chore(deps): bump valkey-glide from 2.4.1 to 2.5.0

[dependabot]

Bumps valkey-glide from 2.4.1 to 2.5.0.

Release notes

Sourced from valkey-glide's releases.

v2.5.0

Key Features

Client-Wide Circuit Breaker: Introduced a comprehensive per-client circuit breaker system that detects when the GLIDE core is unhealthy and proactively rejects requests synchronously at the FFI boundary. Enhanced with structured timeout diagnostics and watchdog-informed recovery mechanisms to prevent thread parking and improve overall client resilience.

Python Async Performance Enhancement: Completely overhauled the Python async client architecture by replacing UDS (Unix Domain Socket) and protobuf transport with direct FFI requests and unnamed pipes for responses, delivering significant performance improvements and reduced latency.

Custom Socket Address Resolution: Added comprehensive support for custom socket address resolution when connecting to Valkey across all client languages, providing greater flexibility for complex network configurations and deployment scenarios.

Comprehensive New Command Support: Added new commands with full multi-language implementation:

• Migration: MIGRATE single-key and multi-key variants
• Connection Management: RESET, CLIENT PAUSE, CLIENT UNPAUSE
• Client-Side Caching: CLIENT CACHING, CLIENT TRACKING, CLIENT TRACKINGINFO
• Monitoring: MONITOR with dedicated MonitorClient
• Database Operations: SAVE, BGSAVE, BGREWRITEAOF
• Replication: REPLICAOF, FAILOVER
• Performance Monitoring: LATENCY HISTORY, LATENCY LATEST, LATENCY RESET
• Memory Management: MEMORY DOCTOR, MEMORY MALLOC-STATS, MEMORY PURGE, MEMORY STATS

Enhanced TLS Performance: Fixed critical TLS connection performance regression by optimizing initial connection handling and implementing per-process certificate caching, eliminating timeouts in multi-client and multi-process deployments.

Advanced Client-Side Caching: Implemented Phase 2 server-assisted invalidation via CLIENT TRACKING with comprehensive support across all client languages, enabling efficient cache invalidation strategies.

Improved Core Reliability: Enhanced connection management with circular MOVED handling, TCP deadlock fixes for large payloads, topology refresh improvements, and liveness-aware pipeline send-timeout mechanisms.

Enterprise-Grade Observability: Added structured timeout diagnostics that classify timeout causes and provide actionable corrective recommendations, along with dedicated timeout watchdog threads independent of Tokio runtime for improved debugging and monitoring capabilities.

Go OpenTelemetry Enhancement: Added support for connecting GLIDE command and batch spans to an application's existing OpenTelemetry trace context through OpenTelemetry.SetSpanContextExtractor, letting applications propagate active trace context from context.Context without adding a direct go.opentelemetry.io/otel dependency to the Go SDK.

Go Valkey Search Server Module Package: Refactored Valkey Search (FT) commands into a standalone glideft server module package, decoupling search functionality from client internals and establishing a scalable pattern for future server module support.

What's Changed

• Enable PeriodicCheck parameter for Go Client in AdvancedClusterClient Configuration by @​xShinnRyuu in valkey-io/valkey-glide#5839
• Java: Make jedis-compatibility a pure-Java JAR with no-classifier support by @​affonsov in valkey-io/valkey-glide#5649
• Support custom socket address resolution by @​tavomaciel in valkey-io/valkey-glide#5328
• fix(glide-core): fall back to existing connections when initial nodes are unavailable during toplogy refresh by @​jduo in valkey-io/valkey-glide#5857
• Go: Refactor ft commands into a glideft package by @​edlng in valkey-io/valkey-glide#5855
• Go: Create common client interfaces by @​prateek-kumar-improving in valkey-io/valkey-glide#5862
• fix(node): accept pointer as single i64 to prevent 64-bit truncation by @​jduo in valkey-io/valkey-glide#5874
• Isolate flaky workflows and tests by @​Aryex in valkey-io/valkey-glide#5808
• fix(go): Update docs after FT module refactor by @​edlng in valkey-io/valkey-glide#5881
• Python: Optimize cache metrics retrieval to be synchronous (#5772) by @​shohamazon in valkey-io/valkey-glide#5856
• fix: java workflow correctly skips container tests on windows only and moved start time by @​Aryex in valkey-io/valkey-glide#5882
• Python: Support custom socket address resolution by @​affonsov in valkey-io/valkey-glide#5876
• Fix TCP deadlock in MultiplexedConnection with large payloads by @​ranshid in valkey-io/valkey-glide#5892
• fix(node): allow protobufjs build scripts in pnpm test by @​affonsov in valkey-io/valkey-glide#5899
• Compression Bugfixes by @​alexr-bq in valkey-io/valkey-glide#5895
• Update README with up-to-date information by @​Aryex in valkey-io/valkey-glide#5941
• Core: Propagate per-command response timeout to multiplexed connection by @​jeremyprime in valkey-io/valkey-glide#5916
• Cherry pick #5952 to main: Java: Add a synchronous check on inflight request limits before submitting tasks by @​jduo in valkey-io/valkey-glide#5976

... (truncated)

Changelog

Sourced from valkey-glide's changelog.

Changelog

Pending 2.6

Fixes

• Python: Make async pipe transport fork-safe. After fork(), the flush thread is gone but OnceLock prevented reinitialization, causing commands in forked child processes (e.g. PySpark workers) to hang indefinitely. Now detects fork via PID comparison and reinitializes the pipe. Using a parent's client object in a forked child now raises ClosingError on command paths and skips the FFI call on close(), instead of silently hanging. (#6673)
• Core/FFI: Percent-decode userinfo in create_client_from_uri so credentials containing URI-reserved characters (@, :, /, ?, #, %, +, space, non-ASCII) authenticate correctly (#6659)
• Core/All: Buffer pending cluster requests during reconnect instead of failing immediately. When a circular MOVED redirect triggers a reconnect, requests arriving during the recovery window are now queued and retried transparently once reconnection completes. A new recovery_requests_queue_size option (default: 1000) controls the queue depth. (#6640)
• Python: fix trio hang on free-threaded builds by waking _CompatFuture waiters from the owning trio thread (#6685)
• Python: Fix trio pub/sub BusyResourceError from duplicate shared-pipe reader (#6605)
• Java: Make the automatic JVM shutdown hook non-destructive so a command issued from a user's own shutdown hook is no longer rejected with ClosingException: Client is shutting down. The JVM runs all shutdown hooks concurrently, and GLIDE's hook previously tore the client down and blocked new requests, racing with (and aborting) legitimate work such as persisting state before exit. Deterministic teardown remains available via the client's close(). (#4809)
• Core: Fix native panic for setex psetex and setnx commands (#6551)
• Core/FFI: fix(ffi): forward Disconnection push notifications past the malformed-frame guard (#6543)
• CI: Run test-release in pypi-cd.yml when only one package is published manually, so a skipped sibling publish job no longer causes post-publish validation to be skipped entirely (#6542)
• Core/FFI: fix(ffi): prevent pub/sub DoS from malformed server push frames (#6530)
• Python: Restore BaseClient.__aenter__ return type to Self (from the widened "BaseClient" introduced in 2.5.0). Entering the async context manager (async with await GlideClusterClient.create(...) as client) now preserves the concrete subclass for static type checkers, matching create(). (#6531)
• Core: fix(core): enforce RESP3 recursion-depth guard for all aggregate types (#6477)
• Core: Update anyhow to 1.0.103 to fix RUSTSEC-2026-0190, an unsoundness advisory in anyhow::Error::downcast_mut() that can trigger undefined behavior (#6364)
• Go: Remove .gitignore from the released module so consumers who commit vendor/ keep the generated artifacts (internal/protobuf/*.pb.go, rustbin/**, lib.h) (#6441)

Changes

• Java: Add GlideString.asReadOnlyByteBuffer() for zero-copy, read-only access to binary payloads (#6600)
• Core: Zero-copy receive path for GET/MGET (#6559)
• Go: Expose inflightRequestsLimit configuration via WithInflightRequestsLimit, bringing the Go client to parity with Java, Python, and Node (#6385)
• Core, Java, Python, Go: Add client-instance pooling and isolated execution scopes. Pools eliminate multiplexer contention under high concurrency; scopes provide dedicated connections for WATCH/MULTI/EXEC and CLIENT TRACKING. All languages share a unified Rust implementation via send_scope_command() and release_client_async(). Pool release resets state (DISCARD + SELECT). Scopes inherit parent's current database, credentials, and compression. Circuit breaker and inflight limits enforced. (#6338)
• Python: Add Python 3.14t free-threaded support to the test matrix. (#5445)
• Core/FFI: Add command_with_route_info FFI entrypoint, accepting routing as a RouteInfo C-struct pointer instead of protobuf-encoded bytes — the same mechanism batch() already uses. Existing command, command_with_buffer, command_with_buffers, and invoke_script are unchanged. (#6494)
• CI: Publish the Python valkey-glide and valkey-glide-sync packages to PyPI via Trusted Publishing (OIDC) with PEP 740 attestations, replacing API-token uploads (#6478)
• Node: Replace socket IPC with direct NAPI layer (#5325)
• feat(python-sync): add zero-copy buffers to mget (#6367)
• Python: Add configurable lib_name and client_info_tag to client configuration (async and sync). (#6378)
• Python: Add OpenTelemetry span creation for script invocations (EVALSHA) so invoke_script calls appear in traces with DB semantic convention attributes (#6350)
• Core, Java: add mTLS client certificates with automatic reloading (#6386)
• Go: add mTLS client certificates with automatic reloading (#6384)
• Node: add mTLS client certificate/key support with automatic certificate reloading (#6383)
• Python: add automatic mTLS client certificate/key reload (#6596)

2.5

Fixes

• Python: fix(python): correct set return type hint to Optional[Union[TOK, bytes]] (#6351)
• Core/FFI: Python: Change async client to use FFI for requests and unnamed pipe for responses instead of UDS for both (#5637)
• Python: fix(python): use response_buffer.nbytes for buffer GET capacity (#6311)
• Core: fix(core): honor AWS_ENDPOINT_URL_STS in IAM credentials-provider loader (#5968)
• Core: Make the pipeline send-timeout liveness-aware so sustained backpressure on a live-but-slow connection waits for channel capacity instead of failing commands with FatalSendError, while a genuinely dead connection still fails fast (#5446)

Changes

... (truncated)

Commits

• 74a6c9a Update README with up-to-date information (#5941)
• See full diff in compare view

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud