chore(deps): update redis requirement from >=5.0.0 to >=8.1.0 in /backend - #705
chore(deps): update redis requirement from >=5.0.0 to >=8.1.0 in /backend#705dependabot[bot] wants to merge 4 commits into
Conversation
dependabot
Bot
added
dependencies
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
📝 WalkthroughWalkthrough프로젝트의 ChangesRedis 의존성 업데이트
Estimated code review effort: 1 (매우 낮음) | ~2분 Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@backend/pyproject.toml`:
- Line 26: Update the dependency lockfiles to resolve redis at version 8.1.0 or
later, matching the redis>=8.1.0 declaration in pyproject.toml; regenerate both
lockfiles and refresh their associated hashes so CI and Docker install the
declared version.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro Plus
Run ID: d8a40edc-d1c9-4ca4-878b-6a7a8917a2ef
📒 Files selected for processing (1)
backend/pyproject.toml
| "httpx>=0.28.1", | ||
| "python-jose[cryptography]>=3.5.0", | ||
| "redis>=5.0.0", | ||
| "redis>=8.1.0", |
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -eu
printf '%s\n' '--- tracked files ---'
git ls-files 'backend/pyproject.toml' 'backend/requirements.lock' 'backend/requirements-dev.lock'
printf '%s\n' '--- dependency declarations ---'
rg -n -C 3 '(^|\[|")redis|redis[=<>!~]' backend/pyproject.toml backend/requirements.lock backend/requirements-dev.lock
printf '%s\n' '--- lockfile metadata and redis sections ---'
sed -n '1,80p' backend/requirements.lock
sed -n '1275,1320p' backend/requirements.lock
rg -n -C 5 '^redis([=<>!~]|$)|^ redis([=<>!~]|$)' backend/requirements-dev.lock || true
printf '%s\n' '--- relevant configuration and source references ---'
rg -n -C 3 'redis(\.asyncio)?|requirements(-dev)?\.lock|uv|pip-tools|compile' backend/pyproject.toml backend backend/.github .github 2>/dev/null || trueRepository: ContextualWisdomLab/pg-erd-cloud
Length of output: 33788
🏁 Script executed:
#!/bin/bash
set -eu
python3 - <<'PY'
from pathlib import Path
import re
import tomllib
project = tomllib.loads(Path("backend/pyproject.toml").read_text())
declared = next(
item for item in project["project"]["dependencies"]
if item.lower().startswith("redis")
)
print("declared:", declared)
for name in ("backend/requirements.lock", "backend/requirements-dev.lock"):
text = Path(name).read_text()
matches = re.findall(r"(?m)^redis==([^\s\\]+)\\s*\\\\$", text)
print(name, "redis pins:", matches)
assert len(matches) == 1, (name, matches)
assert tuple(map(int, matches[0].split("."))) < (8, 1, 0), matches[0]
print("result: both hash-locked files pin a version below the declared minimum")
PY
printf '%s\n' '--- exact project dependency context ---'
cat -n backend/pyproject.toml | sed -n '15,34p'
printf '%s\n' '--- lockfile install commands ---'
cat -n .github/workflows/ci.yml | sed -n '24,35p'
cat -n backend/Dockerfile | sed -n '5,15p'
printf '%s\n' '--- PyPI release metadata for redis 8.1.0 ---'
python3 - <<'PY'
import json, urllib.request
data = json.load(urllib.request.urlopen("https://pypi.org/pypi/redis/json", timeout=10))
for version in ("8.0.0", "8.1.0"):
release = data["releases"].get(version)
print(version, "files:", len(release or []), "yanked:", [f["yanked"] for f in (release or [])])
PYRepository: ContextualWisdomLab/pg-erd-cloud
Length of output: 290
🏁 Script executed:
#!/bin/bash
set -u
python3 - <<'PY'
from pathlib import Path
import re
project_text = Path("backend/pyproject.toml").read_text()
declared = re.search(r'"redis(>=|==|~=|>|<|!=)[^"]+"', project_text)
print("declared:", declared.group(0) if declared else "not found")
for name in ("backend/requirements.lock", "backend/requirements-dev.lock"):
text = Path(name).read_text()
matches = re.findall(r"(?m)^redis==([^\s\\]+)\s*\\$", text)
print(name, "redis pins:", matches)
PY
printf '%s\n' '--- lockfile install commands ---'
cat -n .github/workflows/ci.yml | sed -n '24,35p'
cat -n backend/Dockerfile | sed -n '5,15p'
printf '%s\n' '--- PyPI release metadata for redis 8.1.0 ---'
python3 - <<'PY'
import json
import urllib.request
try:
data = json.load(urllib.request.urlopen("https://pypi.org/pypi/redis/json", timeout=10))
for version in ("8.0.0", "8.1.0"):
release = data["releases"].get(version)
print(version, "files:", len(release or []), "yanked:", [f["yanked"] for f in (release or [])])
except Exception as exc:
print(type(exc).__name__ + ":", exc)
PYRepository: ContextualWisdomLab/pg-erd-cloud
Length of output: 1498
Lockfile의 redis 버전을 선언과 일치시키세요.
CI와 Docker는 lockfile을 직접 설치하므로 redis==8.0.0을 설치합니다. backend/pyproject.toml은 redis>=8.1.0을 선언합니다. 두 lockfile을 다시 생성하고 관련 해시를 갱신하세요.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@backend/pyproject.toml` at line 26, Update the dependency lockfiles to
resolve redis at version 8.1.0 or later, matching the redis>=8.1.0 declaration
in pyproject.toml; regenerate both lockfiles and refresh their associated hashes
so CI and Docker install the declared version.
Source: Coding guidelines
|
@dependabot rebase |
|
@jules Please make this dependency update operationally complete before merge:
|
Updates the requirements on [redis](https://github.com/redis/redis-py) to permit the latest version. - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.0...v8.1.0) --- updated-dependencies: - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
c5e4e62 to
3d82d4f
Compare
|
Closing as superseded by #706. Both PRs modify |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Updates the requirements on redis to permit the latest version.
Release notes
Sourced from redis's releases.
... (truncated)
Commits
e013126Testing with 8.10 GA (#4227)059d1e9Fixed TS.NRANGE commands to correctly apply aggregators (#4225)d486a0aFix FIELDNAME alias dropping first character of un-prefixed fields (#4224)fb93104feat: add client-side HIMPORT fieldset support for standalone and cluster cli...9197609Fix lat/lon swap in search querystring geo() helper (#4223)14714a0fix: Fixed double decoding issue with unquote() (#4222)227280aUpdate lib version to 8.1.088d16d0Decode ACL LOG string values on the default RESP3 legacy callback (#4201)599fd75feat: add FT.ALIASLIST support (#4198)71e275etest: add VectorField RERANK serialization tests for sync and async search (#...