3.4.1

This is a security fix release. All users of hiredis-py 3.4.x are strongly encouraged to upgrade.

🔒 Security Fixes

Updates the bundled hiredis C library to v1.4.1, which fixes:

• Prevent arbitrarily nested replies from causing a stack overflow (redis/hiredis#1340)
• Protect against overflow of map elements (redis/hiredis#1341)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.

3.4.0

Changes

• Add support for building and releasing hiredis-py on Windows ARM64 (#225)
• Use hiredis v1.4.0 with improved floating-point number parsing
• Drop python and pypy 3.8 support, test against pypy-3.11 (#223)

Maintainance

• Update dependencies and fix CI (#233)
• Fix benchmarking for hiredis-py (#232)
• Update workflow versions to address Node v20 deprecation (#228)
• Run integration tests on Windows ARM64 for Python 3.11 and 3.14 (#226)
• Bump memray from 1.17.1 to 1.19.2 (#224)
• Bump GitHub action versions (#222)
• Add Python 3.15.0a7 to CI matrix (#221)
• MNT: do not use deprecated load_module method (#218)
• Use Python 3.11 in FreeBSD CI run (#219)
• Bump version to 3.4.0-dev (#216)

Contributors

We'd like to thank all the contributors who worked on this release!

@MugundanMCW, @tacaswell, @uglide

3.3.1

Changes

This release fixes a compatibility issue with Python 3.15:

• MNT: do not use deprecated load_module method (#218)

Contributors

We'd like to thank all the contributors who worked on this release!

@tacaswell

3.3.0

Changes

• Add Python 3.14 to CI and wheels (#213 by @zweizeichen)

Contributors

We'd like to thank all the contributors who worked on this release!

3.2.1

Changes

• Fix assertion in reader.c (#212)

Contributors

We'd like to thank all the contributors who worked on this release!

@uglide

3.2.0

Changes

• Introduce new type for RESP3 PUSH notifications (#208)
• Run integration workflow on version branches (#210)
• Update hiredis to 1.3.0 (#203)

Contributors

We'd like to thank all the contributors who worked on this release!

@uglide

3.1.1

Summary

This is a maintenance release that addresses issues in RESP3 parsing.

Changes

• Fix memory leaks and segfaults in RESP3 map parsing (#204, #205, #206)

3.1.0

Changes

• Update Python 3.13 compatibility (#199)

Contributors

We'd like to thank all the contributors who worked on this release!

@DeD1rk

3.0.0

Changes

Breaking Changes

• Return Redis sets as Python lists (#189)

🐛 Bug Fixes

• Return Redis sets as Python lists (#189)

Contributors

We'd like to thank all the contributors who worked on this release!

@gerzse

2.4.0

Changes

🧰 Maintenance

• Fix small typo (#192)
• Quote version for Python setup action in CI (#191)
• Fix building the wheel for windows (#190)
• pack: Replace sdsalloc.h with alloc.h (#159)
• Bump black from 22.3.0 to 24.3.0 (#185)
• Removing python 3.7 trove (#181)
• Badge for latest released on Pypi (#182)
• Sync license in metadata with LICENSE file (#183)

Contributors

We'd like to thank all the contributors who worked on this release!

@apteryks, @ArtemIsmagilov, @chayim, @dependabot, @dependabot[bot], @gerzse and @shadchin