[Snyk] Upgrade redis from 2.8.0 to 4.1.0

[snyk-bot]

Snyk has created this PR to upgrade redis from 2.8.0 to 4.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 27 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-05-02.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REDIS-1255645	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: redis

• 4.1.0 - 2022-05-02
  

  Enhancements

  • Upgrade @ redis/bloom
  • Upgrade @ redis/client
  • Upgrade @ redis/graph
  • Upgrade @ redis/json
  • Upgrade @ redis/search
  • Upgrade @ redis/time-series
• 4.0.6 - 2022-03-31
• 4.0.5 - 2022-03-31
• 4.0.4 - 2022-02-22
• 4.0.3 - 2022-01-31
• 4.0.2 - 2022-01-13
• 4.0.1 - 2021-12-13
• 4.0.0 - 2021-11-25
• 4.0.0-rc.4 - 2021-11-16
• 4.0.0-rc.3 - 2021-10-11
• 4.0.0-rc.2 - 2021-09-23
• 4.0.0-rc.1 - 2021-09-06
• 4.0.0-rc.0 - 2021-08-27
• 4.0.0-next.7 - 2021-08-24
• 4.0.0-next.6 - 2021-08-19
• 4.0.0-next.5 - 2021-07-28
• 4.0.0-next.4 - 2021-07-01
• 4.0.0-next.3 - 2021-06-24
• 4.0.0-next.2 - 2021-06-12
• 4.0.0-next.1 - 2021-06-11
• 4.0.0-next.0 - 2021-06-11
• 3.1.2 - 2021-04-20
• 3.1.1 - 2021-04-13
• 3.1.0 - 2021-03-31
• 3.0.2 - 2020-02-09
• 3.0.1 - 2020-02-09
• 3.0.0 - 2020-02-09
• 2.8.0 - 2017-08-08

from redis GitHub release notes

Commit messages

Package name: redis

• eff2362 update @ redis deps
• 9a62f61 Release client@1.1.0
• c990a5c Release time-series@1.0.3
• ffc1234 Release search@1.0.6
• f2a4e76 Release json@1.0.3
• 6dc9c83 Release graph@1.0.1
• 14973f1 Release bloom@1.0.2
• e5aaf38 Release client@1.0.6
• 0752f14 prepare 4.1.0 (#2111)
• baf67fd fix #1976 - XSETID (#2104)
• 225524f Adds example of using a trim strategy with XADD. (#2105)
• b586ccb fix #1904 - ACL DRYRUN (#2102)
• 1e51680 simplify example (#2072)
• 432a7e3 upgrade deps (#2098)
• 11c6c24 Add support for redis functions (#2020)
• 23b6513 New RESP2 parser (#1899)
• b1a0b48 Support new muilti pop commands (#2051)
• 0f7ae93 Updates topk example for new withcount option. (#2093)
• 448ac9d fix #2090 - topK.listWithCount (#2091)
• e6de453 fix socket error handlers (#2092)
• 8b5a547 Bump async from 2.6.3 to 2.6.4 (#2087)
• 79ee8f2 upgrade dependencies (#2081)
• c5b706b exported GeoReplyWith (#2082)
• 4d1a865 remove console.log (#2083)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs