chore(deps): pin dependencies #2

Merged

finkregh merged 1 commit from renovate/all into main

2026-05-23 09:52:42 +00:00

renovate-forgejo commented

2026-05-22 00:04:58 +00:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
axllent/mailpit		pinDigest	→ `0059ef8`
caddy		pinDigest	→ `86deaf5`
ghcr.io/astral-sh/uv	final	pinDigest	→ `440fd64`
ghcr.io/astral-sh/uv	stage	pinDigest	→ `440fd64`
grafana/otel-lgtm		pinDigest	→ `10f48eb`
postgis/postgis		pinDigest	→ `681931a`
postgres		pinDigest	→ `0027bef`
python	stage	pinDigest	→ `c845af9`
redis		pinDigest	→ `6ab0b6e`
valkey/valkey		minor	`9.0.4-alpine3.23` → `9.1.0-alpine3.23`

Release Notes

valkey-io/valkey (valkey/valkey)

`v9.1.0`

Compare Source

Upgrade urgency LOW: This is the first stable release of Valkey 9.1.

Security fixes

(CVE-2026-23479) Use-After-Free in unblock client flow
(CVE-2026-25243) Invalid Memory Access in RESTORE command
(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution

New Features and enhanced behavior

Add cluster bus network traffic usage metric in bytes by @hpatro (#3396)
Reduce latency spikes during rehashing via incremental page release by @chzhoo (#3481)

Bug Fixes

Fix(syncio): Set errno on EOF in syncRead and propagate to conn->last by @abmathur-ie (#3580)
Fix GEOSEARCH BYPOLYGON leak on invalid COUNT by @bandalgomsu (#3568)
Handle NULL pointer in streamTrim listpack delta calculation by @smkher (#3591)
Fixes server crash when RDMA benchmark clients disconnect by @quanyeyang (#3448)
Fix the memory leak in valkey-benchmark by @nmvk (#3643)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | axllent/mailpit | | pinDigest | → `0059ef8` | | caddy | | pinDigest | → `86deaf5` | | ghcr.io/astral-sh/uv | final | pinDigest | → `440fd64` | | ghcr.io/astral-sh/uv | stage | pinDigest | → `440fd64` | | grafana/otel-lgtm | | pinDigest | → `10f48eb` | | [postgis/postgis](https://github.com/postgis/docker-postgis) | | pinDigest | → `681931a` | | postgres | | pinDigest | → `0027bef` | | python | stage | pinDigest | → `c845af9` | | redis | | pinDigest | → `6ab0b6e` | | [valkey/valkey](https://github.com/valkey-io/valkey) | | minor | `9.0.4-alpine3.23` → `9.1.0-alpine3.23` | --- ### Release Notes <details> <summary>valkey-io/valkey (valkey/valkey)</summary> ### [`v9.1.0`](https://github.com/valkey-io/valkey/releases/tag/9.1.0) [Compare Source](https://github.com/valkey-io/valkey/compare/9.0.4...9.1.0) Upgrade urgency LOW: This is the first stable release of Valkey 9.1. ##### Security fixes - (CVE-2026-23479) Use-After-Free in unblock client flow - (CVE-2026-25243) Invalid Memory Access in RESTORE command - (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution ##### New Features and enhanced behavior - Add cluster bus network traffic usage metric in bytes by [@hpatro](https://github.com/hpatro) ([#3396](https://github.com/valkey-io/valkey/issues/3396)) - Reduce latency spikes during rehashing via incremental page release by [@chzhoo](https://github.com/chzhoo) ([#3481](https://github.com/valkey-io/valkey/issues/3481)) ##### Bug Fixes - Fix(syncio): Set errno on EOF in syncRead and propagate to conn->last by [@abmathur-ie](https://github.com/abmathur-ie) ([#3580](https://github.com/valkey-io/valkey/issues/3580)) - Fix GEOSEARCH BYPOLYGON leak on invalid COUNT by [@bandalgomsu](https://github.com/bandalgomsu) ([#3568](https://github.com/valkey-io/valkey/issues/3568)) - Handle NULL pointer in streamTrim listpack delta calculation by [@smkher](https://github.com/smkher) ([#3591](https://github.com/valkey-io/valkey/issues/3591)) - Fixes server crash when RDMA benchmark clients disconnect by [@quanyeyang](https://github.com/quanyeyang) ([#3448](https://github.com/valkey-io/valkey/issues/3448)) - Fix the memory leak in valkey-benchmark by [@nmvk](https://github.com/nmvk) ([#3643](https://github.com/valkey-io/valkey/issues/3643)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-forgejo added 1 commit

2026-05-22 00:04:58 +00:00

chore(deps): pin dependencies c8a2f632ef

renovate-forgejo requested review from finkregh

2026-05-22 00:04:58 +00:00

renovate-forgejo force-pushed renovate/all from c8a2f632ef to db93d762b8

2026-05-23 00:05:31 +00:00

Compare