add options to customize limits
  • acf9b45 spdy: update godoc for MaxDataLength
  • eb63605 spdy: limit header-size and header-count
  • 2f21da4 spdy: fix header block byte accounting
  • 5976b66 spdy: enforce 24-bit frame length limits
  • cf0ec5d Guard against oversized SPDY frames
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.33.0 to 0.38.0

Commits
  • e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
  • ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
  • 1f1fa29 publicsuffix: regenerate table
  • 1215081 http2: improve error when server sends HTTP/1
  • 312450e html: ensure <search> tag closes <p> and update tests
  • 09731f9 http2: improve handling of lost PING in Server
  • 55989e2 http2/h2c: use ResponseController for hijacking connections
  • 2914f46 websocket: re-recommend gorilla/websocket
  • 99b3ae0 go.mod: update golang.org/x dependencies
  • 85d1d54 go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.18.0 to 0.27.0

Commits
  • 681b4d8 jws: split token into fixed number of parts
  • 3f78298 all: upgrade go directive to at least 1.23.0 [generated]
  • 109dabf endpoints: add links/provider for Discord
  • ac571fa oauth2: fix docs for Config.DeviceAuth
  • 314ee5b endpoints: add patreon endpoint
  • b9c813b google: add warning about externally-provided credentials
  • 49a531d all: make method and struct comments match the names
  • 22134a4 README: don't recommend go get
  • 3e64809 x/oauth2: add Token.ExpiresIn
  • 16a9973 jwt: rename example to avoid vet error
  • Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

v9.7.3

What's Changed

  • fix: handle network error on SETINFO (#3295) (CVE-2025-29923)
  • Deprecating misspelled DisableIndentity flag in the client options.
  • Introducing DisableIdentity flag in the client options.
  • Updating the documentation related to the new flag and the one that was deprecated.

Full Changelog: redis/go-redis@v9.7.1...v9.7.3

v9.7.1

Changes

  • Recognize byte slice for key argument in cluster client hash slot computation (#3049)
  • fix(search&aggregate):fix error overwrite and typo #3220 (#3224)
  • fix: linter configuration (#3279)
  • fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
  • Reinstate read-only lock on hooks access in dialHook to fix data race (#3225)
  • fix: flaky ClientKillByFilter test (#3268)
  • chore: fix some comments (#3226)
  • fix(aggregate, search): ft.aggregate bugfixes (#3263)
  • fix: add unstableresp3 to cluster client (#3266)
  • Fix race condition in clusterNodes.Addrs() (#3219)
  • SortByWithCount FTSearchOptions fix (#3201)
  • Eliminate redundant dial mutex causing unbounded connection queue contention (#3088)
  • Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🚀 New Features

  • Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🐛 Bug Fixes

  • fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
  • fix: add unstableresp3 to cluster client (#3266)
  • fix(aggregate, search): ft.aggregate bugfixes (#3263)
  • SortByWithCount FTSearchOptions fix (#3201)
  • Recognize byte slice for key argument in cluster client hash slot computation (#3049)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ofekshenawa, @​Cgol9, @​LINKIWI, @​shawnwgit, @​zhuhaicity, @​bitsark, @​vladvildanov, @​ndyakov

Full Changelog: redis/go-redis@v9.7.0...v9.7.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the go_modules group with 4 updates in the / directory: [github.com/redis/go-redis/v9](https://github.com/redis/go-redis), [github.com/moby/spdystream](https://github.com/moby/spdystream), [golang.org/x/net](https://github.com/golang/net) and [golang.org/x/oauth2](https://github.com/golang/oauth2).
Bumps the go_modules group with 1 update in the /tests/data-assert directory: [github.com/redis/go-redis/v9](https://github.com/redis/go-redis).


Updates `github.com/redis/go-redis/v9` from 9.7.0 to 9.7.3
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.7.0...v9.7.3)

Updates `github.com/moby/spdystream` from 0.2.0 to 0.5.1
- [Release notes](https://github.com/moby/spdystream/releases)
- [Commits](moby/spdystream@v0.2.0...v0.5.1)

Updates `golang.org/x/net` from 0.33.0 to 0.38.0
- [Commits](golang/net@v0.33.0...v0.38.0)

Updates `golang.org/x/oauth2` from 0.18.0 to 0.27.0
- [Commits](golang/oauth2@v0.18.0...v0.27.0)

Updates `github.com/redis/go-redis/v9` from 9.7.0 to 9.7.3
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.7.0...v9.7.3)

---
updated-dependencies:
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.7.3
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/moby/spdystream
  dependency-version: 0.5.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.27.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.7.3
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants