webgrip/homelab-cluster
5
0
Fork 0
Code Issues 2 Pull requests 18 Projects Releases Packages Wiki Activity Actions

Renovate agent review for #174: feat(container): update image docker.io/valkey/valkey ( 9.0.4 ➔ 9.1.0 ) #55

New issue
Closed
opened 2026-06-08 08:29:39 +00:00 by ryangr0 · 0 comments
ryangr0 commented 2026-06-08 08:29:39 +00:00
Owner
Copy link

Originally created by @Ryangr0 on GitHub.

Originally assigned to: @Ryangr0, @Copilot on GitHub.

Renovate dependency review task

Marker: renovate-agent-review:webgrip/homelab-cluster#174

Review pull request: https://github.com/webgrip/homelab-cluster/pull/174
Repository: webgrip/homelab-cluster
Pull request number: 174
Title: feat(container): update image docker.io/valkey/valkey ( 9.0.4 ➔ 9.1.0 )
Author: @webgrip-renovate[bot]
Base branch: main

Your task

Use the renovate-reviewer agent instructions to produce a dependency update risk assessment for PR #174 in webgrip/homelab-cluster.

How to research

  1. Fetch live PR metadata, diff, and changed files via gh api or the github/* tools.
  2. Read relevant repository files — find every place this dependency is used.
  3. Look up upstream release notes. Use execute to curl wherever the info lives:
    • GitHub releases API for GitHub-hosted projects
    • Docker Hub API (https://hub.docker.com/v2/repositories/<image>/tags) for container images
    • npm, PyPI, crates.io, ArtifactHub, or the project's own changelog/release page
    • Check ALL versions between old and new, not just the latest
  4. Write the review following the format in the renovate-reviewer agent profile.

How to deliver the review

Auth tokens are stripped from this environment, so API write calls fail.
However, git push works (uses the integration credential). Deliver your review like this:

  1. Write the completed review to .copilot-review/result.md with this exact format: 
    pr: 174

<full review body>
  2. Commit and push: 
    git add .copilot-review/result.md
git commit -m "copilot-review: PR #174"
git push
  3. A relay workflow will detect the push, read the file, and post the comment to PR #174.

Initial changed files

  • kubernetes/apps/searxng/searxng/app/valkey.yaml (+1/-1)

Renovate PR body (contains changelog links — follow them)

This PR contains the following updates:

Package Update Change
docker.io/valkey/valkey minor 9.0.4 → 9.1.0

Merge Confidence badges are included where Renovate supports them; low/neutral confidence means this update deserves a manual impact check before merge.

Release Notes

valkey-io/valkey (docker.io/valkey/valkey)

v9.1.0

Compare Source

Upgrade urgency LOW: This is the first stable release of Valkey 9.1.

Security fixes
  • (CVE-2026-23479) Use-After-Free in unblock client flow
  • (CVE-2026-25243) Invalid Memory Access in RESTORE command
  • (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
New Features and enhanced behavior
Bug Fixes

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by [Renovate Bot

Originally created by @Ryangr0 on GitHub. Originally assigned to: @Ryangr0, @Copilot on GitHub. # Renovate dependency review task Marker: `renovate-agent-review:webgrip/homelab-cluster#174` Review pull request: https://github.com/webgrip/homelab-cluster/pull/174 Repository: `webgrip/homelab-cluster` Pull request number: 174 Title: feat(container): update image docker.io/valkey/valkey ( 9.0.4 ➔ 9.1.0 ) Author: @webgrip-renovate[bot] Base branch: `main` ## Your task Use the `renovate-reviewer` agent instructions to produce a dependency update risk assessment for **PR #174** in `webgrip/homelab-cluster`. ## How to research 1. Fetch live PR metadata, diff, and changed files via `gh api` or the `github/*` tools. 2. Read relevant repository files — find every place this dependency is used. 3. Look up upstream release notes. Use `execute` to `curl` wherever the info lives: - GitHub releases API for GitHub-hosted projects - Docker Hub API (`https://hub.docker.com/v2/repositories/<image>/tags`) for container images - npm, PyPI, crates.io, ArtifactHub, or the project's own changelog/release page - Check ALL versions between old and new, not just the latest 4. Write the review following the format in the `renovate-reviewer` agent profile. ## How to deliver the review Auth tokens are stripped from this environment, so API write calls fail. However, **git push works** (uses the integration credential). Deliver your review like this: 1. Write the completed review to `.copilot-review/result.md` with this exact format: ``` pr: 174 <full review body> ``` 2. Commit and push: ``` git add .copilot-review/result.md git commit -m "copilot-review: PR #174" git push ``` 3. A relay workflow will detect the push, read the file, and post the comment to PR #174. ## Initial changed files - `kubernetes/apps/searxng/searxng/app/valkey.yaml` (+1/-1) ## Renovate PR body (contains changelog links — follow them) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/valkey/valkey](https://redirect.github.com/valkey-io/valkey) | minor | `9.0.4` → `9.1.0` | Merge Confidence badges are included where Renovate supports them; low/neutral confidence means this update deserves a manual impact check before merge. --- ### Release Notes <details> <summary>valkey-io/valkey (docker.io/valkey/valkey)</summary> ### [`v9.1.0`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.1.0) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/9.0.4...9.1.0) Upgrade urgency LOW: This is the first stable release of Valkey 9.1. ##### Security fixes - (CVE-2026-23479) Use-After-Free in unblock client flow - (CVE-2026-25243) Invalid Memory Access in RESTORE command - (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution ##### New Features and enhanced behavior - Add cluster bus network traffic usage metric in bytes by [@&#8203;hpatro](https://redirect.github.com/hpatro) ([#&#8203;3396](https://redirect.github.com/valkey-io/valkey/issues/3396)) - Reduce latency spikes during rehashing via incremental page release by [@&#8203;chzhoo](https://redirect.github.com/chzhoo) ([#&#8203;3481](https://redirect.github.com/valkey-io/valkey/issues/3481)) ##### Bug Fixes - Fix(syncio): Set errno on EOF in syncRead and propagate to conn->last by [@&#8203;abmathur-ie](https://redirect.github.com/abmathur-ie) ([#&#8203;3580](https://redirect.github.com/valkey-io/valkey/issues/3580)) - Fix GEOSEARCH BYPOLYGON leak on invalid COUNT by [@&#8203;bandalgomsu](https://redirect.github.com/bandalgomsu) ([#&#8203;3568](https://redirect.github.com/valkey-io/valkey/issues/3568)) - Handle NULL pointer in streamTrim listpack delta calculation by [@&#8203;smkher](https://redirect.github.com/smkher) ([#&#8203;3591](https://redirect.github.com/valkey-io/valkey/issues/3591)) - Fixes server crash when RDMA benchmark clients disconnect by [@&#8203;quanyeyang](https://redirect.github.com/quanyeyang) ([#&#8203;3448](https://redirect.github.com/valkey-io/valkey/issues/3448)) - Fix the memory leak in valkey-benchmark by [@&#8203;nmvk](https://redirect.github.com/nmvk) ([#&#8203;3643](https://redirect.github.com/valkey-io/valkey/issues/3643)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
renovate/patch-mise-tools
renovate/harbor.webgrip.dev-dockerhub-amazon-aws-cli-2.36.x
renovate/docker.io-amazon-aws-cli-2.36.x
fix/litellm-ingress-ploeg
renovate/harbor.webgrip.dev-dockerhub-n8nio-n8n-2.x
renovate/harbor.webgrip.dev-dockerhub-python-3.14-alpine
renovate/docker.io-python-3.14-slim
renovate/harbor.webgrip.dev-dockerhub-n8nio-n8n-2.34.x
renovate/harbor.webgrip.dev-dockerhub-library-docker-29.7.x
feat/ploeg-bench-team
fix/runner-mem-request-node-pressure
fix/runner-mem-grype-oom
fix/harbor-ci-robot-tag-delete
renovate/platform-patch-flux-oci-helm-charts-(platform)
renovate/docker.io-renovate-renovate-43.x
renovate/ghcr.io-siderolabs-kubelet-1.36.x
renovate/harbor.webgrip.dev-dockerhub-dxflrs-garage-2.x
renovate/docker.io-alpine-3.x
renovate/patch-flux-controllers
renovate/harbor.webgrip.dev-dockerhub-invoiceninja-invoiceninja-5.13.x
feat/retire-ghcr-policies
feat/renovate-enable-gomod
No results found.
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/homelab-cluster#55
No description provided.