Skip to content

chore(deps)(deps): bump ioredis from 5.10.1 to 5.11.1 in /apps/api in the bullmq group across 1 directory#192

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/api/bullmq-de877a1c71
Closed

chore(deps)(deps): bump ioredis from 5.10.1 to 5.11.1 in /apps/api in the bullmq group across 1 directory#192
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/api/bullmq-de877a1c71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the bullmq group with 1 update in the /apps/api directory: ioredis.

Updates ioredis from 5.10.1 to 5.11.1

Release notes

Sourced from ioredis's releases.

v5.11.1

5.11.1 (2026-06-04)

Bug Fixes

  • cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)
  • parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

v5.11.0

5.11.0 (2026-05-26)

Bug Fixes

Features

Changelog

Sourced from ioredis's changelog.

5.11.1 (2026-06-04)

Bug Fixes

  • cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)
  • parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

5.11.0 (2026-05-26)

Bug Fixes

Features

Commits
  • fb224a7 chore(release): 5.11.1 [skip ci]
  • 131ee24 fix: parse protocol-relative Redis URLs as TCP connections (#2125)
  • c84b2ee fix(cluster): reconnect to nodes that restart without slot changes (#2096)
  • 1490432 chore(release): 5.11.0 [skip ci]
  • 5359d4d refactor(utils): inline defaults and isArguments helpers (#2107)
  • b7b3def feat: add vector set command support (#2116)
  • faa53fd ci: update Node.js and Redis test matrix (#2119)
  • 37d0695 feat: add increx command (#2115)
  • 612ee9d chore: update Redis 8.8 test image to custom (#2118)
  • baf68d6 feat: add array commands, typings and tests (#2114)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 19, 2026
@dependabot dependabot Bot requested a review from agjs as a code owner June 19, 2026 09:06
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 19, 2026
agjs added a commit that referenced this pull request Jun 19, 2026
…o fixes (#196)

Consolidates the post-#190 Dependabot batch (#191, #193, #194, #195) into a
single change. Lockfiles regenerated with bun@1.3.14; full static + UI + docs
gates and API/UI test suites pass.

apps/api:
- @anthropic-ai/sdk 0.102.0 -> 0.104.1 (#194)
- nodemailer 8.0.10 -> 9.0.1 (#191, security) — replaces the prior accepted-risk
  suppression: 9.0.1 fixes GHSA-p6gq-j5cr-w38f outright, so the osv-scanner.toml
  IgnoredVuln and the bun audit --ignore are removed. Excluded from the install
  quarantine while <7 days old. SMTP provider (createTransport) verified by the
  full api test suite.
- eslint-plugin-unicorn 65.0.0 -> 65.0.1, prettier 3.8.3 -> 3.8.4,
  typescript-eslint 8.60.1 -> 8.61.0 (#193); @typescript-eslint/utils override
  bumped to 8.61.0 to match (package-override-parity).

apps/ui:
- eslint-plugin-unicorn 65.0.0 -> 65.0.1, prettier 3.8.3 -> 3.8.4,
  typescript-eslint 8.60.1 -> 8.61.0 (#195); @typescript-eslint/utils override
  bumped to 8.61.0 to match.

apps/docs:
- astro 6.4.4 -> 6.4.6 (#191, security) — fixes GHSA-2pvr-wf23-7pc7 and
  GHSA-jrpj-wcv7-9fh9, so both astro osv-scanner.toml IgnoredVulns are removed.
  6.4.6 still pins @astrojs/markdown-remark 7.2.0; override matches (single copy,
  build verified).

Excluded: ioredis 5.11.1 (#192) — bullmq 5.78.0 still exact-pins ioredis 5.10.1;
taking 5.11.1 splits the tree into conflicting RedisOptions types. Held back.
Bumps the bullmq group with 1 update in the /apps/api directory: [ioredis](https://github.com/luin/ioredis).


Updates `ioredis` from 5.10.1 to 5.11.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.10.1...v5.11.1)

---
updated-dependencies:
- dependency-name: ioredis
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bullmq
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/bun/apps/api/bullmq-de877a1c71 branch from 58f9f37 to 025e7f3 Compare June 19, 2026 09:30
agjs added a commit that referenced this pull request Jun 19, 2026
#197)

Lands the ioredis 5.10.1 -> 5.11.1 bump (#192) that was deferred from #190/#196.
bullmq 5.78.0 exact-pins ioredis@5.10.1, so bumping the top-level dep alone
left bullmq on its own nested 5.10.1 copy — two ioredis instances with
structurally incompatible RedisOptions types (tsc failed on new Redis(options)).

Adds an `ioredis: 5.11.1` override in apps/api that collapses bullmq's nested
copy onto the top-level version. A clean `bun install --frozen-lockfile` (the CI
condition) now resolves a single ioredis@5.11.1; 5.10.1 -> 5.11.1 is a semver
patch. Drop the override once bullmq advances its own ioredis pin.

Verification (infra up): single ioredis copy after frozen install, api check
(tsc + lint + lint:meta + knip) clean, full api suite 1188 pass / 0 fail
including the Redis/BullMQ/valkey integration tests.
@agjs

agjs commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

Superseded by #197 (merged into main as 87dbbe4), which lands ioredis 5.11.1 via an apps/api override that collapses bullmq's nested ioredis copy. Closing this batch PR.

@agjs agjs closed this Jun 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/bun/apps/api/bullmq-de877a1c71 branch June 19, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant