🤖 Update image docker.io/valkey/valkey

[foundation-fondue]

This PR contains the following updates:

Package	Update	Change
docker.io/valkey/valkey	minor	9.0.0 → 9.1.1
docker.io/valkey/valkey	minor	9.0-alpine → 9.1-alpine

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

valkey-io/valkey (docker.io/valkey/valkey)

v9.1.1

Compare Source

Valkey 9.1.1 - Released Tue 21 July 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes

• CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#​4234)
• CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @​z0v3r1n and @​lifip. (#​4073)

Bug Fixes

• Omit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and CONFIG REWRITE so older versions can parse the output by @​dvkashapov (#​3964)
• Improve throughput when IO threads are enabled by offloading object deallocation from the main thread by @​roshkhatri (#​3938)
• Fix use-after-free crash when ACL LOAD removes a user whose authenticated client has its close deferred by @​ranshid (#​3800)
• Enforce db= ACL permissions on every DB clause of COPY, closing a bypass with REPLACE or repeated DB tokens by @​enjoy-binbin (#​3801)
• Enforce database-level ACLs for CLUSTER FLUSHSLOT, which removes keys from all databases by @​enjoy-binbin (#​3806)
• Fix use-after-free in the module API when unregistering the first registered cluster message receiver by @​eifrah-aws (#​3846)
• Fix HRANDFIELD with a positive count looping forever when non-expired fields are fewer than the requested count by @​cjx-zar (#​4047)
• Fix clients left on the wrong database after module keyspace notifications for MOVE and COPY by @​enjoy-binbin (#​4024)
• Fix Sentinel crash during coordinated failover when the command link to the old primary disconnects by @​lukepalmer (#​4068)
• Fix crash when active hash field expiration leaves a single-entry expiry bucket whose last field is later removed by @​ranshid (#​3950)
• Fix assertion in HEXPIRE, HGETDEL and HPERSIST when a module blocks the client in a keyspace notification callback by @​enjoy-binbin (#​3743)
• Fix undefined behavior in the failover delay calculation when cluster-node-timeout is below 30 milliseconds by @​enjoy-binbin (#​3941)
• Reject zipmap RESTORE/RDB payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @​madolson (#​3920)
• Reject NAN scores in listpack and ziplist encoded sorted sets on RDB/RESTORE load, preventing a crash on skiplist conversion by @​madolson (#​3921)
• Fix corrupted replies (dropped leading bytes) caused by a reply buffer race when IO threads are enabled by @​nanyan0312 (#​4060)
• Fix startup crash on 32-bit systems where time_t is 64-bit (such as Alpine 3.23) when generating INFO output by @​chenshi5012 (#​3787)
• HGETDEL now returns a syntax error when the FIELDS keyword is missing or misplaced by @​lcxn123 (#​4049)
• COMMAND INFO in RESP3 now returns the subcommands field as an array instead of a set for commands without subcommands by @​rickrams (#​3939)
• Send the replica version on the dual-channel RDB connection so full syncs with newer encodings like hash field TTLs succeed by @​hpatro (#​4105)
• Fix duplicate failure handling and an invalid reply sequence in cluster slot migration by @​chx9 (#​3723)
• Reject control characters in SENTINEL SET values to prevent config-file injection via Sentinel config rewrite by @​eifrah-aws (#​3847)
• Reject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf injection by @​eifrah-aws (#​3848)
• Redact key names and user data from more server log messages when hide-user-data-from-log is enabled by @​zackcam (#​3872)
• ACL LOG now reports the denied database ID for COPY instead of the command name when db= access is denied by @​enjoy-binbin (#​3888)
• Fix garbled shard IDs in the cluster UPDATE message log line by @​enjoy-binbin (#​3942)
• Fix negative master_sync_total_bytes in INFO replication during disk-based sync when the RDB exceeds 2GB by @​chx9 (#​3811)
• Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long paths by @​pkhartsk (#​3843)

Full Changelog: valkey-io/valkey@9.1.0...9.1.1

v9.1.0

Compare Source

Upgrade urgency LOW: This is the first stable release of Valkey 9.1.

Security fixes

• (CVE-2026-23479) Use-After-Free in unblock client flow
• (CVE-2026-25243) Invalid Memory Access in RESTORE command
• (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution

New Features and enhanced behavior

• Add cluster bus network traffic usage metric in bytes by @​hpatro (#​3396)
• Reduce latency spikes during rehashing via incremental page release by @​chzhoo (#​3481)

Bug Fixes

• Fix(syncio): Set errno on EOF in syncRead and propagate to conn->last by @​abmathur-ie (#​3580)
• Fix GEOSEARCH BYPOLYGON leak on invalid COUNT by @​bandalgomsu (#​3568)
• Handle NULL pointer in streamTrim listpack delta calculation by @​smkher (#​3591)
• Fixes server crash when RDMA benchmark clients disconnect by @​quanyeyang (#​3448)
• Fix the memory leak in valkey-benchmark by @​nmvk (#​3643)

See also the release notes for 9.1.0-rc1 and 9.1.0-rc2.

v9.0.5

Compare Source

Valkey 9.0.5 - Released Tue 21 July 2026

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security Fixes

• CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#​4234)
• CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consumers, which could allow remote code execution. Reported by @​z0v3r1n and @​lifip. (#​4073)

Bug Fixes

• Strictly validate CRLF terminators when parsing the RESP protocol; malformed requests now get a protocol error instead of being misparsed by @​enjoy-binbin (#​2872)
• Fix a use-after-free crash when creating slot import jobs during manual slot migrations by @​twooster (#​3283)
• Fix a memory leak in ZDIFF and ZDIFFSTORE when the result set becomes empty before all inputs are processed by @​sarthakaggarwal97 (#​3342)
• Fix HPERSIST sending a malformed reply that desynchronized the connection when used on a key of the wrong type by @​madolson (#​3516)
• Fix a crash from a race between IO threads and asynchronous client freeing by @​deepakrn (#​3458)
• Fix a double free when loading a stream with corrupt consumer PEL data from RDB or RESTORE by @​enjoy-binbin (#​3498)
• Fix listpack corruption and a subsequent crash when XTRIM marks the last entry of a stream listpack node as deleted by @​smkher (#​3591)
• Fix malformed replies when module callbacks build deferred-length arrays while a client's deferred reply buffer is active by @​eifrah-aws (#​3578)
• Fix a NULL pointer crash in TLS pending-data handling by @​zuiderkwast (#​3641)
• Fix a server crash when multiple RDMA clients disconnect at the same time by @​quanyeyang (#​3448)
• Fix a use-after-free when ACL LOAD deletes a user whose clients cannot be freed immediately by @​ranshid (#​3800)
• Fix a use-after-free when a module unregisters the first registered cluster message receiver for a message type by @​eifrah-aws (#​3846)
• Fix HRANDFIELD looping forever when a hash has fewer non-expired fields than the requested count by @​cjx-zar (#​4047)
• Fix clients being left on the wrong database after module keyspace notifications for commands like MOVE and COPY by @​enjoy-binbin (#​4024)
• Fix a Sentinel crash during coordinated failover when the connection to the old primary is disconnected by @​lukepalmer (#​4068)
• Fix underestimation of client output buffer memory when replies reference shared objects, so buffer limits are enforced correctly by @​dvkashapov (#​3306)
• Fix a crash on ARM/aarch64 caused by memory-ordering races in the IO thread job queue by @​jjuleslasarte (#​3878)
• Fix a crash when active hash field expiration leaves a single entry in a large expiration time-bucket by @​ranshid (#​3950)
• Fix a file descriptor leak when a blocking connection attempt, such as MIGRATE to an unreachable host, times out by @​madolson (#​3541)
• Fix a potential crash from a dangling slot migration job reference when the migration client is reset by @​murphyjacob4 (#​3554)
• Remove cached EVAL scripts when their scripting engine is unregistered, preventing dangling engine references by @​eifrah-aws (#​3503)
• Fix a memory leak in GEOSEARCH BYPOLYGON when argument parsing fails, such as on an invalid COUNT by @​bandalgomsu (#​3568)
• Fix a crash when a slot migration target node is removed from the cluster before the migration connects by @​chenshi5012 (#​3596)
• Fix a crash when the module GetLRU/SetLRU/GetLFU/SetLFU APIs are called with a NULL key by @​yaronsananes (#​3610)
• Fix an assertion failure in hash field expiration commands when a module blocks the client in a keyspace notification by @​enjoy-binbin (#​3743)
• Fix a cluster UPDATE log message reading shard IDs past their fixed-length buffer by @​enjoy-binbin (#​3942)
• Fix undefined behavior in the failover delay calculation when cluster-node-timeout is set below 30 milliseconds by @​enjoy-binbin (#​3941)
• Reject zipmap RESTORE payloads with overflowing length fields that could cause out-of-bounds access on 32-bit builds by @​madolson (#​3920)
• Reject NAN scores in listpack- and ziplist-encoded sorted sets on RDB/RESTORE load, preventing a later crash on skiplist conversion by @​madolson (#​3921)
• Fix a startup crash on 32-bit systems with 64-bit time_t, such as Alpine 3.23, caused by time value formatting mismatches by @​chenshi5012 (#​3787)
• Fix corrupted client replies when IO threads are enabled, caused by a race between in-flight writes and reply buffer reuse by @​nanyan0312 (#​4060)
• COMMAND INFO in RESP3 now returns the subcommands field as an Array instead of a Set for commands without subcommands by @​rickrams (#​3939)
• The dual-channel replication RDB connection now announces the configured replica-announce-ip, avoiding stale replica entries behind NAT by @​jdheyburn (#​2846)
• Prevent replicas from processing stale cluster packets and incorrectly promoting themselves to an empty primary within a shard by @​zhijun42 (#​2811)
• Send the replica version on the dual-channel RDB connection so full syncs of data like hash field TTLs no longer fail by @​hpatro (#​4105)
• Fix slot migration failure handling running twice on ownership changes and an out-of-order error reply in the internal SYNCSLOTS FINISH command by @​chx9 (#​3723)
• Allow slot-migration-max-failover-repl-bytes to be set to -1 to disable the limit, as documented by @​enjoy-binbin (#​3443)
• Fix CONFIG REWRITE producing negative values for memory configs such as maxmemory when set to very large values by @​enjoy-binbin (#​3440)
• Reject SENTINEL SET values containing control characters and safely quote Sentinel config values to prevent config file injection by @​eifrah-aws (#​3847)
• Reject control characters and delimiters in cluster AUX fields and validate cluster-announce-ip to prevent nodes.conf corruption or injection by @​eifrah-aws (#​3848)
• Fix changes to lua-enable-insecure-api via CONFIG SET not taking effect when the option was set at startup by @​enjoy-binbin (#​4182)
• Fix incorrect memory overhead reported for watched keys in client memory usage tracking by @​enjoy-binbin (#​3359)
• Replica logs now report 'Connection reset by peer' instead of the misleading 'Success' when the primary closes the connection by @​abmathur-ie (#​3580)
• Redact key names and user data from more log messages when hide-user-data-from-log is enabled by @​zackcam (#​3872)
• Fix INFO replication reporting negative sync transfer sizes when the RDB exceeds 2GB during disk-based sync by @​chx9 (#​3811)
• Increase the maximum process title length from 255 to 1024 characters to avoid truncation with long installation paths by @​pkhartsk (#​3843)
• valkey-cli --cluster del-node can now remove unreachable or failed nodes instead of failing with 'No such node ID' by @​yang-z-o (#​3209)
• Fix valkey-cli crashing after --eval script execution on jemalloc/tcmalloc builds by @​bandalgomsu (#​3281)
• valkey-cli --cluster fix now spreads uncovered slots randomly across primaries instead of assigning them all to one node by @​abmathur-ie (#​3586)

Full Changelog: valkey-io/valkey@9.0.4...9.0.5

v9.0.4

Compare Source

Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.

Security fixes

• (CVE-2026-23479) Use-After-Free in unblock client flow
• (CVE-2026-25243) Invalid Memory Access in RESTORE command
• (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution

v9.0.3

Compare Source

Valkey 9.0.3

Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.

Security fixes

• (CVE-2025-67733) RESP Protocol Injection via Lua error_reply
• (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
• (CVE-2026-27623) Reset request type after handling empty requests

Bug fixes

• Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#​3160)
• Fix server assert on ACL LOAD when current user loses permission to channels (#​3182)
• Fix bug causing no response flush sometimes when IO threads are busy (#​3205)

v9.0.2

Compare Source

Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.

Bug fixes

• Avoid memory leak of new argv when HEXPIRE commands target only non-exiting fields (#​2973)
• Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking (#​2974)
• Avoid empty hash object when HSETEX added no fields (#​2998)
• Fix case-sensitive check for the FNX and FXX arguments in HSETEX (#​3000)
• Prevent assertion in active expiration job after a hash with volatile fields is overwritten (#​3003, #​3007)
• Fix HRANDFIELD to return null response when no field could be found (#​3022)
• Fix HEXPIRE to not delete items when validation rules fail and expiration is in the past (#​3023, #​3048)
• Fix how hash is handling overriding of expired fields overwrite (#​3060)
• HSETEX - Always issue keyspace notifications after validation (#​3001)
• Make zero a valid TTL for hash fields during import mode and data loading (#​3006)
• Trigger prepareCommand on argc change in module command filters (#​2945)
• Restrict TTL from being negative and avoid crash in import-mode (#​2944)
• Fix chained replica crash when doing dual channel replication (#​2983)
• Skip slot cache optimization for AOF client to prevent key duplication and data corruption (#​3004)
• Fix used_memory_dataset underflow due to miscalculated used_memory_overhead (#​3005)
• Avoid duplicate calculations of network-bytes-out in slot stats with copy-avoidance (#​3046)
• Fix XREAD returning error on empty stream with + ID (#​2742)

Performance/Efficiency Improvements

• Track reply bytes in I/O threads if commandlog-reply-larger-than is -1 (#​3086, #​3126).
  This makes it possible to mitigate a performance regression in 9.0.1 caused by the bug fix #​2652.

Full Changelog: valkey-io/valkey@9.0.1...9.0.2

v9.0.1

Compare Source

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes

• Authenticate slot migration client on source node to internal user (#​2785)
• Bug fix: reset io_last_written on c->buf resize to prevent stale pointers (#​2786)
• Sentinel: fix regression requiring "+failover" ACL in failover path (#​2780)
• Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#​2817)
• Send duplicate multi meet packet only for node which supports it in mixed clusters (#​2840)
• Fix: LTRIM should not call signalModifiedKey when no elements are removed (#​2787)
• Fix build on some 32-bit ARM by only using NEON on AArch64 (#​2873)
• Fix deadlock in IO-thread shutdown during panic (#​2898)
• Fix COMMANDLOG large-reply when using reply copy avoidance (#​2652)
• Fix CLUSTER SLOTS crash when called from module timer callback (#​2915)

Full Changelog: valkey-io/valkey@9.0.0...9.0.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.