chore(deps): bump the production-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: express-rate-limit, pg and redis.

Updates express-rate-limit from 8.6.1 to 8.6.2

Release notes

Sourced from express-rate-limit's releases.

v8.6.2

You can view the changelog here.

Commits

• c416f78 8.6.2
• defb334 v8.6.2 changelog
• 7dd82cf fix: key IPv4-in-IPv6 addresses by range, not notation (#667)
• 4e23dbb chore(deps): bump ip-address from 10.3.1 to 10.4.0 (#666)
• 607ef1f chore(deps): bump ip-address from 10.2.0 to 10.3.1 (#664)
• d2370f6 chore(deps-dev): bump the development-dependencies group with 5 updates (#663)
• See full diff in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

• Add support for query pipelineing.

Commits

• df274d1 Publish
• eb19d0f Add opt-in query pipelining (#3652)
• See full diff in compare view

Updates redis from 6.1.0 to 6.2.1

Release notes

Sourced from redis's releases.

redis@6.2.1

What's Changed

• fix(sentinel): cap post-connect rediscovery retries by @​DebadityaHait in redis/node-redis#3388
• chore(deps): bump ip-address and socks by @​dependabot[bot] in redis/node-redis#3389
• feat(client): add MaxCommandRedirectionsError for cluster redirections by @​Piyush0049 in redis/node-redis#3386
• fix: remove stale data listener explicitly on socket error by @​Chrisp1tv in redis/node-redis#3209
• fix(client): dispose credentials subscription on every close() path by @​lazerg in redis/node-redis#3391
• fix(cluster): keep batch commands routed by slot during migration by @​GiHoon1123 in redis/node-redis#3377
• fix(client): decode RESP3 doubles to the value the server sent by @​Jaybhade in redis/node-redis#3393
• fix(cluster): handle MOVED and ASK redirects for atomic MULTI by @​konovalovsergey in redis/node-redis#3395

New Contributors

• @​DebadityaHait made their first contribution in redis/node-redis#3388
• @​Chrisp1tv made their first contribution in redis/node-redis#3209
• @​lazerg made their first contribution in redis/node-redis#3391
• @​Jaybhade made their first contribution in redis/node-redis#3393
• @​konovalovsergey made their first contribution in redis/node-redis#3395

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.2.0...redis@6.2.1

redis@6.2.0

6.2.0

✨ Highlights

Cluster commands now follow the server's request/response policies. node-redis reads each command's routing policy from the server's COMMAND metadata and routes and aggregates accordingly, so the cluster client behaves much more like a single server. Multi-key commands that span hash slots — MGET, MSET, DEL, EXISTS, TOUCH, UNLINK — are transparently split per slot and their replies reassembled in caller order, so cross-slot calls that previously failed with CROSSSLOT now just work. Fan-out commands such as KEYS, DBSIZE, FLUSHALL, PING, WAIT, SCRIPT EXISTS and CONFIG SET run across every shard (or every node) and their replies are aggregated per the server's policy, SCAN walks the whole cluster behind a per-client virtual cursor, and RANDOMKEY / FT.CURSOR get correct cluster-aware routing. Replica read-scaling was also aligned with the server flags, so read-only keyless commands (DBSIZE, KEYS, SCAN, RANDOMKEY, and the RediSearch / time-series reads) can be served from replicas again.

⚠️ Behavior change for the raw sendCommand path: a table-recognized command sent raw — e.g. cluster.sendCommand(['DBSIZE']) — now follows its policy (fan-out and aggregate) instead of hitting a single node. Callers who relied on raw commands for per-node operations should target a specific node with cluster.nodeClient(node).sendCommand(...).

This release also brings a broad wave of new command coverage across the client and modules. The time-series package gains the most: new TS.NRANGE/TS.NREVRANGE multi-key pivot commands, a TS.READ cursor reader, TS.QUERYLABELS, EXCLUDEEMPTY on MRANGE/MREVRANGE, and multi-aggregator support. RediSearch adds FT.ALIASLIST, a COLLECT reducer for FT.AGGREGATE, HNSW RERANK, timeout warnings on the FT.SEARCH family, and the full set of stemmer languages. The core client adds SUNIONCARD/SDIFFCARD, LMOVEM/BLMOVEM, ZREVRANK WITHSCORE, COMMAND DOCS, and XREAD MAXCOUNT/MAXSIZE. A large batch of correctness fixes lands for zero-valued optional arguments (LIMIT 0, DB 0, SAMPLES 0, ENTRIESREAD 0, IDLETIME/FREQ 0, ENTRIESADDED 0) that were previously dropped from the wire, alongside several cluster and sentinel connection-lifecycle fixes.

The new HIMPORT command family (managed fieldset lifecycle) ships as experimental — see the warning below.

🚀 New Features

• feat(client): request/response policy routing for cluster commands (multi_shard split, fan-out aggregation, special SCAN/RANDOMKEY/FT.CURSOR) (#2996) — @​nkaradzhov
• feat: add COMMAND DOCS support (#3362) — @​Hashim1999164
• feat(client): add LMOVEM and BLMOVEM commands (#3340) — @​nkaradzhov
• feat(client): add SUNIONCARD and SDIFFCARD set-cardinality commands (#3336) — @​nkaradzhov
• feat(client): add zRevRankWithScore (#3279) — @​raashish1601
• feat(xread): add MAXCOUNT / MAXSIZE options (#3335) — @​nkaradzhov
• feat(search): expose timeout warnings on the FT.SEARCH family (#3338) — @​nkaradzhov
• feat(search): add missing RediSearch stemmer languages (#3350) — @​nkaradzhov
• feat(search): add FT.ALIASLIST (#3351) — @​nkaradzhov
• feat(search): add RERANK parameter for HNSW vector fields (#3356) — @​nkaradzhov
• feat(search): add COLLECT reducer to FT.AGGREGATE (#3310) — @​nkaradzhov
• feat(time-series): add TS.NRANGE / TS.NREVRANGE multi-key pivot commands (#3337) — @​nkaradzhov
• feat(time-series): support multiple aggregators per key in TS.NRANGE / TS.NREVRANGE (#3360) — @​nkaradzhov
• feat(time-series): add TS.QUERYLABELS (LABELS and VALUES forms) (#3354) — @​nkaradzhov
• feat(time-series): add EXCLUDEEMPTY to TS.MRANGE / TS.MREVRANGE (#3352) — @​nkaradzhov
• feat(time-series): add TS.READ cursor-read command (#3322) — @​nkaradzhov

... (truncated)

Commits

• 90fd065 Release redis@6.2.1
• 9d52256 Release entraid@6.2.1
• 58d2b8a Release time-series@6.2.1
• 7565ac6 Release search@6.2.1
• 85d7038 Release json@6.2.1
• 992f068 Release bloom@6.2.1
• 10b5625 Release client@6.2.1
• ba1b90b fix(cluster): handle MOVED and ASK redirects for atomic MULTI (#3395)
• 2f0ab75 fix(client): decode RESP3 doubles to the value the server sent (#3393)
• d4eba09 fix(cluster): keep batch commands routed by slot during migration (#3377)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions