[dependabot]

Bumps predis/predis from 3.6.0 to 3.7.0.

Release notes

Sourced from predis/predis's releases.

v3.7.0

Added

• Added BLESS * command family (#1733)
• Added optional CELL_SIZE argument for CMS.INITBY(DIM|PROB) (#1729)

Fixed

• Fixed Redis Cluster not retrying slot map discovery on StreamInitException (#1717)
• Fixed client iteration when using replication (#1730)
• Fixed *StreamConnection looping forever when closed in the middle of a bulk reply (#1731)
• Fixed cluster CAS transactions returning transaction objects for reads and sending MULTI twice (#1735)
• Fixed cleanup of empty transactions and transaction callbacks that throw PHP errors (#1735)
• Fixed MultiExec::multi() being ignored as the first call of a CAS transaction (#1735)
• Fixed spl_object_hash() deprecation on PHP 8.6 in ConnectionErrorProof pipeline (#1738)
• Fixed ConnectionErrorProof pipeline returning too few responses or throwing ValueError (#1739)

Security

• Fixed aborted cluster transactions leaving node connections in MULTI (#1735)

v3.6.1

Fixed

• Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
• Fixed client_info connection parameter being ignored (#1722)
• Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

• Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
• Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)

Changelog

Sourced from predis/predis's changelog.

v3.7.0 (2026-10-08)

Added

• Added BLESS * command family (#1733)
• Added optional CELL_SIZE argument for CMS.INITBY(DIM|PROB) (#1729)

Fixed

• Fixed Redis Cluster not retrying slot map discovery on StreamInitException (#1717)
• Fixed client iteration when using replication (#1730)
• Fixed *StreamConnection looping forever when closed in the middle of a bulk reply (#1731)
• Fixed cluster CAS transactions returning transaction objects for reads and sending MULTI twice (#1735)
• Fixed cleanup of empty transactions and transaction callbacks that throw PHP errors (#1735)
• Fixed MultiExec::multi() being ignored as the first call of a CAS transaction (#1735)
• Fixed spl_object_hash() deprecation on PHP 8.6 in ConnectionErrorProof pipeline (#1738)
• Fixed ConnectionErrorProof pipeline returning too few responses or throwing ValueError (#1739)

Security

• Fixed aborted cluster transactions leaving node connections in MULTI (#1735)

v3.6.1 (2026-09-17)

Fixed

• Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
• Fixed client_info connection parameter being ignored (#1722)
• Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

• Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
• Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)

Commits

• 4d91f3b prepare v3.7.0 (#1740)
• 97ce126 Retry cluster slot map discovery on StreamInitException (#1717)
• 9f37e4b Fix ConnectionErrorProof response count on single node read errors (#1739)
• 00611e0 Replace deprecated spl_object_hash() with spl_object_id() in ConnectionErrorP...
• e964f78 Added testing with new HNSW compression (#1737)
• 5a9a766 Fix cluster transaction cleanup and CAS behavior (#1735)
• 0f3f616 Fix infinite loop when the connection closes partway through a bulk reply (#1...
• c270c2d feat: bless commands family (#1733)
• a33f9f8 Bump hoverkraft-tech/compose-action (#1732)
• ed2ddee Fix client iteration with master/slave and Sentinel replication (#1730)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)