Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 12 updates - #299

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-65001a8e74
Open

chore(deps): bump the go-dependencies group across 1 directory with 12 updates#299
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-65001a8e74

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Bumps the go-dependencies group with 11 updates in the / directory:

Package From To
carvel.dev/kapp-controller 0.60.3 0.60.4
github.com/argoproj/argo-events 1.9.10 1.9.11
github.com/cert-manager/cert-manager 1.21.0 1.21.1
github.com/fluxcd/kustomize-controller/api 1.9.2 1.9.4
github.com/fluxcd/source-controller/api 1.9.2 1.9.3
github.com/go-logr/logr 1.4.3 1.4.4
github.com/redis/go-redis/v9 9.21.0 9.22.0
github.com/shipwright-io/build 0.20.4 0.20.8
k8s.io/api 0.36.2 0.36.3
k8s.io/client-go 0.36.2 0.36.3
knative.dev/serving 0.49.1 0.50.0

Updates carvel.dev/kapp-controller from 0.60.3 to 0.60.4

Release notes

Sourced from carvel.dev/kapp-controller's releases.

v0.60.4

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.sig
Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

... (truncated)

Commits
  • 651cb15 Merge pull request #1845 from sameerforge/topic/sameerkh/fix-watchlist-downst...
  • e05009b fix: disable WatchList feature gate in packaging apiserver
  • 62c4c28 Merge pull request #1840 from himsngh/himsngh/1839
  • 392d9b5 chore: address review comments
  • 3a75188 [1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's 2 MiB limit...
  • See full diff in compare view

Updates github.com/argoproj/argo-events from 1.9.10 to 1.9.11

Release notes

Sourced from github.com/argoproj/argo-events's releases.

v1.9.11

Major Changes

  • feat: Add readiness probes to EventBus StatefulSet (#3894)
  • feat: support GitHub App authentication for Sensor git triggers (#4018)
  • feat(logging): support warn log level via LOG_LEVEL=warn (#4019)
  • feat: make Kubernetes leader election timeouts configurable via env vars (#4029)
  • feat: Add kafka msk iam support (#3963)
  • fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • fix: Initialize Prometheus Counters to 0 when service(s) start (#3906)
  • fix: reduce lame_duck_duration to 30s to fit within terminationGracePeriodSeconds (#3959)

Pull Requests

argoproj/argo-events@v1.9.10...v1.9.11

Installation

kubectl create namespace argo-events
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.11/install.yaml
Install validating webhook (optional)
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.11/install-validating-webhook.yaml

Full Changelog: argoproj/argo-events@v1.9.10...v1.9.11

Changelog

Sourced from github.com/argoproj/argo-events's changelog.

v1.9.11 (2026-07-13)

  • d13fde07 Update manifests to v1.9.11
  • 2fd343bf chore(deps): bump github.com/go-swagger/go-swagger from 0.34.0 to 0.34.1 (#4076)
  • 7e3ef00f chore(deps): bump github.com/go-swagger/go-swagger from 0.33.2 to 0.34.0 (#4070)
  • 6abcfccc chore(deps): bump github.com/minio/minio-go/v7 from 7.1.0 to 7.2.0 (#4069)
  • 234b5e94 chore(deps): bump github.com/slack-go/slack from 0.23.1 to 0.24.0 (#4071)
  • 19fbcb16 chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#4061)
  • f0d6c705 chore(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#4060)
  • e3b2684c fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • 063d2ca7 feat: Add kafka msk iam support (#3963)
  • c3e00da2 chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#4057)
  • 7348272f chore(deps): bump google.golang.org/api from 0.278.0 to 0.279.0 (#4051)
  • 6e82e30f chore(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.1 to 1.6.2 (#4055)
  • b7190c9f chore(deps): bump github.com/fsnotify/fsnotify from 1.10.0 to 1.10.1 (#4053)
  • 60714229 chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#4052)
  • 9c0f4f3a chore(deps): bump github.com/slack-go/slack from 0.23.0 to 0.23.1 (#4049)
  • d2613313 chore(deps): bump golang.org/x/tools from 0.44.0 to 0.45.0 (#4045)
  • 3122782c chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#4044)
  • c0e2d8c3 chore(deps): bump github.com/tidwall/gjson from 1.18.0 to 1.19.0 (#4048)
  • 01d76790 chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4046)
  • 99df1c69 chore(deps): bump cloud.google.com/go/iam from 1.10.0 to 1.11.0 (#4047)
  • 9a49c370 chore(deps): bump google.golang.org/api from 0.277.0 to 0.278.0 (#4042)
  • eec24345 chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#4040)
  • 99f8ca54 chore(deps): bump github.com/nats-io/nats.go from 1.51.0 to 1.52.0 (#4041)
  • 621e8d65 chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#4039)
  • 8891384d chore(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0 (#4036)
  • 62f52f1d chore(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 (#4034)
  • 4e31de3d chore(deps): bump github.com/minio/minio-go/v7 from 7.0.100 to 7.1.0 (#4033)
  • 135f7853 chore(deps): bump cloud.google.com/go/iam from 1.9.0 to 1.10.0 (#4032)
  • 39613b8c chore(deps): bump google.golang.org/api from 0.276.0 to 0.277.0 (#4031)
  • 57dcd9df feat: make Kubernetes leader election timeouts configurable via env vars (#4029)
  • ccafbdd5 docs(triggers): show triggering an existing WorkflowTemplate (#4027)
  • ce508d60 feat(logging): support warn log level via LOG_LEVEL=warn (#4019)
  • 84376f1f feat: support GitHub App authentication for Sensor git triggers (#4018)
  • 60d5318c fix(sensor): bump action_retries_failed_total on async trigger failures (#4002)
  • 9cdeb370 chore(deps): bump github.com/slack-go/slack from 0.22.0 to 0.23.0 (#4025)
  • 103b119f chore(deps): bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.11.0 (#4026)
  • 6f9d97d8 chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 (#4022)
  • ac4fd0be fix(bitbucketserver): replace %w with %v in Logger.Errorf call (#3990)
  • 08f7efc2 chore(deps): bump cloud.google.com/go/pubsub/v2 from 2.5.1 to 2.6.0 (#4017)
  • b9bdf3f9 chore(deps): bump softprops/action-gh-release from 2 to 3 (#4010)
  • 8a4fc100 chore(deps): bump cloud.google.com/go/iam from 1.8.0 to 1.9.0 (#4016)
  • 935b6e7d chore(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 (#4015)
  • fa78e2c8 chore(deps): bump github.com/slack-go/slack from 0.21.1 to 0.22.0 (#4012)
  • b6561e3a chore(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.28.0 to 2.29.0 (#4014)
  • 39e8ddb9 chore(deps): bump github.com/nats-io/nats.go from 1.50.0 to 1.51.0 (#4013)
  • 95641232 chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 (#4009)
  • 4cd66fa1 chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#4008)
  • 9c0c1964 chore(deps): bump cloud.google.com/go/iam from 1.7.0 to 1.8.0 (#3996)

... (truncated)

Commits
  • d13fde0 Update manifests to v1.9.11
  • c21d491 chore: bunch of dep upgrades (#4104)
  • 2fd343b chore(deps): bump github.com/go-swagger/go-swagger from 0.34.0 to 0.34.1 (#4076)
  • 7e3ef00 chore(deps): bump github.com/go-swagger/go-swagger from 0.33.2 to 0.34.0 (#4070)
  • 6abcfcc chore(deps): bump github.com/minio/minio-go/v7 from 7.1.0 to 7.2.0 (#4069)
  • 234b5e9 chore(deps): bump github.com/slack-go/slack from 0.23.1 to 0.24.0 (#4071)
  • 19fbcb1 chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#4061)
  • f0d6c70 chore(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#4060)
  • e3b2684 fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • 063d2ca feat: Add kafka msk iam support (#3963)
  • Additional commits viewable in compare view

Updates github.com/cert-manager/cert-manager from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.21.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.1 fixes a controller panic for Certificates with spec.renewal.policy: Disabled, a regression in 1.21.0 which caused log spam and dropped Secret informer events, Issuers and ClusterIssuers getting stuck at Ready=False (InvalidSolver) when a referenced ACME DNS-01 solver Secret is created after the Issuer, and the commented Gateway API example in the Helm chart values. It also updates several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

  • Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled (#9038, @​sklirg)
  • Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is created (#9083, @​SebTardif)
  • Fix log spam and dropped Secret informer events for non-cert-manager Secrets, caused by a generics regression introduced in 1.21.0. (#9037, @​wallrj-cyberark)
  • Fixed the commented Gateway API config example in the Helm chart values to use gatewayAPI.enabled instead of the invalid gatewayAPI.enable. (#9012, @​mateenali66)

Other (Cleanup or Flake)

  • Bump golang.org/x/text to v0.40.0 to fix a reported security vulnerability (#9039, @​wallrj-cyberark)
  • Bump google.golang.org/grpc to v1.82.1 to fix a reported security vulnerability (#9063)
  • Bump github.com/google/cel-go to v0.29.0 to fix a reported security vulnerability (#9072)
  • Bump go.opentelemetry.io/otel to v1.44.0 to fix a reported security vulnerability (#9073)
  • Update distroless base images (#9000, #9025)
Commits
  • 24e3319 Merge pull request #9083 from cert-manager-bot/cherry-pick-9042-to-release-1.21
  • 4de10f8 docs: TODO to index issuers by Secret for Secret-event scaling
  • f7a2c7f Say ClusterIssuer, not issuer, in clusterissuers error message
  • 947571d Return the external SecretKeySelector type from RequiredDNS01SolverSecrets
  • 536dcc3 Remove untestable expectErr field from RequiredDNS01SolverSecrets tests
  • 61b071f Cover the remaining DNS-01 providers in RequiredDNS01SolverSecrets tests
  • 7c31735 Extract shared ACME DNS-01 solver secret helper
  • 616ed4c Re-queue Issuer/ClusterIssuer on ACME DNS-01 solver Secret events
  • f1a152a Merge pull request #9073 from cert-manager/renovate/release-1.21-go-go.opente...
  • 0e50d3a Merge pull request #9072 from cert-manager/renovate/release-1.21-go-github.co...
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.2 to 1.9.4

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.4
  • ghcr.io/fluxcd/kustomize-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.3
  • ghcr.io/fluxcd/kustomize-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.4

Release date: 2026-07-23

This patch release fixes a spec.images entry that sets only some of the image fields discarding the remaining fields already declared for the same image in the kustomization.yaml at spec.path, e.g. overriding only newName produced an untagged image reference.

Fixes:

  • Update fluxcd/pkg dependencies #1714

1.9.3

Release date: 2026-07-13

This patch release fixes a regression introduced in v1.9.2 where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema.

Fixes:

  • Update fluxcd/pkg dependencies #1703
Commits

Updates github.com/fluxcd/source-controller/api from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.3
  • ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

  • Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110
Commits
  • ed61ebd Merge pull request #2111 from fluxcd/release-v1.9.3
  • 03a1208 Release v1.9.3
  • f1e431a Add changelog entry for v1.9.3
  • deec0f1 Merge pull request #2110 from fluxcd/backport-2109-to-release/v1.9.x
  • 048ce5c docs: regenerate API reference after doc-comment fix
  • 2b0b313 Fix HelmChartStatus.URL doc-comment referencing BucketStatus
  • See full diff in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.22.0

This is a minor release introducing two flagship (experimental) features — client-side caching and automatic pipelining — alongside support for Redis 8.10, new commands, and a large batch of stability and parser-robustness fixes. It consolidates everything shipped in 9.22.0-beta.1, so the notes below cover the full 9.21.0 → 9.22.0 upgrade.

⚠️ Two changes to be aware of when upgrading from 9.21.0:

  • Default configuration values changed (#3918): read/write timeouts, retry backoff, cluster state reload interval, and TCP keep-alive defaults are now aligned with the cross-SDK configuration proposal (see the highlight below). Explicitly configured values are unaffected.
  • WaitAOF return type corrected (#3888): WaitAOF now returns *IntSliceCmd, matching the two-integer reply of WAITAOF (previously *IntCmd, which failed to parse the reply at runtime). Code referencing the old return type needs a one-line update.

🚀 Highlights

Client-Side Caching (Experimental)

The standalone Client gains server-assisted client-side caching built on RESP3 CLIENT TRACKING. Enable it by setting ClientSideCacheConfig in Options (or supply your own cache via ClientSideCache — e.g. to share one cache across clients). Cacheable read results are served from a local in-process cache and invalidated automatically when the server reports a change, cutting round trips for read-heavy workloads.

The invalidation architecture is selected by ClientSideCacheStrategy; the default (and currently only) strategy is CSCStrategySharedTracking: one shared cache, every pool connection runs plain CLIENT TRACKING ON, and a background drainer applies buffered invalidations — portable (no BCAST) and consistent with the other Redis client libraries. Requirements and guardrails: RESP3 (Protocol: 3), standalone client, DB 0 only; commands that would change the connection identity (SELECT, AUTH, ...) are rejected while caching is enabled, and CSC is disabled when a credentials provider is set (fixed Username/Password work and are namespaced). See the README's client-side caching section and the runnable example.

Experimental: the API may change in a minor release.

(#3941) by @​ofekshenawa

Automatic Pipelining (Experimental)

AutoPipeliner is a background batcher that coalesces commands from many concurrent goroutines into Redis pipelines, multiplying throughput without any manual pipeline management. It comes in two faces, available on Client and ClusterClient (and configurable via Options.AutoPipelineOptions / UniversalOptions.AutoPipelineOptions):

  • AutoPipeline() — the blocking face: a drop-in Cmdable where each call blocks until executed, exactly like a plain client, while concurrent callers' commands batch together under the hood (measured locally over loopback: ~1M+ SET/sec vs ~100k unpipelined; indicative, not a guarantee). Per-goroutine command order is preserved.
  • AsyncAutoPipeline() — the deferred face: command calls return immediately and every typed result accessor (Val/Result/Err/...) blocks until the command has executed. Submit a window of commands, then read the results, to keep pipelines deep (~2–3M SET/sec locally; indicative).

AutoPipelineOptions controls batching: MaxBatchSize (soft target, default 200; the blocking face's preset uses 300), MaxBatchBytes (approximate payload cap so huge values flush as several bounded writes), MaxFlushDelay with optional AdaptiveDelay (delay scales down as the queue fills), and MaxConcurrentBatches (default 1 = a single ordered batch stream; raising it requires Unordered: true, so ordering is never lost by accident — Validate() rejects the combination otherwise). A usage tour and throughput comparison live in https://github.com/redis/go-redis/blob/HEAD/example/autopipeline.

Experimental: the API may change in a future release — pin your go-redis version if you adopt it.

(#3942) by @​ndyakov, with help from @​cxljs

Redis 8.10 Support

This release adds support for Redis 8.10. The README's supported-versions list now includes Redis 8.10, and CI runs the full suite against the redislabs/client-libs-test:8.10.0 image by default (#3920, #3940).

Coverage for the new commands and options that ship with Redis 8.10:

  • HIMPORT (#3919) — bulk hash import via server-side fieldsets, exposed as HImportPrepare, HImportSet, HImportDiscard, and HImportDiscardAll. Fieldsets are session state scoped to a single physical connection, which does not mix well with connection pooling — so the client keeps a versioned fieldset registry and lazily replays the PREPARE on whichever pooled connection executes a SET that needs it, at most once per connection, with no extra round trip (the PREPARE is injected into the same write as the SET).
  • LMOVEM / BLMOVEM (#3913) — move multiple elements between lists in one call.
  • SUNIONCARD / SDIFFCARD (#3897) — cardinality of set union/difference without materializing the result.
  • XREAD / XREADGROUP MAXCOUNT and MAXSIZE (#3898) — bound how much data a stream read returns.
  • TS.READ (#3896), TS.QUERYLABELS (#3926), TS.NRANGE / TS.NREVRANGE (#3870) with multiple aggregators per key (#3937), and EXCLUDEEMPTY on TS.MRANGE / TS.MREVRANGE (#3912) — new time-series query surface.
  • FT.ALIASLIST (#3925), COLLECT reducer for FT.AGGREGATE (#3886), RERANK on HNSW vector fields in FT.CREATE (#3927), and FT.HYBRID timeout warnings (#3911) — search coverage.

Cross-SDK Aligned Defaults

Default configuration values now follow the cross-SDK configuration proposal shared by all Redis client libraries (#3918):

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.22.0 (2026-08-03)

This is a minor release introducing two flagship (experimental) features — client-side caching and automatic pipelining — alongside support for Redis 8.10, new commands, and a large batch of stability and parser-robustness fixes. It consolidates everything shipped in 9.22.0-beta.1, so the notes below cover the full 9.21.0 → 9.22.0 upgrade.

⚠️ Two changes to be aware of when upgrading from 9.21.0:

  • Default configuration values changed (#3918): read/write timeouts, retry backoff, cluster state reload interval, and TCP keep-alive defaults are now aligned with the cross-SDK configuration proposal (see the highlight below). Explicitly configured values are unaffected.
  • WaitAOF return type corrected (#3888): WaitAOF now returns *IntSliceCmd, matching the two-integer reply of WAITAOF (previously *IntCmd, which failed to parse the reply at runtime). Code referencing the old return type needs a one-line update.

🚀 Highlights

Client-Side Caching (Experimental)

The standalone Client gains server-assisted client-side caching built on RESP3 CLIENT TRACKING. Enable it by setting ClientSideCacheConfig in Options (or supply your own cache via ClientSideCache — e.g. to share one cache across clients). Cacheable read results are served from a local in-process cache and invalidated automatically when the server reports a change, cutting round trips for read-heavy workloads.

The invalidation architecture is selected by ClientSideCacheStrategy; the default (and currently only) strategy is CSCStrategySharedTracking: one shared cache, every pool connection runs plain CLIENT TRACKING ON, and a background drainer applies buffered invalidations — portable (no BCAST) and consistent with the other Redis client libraries. Requirements and guardrails: RESP3 (Protocol: 3), standalone client, DB 0 only; commands that would change the connection identity (SELECT, AUTH, ...) are rejected while caching is enabled, and CSC is disabled when a credentials provider is set (fixed Username/Password work and are namespaced). See the README's client-side caching section and the runnable example.

Experimental: the API may change in a minor release.

(#3941) by @​ofekshenawa

Automatic Pipelining (Experimental)

AutoPipeliner is a background batcher that coalesces commands from many concurrent goroutines into Redis pipelines, multiplying throughput without any manual pipeline management. It comes in two faces, available on Client and ClusterClient (and configurable via Options.AutoPipelineOptions / UniversalOptions.AutoPipelineOptions):

  • AutoPipeline() — the blocking face: a drop-in Cmdable where each call blocks until executed, exactly like a plain client, while concurrent callers' commands batch together under the hood (measured locally over loopback: ~1M+ SET/sec vs ~100k unpipelined; indicative, not a guarantee). Per-goroutine command order is preserved.
  • AsyncAutoPipeline() — the deferred face: command calls return immediately and every typed result accessor (Val/Result/Err/...) blocks until the command has executed. Submit a window of commands, then read the results, to keep pipelines deep (~2–3M SET/sec locally; indicative).

AutoPipelineOptions controls batching: MaxBatchSize (soft target, default 200; the blocking face's preset uses 300), MaxBatchBytes (approximate payload cap so huge values flush as several bounded writes), MaxFlushDelay with optional AdaptiveDelay (delay scales down as the queue fills), and MaxConcurrentBatches (default 1 = a single ordered batch stream; raising it requires Unordered: true, so ordering is never lost by accident — Validate() rejects the combination otherwise). A usage tour and throughput comparison live in https://github.com/redis/go-redis/blob/master/example/autopipeline.

Experimental: the API may change in a future release — pin your go-redis version if you adopt it.

(#3942) by @​ndyakov, with help from @​cxljs

Redis 8.10 Support

This release adds support for Redis 8.10. The README's supported-versions list now includes Redis 8.10, and CI runs the full suite against the redislabs/client-libs-test:8.10.0 image by default (#3920, #3940).

Coverage for the new commands and options that ship with Redis 8.10:

  • HIMPORT (#3919) — bulk hash import via server-side fieldsets, exposed as HImportPrepare, HImportSet, HImportDiscard, and HImportDiscardAll. Fieldsets are session state scoped to a single physical connection, which does not mix well with connection pooling — so the client keeps a versioned fieldset registry and lazily replays the PREPARE on whichever pooled connection executes a SET that needs it, at most once per connection, with no extra round trip (the PREPARE is injected into the same write as the SET).
  • LMOVEM / BLMOVEM (#3913) — move multiple elements between lists in one call.
  • SUNIONCARD / SDIFFCARD (#3897) — cardinality of set union/difference without materializing the result.
  • XREAD / XREADGROUP MAXCOUNT and MAXSIZE (#3898) — bound how much data a stream read returns.
  • TS.READ (#3896), TS.QUERYLABELS (#3926), TS.NRANGE / TS.NREVRANGE (#3870) with multiple aggregators per key (#3937), and EXCLUDEEMPTY on TS.MRANGE / TS.MREVRANGE (#3912) — new time-series query surface.
  • FT.ALIASLIST (#3925), COLLECT reducer for FT.AGGREGATE (#3886), RERANK on HNSW vector fields in FT.CREATE (#3927), and FT.HYBRID timeout warnings (#3911) — search coverage.

Cross-SDK Aligned Defaults

Default configuration values now follow the cross-SDK configuration proposal shared by all Redis client libraries (#3918):

... (truncated)

Commits
  • c7f59a2 chore(release): prepare 9.22.0 (#3947)
  • c994cfc feat(autopipeline): automatic command pipelining (#3942)
  • 228b463 chore(deps): bump actions/stale from 10 to 11 (#3944)
  • a6be850 feat(csc): add standalone client-side caching (#3941)
  • 82b0213 chore(release): prepare 9.22.0-beta.1 (#3940)
  • 8eb9583 fix(rediscmd): redact credential args in AppendCmd (#3939)
  • 90fd088 chore(ci): point 8.10 testing at custom client-libs-test image (#3938)
  • 93f961a feat(timeseries): support multiple aggregators per key in TS.NRANGE (#3937)
  • 49e0041 feat(himport): HIMPORT command with lazy per-connection prepare (#3919)
  • 3dd9675 fix(proto): peek push notification name without demanding 36 bytes (#3936)
  • Additional commits viewable in compare view

Updates github.com/shipwright-io/build from 0.20.4 to 0.20.8

Release notes

Sourced from github.com/shipwright-io/build's releases.

Shipwright Build release v0.20.8

Release changes since v0.20.7

None. This is a rebuild of all components to address vulnerabilities in the base images.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2281

Features

Fixes

API Changes

Docs

Misc

Shipwright Build release v0.20.7

Release changes since v0.20.6

None. This is a rebuild of all components to address vulnerabilities in the base images and Go dependencies.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2267

Features

Fixes

API Changes

Docs

Misc

#2272 by @​SaschaSchwarze0: Update github.com/klauspost/compress from v1.18.5 to v1.18.7 to address GHSA-259r-337f-4rfw

#2269 by @​SaschaSchwarze0: Update go.opentelemetry.io/otel from v1.43.0 to v1.44.0

Shipwright Build release v0.20.6

Release changes since v0.20.5

None. This is a rebuild of all components to address vulnerabilities in the base images and Go dependencies.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2260

Features

Fixes

API Changes

... (truncated)

Commits
  • e28e221 Merge pull request #2272 from SaschaSchwarze0/sascha-compress
  • b85f714 Update github.com/klauspost/compress from v1.18.5 to v1.18.7 to address GHSA-...
  • f597445 Merge pull request #2269 from SaschaSchwarze0/sascha-otel-v0.20
  • 724a0dd Update otel packages
  • 1ec3d3a Merge pull request #2262 from SaschaSchwarze0/sascha-vuln-fixes-v0.20
  • 4cc966b Update golang.org/x/net from v0.55.0 to v0.56.0 to address CVE-2026-46600
  • See full diff in

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 1…
336d0e2 
…2 updates

Bumps the go-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [carvel.dev/kapp-controller](https://github.com/carvel-dev/kapp-controller) | `0.60.3` | `0.60.4` |
| [github.com/argoproj/argo-events](https://github.com/argoproj/argo-events) | `1.9.10` | `1.9.11` |
| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.21.0` | `1.21.1` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.9.2` | `1.9.4` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.2` | `1.9.3` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.21.0` | `9.22.0` |
| [github.com/shipwright-io/build](https://github.com/shipwright-io/build) | `0.20.4` | `0.20.8` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.2` | `0.36.3` |
| [knative.dev/serving](https://github.com/knative/serving) | `0.49.1` | `0.50.0` |



Updates `carvel.dev/kapp-controller` from 0.60.3 to 0.60.4
- [Release notes](https://github.com/carvel-dev/kapp-controller/releases)
- [Commits](carvel-dev/kapp-controller@v0.60.3...v0.60.4)

Updates `github.com/argoproj/argo-events` from 1.9.10 to 1.9.11
- [Release notes](https://github.com/argoproj/argo-events/releases)
- [Changelog](https://github.com/argoproj/argo-events/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-events@v1.9.10...v1.9.11)

Updates `github.com/cert-manager/cert-manager` from 1.21.0 to 1.21.1
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.21.0...v1.21.1)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.9.2 to 1.9.4
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.9.2...v1.9.4)

Updates `github.com/fluxcd/source-controller/api` from 1.9.2 to 1.9.3
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.2...v1.9.3)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/redis/go-redis/v9` from 9.21.0 to 9.22.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.21.0...v9.22.0)

Updates `github.com/shipwright-io/build` from 0.20.4 to 0.20.8
- [Release notes](https://github.com/shipwright-io/build/releases)
- [Commits](shipwright-io/build@v0.20.4...v0.20.8)

Updates `k8s.io/api` from 0.36.2 to 0.36.3
- [Commits](kubernetes/api@v0.36.2...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

Updates `k8s.io/client-go` from 0.36.2 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.36.3)

Updates `knative.dev/serving` from 0.49.1 to 0.50.0
- [Release notes](https://github.com/knative/serving/releases)
- [Commits](knative/serving@v0.49.1...v0.50.0)

---
updated-dependencies:
- dependency-name: carvel.dev/kapp-controller
  dependency-version: 0.60.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/argoproj/argo-events
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/shipwright-io/build
  dependency-version: 0.20.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: knative.dev/serving
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants