webgrip/homelab-cluster
5
0
Fork 0
Code Issues 2 Pull requests 18 Projects Releases Packages Wiki Activity Actions

Renovate agent review for #100: feat(container)!: Update image docker.io/valkey/valkey ( 8.1.7 ➔ 9.0.4 ) #79

New issue
Closed
opened 2026-06-08 08:29:49 +00:00 by ryangr0 · 0 comments
ryangr0 commented 2026-06-08 08:29:49 +00:00
Owner
Copy link

Originally created by @Ryangr0 on GitHub.

Originally assigned to: @Ryangr0, @Copilot on GitHub.

Renovate dependency review task

Marker: renovate-agent-review:webgrip/homelab-cluster#100

Review pull request: https://github.com/webgrip/homelab-cluster/pull/100
Repository: webgrip/homelab-cluster
Pull request: #100
Title: feat(container)!: Update image docker.io/valkey/valkey ( 8.1.7 ➔ 9.0.4 )
Author: @webgrip-renovate[bot]
Base branch: main

Task

Use the renovate-reviewer custom agent instructions to produce the dependency update review for the linked pull request.

Do not rely only on the context in this issue. Fetch the live PR metadata, changed files, diff, relevant repository files, and upstream release notes/changelogs/advisories yourself before writing the review.

To post or update the PR comment use the github-writer MCP tools. Do not create a pull request, branch, or commit — not even as a fallback if posting the comment fails. If you cannot post the comment, add a comment to this tracking issue explaining why.

Post or update exactly one comment on https://github.com/webgrip/homelab-cluster/pull/100. The first line of the comment body must be the literal sentinel <!-- renovate-ai-review -->.

If a PR comment containing that sentinel already exists, update it instead of creating a duplicate.

Do not modify repository files, push commits, open a code-change pull request, approve, merge, close, or retitle the pull request.

After posting or updating the PR comment, close this tracking issue as completed.

Initial changed files snapshot

  • kubernetes/apps/searxng/searxng/app/valkey.yaml (+1 -1)

Initial PR body snapshot

This PR contains the following updates:

Package Update Change Pending
docker.io/valkey/valkey major 8.1.7 → 9.0.4 9.1.0

⚠️ Major update: review upstream migration notes, chart values, and rollout impact before merging.

Release Notes

valkey-io/valkey (docker.io/valkey/valkey)

v9.0.4

Compare Source

Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.

Security fixes
  • (CVE-2026-23479) Use-After-Free in unblock client flow
  • (CVE-2026-25243) Invalid Memory Access in RESTORE command
  • (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution

v9.0.3

Compare Source

Valkey 9.0.3

Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.

Security fixes
  • (CVE-2025-67733) RESP Protocol Injection via Lua error_reply
  • (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
  • (CVE-2026-27623) Reset request type after handling empty requests
Bug fixes
  • Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#​3160)
  • Fix server assert on ACL LOAD when current user loses permission to channels (#​3182)
  • Fix bug causing no response flush sometimes when IO threads are busy (#​3205)

v9.0.2

Compare Source

Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.

Bug fixes

  • Avoid memory leak of new argv when HEXPIRE commands target only non-exiting fields (#​2973)
  • Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking (#​2974)
  • Avoid empty hash object when HSETEX added no fields (#​2998)
  • Fix case-sensitive check for the FNX and FXX arguments in HSETEX (#​3000)
  • Prevent assertion in active expiration job after a hash with volatile fields is overwritten (#​3003, #​3007)
  • Fix HRANDFIELD to return null response when no field could be found (#​3022)
  • Fix HEXPIRE to not delete items when validation rules fail and expiration is in the past (#​3023, #​3048)
  • Fix how hash is handling overriding of expired fields overwrite (#​3060)
  • HSETEX - Always issue keyspace notifications after validation (#​3001)
  • Make zero a valid TTL for hash fields during import mode and data loading (#​3006)
  • Trigger prepareCommand on argc change in module command filters (#​2945)
  • Restrict TTL from being negative and avoid crash in import-mode (#​2944)
  • Fix chained replica crash when doing dual channel replication (#​2983)
  • Skip slot cache optimization for AOF client to prevent key duplication and data corruption (#​3004)
  • Fix used_memory_dataset underflow due to miscalculated used_memory_overhead (#​3005)
  • Avoid duplicate calculations of network-bytes-out in slot stats with copy-avoidance (#​3046)
  • Fix XREAD returning error on empty stream with + ID (#​2742)

Performance/Efficiency Improvements

  • Track reply bytes in I/O threads if commandlog-reply-larger-than is -1 (#​3086, #​3126).
    This makes it possible to mitigate a performance regression in 9.0.1 caused by the bug fix #​2652.

Full Changelog: https://github.com/valkey-io/valkey/compare/9.0.1...9.0.2

v9.0.1

Compare Source

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes

  • Authenticate slot migration client on source node to internal user (#​2785)
  • Bug fix: reset io_last_written on c->buf resize to prevent stale pointers (#​2786)
  • Sentinel: fix regression requiring "+failover" ACL in failover path (#​2780)
  • Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#​2817)
  • Send duplicate multi meet packet only for node which supports it in mixed clusters (#​2840)
  • Fix: LTRIM should not call signalModifiedKey when no elements are removed (#​2787)
  • Fix build on some 32-bit ARM by only using NEON on AArch64 (#​2873)
  • Fix deadlock in IO-thread shutdown during panic (#​2898)
  • Fix COMMANDLOG large-reply when using reply copy avoidance (#​2652)
  • Fix CLUSTER SLOTS crash when called from module timer callback (#​2915)

Full Changelog: https://github.com/valkey-io/valkey/compare/9.0.0...9.0.1

v9.0.0

Compare Source

Valkey 9.0.0 GA - October 21, 2025

Upgrade urgency LOW: This is the first release of Valkey 9.0 which
includes stability, bug fixes, and incremental improvements over the third release candidate.

Bug fixes
  • HSETEX with FXX should not create an object if it does not exist (#​2716)
  • Fix crash when aborting a slot migration while child snapshot is active (#​2721)
  • Fix double MOVED reply on unblock at failover (#​2734)
  • Fix memory leak with CLIENT LIST/KILL duplicate filters (#​2362)
  • Fix incorrect accounting after completed atomic slot migration (#​2749)
  • Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#​1826, #​2750)
  • Fix invalid memory address caused by hashtable shrinking during safe iteration (#​2753)

For a high level overview of the release, you can checkout release blog
For the full set of changes for the releases, please review the previous release candidates rc1, rc2 and rc3.

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Originally created by @Ryangr0 on GitHub. Originally assigned to: @Ryangr0, @Copilot on GitHub. # Renovate dependency review task Marker: `renovate-agent-review:webgrip/homelab-cluster#100` Review pull request: https://github.com/webgrip/homelab-cluster/pull/100 Repository: `webgrip/homelab-cluster` Pull request: #100 Title: feat(container)!: Update image docker.io/valkey/valkey ( 8.1.7 ➔ 9.0.4 ) Author: @webgrip-renovate[bot] Base branch: `main` ## Task Use the `renovate-reviewer` custom agent instructions to produce the dependency update review for the linked pull request. Do not rely only on the context in this issue. Fetch the live PR metadata, changed files, diff, relevant repository files, and upstream release notes/changelogs/advisories yourself before writing the review. To post or update the PR comment use the `github-writer` MCP tools. Do not create a pull request, branch, or commit — not even as a fallback if posting the comment fails. If you cannot post the comment, add a comment to this tracking issue explaining why. Post or update exactly one comment on https://github.com/webgrip/homelab-cluster/pull/100. The first line of the comment body must be the literal sentinel `<!-- renovate-ai-review -->`. If a PR comment containing that sentinel already exists, update it instead of creating a duplicate. Do not modify repository files, push commits, open a code-change pull request, approve, merge, close, or retitle the pull request. After posting or updating the PR comment, close this tracking issue as completed. ## Initial changed files snapshot - `kubernetes/apps/searxng/searxng/app/valkey.yaml` (+1 -1) ## Initial PR body snapshot This PR contains the following updates: | Package | Update | Change | Pending | |---|---|---|---| | [docker.io/valkey/valkey](https://redirect.github.com/valkey-io/valkey) | major | `8.1.7` → `9.0.4` | `9.1.0` | ⚠️ Major update: review upstream migration notes, chart values, and rollout impact before merging. --- ### Release Notes <details> <summary>valkey-io/valkey (docker.io/valkey/valkey)</summary> ### [`v9.0.4`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.4) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/9.0.3...9.0.4) Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. ##### Security fixes - (CVE-2026-23479) Use-After-Free in unblock client flow - (CVE-2026-25243) Invalid Memory Access in RESTORE command - (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution ### [`v9.0.3`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.3) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/9.0.2...9.0.3) ### Valkey 9.0.3 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. ##### Security fixes - (CVE-2025-67733) RESP Protocol Injection via Lua error\_reply - (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message - (CVE-2026-27623) Reset request type after handling empty requests ##### Bug fixes - Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand ([#&#8203;3160](https://redirect.github.com/valkey-io/valkey/issues/3160)) - Fix server assert on ACL LOAD when current user loses permission to channels ([#&#8203;3182](https://redirect.github.com/valkey-io/valkey/issues/3182)) - Fix bug causing no response flush sometimes when IO threads are busy ([#&#8203;3205](https://redirect.github.com/valkey-io/valkey/issues/3205)) ### [`v9.0.2`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.2) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/9.0.1...9.0.2) Upgrade urgency HIGH: There are critical bugs that may affect a subset of users. ## Bug fixes - Avoid memory leak of new argv when HEXPIRE commands target only non-exiting fields ([#&#8203;2973](https://redirect.github.com/valkey-io/valkey/issues/2973)) - Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking ([#&#8203;2974](https://redirect.github.com/valkey-io/valkey/issues/2974)) - Avoid empty hash object when HSETEX added no fields ([#&#8203;2998](https://redirect.github.com/valkey-io/valkey/issues/2998)) - Fix case-sensitive check for the FNX and FXX arguments in HSETEX ([#&#8203;3000](https://redirect.github.com/valkey-io/valkey/issues/3000)) - Prevent assertion in active expiration job after a hash with volatile fields is overwritten ([#&#8203;3003](https://redirect.github.com/valkey-io/valkey/issues/3003), [#&#8203;3007](https://redirect.github.com/valkey-io/valkey/issues/3007)) - Fix HRANDFIELD to return null response when no field could be found ([#&#8203;3022](https://redirect.github.com/valkey-io/valkey/issues/3022)) - Fix HEXPIRE to not delete items when validation rules fail and expiration is in the past ([#&#8203;3023](https://redirect.github.com/valkey-io/valkey/issues/3023), [#&#8203;3048](https://redirect.github.com/valkey-io/valkey/issues/3048)) - Fix how hash is handling overriding of expired fields overwrite ([#&#8203;3060](https://redirect.github.com/valkey-io/valkey/issues/3060)) - HSETEX - Always issue keyspace notifications after validation ([#&#8203;3001](https://redirect.github.com/valkey-io/valkey/issues/3001)) - Make zero a valid TTL for hash fields during import mode and data loading ([#&#8203;3006](https://redirect.github.com/valkey-io/valkey/issues/3006)) - Trigger prepareCommand on argc change in module command filters ([#&#8203;2945](https://redirect.github.com/valkey-io/valkey/issues/2945)) - Restrict TTL from being negative and avoid crash in import-mode ([#&#8203;2944](https://redirect.github.com/valkey-io/valkey/issues/2944)) - Fix chained replica crash when doing dual channel replication ([#&#8203;2983](https://redirect.github.com/valkey-io/valkey/issues/2983)) - Skip slot cache optimization for AOF client to prevent key duplication and data corruption ([#&#8203;3004](https://redirect.github.com/valkey-io/valkey/issues/3004)) - Fix used\_memory\_dataset underflow due to miscalculated used\_memory\_overhead ([#&#8203;3005](https://redirect.github.com/valkey-io/valkey/issues/3005)) - Avoid duplicate calculations of network-bytes-out in slot stats with copy-avoidance ([#&#8203;3046](https://redirect.github.com/valkey-io/valkey/issues/3046)) - Fix XREAD returning error on empty stream with + ID ([#&#8203;2742](https://redirect.github.com/valkey-io/valkey/issues/2742)) ## Performance/Efficiency Improvements - Track reply bytes in I/O threads if commandlog-reply-larger-than is -1 ([#&#8203;3086](https://redirect.github.com/valkey-io/valkey/issues/3086), [#&#8203;3126](https://redirect.github.com/valkey-io/valkey/issues/3126)). This makes it possible to mitigate a performance regression in 9.0.1 caused by the bug fix [#&#8203;2652](https://redirect.github.com/valkey-io/valkey/issues/2652). **Full Changelog**: <https://github.com/valkey-io/valkey/compare/9.0.1...9.0.2> ### [`v9.0.1`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.1) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/9.0.0...9.0.1) Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent. ## Bug fixes - Authenticate slot migration client on source node to internal user ([#&#8203;2785](https://redirect.github.com/valkey-io/valkey/issues/2785)) - Bug fix: reset io\_last\_written on c->buf resize to prevent stale pointers ([#&#8203;2786](https://redirect.github.com/valkey-io/valkey/issues/2786)) - Sentinel: fix regression requiring "+failover" ACL in failover path ([#&#8203;2780](https://redirect.github.com/valkey-io/valkey/issues/2780)) - Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links ([#&#8203;2817](https://redirect.github.com/valkey-io/valkey/issues/2817)) - Send duplicate multi meet packet only for node which supports it in mixed clusters ([#&#8203;2840](https://redirect.github.com/valkey-io/valkey/issues/2840)) - Fix: LTRIM should not call signalModifiedKey when no elements are removed ([#&#8203;2787](https://redirect.github.com/valkey-io/valkey/issues/2787)) - Fix build on some 32-bit ARM by only using NEON on AArch64 ([#&#8203;2873](https://redirect.github.com/valkey-io/valkey/issues/2873)) - Fix deadlock in IO-thread shutdown during panic ([#&#8203;2898](https://redirect.github.com/valkey-io/valkey/issues/2898)) - Fix COMMANDLOG large-reply when using reply copy avoidance ([#&#8203;2652](https://redirect.github.com/valkey-io/valkey/issues/2652)) - Fix CLUSTER SLOTS crash when called from module timer callback ([#&#8203;2915](https://redirect.github.com/valkey-io/valkey/issues/2915)) **Full Changelog**: <https://github.com/valkey-io/valkey/compare/9.0.0...9.0.1> ### [`v9.0.0`](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.0) [Compare Source](https://redirect.github.com/valkey-io/valkey/compare/8.1.7...9.0.0) ## Valkey 9.0.0 GA - October 21, 2025 Upgrade urgency LOW: This is the first release of Valkey 9.0 which includes stability, bug fixes, and incremental improvements over the third release candidate. ##### Bug fixes - HSETEX with FXX should not create an object if it does not exist ([#&#8203;2716](https://redirect.github.com/valkey-io/valkey/issues/2716)) - Fix crash when aborting a slot migration while child snapshot is active ([#&#8203;2721](https://redirect.github.com/valkey-io/valkey/issues/2721)) - Fix double MOVED reply on unblock at failover ([#&#8203;2734](https://redirect.github.com/valkey-io/valkey/issues/2734)) - Fix memory leak with CLIENT LIST/KILL duplicate filters ([#&#8203;2362](https://redirect.github.com/valkey-io/valkey/issues/2362)) - Fix incorrect accounting after completed atomic slot migration ([#&#8203;2749](https://redirect.github.com/valkey-io/valkey/issues/2749)) - Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD ([#&#8203;1826](https://redirect.github.com/valkey-io/valkey/issues/1826), [#&#8203;2750](https://redirect.github.com/valkey-io/valkey/issues/2750)) - Fix invalid memory address caused by hashtable shrinking during safe iteration ([#&#8203;2753](https://redirect.github.com/valkey-io/valkey/issues/2753)) For a high level overview of the release, you can checkout [release blog](https://valkey.io/blog/introducing-valkey-9/) For the full set of changes for the releases, please review the previous release candidates [rc1](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.0-rc1), [rc2](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.0-rc2) and [rc3](https://redirect.github.com/valkey-io/valkey/releases/tag/9.0.0-rc3). </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDQuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsIm1ham9yIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9tYWpvciJdfQ==-->
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
renovate/patch-mise-tools
renovate/harbor.webgrip.dev-dockerhub-amazon-aws-cli-2.36.x
renovate/docker.io-amazon-aws-cli-2.36.x
fix/litellm-ingress-ploeg
renovate/harbor.webgrip.dev-dockerhub-n8nio-n8n-2.x
renovate/harbor.webgrip.dev-dockerhub-python-3.14-alpine
renovate/docker.io-python-3.14-slim
renovate/harbor.webgrip.dev-dockerhub-n8nio-n8n-2.34.x
renovate/harbor.webgrip.dev-dockerhub-library-docker-29.7.x
feat/ploeg-bench-team
fix/runner-mem-request-node-pressure
fix/runner-mem-grype-oom
fix/harbor-ci-robot-tag-delete
renovate/platform-patch-flux-oci-helm-charts-(platform)
renovate/docker.io-renovate-renovate-43.x
renovate/ghcr.io-siderolabs-kubelet-1.36.x
renovate/harbor.webgrip.dev-dockerhub-dxflrs-garage-2.x
renovate/docker.io-alpine-3.x
renovate/patch-flux-controllers
renovate/harbor.webgrip.dev-dockerhub-invoiceninja-invoiceninja-5.13.x
feat/retire-ghcr-policies
feat/renovate-enable-gomod
No results found.
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/homelab-cluster#79
No description provided.