Skip to content

deps: update redis requirement from >=5.2.0 to >=7.4.0#50

Merged
LEEI1337 merged 1 commit into
mainfrom
dependabot/pip/redis-gte-7.4.0
May 26, 2026
Merged

deps: update redis requirement from >=5.2.0 to >=7.4.0#50
LEEI1337 merged 1 commit into
mainfrom
dependabot/pip/redis-gte-7.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on redis to permit the latest version.

Release notes

Sourced from redis's releases.

7.4.0

Changes

🐛 Bug Fixes

  • Fix AttributeError in cluster metrics recording when connection is None or ClusterNode object instance is used to extract the connection info (#3999)
  • Fixing security concern in repr methods for ConnectionPools - passwords might leak in plain text logs (#3998)
  • Refactored connection count and SCH metric collection (#4001)

🧪 Experimental Features

-Refactored health check logic for MultiDBClient (#3994)

🧰 Maintenance

  • Expose basic Otel classes and functions to be importable through redis.observability to match the examples in the readthedocs (#3996)

We'd like to thank all the contributors who worked on this release! @​vladvildanov @​petyaslavova

Commits
  • b72f24a Updating lib version to 7.4.0
  • 0a4e0af Refactored health check logic for MultiDBClient (#3994)
  • 15492c9 Refactored connection count and SCH metric collection (#4001)
  • cd964ac Expose basic Otel classes and funtions to be importable through redis.observa...
  • 46ab74d Fixing security concern in repr methods for ConnectionPools - passwords m...
  • 26482db Fix AttributeError in cluster metrics recording when connection is None or Cl...
  • 8ecbc7a Updating lib version to 7.3.0
  • 11043df typing: accept single-key input for blpop and brpop (#3990)
  • d958125 fix: use KeysT for blpop and brpop keys parameter type annotation (#3987)
  • 75bf91b [async] Adding access to cluster client's nodes_manager and set_response_call...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Updates the requirements on [redis](https://github.com/redis/redis-py) to permit the latest version.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.2.0...v7.4.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the enhancement New feature or request label Apr 20, 2026
@dependabot dependabot Bot requested a review from LEEI1337 as a code owner April 20, 2026 21:38
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

LEEI1337 pushed a commit that referenced this pull request May 25, 2026
Three fixes to restore green CI on main (red since 2026-04-13):

1. docker/Dockerfile: add `COPY README.md .` before pip install.
   pyproject.toml has `readme = "README.md"`, so hatchling needs the
   file in build context. Fixes: OSError: Readme file does not exist.

2. ruff lint debt: auto-fix 131 I001 import-order + 33 W293 whitespace
   errors. Manual fixes for 6 real code issues:
     - 4× B905 zip() → zip(..., strict=True)
     - 2× UP042 (str, Enum) → enum.StrEnum
     - 1× F841 unused result variable
     - 1× B017 broad pytest.raises(Exception) → noqa with rationale

3. pyproject.toml ruff config: add E501 + B008 to ignore list.
   E501 (23 pre-existing line-too-long) is cosmetic tech-debt.
   B008 (FastAPI Depends/Security in defaults) is idiomatic for FastAPI
   and ruff's own docs acknowledge the exception.

Tests: 209 passed locally with Python 3.12 + pytest 9.0.3.
Unblocks dependabot PRs #50-59 (W38-D analysis).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@LEEI1337

Copy link
Copy Markdown
Member

W46-A NSS-DEP-HEAL Triage (2026-05-26)

MAJOR (redis 5→7). Lokale Test-Suite (209/209) grün mit redis 7.4.0. Kein API-Break entdeckt. CI-rot ausschließlich durch pre-existing main-Tech-Debt (siehe #60).

Status: STAY-OPEN. Empfehlung: Erst #60 (main-CI healen) mergen, dann diesen PR. Lokale Verifikation: 2026-05-26 W46-A Sub-Agent.

— Beleg: ~/kb/raw/2026-05-26-welle-46-nss-dep-heal.md

LEEI1337 added a commit that referenced this pull request May 26, 2026
…P2) (#62)

* fix(knowledge): migrate qdrant search() to query_points() for v1.18 (#60 P2a)

qdrant-client >=1.13 removed the `search()` method. Production code raised
`AttributeError: 'QdrantClient' has no attribute 'search'`; tests masked the
bug via MagicMock.

- src/nss/knowledge/vector_store.py: call query_points() and iterate
  the QueryResponse.points list.
- tests/test_knowledge/test_vector_store.py: mock query_points returning
  a response object with a .points attribute.

Verified locally: 209/209 pytest tests pass with qdrant-client 1.18.0,
no behavior change in the search contract (id/score/payload dict shape).

Refs: nss#60 (mypy attr-defined on vector_store.py:90)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(types): resolve 26 remaining mypy errors blocking CI (#60 P2b)

Heal `mypy --ignore-missing-imports` on main (red since W46). Per-file fixes:

- src/nss/middleware.py — type `call_next: RequestResponseEndpoint` and
  `app: ASGIApp` (starlette types); removes 4× `no-any-return` from
  `await call_next()` and the `Any` ASGI app param.
- src/nss/knowledge/sag_encryption.py — type-annotate decoded payload.
- src/nss/knowledge/rag_pipeline.py — annotate `results` so the return
  type matches `list[dict[str, Any]]`.
- src/nss/knowledge/embeddings.py — replace 2× now-stale
  `type: ignore[union-attr]` with explicit `list[float]`/`list[list[float]]`
  intermediates (no-any-return).
- src/nss/cache.py — handle redis-py 7.4 `Awaitable[bool] | bool` return
  of `ping()` without awaiting a bool literal.
- src/nss/auth.py — return-type for `require_role` factory:
  `Callable[..., Awaitable[dict[str, Any]]]`.
- src/nss/guardian/sentinel.py — `float(...)` cast on cosine result.
- src/nss/guardian/server.py — `lifespan(app) -> AsyncIterator[None]`.
- src/nss/metrics_server.py — return type on `metrics()` /
  `metrics_prometheus()`, hoist `PlainTextResponse` import, and widen
  `kwargs: dict[str, Any]` for uvicorn.run (uvicorn's **kwargs is
  heterogeneous; `dict[str, str]` produced 11 false-positive arg-type
  errors against the uvicorn stubs).
- src/nss/gateway/server.py — `list[Any]` for `_fire_dpia.entities`.

Verified locally (Python 3.12, pytest 9.0.3 + all 10 Dependabot dep-bumps
installed simultaneously): mypy = 0 errors, ruff = clean, 209/209 tests
pass. Unblocks Dependabot PRs #50-#59.

Refs: nss#60 (27 mypy errors). qdrant migration carved out into prior
commit so this change is pure annotation work with no runtime delta.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: mackbook <mackbook@mackbooks-MacBook-Air.local>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@LEEI1337 LEEI1337 merged commit 16b1255 into main May 26, 2026
2 of 5 checks passed
@LEEI1337 LEEI1337 deleted the dependabot/pip/redis-gte-7.4.0 branch May 26, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant