What redis/redis shipped

Weekly fixes: slot migration import now fails on rejected commands, AOF rewrite no longer duplicates commands after a write error, and stale dict entry links can no longer update the wrong key. SLOWLOG also gains per-command CPU time.

This week we fixed several correctness issues. Slot migration import now fails when the destination rejects a command rather than taking over the slots anyway. AOF rewrite no longer duplicates commands after an AOF write error. A stale dict entry link reused across keyspace lookups could update the wrong key or silently lose a write. Replica output buffer soft limits now match repl-backlog-size. MSETEX propagation with repeated EX or PX options is fixed. Client memory now counts watched key and Pub/Sub name objects. SLOWLOG reports per-command CPU time, and DELEX honors lazyfree-lazy-user-del.

Seven maintenance releases ship a security fix for a heap overflow when propagating PUBLISH/SPUBLISH messages larger than 4GB over the cluster bus in cluster mode. 8.12 RC2 is also out as a feature-complete pre-release, not for production.

This week brought seven maintenance releases: 8.10.3, 8.8.4, 8.6.8, 8.4.8, 8.2.11, 7.4.12 and 7.2.17. Each carries a security fix for a heap buffer overflow when propagating a PUBLISH or SPUBLISH message larger than 4GB over the cluster bus in cluster mode. If you run cluster mode with pub/sub, review the releases for your line. Also out: 8.12 RC2, a feature-complete pre-release that is not suitable for production, which updates the Search module with the RedisSearch-related content intended for RC1.

This week: large sorted sets get a packed B+ tree encoding to cut memory, plus fixes for a cluster bus use-after-free and Lua reply injection, MSETEX writes during slot migration, and post-PSYNC socket setup.

This week in Redis: large sorted sets now use a packed B+ tree encoding instead of skiplist plus dict, reducing memory for sets beyond the listpack thresholds. Several security fixes landed, including a cluster bus use-after-free in FORGOTTEN_NODE handling with remote code execution impact, Lua shebang and function metadata reply injection, Lua tostring exposing heap addresses, and a Lua string.find denial of service. Cluster and replication paths were also fixed: CLUSTER RESET on a replica now flushes the AOF and sub-replicas, MSETEX writes are no longer lost during atomic slot migration, and TCP_NODELAY and keepalive are set after PSYNC.

This week: native Roaring bitmaps for Redis bitmaps, an INFO Streams section with consumer-group histograms, faster CRC64 and LZF paths for RDB load, a fix for the BITOP lookup regression, and macOS module builds now link against the selected SDK.

This week in Redis: bitmaps can use a native Roaring bitmap representation backed by vendored CROaring. A new INFO Streams section reports stream and consumer-group histograms. CRC64 checksumming gains a PCLMULQDQ path and LZF decompression a faster decoder, both aimed at RDB load. BITOP looks up each source key once again, fixing a regression. Stream MINID approximate trims propagate correctly with tombstones. macOS module builds now resolve the selected SDK.

Fixed: module thread IO thread crashes, legacy AOF preload data loss, replica compression buffer disconnect, hiredis Sentinel busy loop. Added: CLUSTER MIGRATION STATUS progress percentages, NULL key checks for list APIs. Refactored: set encoding dispatch, case-insensitive functi

This week we shipped several stability fixes and improvements. We fixed server crashes when a module thread pauses IO threads, legacy AOF preload data loss caused by premature upgrade, replica disconnections from a full compression input buffer, and a Linux TCP connect error queue issue in hiredis. We also added NULL key checks to RM_ListInsert and RM_ListSet, rejected registering functions with names differing only by case, and bounded serialized max links in Vector Sets by the index M. CLUSTER MIGRATION STATUS now exposes phase, snapshot progress percentage and incremental progress percentage. Internally, set encoding logic was refactored to dispatch through set type operations.

Redis releases improvements to RESP3 persistence across reconnects, fixes for blocking commands and array operations, OpenSSL 4 compatibility, and better test diagnostics.

This week's Redis updates focus on protocol reliability and correctness: RESP3 preferences now survive reconnects and cluster redirects, blocking commands wake properly when lists grow, and array operations no longer silently drop elements. The fixes also extend compatibility to OpenSSL 4 and LoongArch64 systems, while test infrastructure improvements provide better visibility into hung tests.

Weekly update: fixed XTRIM leaving unpersistable streams, improved protocol error reporting, optimized file loading for cloud storage, and eliminated a Sentinel CPU busy-loop.

This week's improvements focus on stability and performance: XTRIM now works correctly with persistence, protocol errors are properly reported across fragmented reads, and RDB/AOF loading hints sequential access for faster startup on cloud storage. We also fixed a Sentinel CPU busy-loop issue and consolidated cluster tests into the standard framework.

Redis 8.10.2, 8.8.3, 8.6.7, 8.4.7, and 8.2.10 released with security fixes for ACL key permissions in transactions and cluster bus authentication. BLESS command added to protect keys from eviction.

This week's Redis releases (8.10.2, 8.8.3, 8.6.7, 8.4.7, 8.2.10) address critical security issues with ACL key permission rechecking in transactions and cluster bus authentication. Additionally, the new BLESS command lets operators protect specific keys from eviction, surviving restarts and replication. redis-cli improvements prevent scan operations from affecting eviction metrics, and AOF replay-time estimates now appear in INFO for RTO visibility.